CheckUser policy: Difference between revisions

m Luke moved page CheckUser to CheckUser policy: clarify status as policy
improve for global use
Line 1: Line 1:
{{policy}}
{{global policy}}
{{ombox|text=Use of the CheckUser tool must also comply with the [[Policy:Privacy Policy|Privacy Policy]]. In case of conflict between this policy and the Privacy Policy, the Privacy Policy takes precedence.}}
{{ombox|text=Use of the CheckUser tool must also comply with the [[Policy:Privacy Policy|Privacy Policy]]. In case of conflict between this policy and the Privacy Policy, the Privacy Policy takes precedence.}}
'''CheckUser''' is a tool available to [[Special:ListUsers/checkuser|certain administrators]] (called "[[WickedGov:checkusers|checkusers]]"). The tool may be used to reveal the IP addresses associated with a registered account, as well as other technical data about accounts and IP addresses.
'''CheckUser''' is a tool available to [[Stewards]] and to [[#Access to the CheckUser tool|certain local administrators]] (called "checkusers"). The tool may be used to reveal the IP addresses associated with a registered account, as well as other technical data about accounts and IP addresses.


== Use of the tool ==
== Use of the tool ==
Line 14: Line 14:
* When a history of abusing multiple accounts has been established, checking IP addresses for purposes of detecting sleeper accounts or blocking underlying IPs.
* When a history of abusing multiple accounts has been established, checking IP addresses for purposes of detecting sleeper accounts or blocking underlying IPs.


Use of CheckUser without justification is called "fishing" and is prohibited. Fishing may result in revocation of privileges.
Use of CheckUser without justification is called "fishing" and is prohibited. Fishing or other inappropriate use of CheckUser may result in revocation of privileges.


== Release of CheckUser data ==
== Release of CheckUser data ==
Line 24: Line 24:
When in doubt, checkusers should provide as little information as possible. Explicit statements such as "User A is connecting from IP address 127.0.0.1" are rarely necessary and should be avoided.
When in doubt, checkusers should provide as little information as possible. Explicit statements such as "User A is connecting from IP address 127.0.0.1" are rarely necessary and should be avoided.


== CheckUser blocks ==
== Access to the CheckUser tool ==
Blocks made based on CheckUser data should be clearly marked as "CheckUser blocks". Administrators should not reverse blocks marked as "CheckUser blocks" unless they are also a checkuser or have permission from a checkuser.
=== Stewards ===
[[Stewards]] are the primary users with access to the CheckUser tool. Stewards are granted CheckUser access on the WickedGov [https://login.wickedgov.org/w Login Wiki]. This allows them to view CheckUser data for log-in and logout actions across all projects.
 
If required, Stewards are permitted to ''temporarily'' grant themselves CheckUser access on other wikis in any of the following circumstances:
 
# Prevention or mitigation of spam or vandalism.
# Prevention or mitigation of disruption caused by [[compromised accounts]].
# Emergencies and urgent situations.
# To investigate cross-wiki abuse or evasion of a [[global ban]], global lock, or global block.
# When there are no local checkusers on a wiki, or all local checkusers are inactive.
 
Unless absolutely necessary, Stewards should avoid using CheckUser on wikis with established CheckUser processes where they are not local checkusers themselves.
 
Stewards should not self-grant ''indefinite'' CheckUser access except on Login Wiki or when there is local consensus.
 
=== Local checkusers ===
 
The local checkuser group may be granted and removed by Stewards only.