25b59b1 · cryptotaxi247/documentation-1

@@ -5,7 +5,7 @@ edit_on_github: false

5

6 This notice describes how [npm, Inc.](https://www.npmjs.com/about), or _npm_ for short, collects and uses data about you.

7

8 -## [What's most important?](#important)

8 +## What's most important?

9

10 That depends on your personal situation, which is why you should read on and decide for yourself. But at a minimum, absolutely every npm user should understand:

11

@@ -19,7 +19,7 @@ When you create an account, certain contact information is displayed publicly in

19

20 If you find yourself in a jam, [open a support ticket](https://npmjs.com/support).

21

22 -## [How does npm collect data about me?](#collection)

22 +## How does npm collect data about me?

23

24 npm collects data about you:

25

@@ -37,9 +37,9 @@ When researching potential customers, npm staff sometimes search the public Worl

37

38 npm may inadvertently collect data about you if it is included in software packages that you or others upload.

39

40 -## [What data does npm collect about me, and why?](#data)

40 +## What data does npm collect about me, and why?

41

42 -### [npm collects data about how you use npm software and registries](#usage-data)

42 +### npm collects data about how you use npm software and registries

43

44 When you use the `npm` command, the `npx` command, or other software to work with the npm public registry, an Enterprise registry that npm hosts, or private packages, npm logs data that might be identified to you:

45

@@ -79,7 +79,7 @@ npm uses this data to:

79

80 - recommend packages that may be relevant to your work

81

82 -### [npm collects data about how you use the website.](#website-data)

82 +### npm collects data about how you use the website

83

84 When you visit [www.npmjs.com](https://www.npmjs.com/), [docs.npmjs.com](https://docs.npmjs.com/), and other npm websites, npm uses cookies, server logs, and other methods to collect data about what pages you visit, and when. npm also collects technical information about the software and computer you use, such as:

85

@@ -109,7 +109,7 @@ npm uses data about how you use the website to:

109

110 - decide who to contact about about product announcements, service changes, and new features

111

112 -### [npm collects account data](#account-data)

112 +### npm collects account data

113

114 Many features of npm services require an npm account. For example, you must have an npm account to publish packages to the npm public registry.

115

@@ -141,7 +141,7 @@ npm uses your email to:

141

142 - send you messages about paid services you might want

143

144 -### [npm collects package data](#package-data)

144 +### npm collects package data

145

146 When you use npm publish or other software to publish packages to the npm public registry, an Enterprise registry that npm hosts, or as a private package, npm collects the contents of the package, plus [metadata](https://en.wikipedia.org/wiki/Metadata), including your account data. Other npm users may also publish packages that include data about you, such as the fact that you contributed code to a package.

147

@@ -153,7 +153,7 @@ npm uses data in packages to provide those packages to you and others who reques

153

154 Making package data available to others allows them to download, build on, and depend on your work.

155

156 -### [npm collects payment card data](#payment-data)

156 +### npm collects payment card data

157

158 To sign up for paid services, npm requires your payment card data. npm itself does not collect or store enough information to charge your card itself. Rather, [Stripe](https://stripe.com/) collects that data on npm's behalf, and gives npm security tokens that allow npm to create charges and subscriptions.

159

@@ -161,7 +161,7 @@ npm uses your payment card data only to charge for npm services.

161

162 npm instructs [Stripe](https://stripe.com/) to store your payment card data only as long as you use paid npm services.

163

164 -### [npm collects data about correspondence](#contact-data)

164 +### npm collects data about correspondence

165

166 npm collects data about you when you send npm support requests, legal complaints, privacy inquiries, and business inquiries. Those data usually include your name and email address, and may include your company or other affiliation.

167

@@ -177,15 +177,15 @@ npm uses contact data to:

177

178 - defend npm from legal claims

179

180 -### [npm collects data about use of npm.community](#forum-data)

180 +### npm collects data about use of npm.community

181

182 npm collects data about visits, user accounts, and forum data on [npm.community](https://npm.community/), the discussion forum for users of npm products and services. npm uses data from npm.community to collaborate with the development community, and to inform development decisions about the command-line interface and other software.

183

184 -## [Does npm share data about me with others?](#sharing)

184 +## Does npm share data about me with others?

185

186 -npm shares account data with others as [mentioned in the section about account data](#account-data).

186 +npm shares account data with others as [mentioned in the section about account data](#npm-collects-account-data).

187

188 -npm shares package data with others as [mentioned in the section about package data](privacy#package-data).

188 +npm shares package data with others as [mentioned in the section about package data](#npm-collects-package-data).

189

190 npm publishes posts and other content you submit to [npm.community](https://npm.community/).

191

@@ -197,7 +197,7 @@ npm does not sell information about you to others. However, npm uses services pr

197

198 - Cloud computing platforms and services that host our discussion forums

199

200 -- Services that assist with the detection of spam, scams, abuse others, or other violations of our [terms of service][privacy]

200 +- Services that assist with the detection of spam, scams, abuse others, or other violations of our [terms of service][open-source-terms]

201

202 - Payment processors

203

@@ -205,13 +205,13 @@ npm does not sell information about you to others. However, npm uses services pr

205

206 - Platforms for internal communication

207

208 -### [npm uses cookies](#cookies)

208 +### npm uses cookies

209

210 npm's website only uses cookies strictly necessary to provide, optimize and secure the website. For example, we use them to keep you logged in, remember your preferences, authenticate your device for security purposes, analyze your use of the service, compile statistical reports, and provide information for future development of npm. The website uses internal cookies for analytics purposes, not any third-party analytics or service providers.

211

212 By using the website, you agree that we can place these types of cookies on your computer or device. If you disable your browser or device’s ability to accept these cookies, you will not be able to log in or use the website.

213

214 -## [How can I make choices about data collection?](#choice)

214 +## How can I make choices about data collection?

215

216 You choose what data the npm publish command includes in package data. You can use an [.npmignore](https://docs.npmjs.com/files/package.json#files) file in your package to keep specific files out of the package. You can also use a [files list in package.json files](https://docs.npmjs.com/files/package.json#files) to instruct npm to include only specific files that you name, in addition to standard files like `README` files, `LICENSE` files, and package.json.

217

@@ -221,7 +221,7 @@ To publish a package to the npm public registry, npm's terms of service require

221

222 npm does not respond to the [Do Not Track HTTP header](https://en.wikipedia.org/wiki/Do_Not_Track).

223

224 -## [Where does npm keep data about me?](#locality)

224 +## Where does npm keep data about me?

225

226 npm stores account data, data about website use, data about registry use, and private packages on servers in the United States of America. metadata about those packages worldwide, via content delivery networks.

227

@@ -229,7 +229,7 @@ npm stores package data published to Enterprise registries that npm hosts, plus

229

230 By using the npm platform, you consent to the collection and storage of your data as outlined in this section.

231

232 -## [How does npm handle data under the EU General Data Protection Regulation?](#gdpr)

232 +## How does npm handle data under the EU General Data Protection Regulation?

233

234 npm respects privacy rights under [Regulation (EU) 2016/679](http://eur-lex.europa.eu/legal-content/EN/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ENG), the European Union's General Data Protection Regulation (GDPR). npm processes "Personal Data" on the following legal bases: (1) with your consent; (2) as necessary to perform our agreement to provide our services; and (3) as necessary for our legitimate interests in providing our services where those interests do not override your fundamental rights and freedom related to data privacy. Information we collect may be transferred to, and stored and processed in, the United States or any other country in which we or our affiliates or subcontractors maintain facilities, as described above.

235

@@ -247,7 +247,7 @@ If you reside in the EEA, Switzerland, or United Kingdom, you are entitled to ce

247

248 When you exercise your rights, npm may need to verify your identity and provide us with information before we access records containing your information. If you want to exercise your rights, please contact npm by [opening a support ticket](https://npmjs.com/support). We may have a reason under the law why we do not have to comply with your request or may comply with it in a more limited way than you anticipated. If we do, we will explain that to you in our response.

249

250 -## [How does npm handle data under the California Consumer Privacy Act?](#ccpa)

250 +## How does npm handle data under the California Consumer Privacy Act?

251

252 npm respects the rights of California residents under the [California Consumer Privacy Act](https://www.oag.ca.gov/privacy/ccpa) (CCPA). Where we collect information that is subject to the CCPA, that information we collect and your rights are described below.

253

@@ -289,7 +289,7 @@ Please note that your right to opt out does not apply to our sharing of personal

289

290 We may also disclose information to other entities who are not listed here when required by law or to protect our Company or other persons, as described in our Privacy Policy.

291

292 -## [How can I see what data is publicly available about me?](#access)

292 +## How can I see what data is publicly available about me?

293

294 You can access your account data at any time by visiting your account page on [www.npmjs.com](https://www.npmjs.com/). Your account page also lists all the packages published under your account or other accounts.

295

@@ -297,7 +297,7 @@ You can access package data by downloading the packages, as long as they're publ

297

298 You can see metadata about packages by running npm info $package, or by accessing the appropriate [registry's API](https://github.com/npm/registry/tree/master/docs). Registry APIs provide metadata in standard [JSON](https://www.json.org/) format, and packages as [tarballs](<https://en.wikipedia.org/wiki/Tar_(computing)>).

299

300 -## [How can I change data about me?](#change)

300 +## How can I change data about me?

301

302 You can change your personal account data and payment card data at any time by visiting your account settings page on [www.npmjs.com](https://www.npmjs.com/). You can change account and payment data for Enterprise by [contacting support](https://npmjs.com/support).

303

@@ -307,15 +307,15 @@ npm's [unpublish policy][unpublish] determines when you can erase packages from

307

308 If another user improperly publishes personal data about you, in a package or otherwise, [open a support ticket](https://npmjs.com/support).

309

310 -Please note that while [npm publishes notices about published data that's been erased](#erasure-notice), npm can't make everyone who has downloaded published package data or account data erase that data on your behalf. Choosing a public license, such as an open source software license, may encourage and allow storage, distribution, and use of package data indefinitely. Nearly all popular open source software licenses actually require preserving personal data that attributes the software to you, such as copyright notices, as a condition of permission for the software.

310 +Please note that while [npm publishes notices about published data that's been erased](#how-does-npm-notify-others-about-published-data-thats-erased), npm can't make everyone who has downloaded published package data or account data erase that data on your behalf. Choosing a public license, such as an open source software license, may encourage and allow storage, distribution, and use of package data indefinitely. Nearly all popular open source software licenses actually require preserving personal data that attributes the software to you, such as copyright notices, as a condition of permission for the software.

311

312 -## [What is npm's policy on unpublishing packages?](#forgotten)

312 +## What is npm's policy on unpublishing packages?

313

314 -Please see [our policy on "unpublishing" packages][unpublish] or [our terms of service][open-source-terms] for more information on erasing packages].

314 +Please see [our policy on "unpublishing" packages][unpublish] or [our terms of service][open-source-terms] for more information on erasing packages.

315

316 If you accidentally publish a package that threatens your privacy, or discover someone else has published a package that does, [open a support ticket](https://npmjs.com/support). npm can and will take down packages in specific, exceptional situations to protect you, especially if others violate your privacy. Using npm to violate others' privacy is against our [terms of service][open-source-terms].

317

318 -## [How does npm notify others about published data that's erased?](#erasure-notice)

318 +## How does npm notify others about published data that's erased?

319

320 npm takes a few steps to notify others who may be copying data from the npm public registry that published data has been erased:

321

@@ -323,15 +323,15 @@ npm takes a few steps to notify others who may be copying data from the npm publ

323

324 - npm's [registry APIs](https://github.com/npm/registry/tree/master/docs), special software services that others use to copy data from the npm public registry, send update messages about packages that have been erased.

325

326 -## [What happens if npm merges with or is bought by another company?](#merge)

326 +## What happens if npm merges with or is bought by another company?

327

328 We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information the same as described in this Policy.

329

330 -## [What are npm's information practices regarding information belonging to children?](#children)

330 +## What are npm's information practices regarding information belonging to children?

331

332 npm's site and services are intended for users age sixteen and older. npm does not knowingly collect information from children. If we discover that we have inadvertently collected information from anyone younger than the age of 16, we will delete that information.

333

334 -## [Who can I contact about npm and my privacy?](#contact)

334 +## Who can I contact about npm and my privacy?

335

336 Please [open a support ticket](https://npmjs.com/support). You may also contact our Data Protection Officer directly.

337

@@ -350,11 +350,11 @@ Vijzelstraat 68-72

350 1017 HL Amsterdam

351 The Netherlands

352

353 -## [How can I find out about changes?](#changes)

353 +## How can I find out about changes?

354

355 This version of npm's privacy questions and answers took effect June 3, 2020.

356

357 -npm will announce the next version on the [npm blog](https://blog.npmjs.org/). In the meantime, npm may update [its contact information](#contact) by updating the page at [https://docs.npmjs.com/privacy][privacy], without an announcement. npm may change how it announces changes in future privacy versions.

357 +npm will announce the next version on the [npm blog](https://blog.npmjs.org/). In the meantime, npm may update [its contact information](#who-can-i-contact-about-npm-and-my-privacy) by updating the page at [https://docs.npmjs.com/privacy][privacy], without an announcement. npm may change how it announces changes in future privacy versions.

358

359 You can review the history of changes in [the Git repository for npm's public policies](https://github.com/npm/documentation/blob/main/content/policies/privacy.mdx).

360

@@ -362,4 +362,4 @@ You can review the history of changes in [the Git repository for npm's public po

362 [privacy]: /policies/privacy

363 [open-source-terms]: /policies/open-source-terms

364 [unpublish]: /policies/unpublish

365 -[your-content]: /policies/open-source-terms#your-content)

365 +[your-content]: /policies/open-source-terms#your-content

fix: ensure links point to correct anchors (#925)