Grade A- — Mostly protective (score 86/100)
Penn State's privacy policy outlines standard data collection for site improvement and third-party analytics, but lacks specific retention timelines for user data.
Standard privacy policy. No critical red flags. Uses third-party analytics.
Penn State may share information with contracted non-Penn State entities, third-party vendors, or service providers to provide services to you on our behalf or, in limited circumstances, offer ads that may be of interest to you.
The university shares data with third-party vendors, including for the purpose of serving targeted advertisements.
We may use Google Analytics to aggregate and track non-identifiable visitor information for the following business purposes: remarketing across devices with Google Analytics, Google Display Network Impression Reporting, DoubleClick (Google Ads)...
The site uses Google's advertising tools to track your behavior across devices for remarketing purposes.
You can accept or decline cookies at your discretion. Most Web browsers automatically accept cookies, but you can usually modify your browser settings to decline cookies if you prefer.
You have the ability to manage or block cookies via your browser settings.
Penn State uses reasonable security measures to protect against the loss, misuse, and alteration of the formation under our control. However, no method of transmission over the Internet or method of electronic storage is 100% secure.
The university employs standard security measures but does not guarantee absolute protection or explicitly commit to breach notification.
Penn State does not require you to identify yourself while using our public webpages linked from www.psu.edu. Penn State public webpages do not collect your Personally Identifiable Information (PII)...
The university states that it does not collect personally identifiable information on its public-facing webpages.
Last reviewed 2026-07-31 under rubric v3.5.