Michigan State University is committed to safeguarding the privacy of personal data. This privacy statement outlines the collection, use and disclosure of information provided to the University resulting from use of MSU’s websites (“MSU Sites”), such as visiting websites and providing information to MSU through a website by prospective students, students, alumni and the general public, and resulting from opting into text messaging campaigns.
MSU Sites collect two general types of information: (a) information a website visitor voluntarily provides to the University, which may include personal information (such as name, address, e-mail address, etc.) and (b) information collected automatically through cookies, pixels and server logs when someone visits MSU Sites.
Zero-party data is data a website visitor provides through some voluntary and deliberate action, such as filling out a form. It is data the website visitor has directly given to MSU. First-party data is data collected by a website when a visitor loads a page in their browser. By loading the page, the visitor is granting permission for the website to collect that data. Third-party data is data collected by companies that do not have a direct relationship with a consumer (a website visitor, in this case).
Personal information refers to data and information related to an identified or identifiable individual, including unique identifiers such as IP (Internet Protocol) addresses. Non-personal information refers to data that cannot be connected to a specific, identified or identifiable individual.
Cookies are small, often encrypted text files, located in web browser directories. The files contain information about a visitor’s computer/browser that helps a website identify a computer as having visited a website to improve the return visit experience. Cookies don't identify you personally and they can't determine who you are, but they can remember the device you are using and thus make it simpler for you to use a website.
Cookies are what allow a website visitor to stay logged into a website when they leave and later return to the website.
More information about cookies is available at www.allaboutcookies.org.
Pixels are tiny squares – often transparent – that load when a browser downloads a webpage. These pixels enable sharing data between a web server and an advertising server. Pixels send a cookie to the ad server when a website visitor has taken a particular action, such as filling out a form or reading a particular page. In this case, the cookies loaded by the pixel are an example of a third-party cookie: the cookie is generated by the third-party advertiser (such as a social media network), not the website that was visited.
MSU Sites will only collect personal information that website visitors knowingly and voluntarily provide by, for example, responding to surveys or communications, completing membership or subscription forms, registering for events or volunteer opportunities, submitting applications, making a gift or purchase, etc.
The information collected by MSU Sites is subject to MSU’s Institutional Data Policy. Generally, it is MSU’s practice to use personal information only for the purposes for which it was requested and any additional uses specifically stated on the MSU website where the information is being entered. However, information collected through MSU Sites may be subject to the University’s obligation to respond to subpoenas, court orders, discovery requests and requests for public records under the Michigan Freedom of Information Act.
The University may also access or permit access to information collected through MSU Sites in accordance with and subject to the limitations of the University’s Acceptable Use Policy for MSU Technology Resources.
Although MSU Sites have security measures in place to protect personal information provided to us by website visitors, visitors should also take proactive steps to protect personal information such as closing all web browsers after using MSU Sites. Information disclosed in chat rooms, news groups, forums, message boards and similar contexts may become public. Visitors should therefore exercise caution before disclosing personal information in such contexts.
MSU complies with the Payment Card Industry (PCI) Data Security Standards. When website visitors engage in financial transactions, MSU websites redirect the payment process to a secure payment site where a visitor may be asked for a credit card number. All credit card transactions are processed in compliance with PCI standards. No credit card data is saved after authorization. No credit card data is stored electronically at MSU. If a visitor saves a credit card for future use, this data is stored by a third party and not directly with MSU.
Occasionally, MSU Sites may request information from visitors via website visitor surveys to improve websites or other university communications or experiences or for contests.
Participation in these surveys or contests is completely voluntary and the visitor therefore has a choice whether to disclose their information. Information requested may include demographic data, such as race, ethnicity, gender and age.
MSU Sites may collect the types of data (zero, first and third party) described above using the data collection technology (cookies, pixels) listed above.
MSU uses this information primarily to improve the visitor experience on MSU Sites and to be able to serve content and advertising on third-party advertising platforms (e.g., Google Display Network, Facebook, TikTok, LinkedIn).
MSU Sites use cookies and pixels for four main purposes: (a) to carry information about the current visit at MSU Sites from one web page to the next, which also allows visitors to automatically log into other MSU Sites, (b) to identify visitors on MSU Sites on return visits, (c) to enable MSU to present content that may align to a visitor’s interests and (d) to serve MSU ads to the visitor on non-MSU websites and in social media platforms.
MSU uses technology platforms that collect cookie and pixel data and use it to improve the website experience for visitors. In some cases, the visit experience can be improved without a visitor being personally identifiable (e.g., a type of content can be presented based on previously visited content without knowing who a visitor is) while in other cases MSU is able to improve the website experience based on personal information previously provided to MSU (e.g., a specific prospective student who has not yet applied may be presented content about application requirements while another who has applied will not see that content).
Pixel data may also be shared with advertising platforms to serve relevant ads on non-MSU websites and in social media platforms to people who have visited MSU’s websites. An example of this is data collected using a pixel for Meta, the parent company of Facebook. While MSU and its agency partners are not able to associate this data with a specific individual, advertising platforms can. This is what makes it possible, for example, for ads for specific programs to be served in TikTok to a person who has visited an MSU site and viewed those programs. This is a very common advertising practice used by thousands of organizations.
Visitors have the option of disabling or not accepting cookies by changing the preferences on their browser. If visitors disable cookies, they will still be able to use most sections of MSU Sites, but some sections may require the use of cookies. MSU also will not be able to tailor content to a visitor’s interests without cookies and a person will not be able to use any parts of MSU Sites that require a login.
MSU Sites may use additional tracking technologies (such as Google Analytics and Matomo Analytics) to obtain website usage information, such as visitors’ IP (Internet Protocol) addresses, internet domain and host names, browser software and the date and time that website is visited, which may be considered personal data in some jurisdictions. Data from tracking technologies allows MSU to improve the performance of MSU Sites, understand how visitors find MSU Sites, improve the content of MSU Sites and improve website visitors’ experience.
MSU’s use of Google Analytics complies with Google’s Terms of Service and the MSU Access to Student Information Guidelines. Google provides more information about Google’s privacy practices and information on how to opt out of Google Analytics tracking of web browsing.
Individuals also may wish to review the MSU Access to Student Information Guidelines.
MSU Sites may use enterprise search technology, such as Google custom search. The technology captures search queries that can be used to help improve web experience, such as by providing answers to common searches or presenting content to website visitors that may be helpful based on their search query and based on similar queries from other visitors.
MSU web servers routinely generate logs that contain the following types of information each time MSU Sites are used:
This information is used to monitor the functioning and integrity of MSU Sites.
MSU Sites may contain links to other websites. Please be aware the University does not control or claim any responsibility for the privacy practices or content of other sites linked through MSU Sites. Individuals should read the privacy statements of each website they visit.
MSU may use the data collected from visitors to MSU Sites:
MSU collects and processes personal information (which may include certain sensitive information) that is submitted to MSU from individuals who are, for example, applying for admission to the University, enrolled in the University, employed with the University, are alumni of the University or are subscribing to communications from the University.
MSU processes such personal information as necessary in the exercise of the University’s legitimate interests, functions and responsibilities as a public higher education research institution. Personal information submitted to MSU is subject to MSU’s Institutional Data Policy.
MSU may use information (including certain sensitive information) collected from students, alumni, faculty, staff, prospective students, prospective employees and website visitors:
MSU may share information (including certain sensitive information) with third parties who have entered into contracts with the University to perform functions on behalf of the University, subject to the obligation of confidentiality and safeguarding from unauthorized disclosure.
A website visitor’s information will be retained by MSU in accordance with applicable federal laws, state laws and the retention periods in the University’s record retention schedules.
Michigan State University (MSU) may use text messaging (SMS) to communicate with members of the university community, including alumni, donors, employees, current students, and prospective students, who choose to receive such messages. These messages may include:
By providing your mobile phone number and opting in—such as by completing a form, checking a box, or texting a keyword to an MSU-designated number—you consent to receive automated or non-automated text messages from MSU at the number you provided. Consent to receive text messages is not a condition of making a gift, purchasing any product or service, or participating in any MSU program.
Text messages may include information about university activities, alumni programming, and other communications relevant to MSU’s educational and philanthropic mission. Message frequency may vary, but participants can expect to receive a few messages per month. Standard text messaging and data rates from your mobile carrier may apply.
You may opt out of receiving text messages from MSU at any time by replying STOP to any message you receive or by following any other opt-out instructions provided in the message.
After you send a STOP message, we may send one final confirmation message to confirm your request. Once processed, you will no longer receive text messages from that MSU program unless you re-subscribe.
When you participate in MSU’s text messaging programs, we may collect and process:
MSU uses this information to:
MSU may share your mobile number and related data with contracted service providers who send messages on the university’s behalf (such as Salesforce or other vendors). These providers are required to use your information only to perform services for MSU and must protect it in accordance with applicable data-protection requirements. MSU does not sell or rent mobile phone numbers or message data to third parties.
If you are located outside the United States, you understand that your information, including your mobile phone number and message data, may be transferred to and processed in the United States, where privacy laws may differ from those in your country of residence. MSU will handle your information in accordance with this Privacy Statement and applicable data-protection laws. If you are located in a jurisdiction that requires additional consent for cross-border data transfers or electronic marketing communications (for example, the European Economic Area, United Kingdom, or Canada), MSU will obtain your consent before sending such messages.
MSU retains records of consent, message logs, and related data only as long as necessary for the purposes described above or as required by law or University policy. We use appropriate administrative, technical, and physical safeguards to protect personal information collected through our text messaging programs.
Individuals affiliated with the university may correct, update or remove the personal information available in the MSU directory listing, which is accessible to individuals with an MSU NetID login. In particular:
If an individual provides information directly to MSU from a location outside the United States via a website, the individual consents to the transfer of their personal information to the United States.
To the extent applicable, data subjects outside the United States have the right, in certain circumstances, to request access to, a copy of, rectification, restriction in the use of or erasure of their information. These requests will be subject to the retention periods of applicable federal and state law. Visitors also have the right to lodge complaints with their national or regional data protection authority. If a visitor is inclined to exercise their rights, they should contact MSU at comms.contact@msu.edu and include “privacy statement” in the subject.
MSU uses appropriate technical and organizational security measures to protect website visitor information when visitors transmit it to the University and when the University stores it on its information technology systems.
When individuals submit information to MSU or use MSU Sites and other services, the individual consents to the collection, use and disclosure of that information as described in this Privacy Statement.
MSU may update or change this policy at any time. The continued use of MSU Sites and any third-party applications after any such changes indicates acceptance of these changes by the visitor.
Questions, comments and concerns are always welcome. Please contact us at comms.contact@msu.edu and include “privacy statement” in the subject.
This policy was last updated December 2025.