Privacy Policy, General Disclaimer & Online Privacy Statement

Review the Bank's privacy notice and opt out provision.

When you use a hyperlink to visit the website of another person or entity, you leave the Bank's website. Your use of hyperlinks to the website of others is at your own risk. The content, accuracy, and opinions expressed and other links provided by these resources are not investigated verified, monitored or endorsed by the Bank. If you use a hyperlink to a merchant's website, any issues with regard to payments, returns, and refunds are governed by the policies of the merchant from whom the merchandise is purchased, and you must deal directly with the merchant with regard to any of these matters. We are not responsible for the merchant's use of any personal information you provide to a merchant when visiting their website. The use of your personal information by the merchant will be governed by the merchant's policies and procedures.

Actual or attempted unauthorized defacement of this website will result in criminal and/or civil prosecution; we reserve the right to view, monitor and record activity on the system without notice or permission. Any information obtained by monitoring reviewing or recording is subject to review by law enforcement in connection with the investigation or prosecution of possible criminal activity on the system.

• Social Media platforms (such as Facebook, Instagram, and YouTube) are public forums. No confidential information should be posted to our social media pages or communicated through the social media messaging system. Any such communications should be conveyed directly to Thomaston Savings Bank by calling 860.283.1874.
• Thomaston Savings Bank will not request any confidential information through its social media accounts.
• Thomaston Savings Bank will not engage in any direct financial transactions through its social media accounts.
• Thomaston Savings Bank is not responsible for the content of any third-party ads appearing on its social media accounts.
• Thomaston Savings Bank reserves the right to delete any post on its social media accounts at any time when deemed necessary.
• Thomaston Savings Bank does not condone inappropriate, threatening or defamatory remarks posted to its social media accounts and reserves the right to delete any post at any time as deemed necessary.
• Thomaston Savings Bank reserves the right to edit its social media accounts user list at any time.
• Thomaston Savings Bank reminds its users that they should keep their PCs up-to-date with anti-virus protection.
• Any questions or complaints will be forwarded to the appropriate department. A response can be expected within 48 hours, with the exception of bank holidays.

Thomaston Savings Bank understands how important it is to protect the confidentiality of the information our clients and non-clients provide to us online. Described below is our online privacy policy and procedures. If you have any questions regarding this policy or any other information contained on our website please do not hesitate to contact us or call us at 860-283-1874.

At Thomaston Savings Bank we collect, retain, and use information about our clients only when we believe that it is reasonably necessary or useful for us to operate our business or our affiliate companies. We occasionally collect, retain, and use information to make products, services, and other opportunities available to customers.

Location Information: If you have enabled location services on your phone and agree to the collection of your location when prompted by the Services, we will collect location data when you use the Services even when the app is closed or not in use; for example, to provide our fraud detection services.  If you do not want us to collect this information, you may decline the collection of your location when prompted or adjust the location services settings on your device.

Opting Out of Location Tracking: If you initially consented to the collection of geo-location information through the Services, you can subsequently stop the collection of this information at any time by changing the preferences on your mobile device. Please note, however, that if you withdraw consent to our collection of location information, you may no longer be able to use some features of the App.

By using Thomaston Savings Bank’s online services, including but not limited to Internet Banking or requesting a loan application online, Thomaston Savings Bank will have access to your information. This allows the bank to provide you with products, services or marketing materials you have requested.

Communication via the Internet through E-mail, “Contact Us” page on our website, your E-mail address and any responses to your communication will be retained. This allows us to retain an audit trail of our contact and provide you with the product or service information you may have requested. If you use our loan application request form, this information will be retained and used to provide you with the products or services you have requested.

We may collect non-personal information when you visit our website to identify activity; this data may include, but is not limited to, pages viewed, the number of visitors, and the devices that are being used to access our site. This information helps us effectively manage our site and provides us with the opportunity to make continual improvements to enhance your experience. Thomaston Savings Bank and some of our service providers may use cookies and pixel tags as these technologies may allow us to recognize visitors, track and identify products and services of interest, follow browsing activity on other sites, and improve the use and functionality of our Site. We also use this data to better serve you with a more personalized experience including customized advertisements on both our website as well as other websites you may visit.

What are cookies?

Cookies are files that websites send to your computer or other Internet-connected devices to uniquely identify your browser or to store information or settings on your device.

To control which web servers collect information by automated means, we place tags on our web pages called “web beacons,” which are small files that link web pages to particular web servers and their cookies.

See below for details on what information is collected by cookies and how we use that information.

The Cookies That We Use

Our Site may use first-party and third-party cookies, as well as other types of tracking tools.

First-party cookies are set by our Site. When you visit the Site you may also receive cookies from third party websites or domains. We endeavor to identify these cookies before they are used so that you can decide whether or not you wish to accept them. More information about these cookies is available further in this Cookie Notice as well as on the relevant third party’s website.

The following table provides information about the cookies we use:

Local Storage and Session Storage

• Local Storage: Description of the local storage mechanism used by your website or application.
• Session Storage: Description of the session storage mechanism used by your website or application.

The following table provides information about the local and session storage which we use:

Our CAPTCHA solution

Our website uses Turnstile, a security solution provided by Cloudflare, to protect against automated attacks such as brute-force attempts, credential stuffing, and other types of attacks that can harm our website and its visitors. When a visitor accesses our website, their device is checked against a reputation database maintained by Cloudflare to determine whether it poses a threat. If the device is deemed suspicious, Cloudflare Turnstile may present the visitor with a challenge, such as a CAPTCHA, to verify that they are a human. The challenges include proof-of-work, proof-of-space, probing for web APIs, and various other challenges for detecting browser quirks and human behavior.

Despite Turnstile being a cookieless solution, depending on how your browser console displays the network information, you might see a domain request on the cookies section from Cloudflare (challenges.cloudflare.com) indicating a potential nameless cookie. This behavior occurs as Cloudflare uses JavaScript challenges to gather the access signals about the visitor/browser from this domain to perform the validation process, and confirm data without actually collecting or storing that information. Turnstile might look to your session data (like headers, user agent, and browser characteristics) to validate users based on Cloudflare's information collected directly from the vendor (e.g., device details).

You can access more details about Turnstile here.

Thomaston Savings Bank is committed to protect the confidentiality of your online information. When accessing Thomaston Savings Bank online Internet banking services we require customers to use a 128-bit browser. Thomaston Savings Bank uses encryption for its Internet Banking and Loan application request page. Encryption is an advanced way of scrambling your online information before it leaves your PC.

When you request information through Internet banking, your request is encrypted as it travels. The bank then decodes your request for information and sends it back encrypted. Your browser then decodes the information. We also have Firewalls in place, which is advanced hardware and software that reviews messages coming in and out of the Internet banking process. Only authorized users are able to pass through the online banking system. This type of technology is designed to prevent hackers from accessing your account.

Thomaston Savings Bank also has a Verisign certificate for its Loan application request page. Verisign is a certification authority on the Internet. This means that the Loan application request page and all information contained within the page are encrypted while being transmitted to your browser and when information is returned to the host web server and prevents anyone from reading the information over the Internet.

• The use of User Names, Access ID's and Passwords for online Internet banking is for your protection. Please use care when accessing the Internet and releasing private information.
• Never reveal your User Name, Access ID's or Password to anyone. Notify us immediately if the secrecy of your User Name, Access ID's or Password is compromised.
• Be sure to use the exit button or log off when logging out of Internet Banking.
• Don’t leave your PC while you are logged on to Internet Banking.
• Transmissions through general public E-mail may not be secure. To send or request sensitive account information please use the contact us link on our website.

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent's consent before we collect and use that information.

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.