Help

About BT Webwise

What is BT Webwise?

BT Webwise is a new free service for BT's Consumer Broadband customers giving you a safer, more personalised online experience without the need to download or install any software. BT Webwise checks for suspected fraudulent websites and warns you if you are attempt to visit one and also makes the ads that are normally shown on participating websites more relevant by anonymously matching them to your interests. It does this by replacing generic ads with ones which may be of more interest to you based on the web sites you visit and the things you search for.

BT Webwise 2008has not yet been launched. We will make further announcements concerning the launch of BT Webwise on this website in due course.

Will you give customers a clear choice whether to take the service?

Yes. We will always offer customers a clear choice whether or not to take the service. During the trial which ran between 30th September 2008 and 10th December, we did this by using a special webpage which appeared at the start of each trial customer’s browsing session to invite them to switch on BT Webwise. This page provided the opportunity for customers to view the amended Broadband Service Terms and Privacy Policy that apply to customers that have BT Webwise available to them. Thereafter, customers could view their Webwise status (opted in or opted out) on www.bt.com/webwise, or change this with a click of a button.

Do I need to download any software to use BT Webwise?

You don't need to download anything to use BT Webwise. It works in BT's network, so you only need to keep BT Webwise on.

Do I have to have a PC to use BT Webwise?

BT Webwise works on all computers that browse the Internet.

Will this disrupt my service or make browsing slower?

No. BT Webwise is run from BT's networks, so it won't disrupt your service or make it slower.

Can I use any web browser with BT Webwise?

BT Webwise works with most major browsers, including Internet Explorer, Firefox, Netscape and Opera. Safari is not supported by the BT Webwise system. BT Webwise has been tested and proven to work with the following:

• Internet Explorer versions 5.5, 6.0, 7.0
• Firefox versions 1.0, 1.5, 2.0
• Opera versions 7.54, 8.54, 9.0

Which parts of BT are considering deploying BT Webwise?

BT Retail Consumer broadband

How do you know that your customers want BT Webwise?

The features contained in Webwise were developed in response to consumer demand. Our research shows consumers want greater security online and fewer irrelevant advertisements while also having greater control over their privacy online.

When will you be trialling BT Webwise?

BT ran a trial of BT Webwise between 30th September 2008 and 10th December 2008. We invited a small proportion of BT's consumer broadband customers to take part in the trial. The trial involved only BT Retail consumer broadband customers; it did not include customers of BT Business, BT Ireland or other BT-owned ISPs, such as PlusNet

About BT Webwise Anti-fraud feature

How does BT Webwise help protect customers against online fraud?

BT Webwise helps protect you from "phishing", a form of identity theft, by warning you when you attempt to browse to potentially dangerous websites.

Phishing fraud is when a third party creates a website pretending to belong to a well-known brand, like a bank, and asks you to enter confidential information (passwords, account details), which they then steal. Phishing websites have always been hard to detect because they are designed to look just like genuine websites.

How does the anti-fraud feature work?

As you browse the Internet, the website addresses you visit are checked against a list of suspected fraudulent sites. This list is supplied by leading companies who provide this service to banks and top consumer brands.

When a listed site is identified, BT Webwise will present you with a warning page telling you the site may be fraudulent, and warns you against continuing to the suspect site.

I already have anti-virus and anti-spam software installed. Why do I need additional security from BT Webwise?

Anti-virus and anti-spam software can improve your security by stopping most fraudulent emails reaching your computer. BT Webwise gives you extra security by warning against any attempt to access suspected fraudulent sites regardless of how you got there: email, browser, or virus. There is no need to install and configure any software because the service operates automatically within BT's network. And with access to the centralised anti-fraud lists, it has the most up-to-date information at all times; there's no need for you to download updates.

Why doesn't BT just block fraudulent or dangerous sites?

Consumer research has shown that users do not want us to decide which sites they can visit; but they do want us to warn them.

Can legitimate sites be accidentally listed by BT Webwise?

It's very unlikely that this would happen as the companies that supply the list of dangerous sites are very careful not to list legitimate sites. In the extremely unlikely event of this happening, BT Webwise offers the facility for website owners to request that their site is removed from the list. Site owners should email sitequery{at}webwise.com

Will BT Webwise stop all fraudulent or dangerous sites?

Unfortunately, no. Internet fraud is a growing problem and like viruses, "phishing" sites are constantly multiplying. There is still a chance that a site will slip through, so we recommend all customers to be very cautious before entering their details on any site.

My web browser already provides anti-fraud protection. Will this work with BT Webwise?

Yes. BT Webwise will complement anti-fraud protection provided by your browser. Because BT Webwise works in BT's network, it will present you with a warning before you visit a listed site. If you choose not to continue, you will never reach the site and your browser's anti-fraud protection will not display a warning. However, if you do reach a suspected fraudulent site, your browser will warn you as long as the site is on its black list.

About BT Webwise relevant advertising feature

How does BT Webwise's relevant advertising feature work?

BT Webwise is designed to replace generic advertising that appears on participating websites with ads that are more likely to match your interests while preserving your privacy. The system does not show pop-ups, and you won’t see any more ads than you would normally, but the ads that you do see will just be more relevant. BT Webwise also won’t create any advertising categories from a range of sensitive subjects including pornography, gambling (excluding National Lottery), alcohol and tobacco.

Advertising categories are first set up by advertisers who want to reach the consumers most likely to be interested in their products. Then, when you visit a web site or search for a relevant term that matches one of these categories, BT Webwise will recognise this and will associate the category with an anonymous, unique ID cookie stored on your computer. No information such as website addresses and search terms is stored. The stored data is used to enable participating websites to show ads which are more likely to be relevant to your individual interests without needing to know who you are.

Does it matter which ads I see?

Our research shows that consumers understand the need for advertising these days and are interested in advertising which is relevant to them. Our research showed that consumers think that browsing the Internet is better when the ads are more relevant to the things you're interested in. We can't stop you seeing any ads, but if you'd rather see ads that match your interests, BT Webwise is good for you.

Does BT have any say on nature or content of the ads that are shown? Does BT Webwise allow campaigns related to adult or illegal activities?

BT Webwise only delivers ads relevant to one of a number of pre-defined categories of interest nominated by advertisers (e.g. "Finance" or "Health and Beauty"). Internet browsing can only be matched against these categories. Accordingly, BT Webwise will not allow advertising campaigns in the following categories:

• Tobacco
• Drugs
• Alcohol
• Pornography
• Gambling (except National Lottery)
• UK Political Parties

About Privacy

How are BT subscribers' usage details collected?

The system stores a random number cookie on your computer. Cookies are a standard way for online services to record user preferences. The random number contained in the cookie distinguishes your browser from the millions of others on the Internet. It does not contain any information about you or your computer and therefore it is not possible to trace who you are using just this number.

As you browse, the browsing behaviour of this number is matched against pre-defined advertiser categories, like travel or sport. So, for example, all the BT Webwise service would know is that cookie number 12345 is interested in sports and entertainment product categories if you look at, or search for, sports and entertainment sites.

No URLs or IP addresses are stored and the raw data used to identify relevant ad categories is deleted as each page loads. There is no data stored in the system other than the random cookie number, the advertising categories and time/date stamps, so it's impossible to reverse engineer who you are or where you've been.

How do the privacy safeguards in BT Webwise compare with other online advertising systems?

Many major online companies store the user's IP address and cross reference this with the cookie to follow and understand user browsing patterns. Some keep personally-identifiable data, including all the terms for which a user has searched, for over a year before such data is even anonymised. That leaves the user's data at risk for theft or loss, or misuse. This information may even be shared with other parties who are not bound by the privacy policy of the company that gathered it in the first place. And even if you "opt out" of future data collection – a difficult task in many cases – the information they’ve already stored on you stays stored.

BT Webwise is a revolutionary approach to online privacy. The technology underpinning BT Webwise does not store any personally-identifying information. It does not store the user's IP address, and uses only cookies to store advertising categories to know where to deliver the right ad. If the cookies are deleted, even the categories are completely erased. With BT Webwise, it is also always a choice – switching off the service is just a couple of clicks away. And also unlike most online companies, these policies and processes have been audited by independent firms to ensure that the claims are accurate and true.

How does BT Webwise match what I do online with ads?

With BT Webwise, the process of matching users' interests to ads is completely anonymous. BT Webwise makes advertising on websites more relevant for customers without compromising their privacy. Each browser is assigned a unique random number (cookie). Each time a user requests a web page, a "data digest" is created consisting of the page URL, any search terms submitted to major search engines, and the top 10 most frequently-occurring repeated keywords from the web pages (which are cleaned to remove email addresses, numbers and any information entered into form fields). This is matched against a list of advertising product categories. After the matching process, which may not result in a match, the "data digest" is deleted permanently and immediately. The "data digest" is never written to disk so it is never stored. All this processing is done completely within BT's network. The advertising category, the random number, and a timestamp are the only pieces of information held within the system. This information is held for no more than six months before it is deleted.

In the ad-serving phase, the random number and the advertising categories associated with that number are used to decide which relevant advert to show you when you visit websites that are participating in Webwise service.

How does BT Webwise make sure that it does not collect personally-identifiable information?

BT Webwise uses technology that has been built from the ground up to avoid any information that might identify a customer personally. BT Webwise does not view any information on secure (HTTPS) pages. BT Webwise also ignores strings of numbers longer than three digits to ensure that we do not observe credit card numbers, phone numbers, National Insurance or other private information. It also ignores any email addresses or data entered into form fields on websites. So, for example, if you enter an address into a form field on a website, this will be ignored.

I use a webmail service. Is my email being analysed like a regular web page?

No. We maintain an extensive list of thousands of webmail services to ensure that users' email is not analysed in any way. To see if your webmail service is on our list, click here to submit or check your webmail service's URL. If you submit a valid webmail service URL that is not on our list, we will add it promptly.

What happens if I don't take the BT Webwise service?

If you choose to not to take the service, or to switch off BT Webwise, then it's off. Those who have opted not to take the service will not have their browsing information profiled. No information is gathered or stored. Customers who opt out will not come into contact with any Phorm-managed equipment. More information about the design of the system is available on the Customer Choice Process page.

Participating websites will still show you ads (as they do now) but these will not be ads from the Phorm service and they won't be tailored to your interests. Also, by switching off BT Webwise, you will not get the extra protection from fraudulent "phishing" websites that the service provides.

If, after switching on BT Webwise, you subsequently choose to switch it off, then the random number assigned to your browser is deleted, and any link to your previous matching information is also deleted.

Could this system be useful for tracking illegal online activity, etc, through browsing behaviour?

No, because the system cannot identify individual users. It's completely anonymous.

Why does BT Webwise use cookies?

This is so that we can show relevant advertising without learning a customer's identity. Cookies are a standard method which websites and online services use to enhance their services, for example by remembering user preferences.

Does remaining opted out depend on the continued presence of an opt-out cookie on the user's computer? What happens if I delete the cookie?

If you are invited to join the trial, you will be shown an invitation screen asking whether you want to switch on BT Webwise. If you click "No thanks", the system will place a cookie on your computer to remember this choice. If you delete your cookies, you will be shown the invitation page again.

If you delete cookies regularly and want to remain opted-out, you can set all your browsers to block cookies from the domain webwise.net. You will remain opted-out of the service as long as this domain remains blocked. You can also use this option at any time before Webwise is available on your broadband connection, in which case you will not see the invitation page and will remain opted-out.

How can I remain opted-out of BT Webwise even if I delete cookies regularly?

We provide the facility to block cookies permanently from BT Webwise so if you want to opt out permanently you can do so through a one-time only activity, by setting your browser to block cookies from the domain webwise.net. When you block this domain, the service will not put a cookie on your machine and you will not be asked to opt in or out again.

Is my data still viewed when I am not participating?

No. When you choose not to take the service, or switch BT Webwise off, it's off. Those who have opted out will not have their browsing information profiled. No information is gathered, and therefore no information is stored. Customers who opt out will not come into contact with any Phorm-managed equipment.

Participating websites will still show you ads (as they do now) but these will not be ads from the BT Webwise service and they may not be more relevant to you. Also, by switching off BT Webwise you will not get the extra protection from fraudulent websites that the service provides.

What are the changes in the terms and conditions?

Two new paragraphs (paragraphs 18 and 19) will be added, setting out the manner in and the conditions under which BT Webwise is provided as part of the BT Total Broadband service. In particular, paragraph 18 allows for the customer consent that lets us take the necessary technical steps to switch the service on or off, as appropriate.

Does BT Webwise store a customer's IP address?

No.

Has Phorm's software source code (which is used in BT's network) been thoroughly tested and by whom?

BT has conducted its own extensive testing on Phorm’s software. Phorm has also had its source code independently reviewed and has publicly offered privacy advocates the opportunity to arrange independent reviews

How long is any user data stored by BT Webwise?

No personally-identifiably user data is stored as part of Webwise. Only the links between a random unidentifiable number contained in a cookie and advertising categories are stored in the system. This information is deleted after a maximum of six months. It is simply not possible to reverse engineer user identity using this information.

Will BT be providing a way to opt-out of BT Webwise which doesn’t use cookies and which ensures data is not profiled by the system?

You can already opt out permanently by blocking cookies from the webwise.net domain. In the trial which closed on 10th December when a customer declined the invitation, a cookie remembering this preference was placed on their computer. The system then saw this cookie when web requests were made and ensured that the customer’s traffic was not mirrored or profiled. BT is currently designing a mechanism which will not require the use of an opt-out cookie and it is intended that this mechanism will be used as and when Webwise is launched for all our Consumer Broadband customers.

How can I distinguish between cookies that were placed by Webwise and those given to me by websites I visited?

The Webwise cookie is clearly named "webwise-uid" so it can be easily identified. It will either contain the unique identifier string if you’re opted in or it will contain "OPTED_OUT" if you are not.

As explained on the Customer Choice Process page, when a user opts into the BT Webwise service, a Webwise UID cookie, containing a unique random number is placed on the user’s computer. This master cookie is held is the Webwise.net domain. When the user then visits other websites, the Webwise system stores a copy of the Webwise UID cookie within the browser in each the website domains visited by the user. The cookies are clearly labelled as belonging to Webwise as noted above and as a result can be easily identified as different to those cookies which may be placed by the website itself.

About switching on and switching off BT Webwise

How can I check whether BT Webwise is on or off?

Simply go to www.bt.com/webwise. You'll be able to see whether BT Webwise is turned on or off on the computer, user account and browser you're using at the time, or if it is not available in your area yet.

How do I switch BT Webwise on or off?

In the trial of BT Webwise which ended on 10th December 2008. A small proportion of BT's consumer broadband customers were invited via a special invitation webpage. The invitation was displayed in the customer’s web browser when they requested their next webpage following the addition of their broadband line to the trial invitation pool. This page offered the choice to switch BT Webwise on, switch it off or find more information. Customers seeing this page were able to review the amended Broadband service terms and privacy policy which apply for customers with BT Webwise available to them, and were also able to view these at any time during the trial at www.bt.com/webwise. Once the user had made their choice, they were directed to the page they initially requested, typically their home page.

At any point thereafter, customers within the trial could change their choice by simply going to www.bt.com/webwise and clicking "Switch BT Webwise Off" or "Switch BT Webwise On". Subscribers are responsible for making sure that other users of the service in the household are aware of BT Webwise and know how to switch it on and off.

BT Webwise uses a cookie stored on your computer to reflect your choice; on or off. This cookie is linked to individual computers, user accounts and browsers, so you will need to switch the service on or off from each computer, user account and browser you use.

If you delete the cookie, you'll be shown the invitation page in your browser again and you will need to restate your preference. If you regularly delete your cookies and do not wish to take BT Webwise, add webwise.net to your browsers' blocked cookies settings.

Will all users of my broadband connection be affected if I click "BT Webwise Off" or "BT Webwise On"?

BT Webwise uses a cookie stored on your computer to reflect you choice of on or off. This cookie is linked to individual computers, user accounts and browsers. This allows users to choose whether to turn BT Webwise on or off on their individual computer, user account or browser. This means that turning BT Webwise on or off on one computer, user account or browser will not automatically turn it on or off on any others. If you delete the cookie on a particular PC/browser, you'll need to reset your preference on that PC/browser.

What happens when I switch off BT Webwise?

When BT Webwise is off you won't receive warnings before reaching fraudulent websites. You'll still see ads in the normal course of visiting any participating website, but these won't be tailored to your interests.

If I try to switch BT Webwise off twice, what happens? 

Once you've switched off BT Webwise, you can reset it as many times as you want. It won't reverse the process or cause any harm.

How do I block the invitation page so that I won’t be invited to join the trial?

You can prevent the trial invitation page being shown by adding "webwise.net" to the blocked cookies list within your web browser’s privacy settings. You will need to do this on each PC and web browser that you wish to block the invitation on.

How can I prevent other users of my computer opting in when the invitation screen is shown?

Adding "webwise.net" to the blocked cookies settings on your web browser’s privacy settings will prevent the invitation being displayed to any user of that PC’s web browser. If this has not been done, then as stated on the invitation itself, the user of the PC at the time that the invitation is shown should always seek the consent of the account holder prior to choosing to accept or decline the invitation. As with general usage of the broadband connection, it remains the responsibility of the account holder to ensure their account is not misused.

About Phorm

What is Phorm?

Phorm is a digital technology company focused on delivering a more relevant and secure internet experience, and more value for advertisers, publishers, Internet service providers and others in the online ecosystem. With offices in London and New York, Phorm (AIM: PHRM, PHRX) is a company incorporated in the USA and publicly listed on the London Stock Exchange's Alternative Investment Market (AIM) since 2004.

Phorm has established agreements with major ISPs - BT, TalkTalk and Virgin Media. With its ISP partners, Phorm launched the Open Internet Exchange (OIX) to revolutionise online advertising while fully protecting user privacy and anonymity. Also, Phorm has created Webwise; a new system designed to make the Web safer and more relevant to Internet users. Webwise features include enhanced protection against online fraud and more relevant advertising - all without storing any browsing history or personally identifiable information.

Information for Website owners

I own a website. How does BT Webwise help me?

BT Webwise uses the Phorm technology to deliver high value targeted ads based on behaviour rather than the specific page a user is on, which means that even small websites can now get a much larger slice of the billions of pounds spent on Internet advertising in the UK. As a website, you can partner with Phorm's Open Internet Exchange (OIX) to have these relevant advertisements appear on your site. By maximising value from each user, the OIX gives participating publishers and networks the chance to earn more on every impression. Learn more at www.oix.com.

I own a website which contains private/sensitive information which I don't want to be scanned by Webwise. What can I do to achieve this?

While the privacy safeguards built into BT Webwise mean that sensitive or private content on websites is not compromised, the system also offers a number of mechanisms by which website owners can prevent pages being profiled if they wish. Website owners may implement any of the following methods:

1. HTTPS: No HTTPS traffic passes through the system or is profiled
2. Standard HTTP password-protection : Pages protected using standard HTTP password protection, as defined by RFC 1945, will not be profiled
3. robots.txt: The Webwise system will observe the rules that a website sets for major search engines using the robots.txt method. If the website's robots.txt file is set such that "*" (any robot) is not permitted to crawl it, then Webwise will not profile its pages.

Alternatively, you may request specifically that your website is not scanned by Webwise. To request that your website not be scanned by Webwise, please email:
website-exclusion{at}webwise.com.

How are robots.txt files handled by Webwise?

The Webwise system observes the rules that a website sets for the Googlebot, Slurp (Yahoo! agent) and "*" (any robot) user agents. Where a website’s robots.txt file disallows any of these user agents, Webwise will not profile the relevant URL. As an example, the following robots.txt text will prevent profiling of all pages on a site:

user-agent: * disallow: /

The following example will restrict profiling of a directory named "images":

user-agent: Slurp disallow: /images

The system will request the robots.txt file from the root of the host e.g. www.domain.com/robots.txt. When requesting the robots.txt file, the system will follow up to 5 redirects. If no robots.txt file or an HTTP error is returned, if the returned file is not in single-byte ASCII (ISO-8859-x) format, or if the file size is greater than 50Kbytes, then the URL will be marked as allowed for profiling.

Website owners should note the following aspects of the Webwise system’s interpretation of robots.txt files:

• Malformed robots.txt files will result in the URL being disallowed for profiling.
• Any of the well-established line-termination tokens are interpreted as a newline, i.e. DOS, UNIX, old-style MacOS linefeeds. Multiple linefeeds are ignored.
• Web-encoded URLs are decoded and handled as normal.
• Variable capitalisation within the robots.txt file is converted to lower case and processed.
• The system does not support Google extensions to the robots.txt standard.