University Privacy Statement

I. Introduction

The Ohio State University (“we,” “us,” “University” or “Ohio State”) values the privacy of those who use our websites, mobile apps, learning technology, and associated technologies. While we strive to handle information collected through our digital platforms responsibly and in accordance with applicable laws, users should be aware that no system can guarantee complete security. This statement outlines the University’s general practices regarding data collection, use, and protection. It is not intended to create any contractual or legal rights on behalf of any party.

II. What’s Covered

This statement generally covers items that are digitally offered by the University. We’ll call them “services” from now on.  

Some examples include:

• Websites (like osu.edu)
• Mobile apps (the Ohio State App, Ohio State: Wellness, etc.)
• Learning technology
• Content available through feeds, like RSS
• Web forms, chatbots, virtual assistants, or email

This statement shall also apply to services where such services specifically reference this statement. 

III. What’s Not Covered

Some areas of the University have a specific privacy statement for their services. Similarly, a department, organization or other group may use its own service, or services from vendors, that may have their own privacy practices and statements. 

If you leave University services by clicking a link to another company’s service, like social media sites, those companies will likely have their own privacy statements and standards. Please know that the University does not endorse the privacy practices of other companies, and you should consult such companies’ own privacy statements and standards to understand their privacy practices.

IV. Use and Management of Data

In the course of its operations, the University collects a range of information from students, employees, applicants, visitors, and others who interact with the University. This information may be gathered through various systems and services for academic, administrative, research, and operational purposes. The types and extent of data collected can vary depending on the context of the interaction.

A. Information We Collect

We collect different types of information depending on how you interact with the University. This may include:

1. Information you provide directly to us, such as:

• Identification details: name, contact information, demographic data, University ID, user accounts, and passport number.
• Application details: education history, personal statements, reference letters, and visa-related information.
• Student life information: courses, programs, housing, dining, travel with University programs, and alumni status.
• Financial information: salary history, tax forms, financial aid details, and payment information.
• Donation information: donation amounts, donor affiliation, giving history, and related legal documents.
• Communications: your messages with University departments, including date, topic, and contact preferences.

2. Information we receive from third parties, such as:

• Schools, references, family members, or education partners (like The Common App or College Board), when permitted by law.
• Public sources, social media platforms, marketing partners, or other organizations, where allowed by data protection laws.

3. Information collected automatically, such as:

• Browser data: your IP address, browser type, and pages visited.
• Cookies: small files that help remember your preferences and improve your experience. (See our Cookies Statement for more.)
• Tracking technologies: like pixel tags or web beacons, used to understand how you use our site or engage with our services.
• Self-disclosed data: such as your location or preferred way to be contacted

4. Information about minors:

• The University engages youth through camps, educational outreach, and other activities. In these contexts, the University may collect personal information about individuals under 18 to facilitate participation, support safety, and operate the program. Examples may include a participant’s name, basic contact details, and emergency contact information.
• Ohio State strives to design youth-facing experiences following privacy principles and seeks to limit collection of information relevant to the activity and apply safeguards intended to help protect the information.
• When appropriate, the University may request permission from a parent or legal guardian before collecting or using a minor’s information. Program materials may provide additional details tailored to the activity. Retention and sharing practices for youth information are informed by University recordkeeping practices and program needs.
• Ohio State takes into account applicable legal requirements relating to minors’ information. Program specific notices may supplement this section and, where they differ, the program notice governs that activity.

B. How We May Use Information 

We may use information for a variety of University-related purposes. In some cases, we ask for your consent—such as when you sign up for email updates. In other situations, we may use your information without asking, particularly when the use is consistent with the reason you provided it and supports the University’s academic, administrative, research, or operational activities. These uses may include, but are not limited to:

• Managing programs, services, or communications
• Supporting internal planning, reporting, or analytics
• Meeting legal, regulatory, or policy requirements

We strive to ensure uses of information are handled in accordance with applicable laws, University practices, Cookie Statement, University’s Information Technology (IT) Security Policy, and our Privacy Principles. 

C. Sharing Information With Others

Here are examples of when we may share information with others:

• You make something public, such as posting a comment the public can see.
• We use other companies to assist in delivering our services and supporting our mission.
  • We may use other companies to process your information on our behalf.  For example, sending you email about our programs or to analyze data on how people use our services so that we can improve them.
  • We strive to work with entities who agree to protect the security and privacy of your information and make best efforts to provide only the information that is needed.
• We share information across the University.
• We are permitted or required by law to share your information. Because the University is a public institution, data, information, and records (which may include your information), may be subject to the Ohio Public Records Act or other laws and regulations.

D. Retaining Information

If we have collected your information from our services, we store it in a variety of University records.  University retention schedules list and describe the types of records we keep, including the record’s purpose and information content.  Additionally, retention schedules provide guidance for how long records should be kept, based upon a review of the administrative, fiscal, legal, and historical values of the information within the records.  Visit this link for more information on University records management.

V. Use of Artificial Intelligence and Machine Learning

Ohio State may use artificial intelligence (AI) and machine learning technologies to support and improve university operations, services, and communications. These technologies help enhance efficiency, optimize processes, and provide more relevant experiences for our community.

VI. Contact Information

For additional information on how we collect and process information, if you have questions, or have a request, please contact privacy@osu.edu. 

VII. Updates to This Statement

This statement may be updated from time to time to reflect changes in our practices, technology, or legal requirements. We encourage you to review this statement periodically to stay informed about how we use cookies and related technologies. 

December, 2025

Ohio State Privacy Team
privacy@osu.edu