KNOW HOW YOUR INFORMATION IS SHARED. KNOW YOUR RIGHTS.
Privacy Policies
On this page we have summarized the privacy policies of some of the most common databases at community colleges. We have also given them grades based on their dedication to privacy to help librarians better understand and compare how these databases treat patron information. See the bottom of the page for the grading rubric.

Thomas Lefebre on Unsplash
ProQuest Privacy Policy
For more detailed information on the policies outlined below or to contact ProQuest please visit their website.
Data Collected by ProQuest (through data provided by the user or through cookies)
-
Contact details (first and last name, phone number, email address, institutional affiliation, postal address)
-
Payment information for those who pay for access (credit or other card info)
-
Educational or professional background information
-
Usernames and passwords
-
Comments, feedback or other text submitted to ProQuest
-
Interests and communication preferences
-
Automatically collects information about you or your computer device:
-
Web pages you have visited
-
Apps you have downloaded
-
Parts of ProQuest you have used or viewed
-
Content you have accessed or viewed
-
Library items you have checked out
-
Translation history
-
IP address and divide identifiers
-
Information about internet connection
-
Information about equipment or software used to access ProQuest services
-
How They Share Your Information
-
Share your information and usage data with your institution
-
Share “anonymized” data with publishers
-
Information on public profile is viewable by anyone
-
Will share data with service providers to improve service
-
Will share information with government bodies to comply with legal requirements
Steps that can be taken
-
Can edit public profile to only show what you feel comfortable with
-
You can request access to any personal information that ProQuest may hold about you
-
ProQuest may store some of your personal data in servers to meet legal requirements even after you delete it; cannot honor requests to delete this data if it is needed to provide service or to meet legal requirements
Grade: D+
-
Automatically collects information on patron and computer
-
Claims to share "anonymized" data with service providers, but does not explain how that data is "anonymized"
-
Stores data even after it is deleted by user

Marvin Meyer on Unsplash
EBSCO Privacy Policy
For more detailed information on the policies outlined below or to contact EBSCO please visit their website.
Data Collected by EBSCO
EBSCO does not define what exact information they collect, but does lay out the six categories of information they collect and the types of information within those categories:
-
Personal Identifiers (provided by user)
-
Real name
-
Alias
-
Postal address
-
Unique personal identifier
-
Online identifier
-
Login credentials
-
IP address
-
Email address
-
Account name
-
Social security number
-
Driver’s license number
-
Passport number
-
-
Other personal information categories
-
Signature
-
Physical characteristics or description
-
State identification card number
-
Insurance policy number
-
Education
-
Professional affiliations
-
Employment or employment history
-
Bank account number
-
Credit card number/other financial information
-
Medical information
-
Health insurance information
-
-
Commercial information:
-
Records of personal property
-
Products or services purchased, obtained, or considered
-
Consuming histories or tendencies (content checkout, retrieval information, and saved searches)
-
-
Internet or Other Electronic Network Activity Information
-
Browsing history
-
Search history
-
Information regarding interaction with a website, app, or ad
-
-
Geolocation data
-
Education information
-
Non Personal information
-
Unique identifier unconnected to user’s identity
-
Related analytics and usage data
-
How This Information Is Shared
-
With third-party agents, vendors, contractors, partners, or content providers
-
If legally required or “in the good faith belief” that sharing is necessary to comply with legal proceedings
-
In the event of the sale of the company
Steps That Can Be Taken
-
Request a copy of data collected by EBSCO
-
Delete any data from profile
-
Contact EBSCO to opt out of uses of personal information
Grade: D
-
Provides information on what kind of data it collects but does not explicitly state what information it collects
-
Vagueness of "in the good faith belief" clause

Lauren Mancke on Unsplash
ITHAKA Privacy Policy
ITHAKA is the owner of JSTOR and Artstor
For more detailed information on the policies outlined below or to contact ITHAKA please visit their website.
Data Collected by ITHAKA
-
Institution’s IP address
-
Username and address
-
Authentication methods (Shibboleth or Google Social Sign-On, sign in services from the institution)
-
Name
-
Email address
-
Institutional affiliation information
-
If a purchase is made:
-
Postal address
-
Transactional information (not stored through a third party)
-
-
If sending a link to another person:
-
That person’s email address (not stored)
-
-
If downloading images, share with the publisher of that image:
-
Name
-
Email address
-
Institutional affiliation
-
Any other information you provide
-
-
Type of browser you are using
-
Type of operating system you are using
-
Domain name of your internet service provider
-
Clickstream data
-
Any information provided by user in feedback or correspondence
-
Any information posted on an ITHAKA-related page on social media
-
Cookies: doesn’t track other sites visited, used to remember preferences and to track traffic to and from ITHAKA sites
How That Information is Shared
-
Shared with publishers, content providers, and libraries for inquiries
-
Information shared when legally required in response to lawful requests by public authorities
-
If they “believe in good faith” that sharing is necessary to comply with the law or a legal proceeding
-
With contracted service providers
-
In the event of a merger or the sale of the company
-
If ITHAKA is contracted by a third party to provide personal information (in this case, refer to third party’s privacy policy)
-
ITHAKA shares general usage data in aggregate form
Steps That Can Be Taken
-
Request a copy of the information that ITHAKA has collected
-
Opt out and get information removed (cannot use ITHAKA services any longer)
-
Request data be deleted (residual data will remain for longer)
Grade: D-
-
Details information collected but shares it with multiple third parties
-
If ITHAKA is "contracted by a third party," AKA they sell patron data​
-
-
If user opts out of collection they cannot use database anymore
-
Vagueness of "believe in good faith"

Christin Hume on Unsplash
Gale Privacy Policy
For more detailed information on the policies outlined below or to contact Gale please visit their website.
Data Collected by Gale (provided by user, from a third party, or from a public source)
-
Contact data
-
Biographical data
How That Information Is Shared
-
May be included in their products and services
-
May be sold to third parties for inclusion in their products and services
-
If legally required, will share data with a third party
Steps That Can Be Taken
-
Request a copy of the data have on a user and correct or update it
-
Contact Gale to resolve any disputes or concerns
Grade: F
-
This database provides little to no information on what data it actually collects on patrons, it only lists the two categories of information it collects
-
States that it will sell personal information to third parties
-
Does not explicitly state that it will delete any information collected on users
Grading Rubric
Below is an overview of the rubric used to assess the privacy policies listed above. For each grade, it can be adapted on a +/- scale depending on the individual database. Explanations for each grade are listed above underneath their score.
A
-
Only collects what is necessary for website function
-
Does not share data
-
Includes privacy policy in accessible format
-
Users have to opt in to data collection before anything is collected
B
-
Collects minimal data on users
-
Allows users to opt out of data collection and still use service
C
-
Provides exact information on what data is being collected
-
Fully informs users on how and where their data is shared
D
-
Does not provide specific information on what information is collected
-
Vague about how that information is shared/under what circumstances it is shared
-
Sells user information to third parties
F
-
Doesn't provide information on what data is collected or shared
-
Sells user information to third parties that threaten their security
-
Tracks users on other sites
​
​