-
-
Notifications
You must be signed in to change notification settings - Fork 3
/
Copy pathindex.html
120 lines (72 loc) · 7.29 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
<!DOCTYPE html>
<html lang='en'>
<head>
<meta charset='UTF-8'>
<meta http-equiv='X-UA-Compatible' content='IE=edge'>
<meta name='viewport' content='width=device-width, initial-scale=1.0'>
<title>web0 manifesto: privacy policy</title>
<link rel='stylesheet' href='/styles.css'>
</head>
<body>
<section id='manifesto'>
<h1><a href='/'><span class='web0'>web0</span> manifesto</a></h1>
<h2 id='privacy-policy'>Privacy Policy</h2>
<p>Our privacy policy is that we exist to protect your privacy and other human rights.</p>
<p>It’s why <a href='https://small-tech.org'>we</a> do <a href='https://small-tech.org/about/#small-technology'>what we do</a>.</p>
<h3 id='what-data-do-you-gather-when-i-visit-this-site'>What data do you gather when I visit this site?</h3>
<p><strong>No data that is linked to you is collected or stored by us as you browse this site.</strong></p>
<p>This site runs on <a href='https://sitejs.org'>Site.js</a>. </p>
<p>Site.js collects <em>aggregate</em> access statistics that are ephemeral (they reset when the server restarts). This is mostly useful for us to see how much traffic the site is getting and notice broken links or the occasional misconfigured bot or hack attempt.</p>
<p><a href='https://web0.small-web.org/21849627d58b1c71895a6b059b40cfd8'>View latest ephemeral statistics.</a></p>
<h3 id='what-data-do-you-gather-if-i-sign-the-manifesto'>What data do you gather if I sign the manifesto?</h3>
<p>When you sign the manifesto, we collect two types of data. Data about you and data about the signatory (which might also be you or it might be a project or organisation that you’re signing on behalf of).</p>
<p>(A) Data about you:</p>
<ul>
<li>Your name</li>
<li>Your email address</li>
</ul>
<p>(B) Data about the signatory:</p>
<ul>
<li>Name of signatory</li>
<li>Web address of signatory</li>
</ul>
<p>Data about you (A) is not displayed on the site and only used for the following purposes:</p>
<ul>
<li><p><strong>To know who is signing the manifesto on behalf of the signatory and to have a means to communicate with you</strong> should, for example, someone representing the signatory (e.g., project or organisation) inform us that you do not have permission to sign the manifesto on their behalf.</p></li>
<li><p><strong>To send you transactional email</strong> to confirm your email address (to reduce the likelihood of spam/fraudulent signatures) and to inform you that your signature has been accepted and provide you with a link to delete your signature and the data about you (A) that’s linked to it should you want to in the future.</p></li>
<li><p><strong>To reply to you should you contact us</strong> with questions or requests.</p></li>
</ul>
<p>We will not use your name or email address for any other purpose although we may have to hand over the information should we receive a subpoena to do so. (Although what use it will be to anyone is beyond us as we store no other data about you.)</p>
<p>Data about the signatory (B) is displayed in the signatory list on the site.</p>
<h3 id='how-long-do-you-keep-my-data'>How long do you keep my data?</h3>
<p>If you sign the manifesto, we keep the data in Groups A and B for as long as your signature remains on the manifesto.</p>
<h3 id='how-can-i-get-my-data-removed'>How can I get my data removed?</h3>
<p>If you signed the manifesto, you will have received a confirmation email that contains a link you can follow to delete your signature.</p>
<p>Deleting your signature from the manifesto will also delete the linked data that is not displayed (your name and your email address).</p>
<p><em>If you lost your confirmation email with the deletion link, please email Laura and Aral at <a href='mailto:[email protected]'>[email protected]</a> from the address you used to sign the manifesto and we will delete it for you.</em></p>
<h3 id='do-you-use-any-third-party-services-to-host-this-site-and-what-data-do-they-have-access-to'>Do you use any third-party services to host this site and what data do they have access to?</h3>
<p>This site is hosted on a Hetzner VPS.</p>
<p>You can <a href='/privacy/hetzner-dpa-2021-12-30.pdf'>download and read the GDPR data processing agreement we have with Hetzner</a> <small>(PDF; 199KB)</small>.</p>
<p>Other than that we do not use any other third-party services for the hosting of this site.</p>
<h3 id='do-you-use-any-third-party-services-to-send-emails'>So you don’t use any third-party services to send emails?</h3>
<p>No. Emails are sent using <a href='https://github.com/small-tech/web0/blob/main/.dynamic/sendMail.js'>code we’ve written</a> that contacts your mail server directly.</p>
<p><em>(Email is actually quite a simple protocol and the needs of this site are very basic. See Aral’s video on <a href='https://ar.al/2021/12/20/how-to-send-an-email/'>How to send an email</a> by manually talking to an email server if you’re into that sort of thing.)</em></p>
<h3 id='can-i-see-exactly-what-the-site-is-doing'>Can I see exactly what the site is doing?</h3>
<p>Yes, of course.</p>
<p>Our work is free and open source, released under the <a href='https://www.gnu.org/licenses/agpl-3.0.en.html'>GNU AGPL version 3.0</a> license.</p>
<p><a href='https://github.com/small-tech/web0'>View Source.</a></p>
<p><em>(If you notice any bugs or have suggestions for improvements, <a href='https://github.com/small-tech/web0/issues'>please let us know by opening an issue.</a> Thanks!)</em></p>
<h3 id='how-has-this-privacy-policy-changed-over-time'>How has this privacy policy changed over time?</h3>
<p>Since this web site is free and open source, you can <a href='https://github.com/small-tech/web0/commits/main/privacy/index.html'>view every change that’s been made to this privacy policy over time.</a></p>
<h3 id='can-i-talk-to-a-human-being'>Can I talk to a human being?</h3>
<p>Always! 👋🤓</p>
<p><a href='mailto:[email protected]'>Email [email protected]</a> and either <a href='https://laurakalbag.com'>Laura</a> or <a href='https://ar.al'>Aral</a> will get back to you as soon as we can.</p>
<footer>
<p>Made with ♥ by <a href='https://small-tech.org'>Small Technology Foundation</a></p>
<p><strong>Like this? <a href='https://small-tech.org/fund-us'>Fund us!</a></strong></p>
<p><a href='/privacy'>Our privacy policy</a> is that we exist to protect your privacy.</a></p>
<p class='trivia'>Not that there’s anything wrong with it but this site doesn’t use any client-side JavaScript. What about the form validation? It’s just <a href='https://github.com/small-tech/web0/blob/main/.dynamic/index-template.html#L9-L74'>semantic HTML</a> and <a href='https://github.com/small-tech/web0/blob/main/styles.css#L87-L131'>CSS transitions</a>. What about the animated progress update when you sign the manifesto? It’s <a href='https://github.com/small-tech/web0/blob/main/.dynamic/.post/sign.js#L181-L201'>controlled from the server</a> by <a href='https://github.com/small-tech/web0/blob/main/.dynamic/.post/sign.js#L6-L46'>streaming HTML and CSS to the client.</a></p>
<p><a href='https://github.com/small-tech/web0'>View Source</a></p>
</footer>
</body>
</html>