patch of appview/pages: terms & privacy pages · round #0 · pull #409 · tangled.org/core

+16

appview/pages/pages.go

···

       268
        
       	return p.executePlain("user/completeSignup", w, params)

     

       269
        
       }

     

       270
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       271
        
       type TimelineParams struct {

     

       272
        
       	LoggedInUser *oauth.User

     

       273
        
       	Timeline     []db.TimelineEvent

···

       268
        
       	return p.executePlain("user/completeSignup", w, params)

     

       269
        
       }

     

       270
        
       

     

       271
       +
       type TermsOfServiceParams struct {

     

       272
       +
       	LoggedInUser *oauth.User

     

       273
       +
       }

     

       274
       +
       

     

       275
       +
       func (p *Pages) TermsOfService(w io.Writer, params TermsOfServiceParams) error {

     

       276
       +
       	return p.execute("legal/terms", w, params)

     

       277
       +
       }

     

       278
       +
       

     

       279
       +
       type PrivacyPolicyParams struct {

     

       280
       +
       	LoggedInUser *oauth.User

     

       281
       +
       }

     

       282
       +
       

     

       283
       +
       func (p *Pages) PrivacyPolicy(w io.Writer, params PrivacyPolicyParams) error {

     

       284
       +
       	return p.execute("legal/privacy", w, params)

     

       285
       +
       }

     

       286
       +
       

     

       287
        
       type TimelineParams struct {

     

       288
        
       	LoggedInUser *oauth.User

     

       289
        
       	Timeline     []db.TimelineEvent

+8 -1

appview/pages/templates/layouts/footer.html

···

       1
        
       {{ define "layouts/footer" }}

     

       2
        
       <div class="w-full p-4 bg-white dark:bg-gray-800 rounded-t drop-shadow-sm">

     

       3
        
           <div class="container mx-auto text-center text-gray-600 dark:text-gray-400 text-sm">

     

       4
       -
               <span class="font-semibold italic">tangled</span> &mdash; made by <a href="/@oppi.li">@oppi.li</a> and <a href="/@icyphox.sh">@icyphox.sh</a>

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       5
        
           </div>

     

       6
        
       </div>

     

       7
        
       {{ end }}

···

       1
        
       {{ define "layouts/footer" }}

     

       2
        
       <div class="w-full p-4 bg-white dark:bg-gray-800 rounded-t drop-shadow-sm">

     

       3
        
           <div class="container mx-auto text-center text-gray-600 dark:text-gray-400 text-sm">

     

       4
       +
               <div class="mb-2">

     

       5
       +
                   <a href="/terms" class="hover:text-gray-900 dark:hover:text-gray-200 underline">Terms of Service</a>

     

       6
       +
                   &nbsp;•&nbsp;

     

       7
       +
                   <a href="/privacy" class="hover:text-gray-900 dark:hover:text-gray-200 underline">Privacy Policy</a>

     

       8
       +
               </div>

     

       9
       +
               <div>

     

       10
       +
                   <span class="font-semibold italic">tangled</span> &mdash; made by <a href="/@oppi.li">@oppi.li</a> and <a href="/@icyphox.sh">@icyphox.sh</a>

     

       11
       +
               </div>

     

       12
        
           </div>

     

       13
        
       </div>

     

       14
        
       {{ end }}

+131

appview/pages/templates/legal/privacy.html

···

       1
       +
       {{ define "title" }} privacy policy {{ end }}

     

       2
       +
       {{ define "content" }}

     

       3
       +
       <div class="max-w-4xl mx-auto px-4 py-8">

     

       4
       +
           <div class="prose prose-gray dark:prose-invert max-w-none">

     

       5
       +
               <h1>Privacy Policy</h1>

     

       6
       +
       

     

       7
       +
               <p><strong>Last updated:</strong> {{ now.Format "January 2, 2006" }}</p>

     

       8
       +
       

     

       9
       +
               <p>This Privacy Policy describes how Tangled ("we," "us," or "our") collects, uses, and shares your personal information when you use our platform and services (the "Service").</p>

     

       10
       +
       

     

       11
       +
               <h2>1. Information We Collect</h2>

     

       12
       +
       

     

       13
       +
               <h3>Account Information</h3>

     

       14
       +
               <p>When you create an account, we collect:</p>

     

       15
       +
               <ul>

     

       16
       +
                   <li>Your chosen username</li>

     

       17
       +
                   <li>Email address</li>

     

       18
       +
                   <li>Profile information you choose to provide</li>

     

       19
       +
                   <li>Authentication data</li>

     

       20
       +
               </ul>

     

       21
       +
       

     

       22
       +
               <h3>Content and Activity</h3>

     

       23
       +
               <p>We store:</p>

     

       24
       +
               <ul>

     

       25
       +
                   <li>Code repositories and associated metadata</li>

     

       26
       +
                   <li>Issues, pull requests, and comments</li>

     

       27
       +
                   <li>Activity logs and usage patterns</li>

     

       28
       +
                   <li>Public keys for authentication</li>

     

       29
       +
               </ul>

     

       30
       +
       

     

       31
       +
               <h2>2. Data Location and Hosting</h2>

     

       32
       +
               <div class="bg-blue-50 dark:bg-blue-900/20 border border-blue-200 dark:border-blue-800 rounded-lg p-4 my-6">

     

       33
       +
                   <h3 class="text-blue-800 dark:text-blue-200 font-semibold mb-2">EU Data Hosting</h3>

     

       34
       +
                   <p class="text-blue-700 dark:text-blue-300">

     

       35
       +
                       <strong>All Tangled service data is hosted within the European Union.</strong> Specifically:

     

       36
       +
                   </p>

     

       37
       +
                   <ul class="text-blue-700 dark:text-blue-300 mt-2">

     

       38
       +
                       <li><strong>Personal Data Servers (PDS):</strong> Accounts hosted on Tangled PDS (*.tngl.sh) are located in Finland</li>

     

       39
       +
                       <li><strong>Application Data:</strong> All other service data is stored on EU-based servers</li>

     

       40
       +
                       <li><strong>Data Processing:</strong> All data processing occurs within EU jurisdiction</li>

     

       41
       +
                   </ul>

     

       42
       +
               </div>

     

       43
       +
       

     

       44
       +
               <div class="bg-yellow-50 dark:bg-yellow-900/20 border border-yellow-200 dark:border-yellow-800 rounded-lg p-4 my-6">

     

       45
       +
                   <h3 class="text-yellow-800 dark:text-yellow-200 font-semibold mb-2">External PDS Notice</h3>

     

       46
       +
                   <p class="text-yellow-700 dark:text-yellow-300">

     

       47
       +
                       <strong>Important:</strong> If your account is hosted on Bluesky's PDS or other self-hosted Personal Data Servers (not *.tngl.sh), we do not control that data. The data protection, storage location, and privacy practices for such accounts are governed by the respective PDS provider's policies, not this Privacy Policy. We only control data processing within our own services and infrastructure.

     

       48
       +
                   </p>

     

       49
       +
               </div>

     

       50
       +
       

     

       51
       +
               <h2>3. Third-Party Data Processors</h2>

     

       52
       +
               <p>We only share your data with the following third-party processors:</p>

     

       53
       +
       

     

       54
       +
               <h3>Resend (Email Services)</h3>

     

       55
       +
               <ul>

     

       56
       +
                   <li><strong>Purpose:</strong> Sending transactional emails (account verification, notifications)</li>

     

       57
       +
                   <li><strong>Data Shared:</strong> Email address and necessary message content</li>

     

       58
       +
                   <li><strong>Location:</strong> EU-compliant email delivery service</li>

     

       59
       +
               </ul>

     

       60
       +
       

     

       61
       +
               <h3>Cloudflare (Image Caching)</h3>

     

       62
       +
               <ul>

     

       63
       +
                   <li><strong>Purpose:</strong> Caching and optimizing image delivery</li>

     

       64
       +
                   <li><strong>Data Shared:</strong> Public images and associated metadata for caching purposes</li>

     

       65
       +
                   <li><strong>Location:</strong> Global CDN with EU data protection compliance</li>

     

       66
       +
               </ul>

     

       67
       +
       

     

       68
       +
               <h2>4. How We Use Your Information</h2>

     

       69
       +
               <p>We use your information to:</p>

     

       70
       +
               <ul>

     

       71
       +
                   <li>Provide and maintain the Service</li>

     

       72
       +
                   <li>Process your transactions and requests</li>

     

       73
       +
                   <li>Send you technical notices and support messages</li>

     

       74
       +
                   <li>Improve and develop new features</li>

     

       75
       +
                   <li>Ensure security and prevent fraud</li>

     

       76
       +
                   <li>Comply with legal obligations</li>

     

       77
       +
               </ul>

     

       78
       +
       

     

       79
       +
               <h2>5. Data Sharing and Disclosure</h2>

     

       80
       +
               <p>We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:</p>

     

       81
       +
               <ul>

     

       82
       +
                   <li>With the third-party processors listed above</li>

     

       83
       +
                   <li>When required by law or legal process</li>

     

       84
       +
                   <li>To protect our rights, property, or safety, or that of our users</li>

     

       85
       +
                   <li>In connection with a merger, acquisition, or sale of assets (with appropriate protections)</li>

     

       86
       +
               </ul>

     

       87
       +
       

     

       88
       +
               <h2>6. Data Security</h2>

     

       89
       +
               <p>We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.</p>

     

       90
       +
       

     

       91
       +
               <h2>7. Data Retention</h2>

     

       92
       +
               <p>We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.</p>

     

       93
       +
       

     

       94
       +
               <h2>8. Your Rights</h2>

     

       95
       +
               <p>Under applicable data protection laws, you have the right to:</p>

     

       96
       +
               <ul>

     

       97
       +
                   <li>Access your personal information</li>

     

       98
       +
                   <li>Correct inaccurate information</li>

     

       99
       +
                   <li>Request deletion of your information</li>

     

       100
       +
                   <li>Object to processing of your information</li>

     

       101
       +
                   <li>Data portability</li>

     

       102
       +
                   <li>Withdraw consent (where applicable)</li>

     

       103
       +
               </ul>

     

       104
       +
       

     

       105
       +
               <h2>9. Cookies and Tracking</h2>

     

       106
       +
               <p>We use cookies and similar technologies to:</p>

     

       107
       +
               <ul>

     

       108
       +
                   <li>Maintain your login session</li>

     

       109
       +
                   <li>Remember your preferences</li>

     

       110
       +
                   <li>Analyze usage patterns to improve the Service</li>

     

       111
       +
               </ul>

     

       112
       +
               <p>You can control cookie settings through your browser preferences.</p>

     

       113
       +
       

     

       114
       +
               <h2>10. Children's Privacy</h2>

     

       115
       +
               <p>The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.</p>

     

       116
       +
       

     

       117
       +
               <h2>11. International Data Transfers</h2>

     

       118
       +
               <p>While all our primary data processing occurs within the EU, some of our third-party processors may process data outside the EU. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.</p>

     

       119
       +
       

     

       120
       +
               <h2>12. Changes to This Privacy Policy</h2>

     

       121
       +
               <p>We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.</p>

     

       122
       +
       

     

       123
       +
               <h2>13. Contact Information</h2>

     

       124
       +
               <p>If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us through our platform or via email.</p>

     

       125
       +
       

     

       126
       +
               <div class="mt-8 pt-6 border-t border-gray-200 dark:border-gray-700 text-sm text-gray-600 dark:text-gray-400">

     

       127
       +
                   <p>This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.</p>

     

       128
       +
               </div>

     

       129
       +
           </div>

     

       130
       +
       </div>

     

       131
       +
       {{ end }}

+69

appview/pages/templates/legal/terms.html

···

       1
       +
       {{ define "title" }}terms of service{{ end }}

     

       2
       +
       

     

       3
       +
       {{ define "content" }}

     

       4
       +
       <div class="max-w-4xl mx-auto px-4 py-8">

     

       5
       +
           <div class="prose prose-gray dark:prose-invert max-w-none">

     

       6
       +
               <h1>Terms of Service</h1>

     

       7
       +
       

     

       8
       +
               <p><strong>Last updated:</strong> {{ now.Format "January 2, 2006" }}</p>

     

       9
       +
       

     

       10
       +
               <p>Welcome to Tangled. These Terms of Service ("Terms") govern your access to and use of the Tangled platform and services (the "Service") operated by us ("Tangled," "we," "us," or "our").</p>

     

       11
       +
       

     

       12
       +
               <h2>1. Acceptance of Terms</h2>

     

       13
       +
               <p>By accessing or using our Service, you agree to be bound by these Terms. If you disagree with any part of these terms, then you may not access the Service.</p>

     

       14
       +
       

     

       15
       +
               <h2>2. Account Registration</h2>

     

       16
       +
               <p>To use certain features of the Service, you must register for an account. You agree to provide accurate, current, and complete information during the registration process and to update such information to keep it accurate, current, and complete.</p>

     

       17
       +
       

     

       18
       +
               <h2>3. Account Termination</h2>

     

       19
       +
               <div class="bg-red-50 dark:bg-red-900/20 border border-red-200 dark:border-red-800 rounded-lg p-4 my-6">

     

       20
       +
                   <h3 class="text-red-800 dark:text-red-200 font-semibold mb-2">Important Notice</h3>

     

       21
       +
                   <p class="text-red-700 dark:text-red-300">

     

       22
       +
                       <strong>We reserve the right to terminate, suspend, or restrict access to your account at any time, for any reason, or for no reason at all, at our sole discretion.</strong> This includes, but is not limited to, termination for violation of these Terms, inappropriate conduct, spam, abuse, or any other behavior we deem harmful to the Service or other users.

     

       23
       +
                   </p>

     

       24
       +
                   <p class="text-red-700 dark:text-red-300 mt-2">

     

       25
       +
                       Account termination may result in the loss of access to your repositories, data, and other content associated with your account. We are not obligated to provide advance notice of termination, though we may do so in our discretion.

     

       26
       +
                   </p>

     

       27
       +
               </div>

     

       28
       +
       

     

       29
       +
               <h2>4. Acceptable Use</h2>

     

       30
       +
               <p>You agree not to use the Service to:</p>

     

       31
       +
               <ul>

     

       32
       +
                   <li>Violate any applicable laws or regulations</li>

     

       33
       +
                   <li>Infringe upon the rights of others</li>

     

       34
       +
                   <li>Upload, store, or share content that is illegal, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, or otherwise objectionable</li>

     

       35
       +
                   <li>Engage in spam, phishing, or other deceptive practices</li>

     

       36
       +
                   <li>Attempt to gain unauthorized access to the Service or other users' accounts</li>

     

       37
       +
                   <li>Interfere with or disrupt the Service or servers connected to the Service</li>

     

       38
       +
               </ul>

     

       39
       +
       

     

       40
       +
               <h2>5. Content and Intellectual Property</h2>

     

       41
       +
               <p>You retain ownership of the content you upload to the Service. By uploading content, you grant us a non-exclusive, worldwide, royalty-free license to use, reproduce, modify, and distribute your content as necessary to provide the Service.</p>

     

       42
       +
       

     

       43
       +
               <h2>6. Privacy</h2>

     

       44
       +
               <p>Your privacy is important to us. Please review our <a href="/privacy" class="text-blue-600 hover:text-blue-800 dark:text-blue-400 dark:hover:text-blue-300">Privacy Policy</a>, which also governs your use of the Service.</p>

     

       45
       +
       

     

       46
       +
               <h2>7. Disclaimers</h2>

     

       47
       +
               <p>The Service is provided on an "AS IS" and "AS AVAILABLE" basis. We make no warranties, expressed or implied, and hereby disclaim and negate all other warranties including without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other violation of rights.</p>

     

       48
       +
       

     

       49
       +
               <h2>8. Limitation of Liability</h2>

     

       50
       +
               <p>In no event shall Tangled, nor its directors, employees, partners, agents, suppliers, or affiliates, be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from your use of the Service.</p>

     

       51
       +
       

     

       52
       +
               <h2>9. Indemnification</h2>

     

       53
       +
               <p>You agree to defend, indemnify, and hold harmless Tangled and its affiliates, officers, directors, employees, and agents from and against any and all claims, damages, obligations, losses, liabilities, costs, or debt, and expenses (including attorney's fees).</p>

     

       54
       +
       

     

       55
       +
               <h2>10. Governing Law</h2>

     

       56
       +
               <p>These Terms shall be interpreted and governed by the laws of Finland, without regard to its conflict of law provisions.</p>

     

       57
       +
       

     

       58
       +
               <h2>11. Changes to Terms</h2>

     

       59
       +
               <p>We reserve the right to modify or replace these Terms at any time. If a revision is material, we will try to provide at least 30 days notice prior to any new terms taking effect.</p>

     

       60
       +
       

     

       61
       +
               <h2>12. Contact Information</h2>

     

       62
       +
               <p>If you have any questions about these Terms of Service, please contact us through our platform or via email.</p>

     

       63
       +
       

     

       64
       +
               <div class="mt-8 pt-6 border-t border-gray-200 dark:border-gray-700 text-sm text-gray-600 dark:text-gray-400">

     

       65
       +
                   <p>These terms are effective as of the last updated date shown above and will remain in effect except with respect to any changes in their provisions in the future, which will be in effect immediately after being posted on this page.</p>

     

       66
       +
               </div>

     

       67
       +
           </div>

     

       68
       +
       </div>

     

       69
       +
       {{ end }}

appview/state/router.go

···

       142
        
       	r.Mount("/", s.OAuthRouter())

     

       143
        
       

     

       144
        
       	r.Get("/keys/{user}", s.Keys)

     

       0
        
       
     

       0
        
       
     

       145
        
       

     

       146
        
       	r.NotFound(func(w http.ResponseWriter, r *http.Request) {

     

       147
        
       		s.pages.Error404(w)

···

       142
        
       	r.Mount("/", s.OAuthRouter())

     

       143
        
       

     

       144
        
       	r.Get("/keys/{user}", s.Keys)

     

       145
       +
       	r.Get("/terms", s.TermsOfService)

     

       146
       +
       	r.Get("/privacy", s.PrivacyPolicy)

     

       147
        
       

     

       148
        
       	r.NotFound(func(w http.ResponseWriter, r *http.Request) {

     

       149
        
       		s.pages.Error404(w)

+14

appview/state/state.go

···

       156
        
       	return state, nil

     

       157
        
       }

     

       158
        
       

     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       0
        
       
     

       159
        
       func (s *State) Timeline(w http.ResponseWriter, r *http.Request) {

     

       160
        
       	user := s.oauth.GetUser(r)

     

       161

···

       156
        
       	return state, nil

     

       157
        
       }

     

       158
        
       

     

       159
       +
       func (s *State) TermsOfService(w http.ResponseWriter, r *http.Request) {

     

       160
       +
       	user := s.oauth.GetUser(r)

     

       161
       +
       	s.pages.TermsOfService(w, pages.TermsOfServiceParams{

     

       162
       +
       		LoggedInUser: user,

     

       163
       +
       	})

     

       164
       +
       }

     

       165
       +
       

     

       166
       +
       func (s *State) PrivacyPolicy(w http.ResponseWriter, r *http.Request) {

     

       167
       +
       	user := s.oauth.GetUser(r)

     

       168
       +
       	s.pages.PrivacyPolicy(w, pages.PrivacyPolicyParams{

     

       169
       +
       		LoggedInUser: user,

     

       170
       +
       	})

     

       171
       +
       }

     

       172
       +
       

     

       173
        
       func (s *State) Timeline(w http.ResponseWriter, r *http.Request) {

     

       174
        
       	user := s.oauth.GetUser(r)

     

       175