Privacy words, explained plainly
No jargon. Every word starts with one plain sentence, then goes deeper only if you want it to.
409 words
A
- Access ControlRules about who can access what.
- Access TokenA short-lived code that proves you’re logged in.
- Account LockoutTemporarily blocking logins after too many wrong attempts.
- Account RecoveryWays to get back into your account if you lose access.
- Account TakeoverWhen someone gets control of your account.
- Ad FraudFake ad clicks or views to steal money from advertisers.
- Ad TrackingTracking you to show (and measure) ads.
- Adaptive AuthenticationLogin security that changes based on risk (new device, new location, etc.).
- Advertising IDA device ID used for ads and tracking.
- AI Data PrivacyHow AI systems collect and use personal data.
- AI Privacy RiskPrivacy problems that can come from AI systems.
- Air GapKeeping a device totally offline, like storing it in a locked room.
- Algorithmic BiasWhen a system’s results treat some groups unfairly.
- AliasUsing a “nickname identity” so you don’t share your real one everywhere.
- AnalyticsMeasuring how people use a site or app.
- Anonymity SetThe size of the crowd you blend into.
- AnonymizationRemoving details so data can’t be linked back to you.
- Anonymous ModeA mode that tries to hide or reduce identifying data.
- AntivirusSoftware that tries to detect and remove malware.
- API KeyA secret code that lets a program use an API.
- App AnalyticsMeasuring how people use an app.
- App PermissionsWhat an app is allowed to access.
- APPIJapan’s main privacy law.
- Attack SurfaceIt’s like all the doors and windows where a thief could break into a house.
- Audit LogA record of important actions, like who changed settings and when.
- AuthenticationProving you are who you say you are.
- Authenticator AppAn app that makes your login codes.
- AuthorizationDeciding what you’re allowed to do after you log in.
B
- BackdoorA hidden way to access a system.
- BackupA saved copy of data you can restore later.
- Backup CodesOne-time codes you save to get into your account if you lose your phone.
- BackupsExtra copies of important data so you can recover after problems.
- Bearer TokenA token that grants access to whoever has it.
- Behavioral AdvertisingAds based on what you do online.
- Behavioral ProfilingBuilding a profile about you from your actions.
- Behavioral TrackingWatching what you click, watch, and do online.
- Biometric AuthenticationUnlocking with your face, fingerprint, or similar.
- Biometric DataData from your body, like face, fingerprint, or voice.
- Biometric SurveillanceTracking people using body traits like faces or fingerprints.
- BlockchainA shared ledger that many computers agree on.
- BlocklistA list of things to block (domains, IPs, apps).
- Bot DetectionFinding and blocking automated traffic.
- BotnetA group of infected devices controlled by an attacker.
- Breach NotificationTelling people and authorities when a serious data breach happens.
- Browser ExtensionAn add‑on that changes what your browser can do.
- Browser FingerprintingIdentifying you from your browser’s unique features.
- Browser IsolationKeeping web pages in a separate, safer space.
- Brute‑Force AttackTrying many passwords until one works.
- Bug BountyA reward program for reporting security bugs.
- Business ContinuityPlanning how to keep important services running during disruptions.
- BYOD (Bring Your Own Device)Using your personal phone or laptop for work or school.
C
- Camera AccessWhen an app can use your camera.
- CAPTCHAA test to tell humans and bots apart.
- CCPAA California privacy law.
- Certificate Authority (CA)A trusted party that helps prove websites are real.
- Certificate LifecycleHow certificates are issued, renewed, rotated, and revoked over time.
- Certificate PinningOnly trusting specific certificates for a service.
- Certificate RevocationMarking a certificate as no longer trusted before it expires.
- Certificate Transparency (CT)Public logs that help detect suspicious TLS certificates.
- ClickjackingTricking you into clicking something you can’t see.
- ClickwrapAgreeing to terms by clicking a button.
- Client‑Side EncryptionEncrypting data on your device before it’s uploaded.
- Cloud EncryptionEncrypting data stored in the cloud.
- Cloud ProviderA company that runs servers and storage for other services.
- Cloud SecurityKeeping cloud accounts and storage locked down.
- Cloud StorageSaving your files on someone else’s servers.
- Code SigningSigning software so users can verify it’s real and unchanged.
- ConsentSaying “yes” to how your data is used.
- Consent FatigueGetting tired of pop‑ups and clicking “accept.”
- Consent Management Platform (CMP)A tool that asks for consent and stores your choices.
- Consent WithdrawalChanging your mind and stopping a data use you agreed to.
- ContainerizationPutting an app in its own “box” so it’s easier to run safely.
- Content Security Policy (CSP)A browser rule that limits what a web page can load and run.
- Contextual IntegrityPrivacy depends on the situation and expectations.
- Contextual PrivacyPrivacy depends on the situation and expectations.
- CookieA small file a website stores in your browser.
- Cookie BannerThe pop‑up that asks about cookies.
- Cookie ConsentYour choice about cookies and tracking on a site.
- Cookie PartitioningStoring third‑party cookies separately per site, so they can’t track you as easily.
- Cookie SyncingWhen trackers share IDs so they can recognize you together.
- CookiesIt's like a sticky note a website leaves on your browser to remember you next time.
- COPPAA US law about children’s online privacy.
- CORSA browser safety rule about which websites can call an API.
- Credential StuffingTrying leaked passwords on other sites.
- CRL (Certificate Revocation List)A list of certificates that should no longer be trusted.
- Cross‑Device TrackingLinking your phone, laptop, and tablet together.
- Cross‑Site TrackingTracking you across different websites.
- Crypto WalletA tool that stores and uses keys to control crypto assets.
- CryptographyThe science of protecting information with math.
- CSRF (Cross‑Site Request Forgery)Tricking your browser into doing something while you’re logged in.
- Cyber HygieneBasic habits that keep your accounts and devices safer.
D
- Dark PatternIt’s like a website hiding the cancel button so you don’t leave.
- Dark PatternsDesign tricks that push you to say “yes”.
- Dark WebParts of the internet that are hidden and harder to access.
- Data AccuracyKeeping personal data correct and up to date.
- Data AggregationCombining data from different places into one bigger dataset.
- Data BreachWhen data is stolen or accessed without permission.
- Data BrokerA company that buys and sells personal data.
- Data ClassificationLabeling data by sensitivity (public, internal, confidential).
- Data CollectionWhen a service gathers information about you.
- Data ControllerThe organization that decides why and how your data is used.
- Data DestructionDestroying storage so data cannot be recovered.
- Data ErasureDeleting personal data from systems.
- Data EthicsUsing data in a fair and respectful way.
- Data in TransitData moving between you and a service.
- Data IntegrityMaking sure data isn’t changed in a hidden or wrong way.
- Data InventoryA list of what data you have and where it is stored.
- Data LakeA large storage place that keeps many kinds of raw data.
- Data LeakData exposed by mistake or poor security.
- Data LifecycleThe journey of data: collect, use, store, share, and delete.
- Data LineageTracking where data came from and how it changed.
- Data LocalizationRules that require data to stay in a country.
- Data Loss Prevention (DLP)Tools and rules that help stop sensitive data from leaking out.
- Data MappingDrawing how data moves through systems.
- Data MinimizationCollect only what you really need.
- Data OwnershipWho controls and benefits from data about you.
- Data PortabilityGetting your data in a usable format to move it.
- Data ProcessingUsing data—collecting it, storing it, or sharing it.
- Data Processing Agreement (DPA)A contract that sets privacy rules when a vendor handles personal data for you.
- Data ProcessorA company that handles data for someone else.
- Data Protection Officer (DPO)A privacy expert inside an organization.
- Data QualityHow good and reliable a dataset is.
- Data ResidencyWhere your data is stored physically (country/region).
- Data RetentionHow long a company keeps your data.
- Data SanitizationCleaning storage so old data can’t be recovered.
- Data SovereigntyWhich country’s laws can control your data.
- Data SubjectThe person the data is about.
- Data WarehouseA central place where lots of data is stored for analysis.
- De‑anonymizationFiguring out who “anonymous” data belongs to.
- DecentralizedNot controlled by one single company or server.
- Decentralized Identifier (DID)An identifier designed to work without a central authority.
- Decentralized ServiceA service run by many participants instead of one company.
- Dedicated IPAn IP address that only you use.
- DeFiFinancial services built on blockchains.
- Device AttestationA way for a device to prove it’s genuine and not heavily tampered with.
- Device FingerprintA unique “signature” made from your device’s details.
- Device FingerprintingIdentifying your device using many small signals instead of a cookie.
- Device IDIt’s like a name tag for your phone or tablet that apps can see.
- Differential PrivacyA way to share statistics while protecting individuals.
- Digital ConsentClearly saying “yes” or “no” to data collection online.
- Digital FootprintThe trail of data you leave online.
- Digital HygieneKeeping your digital life tidy so you share less by accident.
- Digital IdentityYour identity in online systems (accounts and identifiers).
- Digital Services Act (DSA)EU rules for online platforms and transparency.
- Digital SignatureA cryptographic stamp that proves who created something and that it wasn’t changed.
- Digital SovereigntyIt’s like a country wanting to use its own tools and keep its data inside its borders.
- Disaster Recovery (DR)A plan to restore systems and data after a serious incident.
- Disposable EmailA temporary email address you can throw away.
- DKIMA digital signature for email that helps prove a message wasn’t forged.
- DMARCA policy that tells mail servers how to handle emails pretending to be your domain.
- DNS (Domain Name System)The internet’s “phonebook” for website names.
- DNS LeakWhen DNS requests bypass your VPN.
- DNS over HTTPS (DoH)Encrypting DNS lookups using HTTPS.
- DNSSECA security upgrade to DNS that helps prevent fake DNS answers.
- Double VPNA two-server multihop VPN.
- DoxxingPublishing someone’s private info online without permission.
- DPDP ActIndia’s main digital personal data protection law.
- DRMDigital locks that control how media can be used.
- DSARA request to see, delete, or get a copy of your data.
E
- E2EEShort for End‑to‑End Encryption.
- ECPAA US law about electronic communications privacy.
- Email ForwardingUsing one email address that sends messages to another inbox.
- Email TrackingTracking when you open an email or click a link.
- EncryptionTurning readable data into scrambled data.
- Encryption at RestScrambling data while it’s stored.
- Encryption in TransitScrambling data while it travels.
- Encryption KeyThe “secret” that locks and unlocks encrypted data.
- End-to-End EncryptionIt's like whispering a secret that only your friend can hear — not even the phone or app knows what you said.
- Endpoint Detection and Response (EDR)Security tools that monitor computers for attacks and help respond.
- Endpoint SecurityProtecting devices like phones and laptops.
- ePrivacy DirectiveEU rules about cookies and electronic communications.
- EU AI ActA European law that sets rules for AI systems.
- ExploitA method to abuse a software flaw.
F
- FederatedA network of connected servers run by different groups.
- Federated LearningTraining a model on devices without sending all raw data to a server.
- FERPAA US law that protects student education records.
- FHEShort for Fully Homomorphic Encryption: compute on encrypted data.
- FIDO2A set of standards for secure, passwordless login.
- File EncryptionLocking a file so only the key can open it.
- FingerprintingIdentifying you without cookies.
- FirewallA filter that blocks unwanted network traffic.
- First‑Party IsolationKeeping each website’s data separate in your browser.
- First‑Party TrackingTracking done by the site you’re visiting.
- FISAA US law framework for certain intelligence surveillance.
- Fully Homomorphic Encryption (FHE)A type of encryption that lets you compute while data stays encrypted.
G
H
- Hardened BrowserA browser set up to reduce tracking and attacks.
- Hardware Security KeyA physical key (USB/NFC) used for secure login.
- HashingTurning data into a one-way “fingerprint”.
- Health DataInformation about your health that can be very sensitive.
- HIPAAA US law for protecting health information.
- Homomorphic EncryptionDoing math on locked data without unlocking it.
- HSM (Hardware Security Module)A special device that stores keys safely and does crypto operations securely.
- HSTSA rule that forces your browser to use HTTPS for a site.
- HttpOnly CookieA cookie setting that blocks JavaScript from reading the cookie.
- HTTPSThe secure version of HTTP for websites.
I
- Identity Provider (IdP)A service that handles login for other apps.
- Identity TheftSomeone uses your personal info to pretend to be you.
- Immutable BackupsBackups that cannot be changed or deleted for a set time.
- Incident ResponseThe plan to handle a security problem.
- Incognito / Private ModeA browsing mode that doesn’t save much locally.
- Information GovernanceRules for how an organization manages information safely.
- Information SecurityProtecting information from leaks and attacks.
- Intrusion Detection System (IDS)A tool that watches for suspicious activity and alerts you.
- IP AddressThe network “address” of your device.
- IP LoggingSaving IP addresses in logs.
J
K
- k‑AnonymityA rule: you should blend into a group of at least k people.
- Key ManagementHow encryption keys are created, stored, and protected.
- Key RotationChanging encryption keys regularly.
- Key VaultA secure “safe” for encryption keys and secrets.
- KeyloggerSpyware that records what you type.
- Kill SwitchStops internet if the VPN disconnects.
L
- l‑DiversityMaking sure each group has varied sensitive values.
- Lawful BasisA legal reason to use personal data.
- Least PrivilegeGive only the access that’s truly needed.
- LGPDBrazil’s main data protection law.
- Link TrackingTracking what you click by changing or tagging links.
- LinkabilityHow easy it is to connect your activities together.
- Local StorageBrowser storage that can keep data even after you close the tab.
- Location DataInformation about where you are or where you’ve been.
- Location TrackingCollecting where you are (and where you’ve been).
- LoggingSaving records about what a system did.
M
- MalwareHarmful software that steals or damages.
- Man‑in‑the‑Middle AttackSomeone secretly sits between you and the service.
- Mass SurveillanceLarge-scale monitoring of many people’s communications or activity.
- MetadataData about data (like time, device, and sender).
- Metasearch EngineA search tool that pulls results from other search engines.
- MFA FatigueA scam where attackers spam approval prompts until you tap “Yes.”
- Microphone AccessWhen an app can listen and record audio.
- MisconfigurationSecurity settings set up the wrong way.
- Mixed ContentA secure page loading insecure resources.
- Mobile PermissionsPermission controls on your phone.
- Mobile PrivacyProtecting your privacy on your phone.
- MonitoringWatching systems to catch problems or attacks early.
- MTA-STSA way for email domains to require encrypted (TLS) email delivery.
- Multi-Factor Authentication (MFA)More than one “key” to your account.
- Multihop VPNA VPN route that goes through two or more servers.
- Mutual TLS (mTLS)TLS where both sides prove who they are using certificates.
N
O
- OAuth 2.0A standard way to let an app access your account without sharing your password.
- OCSPA way to check if a website certificate has been revoked.
- Offline BackupA backup kept disconnected from the internet.
- Open SourceSoftware whose code is public to inspect.
- OpenID Connect (OIDC)A login layer on top of OAuth 2.0 used for “Sign in with Google/Apple/etc.”
- Opt‑inSaying “yes” before something happens (like tracking).
- Opt‑outA choice to stop something after it already started.
P
- PasskeyA safer login that can replace passwords.
- PasskeysA modern way to sign in without passwords, often using Face ID/Touch ID or a device PIN.
- Password LeakWhen passwords get exposed in a leak or breach.
- Password ManagerA safe place that remembers strong passwords.
- Password ResetChanging your password when you forget it—or when you think it was stolen.
- Password ReuseUsing the same password on multiple sites.
- Passwordless AuthenticationLogging in without using a password.
- Patch (Security Update)An update that fixes security bugs.
- Patriot ActA US law linked to expanded surveillance powers after 2001.
- Penetration TestingEthical hacking to find weaknesses.
- Personal DataInformation that can identify you, directly or indirectly.
- Phantom WalletA specific crypto wallet app used to manage crypto assets.
- PhishingFake messages that trick you into giving secrets.
- PII (Personally Identifiable Information)Data that can identify a person, like name or ID number.
- PIPEDAA Canadian privacy law for the private sector.
- PIPLChina’s main personal data protection law.
- PKCEA safety feature that makes OAuth logins harder to intercept.
- Post‑Quantum CryptographyCrypto designed to stay safe even if powerful quantum computers exist.
- Predictive ProfilingUsing data to guess what you’ll do next.
- PRISMA surveillance program name often discussed in privacy debates.
- Privacy BrowserA browser designed to reduce tracking.
- Privacy BudgetA limit on how much data you can “learn” about individuals from stats.
- Privacy by DesignBuilding privacy protections into a product from the start.
- Privacy CoinA cryptocurrency designed to hide more transaction details.
- Privacy DashboardA place where you can see and control your privacy settings.
- Privacy EngineeringBuilding systems that protect privacy in practice.
- Privacy Impact Assessment (PIA/DPIA)A check to find privacy risks before launching something.
- Privacy NoticeA document that explains how a service uses your data.
- Privacy PolicyA document explaining how a service handles personal data.
- Privacy SandboxA set of browser ideas meant to reduce some tracking.
- Privacy ScoreA rating that estimates how privacy‑friendly something is.
- Privacy SettingsControls that limit data collection and tracking.
- Privacy ShieldAn old EU–US data transfer framework that was invalidated.
- Privacy‑Enhancing Technologies (PETs)Tools and methods that help protect privacy while still using data.
- Private KeyA secret key that proves it’s you or unlocks encrypted data.
- Probabilistic TrackingGuessing it’s you based on patterns, not a single ID.
- ProxyA middle server that sends requests for you.
- PseudonymizationReplacing your identity with a label.
- Pseudonymous IdentifierAn ID that doesn’t show your name but can still track you.
- Public KeyA key you can share so others can encrypt messages to you.
- Public Key Infrastructure (PKI)The system behind certificates that helps you trust websites and software.
- Purpose LimitationUsing data only for the reason you collected it.
- Push Notification MFAA login method that asks you to approve a sign-in on your phone.
Q
R
- RansomwareMalware that locks your files for money.
- Rate LimitingLimiting how fast someone can try actions.
- RBAC (Role‑Based Access Control)Permissions based on your role (like “admin” or “member”).
- Re‑identificationFiguring out who someone is in data that was supposed to be anonymous.
- Real‑Time Bidding (RTB)An auction that decides which ad you see in milliseconds.
- Recovery CodeA special code used to regain access when normal login methods fail.
- Recovery EmailA backup email address used to regain access to your account.
- ReferrerA web signal that can show which page you came from.
- Refresh TokenA longer-lived token used to get new access tokens.
- Remote WipeErasing a lost device from a distance.
- Responsible DisclosureReporting a bug privately so it can be fixed.
- RetargetingSeeing ads for something you already looked at.
- Retention PolicyRules for when data is kept and deleted.
- Right to be ForgottenA right to reduce certain old information showing up in results.
- Right to ErasureA right to ask a company to delete your data.
- Risk AssessmentChecking what could go wrong and how bad it would be.
- Risk‑Based AuthenticationDeciding how strict login should be based on a risk score.
S
- SameSite CookieA cookie setting that reduces cross-site tracking and CSRF risk.
- SAMLA standard often used for company single sign-on (SSO).
- SandboxingKeeping an app in a “safe box”.
- SBOMA list of the software components inside an app.
- ScopeA “permission list” that limits what an app can do.
- Screen ReaderA tool that reads on-screen text aloud for accessibility.
- Search EngineA tool that helps you find pages on the web.
- Search IndexA giant list of pages a search engine has found.
- Secret KeyA secret code used to protect data or prove permission.
- Secrets ManagementStoring and controlling access to secrets like API keys and passwords.
- Secrets RotationReplacing keys and tokens regularly (and fast if they leak).
- Secure AggregationCombining data so the server sees only the total, not individual inputs.
- Secure BootMaking sure your device starts with trusted software.
- Secure ConnectionA safe connection that protects data while it travels.
- Secure Cookie FlagA cookie setting that only sends the cookie over HTTPS.
- Secure DeleteDeleting data so it can’t easily be recovered.
- Secure ElementA special chip that protects secret keys.
- Secure EnclaveA protected chip/area that keeps secrets safer.
- Secure MessagingMessaging that protects your chats and reduces what others can see.
- Secure Multi‑Party ComputationWorking together on a calculation without sharing everyone’s raw data.
- Secure StorageKeeping data safe while it’s saved.
- Security AuditA review to check how secure a system is.
- Security HeadersWebsite settings that tell browsers to be safer.
- Security KeyA device or built‑in key that helps you log in safely.
- Security TokenA device or code that proves it’s really you.
- Seed PhraseA set of words that can restore a crypto wallet.
- Self‑HostedRunning a service on your own server instead of someone else’s.
- Self‑HostingThe act of running and maintaining your own online service.
- Self‑Sovereign Identity (SSI)Identity where you control your credentials, not one company.
- Sensitive Personal DataPersonal data that could cause extra harm if misused.
- Session CookieA cookie that keeps you logged in.
- Session HijackingStealing your “logged in” session.
- Session ManagementHow a site keeps you logged in safely.
- Shadow ITTools people use without official approval.
- Shared IPMany people appear to have the same IP.
- SIEMA system that collects security logs and helps spot attacks.
- SIM SwappingWhen someone hijacks your phone number to get into your accounts.
- Single Sign‑On (SSO)Logging in once to access multiple services.
- Smart ContractCode on a blockchain that runs automatically.
- SOC (Security Operations Center)A team that monitors security and responds to incidents.
- Social EngineeringTricking people instead of hacking computers.
- Software Supply ChainEverything that goes into making software: libraries, tools, and updates.
- Spear PhishingPhishing aimed at a specific person.
- SPFA rule that says which servers are allowed to send email for a domain.
- Split TunnelingSome traffic uses the VPN, some doesn’t.
- SpywareMalware that secretly watches you.
- SSLAn older name for TLS (mostly replaced).
- StalkerwareSpyware used to track a person without consent.
- Standard Contractual Clauses (SCCs)Standard legal clauses for some international data transfers.
- Storage PartitioningSeparating browser storage by site to reduce tracking.
- Strong PasswordA password that’s hard to guess.
- Student DataPersonal information about students in schools or learning apps.
- Supply‑chain AttackAn attack where hackers compromise a trusted vendor or update process.
- Surveillance CapitalismMaking money by collecting and using personal data at scale.
T
- t‑ClosenessKeeping each group’s sensitive data similar to the overall dataset.
- TEEShort for Trusted Execution Environment: a protected area in a device.
- TelemetryData a device or app sends back about how it works.
- Terms of ServiceThe rules you agree to when using a service.
- Third‑Party CookiesCookies set by a company you didn’t visit directly.
- Third‑Party TrackingTracking done by companies you didn’t directly visit.
- Threat IntelligenceInformation about current scams, attackers, and techniques.
- Threat ModelingThinking ahead: who might attack you and how.
- TLS (Transport Layer Security)The tech that makes HTTPS secure.
- TokenizationReplacing sensitive data with a safe placeholder.
- Tor NetworkA privacy network that routes traffic through several relays.
- TOTP (Time‑Based One‑Time Password)A code that changes every 30 seconds.
- TrackingFollowing what you do online (and sometimes offline).
- Tracking PixelA tiny invisible image used to track views and actions.
- Traffic CorrelationMatching “who talks” with “who receives” by timing and patterns.
- TransparencyBeing clear about what data is collected and why.
- TrojanMalware pretending to be something safe.
- Trusted Execution Environment (TEE)A protected area inside a device that runs sensitive code.
- Two-Factor Authentication (2FA)A second “proof” that it’s really you.
- TwofishIt’s like a secret code that scrambles your data in a very strong way so no one else can understand it.
U
V
- Voice AssistantA tool that listens for voice commands to help you.
- VPN (Virtual Private Network)A private “tunnel” for your internet traffic.
- VPN TunnelThe encrypted path between you and the VPN.
- Vulnerability ManagementFinding, prioritizing, and fixing vulnerabilities on an ongoing basis.
- Vulnerability ScanningAutomatically checking systems for known security weaknesses.
W
X
Z
- Zero TrustAssume nothing is automatically safe—always verify.
- Zero‑DayA security bug with no fix yet.
- Zero‑KnowledgeThe provider can’t see your data.
- Zero‑Knowledge EncryptionYou hold the keys, not the company.
- Zero‑Knowledge ProofProving something is true without revealing the secret behind it.
- Zero‑Knowledge RollupA blockchain “bundle” that uses zero‑knowledge proofs to verify many actions at once.