Privacy Policy

Name: The Columbia Law Review Association, Inc., The Harvard Law Review Association, the University of Pennsylvania Law Review, and The Yale Law Journal Company, Inc.
Price range: $

Effective Date: May 1, 2025

The Harvard Law Review Association, on behalf of itself, the Columbia Law Review Association, Inc., the Yale Law Journal Company, Inc. and the University of Pennsylvania Law Review (collectively, “we”, “our”, “Bluebook Online,” or “us”) respect the visitors of http://www.legalbluebook.com/ and its subdomains’ (collectively, the “Site”) privacy. This privacy policy (the “Privacy Policy”) is intended to help you understand our privacy practices. This Privacy Policy explains how we collect, use, and disclose information that identifies or can be used to identify a natural person (“Personal Information”). By submitting your Personal Information, you agree to the terms of the Privacy Policy, and you expressly consent to the processing of your Personal Information according to the Privacy Policy.

This Privacy Policy also provides additional information required under the comprehensive state privacy laws, including the California Consumer Privacy Act, as amended by the California Privacy Rights Act (the “CCPA”) about our collection, use and disclosure of the information of California residents, along with other required information such as rights that may be available to California residents.

The Personal Information We Collect

In the past twelve months, we have collected the following categories of Personal Information about you:

Information You Provide to Us

Contact Information/Identifiers, such as your prefix and full name, email address, mailing and billing address, phone number, and any other unique personal identifier you choose to provide to us.
Commercial Information, including account activity and products or services purchased, obtained, or considered.
Sensitive Information, including payment method, payment card information, and checking or other financial account information. We utilize secure transaction methods when collecting credit card information over the internet. For more information about payment information, please see the “Payments and Subscriptions” section below.
Other Information You Choose to Provide, such as when you complete a form or interact with the Site.

Information We Collect Automatically When You Use the Site

When you access or use the Site, the types of information we automatically collect about you may include:

Log Information: When you visit the Site, our servers automatically record certain log file information, such as your Internet Protocol (“IP”) address, operating system, browser type and language, referring URLs, access times, pages viewed, links clicked, and other information about your activities on the Site.
Information Collected by Cookies and Other Tracking Technologies: We and our service providers use various tracking technologies, including cookies, to collect information about you when you interact with our Site. For more information about cookies, and how to disable them, please see the “Use of Cookies and Analytics” section below.

Information We Collect from Other Sources

We may also obtain Personal Information about you from other sources. For example, we may collect information from third parties, including service providers and publicly available sources. We may also update Personal Information if we learn that the information is out of date and updated information is available.

How We Use Personal Information

We use the Personal Information we collect about you to facilitate the completion of your request, to provide our services, and to provide information to you about us. Please be aware that, to the extent required to provide our services, we may share your Personal Information with individuals or organizations that assist in providing our services, as applicable.

We use your Personal Information in the following ways:

We may use our email lists for sending out our information about the Bluebook Online and other outbound communications, such as policy changes or other related news;
Process payments, registrations, subscriptions, applications, or requests for information;
Communicate with you about products and to provide information we think will be of interest to you;
Provide, maintain, plan, and improve our Site services;
Send you technical notices, updates, security alerts, and support or administrative messages;
Respond to your comments, questions, and requests, or to provide customer service;
Monitor and analyze trends, usage, and activities in connection with our Site;
Detect, investigate, and prevent fraudulent transactions and other illegal activities and protect the rights and property of the Bluebook Online and others;
Maintain appropriate records for internal administrative purposes; and
Carry out any other purpose described to you at the time the information was collected.

We may also de-identify and aggregate the information that we collect. De-identified and aggregated information can no longer reasonably be linked to the identity of a person and is no longer Personal Information.

How we Share Personal Information

We may disclose your Personal Information to the following categories of third parties for our business purposes:

With vendors, consultants, and other service providers who need access to such information to carry out work or perform services on our behalf;
In response to requests from local, state, provincial, or federal law enforcement officials, or any judicial, administrative, or similar proceeding or order, such as a subpoena, if we believe disclosure is in accordance with applicable law;
To protect the rights, property, and safety of the Bluebook Online and others;
To investigate suspected violations of our terms or policies, fraud, harassment, physical threats, or other violations of any law, rule, regulation, or the rights of third parties, or to investigate any suspected conduct which we deem improper;
In connection with a business transfer, including in the event that we transfer all or substantially all of our assets to another entity;
With your consent or at your direction;
To comply with transparency or other public reporting obligations; and
As otherwise permitted or required by law, for example in response to subpoenas, court orders or other legal process requiring such disclosure.

In the preceding 12 months, we have not sold or shared for purposes of cross-context behavioral advertising any personal information to third parties.

Payments and Subscriptions

You agree and acknowledge that any request and/or payment made by you for subscriptions, products, or services or other products via the Site may be processed by third parties other than us and, therefore, you expressly consent to our communication and distribution of your Personal Information to such third parties. In the event of such communication and distribution, we will require that any third-party recipient agrees that it cannot use your Personal Information in any manner other than to fulfill your request and/or process your payment.

Use of Cookies and Analytics

We use cookies to enhance your use of the Site and to better adapt the Site to your preferences. Cookies enable us to show you the pages you have most recently visited from the Site, to gather specific information from your previous visits to the Site and to recall features that you may have customized on your browser. If you do not wish us to collect information via the cookies on your computer, you should configure your browser to choose not to have cookies stored; most browsers allow you to do this.

We use third-party analytics services, such as Google Analytics to collect information on the use of the Site. Please visit www.google.com/policies/privacy/partners/ for more information. To prevent Google Analytics from using your information for analytics, you may install the Google Analytics Opt-out Browser Add-on by clicking here.

We do not respond to Do Not Track (“DNT”) signals to the extent received from a web browser. Because there currently is not a universally accepted technological or legal standard for recognizing or honoring DNT signals as reflections of user choice, we do not respond to them at this time.

Managing Your Information

It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us. You can update, modify, access, or delete your Personal Information by contacting us as stated in the “How to Contact Us” section below. To protect your privacy and security, we will also take reasonable steps to verify your identity before granting access or making corrections. Please note we may continue to store information about you as required by law or for legitimate business purposes.

Data Subject Rights

In some jurisdictions, applicable law may entitle you to certain rights regarding your Personal Information. The rights available to you depend on our reason for processing your Personal Information and the requirements of applicable law (i.e., your rights will vary depending on where you are located; for example, if you are a California resident, the CCPA provides you with specific rights regarding your Personal Information). Specifically, you may have the following rights:

Right to access: You may have the right to obtain from us confirmation as to whether your Personal Information is being processed, and where that is the case, to request access to the Personal Information.
Right to data portability: You may have the right to request that we transfer the Personal Information we have collected about you to another organization, or directly to you, in a structured, commonly used, and machine-readable format, under certain conditions.
Right to correct inaccurate information: You may have the right to request that we correct any Personal Information about you that is inaccurate.
Right to deletion: You may have the right to request that we delete your Personal Information, under certain conditions.
Right to opt-out of the sale or sharing of Personal Information for cross-context behavioral advertising: We do not sell or share Personal Information for purposes of cross-context behavioral advertising, and so you are already opted out of such practices.
Right to withdraw consent: Where we rely on your consent to process your Personal Information, you have the right to withdraw that consent at any time with future effect. Such a withdrawal will not affect the lawfulness of the processing prior to the consent withdrawal.
Right of non-discrimination/retaliation: We do not discriminate against individuals who exercise any of their rights described in this Privacy Policy, nor do we retaliate against individuals who exercise these rights.

Please note that many of the above rights are subject to exceptions and limitations. Your rights and our responses will vary based on the circumstances of the request. If you choose to assert any of these rights under applicable law, we will respond within the time period prescribed by such law.

To exercise your rights, please contact us as stated in the “How to Contact Us” section of this Privacy Policy.

If you are located in the State of California in the United States, a person authorized to act on your behalf may make a verifiable request related to your Personal Information. If you designate an authorized person to submit requests to exercise certain privacy rights on your behalf, we will require verification that you provided the authorized agent permission to make a request on your behalf. Your request must: (i) provide sufficient information that allows us to reasonably verify that you are the person about whom we collected Personal Information or an authorized representative of that person; and (ii) describe the request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We will only use Personal Information provided in a verifiable consumer request to verify the requestor’s identity or authority to make the request.

Confidentiality, Data Security, and Retention

It is our policy that all Personal Information requested by the Site will be treated as private and confidential. Any Personal Information that you provide to us via the Site is stored in a secure location and is accessible only by our employees, as appropriate, or necessary third parties, and is used only for the purposes for which you provided such information.

The Site employs reasonable procedures to safeguard the confidentiality of your Personal Information. We sometimes rely on third-party service providers for the physical security of some of our computer hardware and the processing of payment information. We review such third-party’s security procedures and believe that their security procedures are adequate.

The transmission of data or information over the Internet via the Site is not secure and is subject to possible interception, loss, or alteration while in transit. While we use industry-standard precautions to safeguard your Personal Information, we cannot guarantee complete security, as complete security does not presently exist on the Internet.

We will retain your Personal Information only for as long as is necessary for the purposes set out in this Privacy Policy, or as long as we are legally required or permitted to do so. When deciding how long to retain your information, we consider our legal and regulatory obligations, the amount, nature, and sensitivity of the information, the potential risk of harm from unauthorized use or disclosure of your Personal Information, the purposes for which we process your information described above and whether we can achieve those purposes through other means. We may also retain your information to investigate or defend against potential legal claims in accordance with the limitation periods of countries where legal action may be brought.

Children’s Privacy

We do not seek to, and do not knowingly, collect Personal Information from persons under the age of 13. If we are notified that we have received information from a person under the age of 13, upon verification, we will immediately delete this information from our servers.

Third Party Websites

It may be possible to access third-party websites from the Site. These third-party websites are not subject to the terms of this Privacy Policy. To ensure your understanding of how the third-party websites protect your privacy, please review their respective policies.

Governing Law

This Privacy Policy and any legal action to enforce this Privacy Policy shall be governed exclusively by the internal laws of The Commonwealth of Massachusetts, without regard to conflicts of laws principles. By using this Site, you agree to be subject to the exclusive jurisdiction of the state and federal courts of The Commonwealth of Massachusetts.

Additional Notice for California Residents (California Shine the Light)

If you are a California resident, California Civil Code Section 1798.83 permits you to request information about our practices related to the disclosure of your Personal Information to certain third parties for their direct marketing purposes. You may be able to opt-out of our sharing of your Personal Information with unaffiliated third parties for the third parties' direct marketing purposes in certain circumstances. Please send your request (along with your full name, email address, postal address, and the subject line labeled “Your California Privacy Rights”) to the address listed in the “How to Contact Us” section below.

United States Only

The Site is intended for use only in the United States of America. We are based in the U.S. and the information we collect is governed by U.S. law. By accessing or using the Site or otherwise providing information to us, you consent to the processing and transfer of information in and to the U.S. and other countries, where you may not have the same rights as you do under local law. Where this is the case, we will take appropriate measures to protect information about you in accordance with this Privacy Policy.

Updates to this Privacy Policy

We reserve the right to change the terms of this Privacy Policy at any time by posting the new Privacy Policy on the Site. All changes to the Privacy Policy will be effective when posted, and your continued use of the Site after any such revision is posted will be deemed acceptance of such changes. It is important to review this Privacy Policy periodically for the most current version.

How to Contact Us

Should you have other questions or concerns about this Privacy Policy, please contact us at:

Harvard Law Review Association
1511 Massachusetts Avenue
Cambridge, MA 02138
Phone: (617) 495-7888
Email: [email protected]