given
given name
intcode
international telephone code
uri
home page address
suffix
name suffix
timezone
time zone
alternative text
A very short text alternative to the image
mobile
mobile telephone number
fractionsecond
fraction of second
postalcode
Postal Code
start time
The time in http date format that the policy was validated.
number
telephone number
comment
telephone optional comments
middle
@@@ seq? middle name
login id
city
clientevents
user's interaction with a resource
ext
telephone extension
online
online address information
day
email
email address
pager
pager number
organization
organization name
employer
user's employer
fax
fax number
name
timestamp
request timestamp
prefix
name prefix
gender
thirdparty's gender
http
http protocol information
recipient
A legal entity, or domain, beyond the service provider and its agents where data may be distributed
cert
user's identity certificate
loccode
local telephone area code
base
The policy base URI for includes and excludes.
partialip
partial ip address
useragent
user agent information
department
disclosure
A natural language privacy statement
data
family
family name (last name)
bdate
user's birth date
telecom
telecommunications address information
business-info
thirdparty's business contact information
nickname
mandatory
A p3p processor is required to understand the value of the only property of the value of this property.
telephone
authority
uri authority
Relative To
Defines what context the class is relative to
thirdparty's birth date
ymd
stateprov
State or Province
login
thirdparty's login information
retention policy
The kind of retention policy that applies to the data referenced by the subject
statuscode
response status code
jobtitle
user's jobtitle
password
login password
purpose(opt in)
Data may be used for this purpose only when the user affirmatively requests this use.
opt instructions
A link to instructions that users can follow to request or decline to have their data used for a particular purpose.
recipient(opt in)
The recipient may receive this data only when the user affirmatively requests it
searchtext
search terms
user's gender
purpose
Defines the purpose for which the data practise is employed
country
country name
absolute date
An absolute date in http format.
minute
hour
hms
fullip
full ip address
purpose(opt out)
Data may be used for this purpose unless the user requests that it not be used in this way.
hostname
complete host and domain name
path
Matches the path part of the cookie.
long description
A human readable description of the subject
data element property
entity
Identifies the legal entity making the representation of the privacy practices contained in the policy.
key
certificate key
third party's jobtitle
maximum age
The maximum time before expiry.
street
street address
height
Height in pixels of the image
postal
postal address information
image
An image or logo associated with the subject
month
miscdata
miscellaneous non-base data schema
width
Width in pixels of the image
access
Indicates whether the site provides access to various kinds of information.
third party's name
service
second
exclude
Cookies not covered by the policy
statement
Data practices that are applied to particular types of data
year
about
The policy being referenced.
method
The name of a method to which the policy applies
extends
referrer
last uri requested by the user
format
certificate format
interactionrecord
server stores transaction history
optional
A p3p processor is not required to understand the value of the only property of the value of this property.
user's business contact information
value
Matches the value part of the cookie.
home-info
thirdparty's home contact information
Matches the name part of the cookie.
The location of the hinted policy reference files relative to the applicable host.
scope
The domain names to which the hint applies.
category
hints to users and user agents as to the intended uses of the data
domain
Matches the domain name part of the cookie.
include
Cookies covered by the policy.
hint
A hint where other relevant policy references can be found.
querystring
query-string portion of uri
dispute resolution
A collection of dispute resolution procedures that may be followed for disputes about a service's privacy practices.
stem
uri stem
Defines areas of the site to be covered by this policy.
uri of requested resource
bytes
data bytes in response
recipient always
clickstream
click-stream information
user's name
verification
A resource which can be used for verification purposes.
user's login information
recipient description
partialhostname
partial host name
httpmethod
http request method
optional data
the data to be optionaly transferred or inferred
clientip
client's ip address or hostname
cookies
use of http cookies
recipient(opt out)
The recipient will receive data unless the user requests that it not be used in this way
thirdparty's employer
contact-info
contact information for the organization
thirdparty's identity certificate
consequence
Consequences that can be shown to a human user to explain why the suggested practice may be valuable in a particular instance even if the user would not normally allow the practice.
purpose(always)
The purpose is always required; users cannot opt-in or opt-out of this use of their data.
expiry
States how long the policy reference file (or policy) remains valid.
Defines areas of the site not covered by this policy.
short description
A short human readable description of the subject
remedy
The possible remedies in case a policy breach occurs.
user's home contact information
other
organization identity certificate
The superclass of all classes of information defined by p3p.
access class
A class of information types defined by P3P.
all
Access is given to all identifiable information.
contact and other
Access is given to identified online and physical contact information as well as to certain other identified data.
ident contact
Access is given to identified online and physical contact information.
none
No access to identified data is given.
nonident
Identifiable data is not collected.
other ident
Access is given to certain other identified data.
computer
Information about the computer system that the individual is using to access the network - such as the IP number, domain name, browser type or operating system.
content
The words and expressions contained in the body of a communication - such as the text of email, bulletin board postings, or chat room communications
demographic
Data about an individual's characteristics - such as gender, age, and income
financial
Information about an individual's finances including account status and activity information such as account balance, payment or overdraft history, and information about an individual's purchase or use of financial instruments including credit or debit card information
government
Identifiers issued by a government for purposes of consistently identifying the individual
health
information about an individual's physical or mental health, sexual orientation, use or inquiry into health care services or products, and purchase of health care services or products
interactive
Data actively generated from or reflecting explicit interactions with a service provider through its site - such as queries to a search engine, or logs of account activity
location
Information that can be used to identify an individual's current physical location and track them as their location changes - such as GPS position data
navigation
Data passively generated by browsing the Web site - such as which pages are visited, and how long users stay on each page
Information that allows an individual to be contacted or located on the Internet - such as email
Other types of data not captured by the above definitions
physical
Information that allows an individual to be contacted or located in the physical world - such as telephone number or address.
political
Membership in or affiliation with groups such as religious organizations, trade unions, professional associations, political parties, etc
preference
Data about an individual's likes and dislikes - such as favorite color or musical tastes
purchase
Information actively generated by the purchase of a product or service, including information about the method of payment
state
Mechanisms for maintaining a stateful session with a user or automatically recognizing users who have visited a particular site or accessed particular content previously - such as HTTP cookies
unique id
Non-financial identifiers, excluding government-issued identifiers, issued for purposes of consistently identifying or recognizing the individual
category class
A classification of data, a subclass of Category.
cookie description
A description of a set of cookies
data element
A specific item of data a service might collect
Data Element Component
privacy statement
resolution procedure
A dispute resolution procedure.
applicable law
Disputes arising in connection with the privacy statement will be resolved in accordance with the referenced law.
court
Individual may file a legal complaint against the web site.
customer service
Individual may complain to the Web site's customer service respresentative for resolution of disputes regarding the use of collected data.
independent organization
Individual may complain to an independent organization for resolution of disputes regarding the use of collected data.
States how long the policy reference file (or policies) remains valid.
A P3P processor is required to understand the value of the rdf:valueof property of resources of this type.
A P3P processor is not required to understand the value of the rdf:valueof property of resources of this type.
An image or logo
legal entity
a legal entity
non identifiable
There is no data or no identifiable data collected.
Instructions that users can follow to request or decline to have their data used for a particular purpose.
policy
A P3P Policy
policy reference
A Policy Reference
Policy Reference Resource
A collection of, or a single, PolicyReference
policy references
A collection of Policy References
Policy Resource
A PolicyReference or a Policy
The purpose for which the data practise is employed
administration
Information may be used for the technical support of the Web site and its computer system. This would include processing computer account information, information used in the course of securing and maintaining the site, and verification of Web site activity by the site or its agents.
contact
Information may be used to contact the individual, through a communications channel other than voice telephone, for the promotion of a product or service. This includes notifying visitors about updates to the Web site.
contact somehow
Information may be used to contact the individual
current activity
Information may be used by the service provider to complete the activity for which it was provided, whether a one-time activity such as returning the results from a Web search, forwarding an email message, or placing an order; or a recurring activity such as providing a subscription service, or allowing access to an online address book or electronic wallet.
research and development
Information may be used to enhance, evaluate, or otherwise review the site, service, product, or market. This does not include personal information used to tailor or modify the content to the specific individual nor information used to evaluate, target, profile or contact the individual.
historical preservation
Information may be archived or stored for the purpose of preserving social history as governed by an existing law or policy.
individual
Information may be used to create or build a record of an identified particular individual or computer.
individual analysis
Information may be used to determine the habits, interests, or other characteristics of individuals and combine it with identified data for the purpose of research, analysis and reporting.
individual decision
Information may be used to determine the habits, interests, or other characteristics of individuals and combine it with identified data to make a decision that directly affects that individual
Information may be used in other ways.
pseudo
Information may be used to create or build a record of a particular individual or computer that is tied to a pseudonymous identifier, without tying identified data (such as name, address, phone number, or email address) to the record.
pseudo analysis
Information may be used to create or build a record of a particular individual or computer that is tied to a pseudonymous identifier, without tying identified data (such as name, address, phone number, or email address) to the record. This profile will be used to determine the habits, interests, or other characteristics of individuals for purpose of research, analysis and reporting, but it will not be used to attempt to identify specific individuals.
pseudo decision
Information may be used to create or build a record of a particular individual or computer that is tied to a pseudonymous identifier, without tying identified data (such as name, address, phone number, or email address) to the record. This profile will be used to determine the habits, interests, or other characteristics of individuals to make a decision that directly affects that individual, but it will not be used to attempt to identify specific individuals.
tailoring
Information may be used to tailor or modify content or design of the site where the information is used only for a single visit to the site and not used for any kind of future customization.
telemarketing
Information may be used to contact the individual via a voice telephone call for promotion of a product or service.
purpose class
The class of purpose classes
delivery
Delivery services possibly following different practices
other recipient
Legal entities following different practices
ours
Ourselves and/or our entities acting as our agents or entities for whom we are acting as an agent
public
Public fora such as bulletin boards, public directories, or commercial CD-ROM directories
same
Legal entities following our practices
unrelated
Legal entities whose data usage practices are not known by the original service provider
recipient class
A class of legal entities, or domains, beyond the service provider and its agents where data may be distributed
Relative Class
A Class whose extension is context dependent
A remedy in case a policy breach occurs.
correct
Errors or wrongful actions arising in connection with the privacy policy will be remedied by the service.
law
Remedies for breaches of the policy statement will be determined based on the law referenced in the human readable description.
money
If the service provider violates its privacy policy it wil pay the individual an amount specified in the human readable privacy policy or the amount of damages.
remedy class
business practices
Information is retained under a service provider's stated business practices
indefinitely
Information is retained for an indeterminate period of time
legal requirement
As required by law or liability under applicable law: Information is retained to meet a stated purpose, but the retention period is longer because of a legal requirement or liability
no retention
Information is not retained for more than a brief period of time necessary to make use of it during the course of a single online interaction
stated purpose
Information is retained to meet the stated purpose
A retention policy
retention policy class
A Class of retention policies
A data practice applied to particular types of data
structured data element
structured data element class
A class of data elements with component parts
test
Used for testing purposes. If a policy is of type p3p:Test then the policy is just an example and as such it MUST be ignored.
unstructured data element
unstructured data element class
A class of data elements with no component parts