What security implications exist in deploying Ripple?
The only PII is IP address, if the extension is triggered. The majority of your users will not trigger the extension of course and for these we have no analytics or IP address collected. Our analytics activate along with the extension popup and provide us with information - some basic operating system, browser type, screen size and subsequent ‘in tool’ navigation data. After Ripple has been closed, no further data collection can occur. Our hosting data is in the UK. Our analytics data is hosted in the EU. Other processors (DNS for example, are either in the UK or EU)
IP addresses are only collected by our servers in the course of providing signposting content (e.g. to ensure we are signposting to French suicide prevention resources if the harmful search is conducted in France).
The data is held within server logs for a maximum of two weeks - 1 month.