


|
 |


Home Federal Bank Privacy Policy

E-mail and Internet-related fraud schemes are being perpetrated with increasing frequency, creativity, and intensity.

Phishing is one of the most common of these types of schemes. Phishers send an e-mail or pop-up message that claims to be from a business or organization that you deal with.
The message often asks you to "update" or "validate" your account information. They may also ask for additional information, such as your debit or credit card number and PIN.

No one from Home Federal Bank will ever contact you over the phone or via e-mail to request verification of your personal information. As always, we suggest you guard your account information closely and never share it with anyone.
If you have any questions, please contact us directly at (208) 466-4634, by email at eBanking@myhomefed.com, or visit your local branch.

At Home Federal Bank, protecting the privacy and confidentiality of your personal information is important to our
employees and us. We value your business and the trust you put in Home Federal Bank. In order to offer you the
financial products and services you seek to obtain, we collect, maintain, and use information about you on a routine
basis. To help you better understand how personal information is protected here at Home Federal Bank, we are
providing you with the following statement describing our practices and policies with respect to the privacy of
customer information. At Home Federal Bank:

- We do not disclose any nonpublic information about our customers or former customers to anyone, except as permitted by law.
- We restrict access to nonpublic personal information about you to those employees who need to know that information to provide products and services to you.

We collect nonpublic information about you from the following sources:

- Information we receive from you on applications and other forms;
- Information about your transactions with us or others;
- Information we receive from a Credit Reporting Agency.

We may disclose all of the information we collect, as described above to companies that perform marketing services
on our behalf or to other financial institutions with whom we have joint marketing agreements.

We maintain physical, electronic, and procedural safeguards that comply with Federal standards to guard your
non-public information.

Additional Information Regarding the Internet
|

Collecting Information

When you visit our website at http://www.myhomefed.com we
may collect information from you such as "cookies," your IP address, and your email address.

Cookies: A cookie is a file sent from a website to a computer that is logged on to the site. This file
lets the site recognize if the computer has been there before and what security requirements and browser
preferences the computer requires. To provide better service and a more effective website, we use "cookies" as part
of our interaction with your browser. We use cookies for site personalization and web tracking. We do not use
cookies to get data from your hard drive or to get your email address or personal identifying information. Most
browsers can be configured to inform you when cookies are set or to prevent cookies from being set. Please note,
however, that by not accepting cookies you may limit the functionality we can provide when you visit our site.

IP Addresses: When you visit our web site, you pass through a "firewall" we use for security purposes. We
identify the Internet Protocol or IP address associated with the device you're using, such as a personal computer or
handheld device when you enter our website. This does not allow Home Federal Bank to personally identify you. The IP
address is stored in case we ever need to track a connection to its point of origin for security reasons.

Email: If you choose to send us an email, we may use your email address to reply to you. Your email
address, your message, and our response may be stored for a limited time for quality assurance. Information may also
be retained to meet legal and regulatory requirements. We may use your email address to let you know about Home
Federal Bank products and services, however, you may reply to any email message we send to you to tell us that you
no longer wish to receive future messages from us. Your originating email to us through ebanking is encrypted. Reply
messages are not encrypted and therefore, we will not use email for sensitive or confidential information. We may
contact you or ask that you contact us by other means.

Sharing Information with Outside Companies

Home Federal Bank offers you access to other companies who may offer you products and services that we may not
offer. Home Federal Bank has established relationships with these companies and they may be accessed through the use
of hyperlinks to their sites from our site. Home Federal Bank does not own or control these other companies. It is
important that you carefully examine and understand the privacy policies of these separate companies prior to
sharing any personal information with them. Home Federal Bank will always adhere to its own privacy policy and does
not engage in the sharing of information with any company that is located on our website.

Third Party Service Providers on the Internet: You may notice on
http://www.myhomefed.com that Temel Inc provides Internet
services. We have contracted with Temel Inc to provide these Internet services to help us serve you better. Temel
Inc is only allowed to use any information that may be shared with them for the purposes of providing these Internet
services.

Children's Information

Home Federal Bank does not knowingly solicit data from children under 13, and we do not knowingly market to
children. We recognize that protecting children's identities and privacy online is important and that the
responsibility to do so rests with both the online industry and with parents.

Encryption and Passwords

The privacy of the communications between you (your browser) and our servers is ensured using cryptography.
Cryptography scrambles messages exchanged between your browser and our online banking server. Encryption
happens as follows: When you go to the sign-on page for online banking, your browser establishes a secure session
with our server. The secure session is established using a protocol called Secure Sockets Layer (SSL) Encryption.
This protocol requires the exchange of what are called public and private keys. Keys are random numbers chosen for
that session and are only known between your browser and our server. After the keys are exchanged, your browser will
use the numbers to scramble (encrypt) the messages sent between your browser and our server. Both sides require the
keys because they need to de-scramble (decrypt) the messages when they are received. The SSL protocol, not only
ensures privacy, but also ensures that no other browser can "impersonate" your browser, nor alter any of the
information sent. You can tell whether your browser is in secure mode by looking for the secured lock symbol at the
bottom of your browser window.

The numbers used as encryption keys are analogous to combination locks. The strength of encryption is based on the
number of possible combinations that a lock can have.

As the number of possible combinations grows, it becomes less likely that anyone would be able to guess the
combination in order to decrypt the message. Today's browsers offer 40-bit encryption or 128-bit encryption. Both
result in a large number of possible combinations, 240 and 2128, respectively. Our servers are compatible with both;
however we recommend the use of 128-bit capable browsers.

It is also important to verify that only authorized persons log into home banking. This is achieved by verifying
your password. When you submit your password, it is compared with the password we have stored in our secure data
center. We allow you to enter your password incorrectly three (3) times. If you enter your password incorrectly three
times, your online banking account will be locked until you call us to reinitialize the account. We monitor and
record "bad-login" attempts to detect any suspicious activity (i.e., someone trying to guess your password). You
play a crucial role in preventing others from logging on to your account. Never use passwords that are easy to
guess. Examples of bad passwords are: Birth dates, first names, pet names, addresses, phone numbers, social security
numbers, etc. Never reveal your password to another person. You should periodically change your password in the
User Option screen of online banking.

We recommend that you always sign-off (log out) when you are done with your online banking session and never leave
your computer unattended while you are logged in.

If you would like additional information, please contact your local Home Federal Bank office, e-mail us at
ebanking@myhomefed.com, or give us a call at
466-4634 (in the Treasure Valley calling area) or 800-888-7283 (outside the Treasure Valley calling area).

Sincerely,
The Home Federal Bank Team

|