From abe3dcc10158a697a58db0c510f25c582d15bc5d Mon Sep 17 00:00:00 2001 From: M Bussonnier Date: Sun, 14 Sep 2025 16:58:26 +0200 Subject: [PATCH 1/4] Data retention information This is in particular for k-12 schools requests on the the security mailing list. --- security.md | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) diff --git a/security.md b/security.md index 8bbd8030..34baf936 100644 --- a/security.md +++ b/security.md @@ -89,3 +89,40 @@ the Jupyter Team　is not aware either of who installs Jupyter. many companies that provide Jupyter support; We cannot unfortunately give you names out of fairness. +## Data retention and Personal informations + +This section is similar to the vendor assessment above but is more targeted at +institutions which are planning to use Jupyter. In particular you may have been +redirected here if you are from a k-12 institution planning to use Jupyter. + +### Jupyter Notebook, JupyterLab, JupyterHub and Similar + +The Jupyter team does not provide Jupyter as a service, thus we usually are not +the right group to contact if you have questions on how your (or your users') +data and personal information are stored and used. + + - If you use or plan on using a service provider for Jupyter; they are your + vendor, and can answer those questions. + + - If you self-host or plan on self hosting Jupyter, then it is likely to your + IT team to decide and enforce policies as all the data is controlled by your + IT team. + + - If each user deploy on their own machine, then it's up to how each user uses + Jupyter and the method they used to install Jupyter. + +### Jupyter.org/try + +The usage of any instances of https://jupyter.org/try is meant only for evaluation of +Jupyter and not long term usage. Theses instances are ephemeral and do not +persist any data, or only store data in users' browsers which can be deleted by +clearing the browser's cache. + + +### Forums and Chat + +The Jupyter community self organised around multiple platforms, in particular +https://discourse.jupyter.org/ and https://jupyter.zulipchat.com/. Having an +account on any of those platforms is neither required not encouraged to use the +Jupyter Software, and data collection on those platforms are governed by their +respective platforms. From 903de51e01e7033e20b08f2739a8dabe857e4f76 Mon Sep 17 00:00:00 2001 From: Paul Ivanov Date: Fri, 5 Dec 2025 13:16:49 -0800 Subject: [PATCH 2/4] Update security.md --- security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security.md b/security.md index 34baf936..0cba5095 100644 --- a/security.md +++ b/security.md @@ -104,7 +104,7 @@ data and personal information are stored and used. - If you use or plan on using a service provider for Jupyter; they are your vendor, and can answer those questions. - - If you self-host or plan on self hosting Jupyter, then it is likely to your + - If you self-host or plan on self hosting Jupyter, then it is likely up to your IT team to decide and enforce policies as all the data is controlled by your IT team. From 63d37dadab86a73fd974a4f29f27bb7507487f1f Mon Sep 17 00:00:00 2001 From: Paul Ivanov Date: Fri, 5 Dec 2025 13:16:59 -0800 Subject: [PATCH 3/4] Update security.md --- security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security.md b/security.md index 0cba5095..a3ba44e3 100644 --- a/security.md +++ b/security.md @@ -108,7 +108,7 @@ data and personal information are stored and used. IT team to decide and enforce policies as all the data is controlled by your IT team. - - If each user deploy on their own machine, then it's up to how each user uses + - If each user deploys on their own machine, then it's up to how each user uses Jupyter and the method they used to install Jupyter. ### Jupyter.org/try From 30c375bbdcf41c538b3666dff359a8979677aad9 Mon Sep 17 00:00:00 2001 From: Paul Ivanov Date: Fri, 5 Dec 2025 13:17:05 -0800 Subject: [PATCH 4/4] Update security.md --- security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/security.md b/security.md index a3ba44e3..68048bc6 100644 --- a/security.md +++ b/security.md @@ -123,6 +123,6 @@ clearing the browser's cache. The Jupyter community self organised around multiple platforms, in particular https://discourse.jupyter.org/ and https://jupyter.zulipchat.com/. Having an -account on any of those platforms is neither required not encouraged to use the +account on any of those platforms is neither required nor encouraged to use the Jupyter Software, and data collection on those platforms are governed by their respective platforms.