patch of appview/pages: terms & privacy pages · round #0 · pull #409 · tangled.org/core

+16

appview/pages/pages.go

···

       268
       268
        
       	return p.executePlain("user/completeSignup", w, params)

     

       269
       269
        
       }

     

       270
       270
        
       

     

       271
       271
       +
       type TermsOfServiceParams struct {

     

       272
       272
       +
       	LoggedInUser *oauth.User

     

       273
       273
       +
       }

     

       274
       274
       +
       

     

       275
       275
       +
       func (p *Pages) TermsOfService(w io.Writer, params TermsOfServiceParams) error {

     

       276
       276
       +
       	return p.execute("legal/terms", w, params)

     

       277
       277
       +
       }

     

       278
       278
       +
       

     

       279
       279
       +
       type PrivacyPolicyParams struct {

     

       280
       280
       +
       	LoggedInUser *oauth.User

     

       281
       281
       +
       }

     

       282
       282
       +
       

     

       283
       283
       +
       func (p *Pages) PrivacyPolicy(w io.Writer, params PrivacyPolicyParams) error {

     

       284
       284
       +
       	return p.execute("legal/privacy", w, params)

     

       285
       285
       +
       }

     

       286
       286
       +
       

     

       271
       287
        
       type TimelineParams struct {

     

       272
       288
        
       	LoggedInUser *oauth.User

     

       273
       289
        
       	Timeline     []db.TimelineEvent

+8 -1

appview/pages/templates/layouts/footer.html

···

       1
       1
        
       {{ define "layouts/footer" }}

     

       2
       2
        
       <div class="w-full p-4 bg-white dark:bg-gray-800 rounded-t drop-shadow-sm">

     

       3
       3
        
           <div class="container mx-auto text-center text-gray-600 dark:text-gray-400 text-sm">

     

       4
       4
       -
               <span class="font-semibold italic">tangled</span> &mdash; made by <a href="/@oppi.li">@oppi.li</a> and <a href="/@icyphox.sh">@icyphox.sh</a>

     

       4
       4
       +
               <div class="mb-2">

     

       5
       5
       +
                   <a href="/terms" class="hover:text-gray-900 dark:hover:text-gray-200 underline">Terms of Service</a>

     

       6
       6
       +
                   &nbsp;•&nbsp;

     

       7
       7
       +
                   <a href="/privacy" class="hover:text-gray-900 dark:hover:text-gray-200 underline">Privacy Policy</a>

     

       8
       8
       +
               </div>

     

       9
       9
       +
               <div>

     

       10
       10
       +
                   <span class="font-semibold italic">tangled</span> &mdash; made by <a href="/@oppi.li">@oppi.li</a> and <a href="/@icyphox.sh">@icyphox.sh</a>

     

       11
       11
       +
               </div>

     

       5
       12
        
           </div>

     

       6
       13
        
       </div>

     

       7
       14
        
       {{ end }}

+131

appview/pages/templates/legal/privacy.html

···

       1
       1
       +
       {{ define "title" }} privacy policy {{ end }}

     

       2
       2
       +
       {{ define "content" }}

     

       3
       3
       +
       <div class="max-w-4xl mx-auto px-4 py-8">

     

       4
       4
       +
           <div class="prose prose-gray dark:prose-invert max-w-none">

     

       5
       5
       +
               <h1>Privacy Policy</h1>

     

       6
       6
       +
       

     

       7
       7
       +
               <p><strong>Last updated:</strong> {{ now.Format "January 2, 2006" }}</p>

     

       8
       8
       +
       

     

       9
       9
       +
               <p>This Privacy Policy describes how Tangled ("we," "us," or "our") collects, uses, and shares your personal information when you use our platform and services (the "Service").</p>

     

       10
       10
       +
       

     

       11
       11
       +
               <h2>1. Information We Collect</h2>

     

       12
       12
       +
       

     

       13
       13
       +
               <h3>Account Information</h3>

     

       14
       14
       +
               <p>When you create an account, we collect:</p>

     

       15
       15
       +
               <ul>

     

       16
       16
       +
                   <li>Your chosen username</li>

     

       17
       17
       +
                   <li>Email address</li>

     

       18
       18
       +
                   <li>Profile information you choose to provide</li>

     

       19
       19
       +
                   <li>Authentication data</li>

     

       20
       20
       +
               </ul>

     

       21
       21
       +
       

     

       22
       22
       +
               <h3>Content and Activity</h3>

     

       23
       23
       +
               <p>We store:</p>

     

       24
       24
       +
               <ul>

     

       25
       25
       +
                   <li>Code repositories and associated metadata</li>

     

       26
       26
       +
                   <li>Issues, pull requests, and comments</li>

     

       27
       27
       +
                   <li>Activity logs and usage patterns</li>

     

       28
       28
       +
                   <li>Public keys for authentication</li>

     

       29
       29
       +
               </ul>

     

       30
       30
       +
       

     

       31
       31
       +
               <h2>2. Data Location and Hosting</h2>

     

       32
       32
       +
               <div class="bg-blue-50 dark:bg-blue-900/20 border border-blue-200 dark:border-blue-800 rounded-lg p-4 my-6">

     

       33
       33
       +
                   <h3 class="text-blue-800 dark:text-blue-200 font-semibold mb-2">EU Data Hosting</h3>

     

       34
       34
       +
                   <p class="text-blue-700 dark:text-blue-300">

     

       35
       35
       +
                       <strong>All Tangled service data is hosted within the European Union.</strong> Specifically:

     

       36
       36
       +
                   </p>

     

       37
       37
       +
                   <ul class="text-blue-700 dark:text-blue-300 mt-2">

     

       38
       38
       +
                       <li><strong>Personal Data Servers (PDS):</strong> Accounts hosted on Tangled PDS (*.tngl.sh) are located in Finland</li>

     

       39
       39
       +
                       <li><strong>Application Data:</strong> All other service data is stored on EU-based servers</li>

     

       40
       40
       +
                       <li><strong>Data Processing:</strong> All data processing occurs within EU jurisdiction</li>

     

       41
       41
       +
                   </ul>

     

       42
       42
       +
               </div>

     

       43
       43
       +
       

     

       44
       44
       +
               <div class="bg-yellow-50 dark:bg-yellow-900/20 border border-yellow-200 dark:border-yellow-800 rounded-lg p-4 my-6">

     

       45
       45
       +
                   <h3 class="text-yellow-800 dark:text-yellow-200 font-semibold mb-2">External PDS Notice</h3>

     

       46
       46
       +
                   <p class="text-yellow-700 dark:text-yellow-300">

     

       47
       47
       +
                       <strong>Important:</strong> If your account is hosted on Bluesky's PDS or other self-hosted Personal Data Servers (not *.tngl.sh), we do not control that data. The data protection, storage location, and privacy practices for such accounts are governed by the respective PDS provider's policies, not this Privacy Policy. We only control data processing within our own services and infrastructure.

     

       48
       48
       +
                   </p>

     

       49
       49
       +
               </div>

     

       50
       50
       +
       

     

       51
       51
       +
               <h2>3. Third-Party Data Processors</h2>

     

       52
       52
       +
               <p>We only share your data with the following third-party processors:</p>

     

       53
       53
       +
       

     

       54
       54
       +
               <h3>Resend (Email Services)</h3>

     

       55
       55
       +
               <ul>

     

       56
       56
       +
                   <li><strong>Purpose:</strong> Sending transactional emails (account verification, notifications)</li>

     

       57
       57
       +
                   <li><strong>Data Shared:</strong> Email address and necessary message content</li>

     

       58
       58
       +
                   <li><strong>Location:</strong> EU-compliant email delivery service</li>

     

       59
       59
       +
               </ul>

     

       60
       60
       +
       

     

       61
       61
       +
               <h3>Cloudflare (Image Caching)</h3>

     

       62
       62
       +
               <ul>

     

       63
       63
       +
                   <li><strong>Purpose:</strong> Caching and optimizing image delivery</li>

     

       64
       64
       +
                   <li><strong>Data Shared:</strong> Public images and associated metadata for caching purposes</li>

     

       65
       65
       +
                   <li><strong>Location:</strong> Global CDN with EU data protection compliance</li>

     

       66
       66
       +
               </ul>

     

       67
       67
       +
       

     

       68
       68
       +
               <h2>4. How We Use Your Information</h2>

     

       69
       69
       +
               <p>We use your information to:</p>

     

       70
       70
       +
               <ul>

     

       71
       71
       +
                   <li>Provide and maintain the Service</li>

     

       72
       72
       +
                   <li>Process your transactions and requests</li>

     

       73
       73
       +
                   <li>Send you technical notices and support messages</li>

     

       74
       74
       +
                   <li>Improve and develop new features</li>

     

       75
       75
       +
                   <li>Ensure security and prevent fraud</li>

     

       76
       76
       +
                   <li>Comply with legal obligations</li>

     

       77
       77
       +
               </ul>

     

       78
       78
       +
       

     

       79
       79
       +
               <h2>5. Data Sharing and Disclosure</h2>

     

       80
       80
       +
               <p>We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:</p>

     

       81
       81
       +
               <ul>

     

       82
       82
       +
                   <li>With the third-party processors listed above</li>

     

       83
       83
       +
                   <li>When required by law or legal process</li>

     

       84
       84
       +
                   <li>To protect our rights, property, or safety, or that of our users</li>

     

       85
       85
       +
                   <li>In connection with a merger, acquisition, or sale of assets (with appropriate protections)</li>

     

       86
       86
       +
               </ul>

     

       87
       87
       +
       

     

       88
       88
       +
               <h2>6. Data Security</h2>

     

       89
       89
       +
               <p>We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.</p>

     

       90
       90
       +
       

     

       91
       91
       +
               <h2>7. Data Retention</h2>

     

       92
       92
       +
               <p>We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.</p>

     

       93
       93
       +
       

     

       94
       94
       +
               <h2>8. Your Rights</h2>

     

       95
       95
       +
               <p>Under applicable data protection laws, you have the right to:</p>

     

       96
       96
       +
               <ul>

     

       97
       97
       +
                   <li>Access your personal information</li>

     

       98
       98
       +
                   <li>Correct inaccurate information</li>

     

       99
       99
       +
                   <li>Request deletion of your information</li>

     

       100
       100
       +
                   <li>Object to processing of your information</li>

     

       101
       101
       +
                   <li>Data portability</li>

     

       102
       102
       +
                   <li>Withdraw consent (where applicable)</li>

     

       103
       103
       +
               </ul>

     

       104
       104
       +
       

     

       105
       105
       +
               <h2>9. Cookies and Tracking</h2>

     

       106
       106
       +
               <p>We use cookies and similar technologies to:</p>

     

       107
       107
       +
               <ul>

     

       108
       108
       +
                   <li>Maintain your login session</li>

     

       109
       109
       +
                   <li>Remember your preferences</li>

     

       110
       110
       +
                   <li>Analyze usage patterns to improve the Service</li>

     

       111
       111
       +
               </ul>

     

       112
       112
       +
               <p>You can control cookie settings through your browser preferences.</p>

     

       113
       113
       +
       

     

       114
       114
       +
               <h2>10. Children's Privacy</h2>

     

       115
       115
       +
               <p>The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it.</p>

     

       116
       116
       +
       

     

       117
       117
       +
               <h2>11. International Data Transfers</h2>

     

       118
       118
       +
               <p>While all our primary data processing occurs within the EU, some of our third-party processors may process data outside the EU. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.</p>

     

       119
       119
       +
       

     

       120
       120
       +
               <h2>12. Changes to This Privacy Policy</h2>

     

       121
       121
       +
               <p>We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.</p>

     

       122
       122
       +
       

     

       123
       123
       +
               <h2>13. Contact Information</h2>

     

       124
       124
       +
               <p>If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us through our platform or via email.</p>

     

       125
       125
       +
       

     

       126
       126
       +
               <div class="mt-8 pt-6 border-t border-gray-200 dark:border-gray-700 text-sm text-gray-600 dark:text-gray-400">

     

       127
       127
       +
                   <p>This Privacy Policy complies with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.</p>

     

       128
       128
       +
               </div>

     

       129
       129
       +
           </div>

     

       130
       130
       +
       </div>

     

       131
       131
       +
       {{ end }}

+69

appview/pages/templates/legal/terms.html

···

       1
       1
       +
       {{ define "title" }}terms of service{{ end }}

     

       2
       2
       +
       

     

       3
       3
       +
       {{ define "content" }}

     

       4
       4
       +
       <div class="max-w-4xl mx-auto px-4 py-8">

     

       5
       5
       +
           <div class="prose prose-gray dark:prose-invert max-w-none">

     

       6
       6
       +
               <h1>Terms of Service</h1>

     

       7
       7
       +
       

     

       8
       8
       +
               <p><strong>Last updated:</strong> {{ now.Format "January 2, 2006" }}</p>

     

       9
       9
       +
       

     

       10
       10
       +
               <p>Welcome to Tangled. These Terms of Service ("Terms") govern your access to and use of the Tangled platform and services (the "Service") operated by us ("Tangled," "we," "us," or "our").</p>

     

       11
       11
       +
       

     

       12
       12
       +
               <h2>1. Acceptance of Terms</h2>

     

       13
       13
       +
               <p>By accessing or using our Service, you agree to be bound by these Terms. If you disagree with any part of these terms, then you may not access the Service.</p>

     

       14
       14
       +
       

     

       15
       15
       +
               <h2>2. Account Registration</h2>

     

       16
       16
       +
               <p>To use certain features of the Service, you must register for an account. You agree to provide accurate, current, and complete information during the registration process and to update such information to keep it accurate, current, and complete.</p>

     

       17
       17
       +
       

     

       18
       18
       +
               <h2>3. Account Termination</h2>

     

       19
       19
       +
               <div class="bg-red-50 dark:bg-red-900/20 border border-red-200 dark:border-red-800 rounded-lg p-4 my-6">

     

       20
       20
       +
                   <h3 class="text-red-800 dark:text-red-200 font-semibold mb-2">Important Notice</h3>

     

       21
       21
       +
                   <p class="text-red-700 dark:text-red-300">

     

       22
       22
       +
                       <strong>We reserve the right to terminate, suspend, or restrict access to your account at any time, for any reason, or for no reason at all, at our sole discretion.</strong> This includes, but is not limited to, termination for violation of these Terms, inappropriate conduct, spam, abuse, or any other behavior we deem harmful to the Service or other users.

     

       23
       23
       +
                   </p>

     

       24
       24
       +
                   <p class="text-red-700 dark:text-red-300 mt-2">

     

       25
       25
       +
                       Account termination may result in the loss of access to your repositories, data, and other content associated with your account. We are not obligated to provide advance notice of termination, though we may do so in our discretion.

     

       26
       26
       +
                   </p>

     

       27
       27
       +
               </div>

     

       28
       28
       +
       

     

       29
       29
       +
               <h2>4. Acceptable Use</h2>

     

       30
       30
       +
               <p>You agree not to use the Service to:</p>

     

       31
       31
       +
               <ul>

     

       32
       32
       +
                   <li>Violate any applicable laws or regulations</li>

     

       33
       33
       +
                   <li>Infringe upon the rights of others</li>

     

       34
       34
       +
                   <li>Upload, store, or share content that is illegal, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, or otherwise objectionable</li>

     

       35
       35
       +
                   <li>Engage in spam, phishing, or other deceptive practices</li>

     

       36
       36
       +
                   <li>Attempt to gain unauthorized access to the Service or other users' accounts</li>

     

       37
       37
       +
                   <li>Interfere with or disrupt the Service or servers connected to the Service</li>

     

       38
       38
       +
               </ul>

     

       39
       39
       +
       

     

       40
       40
       +
               <h2>5. Content and Intellectual Property</h2>

     

       41
       41
       +
               <p>You retain ownership of the content you upload to the Service. By uploading content, you grant us a non-exclusive, worldwide, royalty-free license to use, reproduce, modify, and distribute your content as necessary to provide the Service.</p>

     

       42
       42
       +
       

     

       43
       43
       +
               <h2>6. Privacy</h2>

     

       44
       44
       +
               <p>Your privacy is important to us. Please review our <a href="/privacy" class="text-blue-600 hover:text-blue-800 dark:text-blue-400 dark:hover:text-blue-300">Privacy Policy</a>, which also governs your use of the Service.</p>

     

       45
       45
       +
       

     

       46
       46
       +
               <h2>7. Disclaimers</h2>

     

       47
       47
       +
               <p>The Service is provided on an "AS IS" and "AS AVAILABLE" basis. We make no warranties, expressed or implied, and hereby disclaim and negate all other warranties including without limitation, implied warranties or conditions of merchantability, fitness for a particular purpose, or non-infringement of intellectual property or other violation of rights.</p>

     

       48
       48
       +
       

     

       49
       49
       +
               <h2>8. Limitation of Liability</h2>

     

       50
       50
       +
               <p>In no event shall Tangled, nor its directors, employees, partners, agents, suppliers, or affiliates, be liable for any indirect, incidental, special, consequential, or punitive damages, including without limitation, loss of profits, data, use, goodwill, or other intangible losses, resulting from your use of the Service.</p>

     

       51
       51
       +
       

     

       52
       52
       +
               <h2>9. Indemnification</h2>

     

       53
       53
       +
               <p>You agree to defend, indemnify, and hold harmless Tangled and its affiliates, officers, directors, employees, and agents from and against any and all claims, damages, obligations, losses, liabilities, costs, or debt, and expenses (including attorney's fees).</p>

     

       54
       54
       +
       

     

       55
       55
       +
               <h2>10. Governing Law</h2>

     

       56
       56
       +
               <p>These Terms shall be interpreted and governed by the laws of Finland, without regard to its conflict of law provisions.</p>

     

       57
       57
       +
       

     

       58
       58
       +
               <h2>11. Changes to Terms</h2>

     

       59
       59
       +
               <p>We reserve the right to modify or replace these Terms at any time. If a revision is material, we will try to provide at least 30 days notice prior to any new terms taking effect.</p>

     

       60
       60
       +
       

     

       61
       61
       +
               <h2>12. Contact Information</h2>

     

       62
       62
       +
               <p>If you have any questions about these Terms of Service, please contact us through our platform or via email.</p>

     

       63
       63
       +
       

     

       64
       64
       +
               <div class="mt-8 pt-6 border-t border-gray-200 dark:border-gray-700 text-sm text-gray-600 dark:text-gray-400">

     

       65
       65
       +
                   <p>These terms are effective as of the last updated date shown above and will remain in effect except with respect to any changes in their provisions in the future, which will be in effect immediately after being posted on this page.</p>

     

       66
       66
       +
               </div>

     

       67
       67
       +
           </div>

     

       68
       68
       +
       </div>

     

       69
       69
       +
       {{ end }}

appview/state/router.go

···

       142
       142
        
       	r.Mount("/", s.OAuthRouter())

     

       143
       143
        
       

     

       144
       144
        
       	r.Get("/keys/{user}", s.Keys)

     

       145
       145
       +
       	r.Get("/terms", s.TermsOfService)

     

       146
       146
       +
       	r.Get("/privacy", s.PrivacyPolicy)

     

       145
       147
        
       

     

       146
       148
        
       	r.NotFound(func(w http.ResponseWriter, r *http.Request) {

     

       147
       149
        
       		s.pages.Error404(w)

+14

appview/state/state.go

···

       156
       156
        
       	return state, nil

     

       157
       157
        
       }

     

       158
       158
        
       

     

       159
       159
       +
       func (s *State) TermsOfService(w http.ResponseWriter, r *http.Request) {

     

       160
       160
       +
       	user := s.oauth.GetUser(r)

     

       161
       161
       +
       	s.pages.TermsOfService(w, pages.TermsOfServiceParams{

     

       162
       162
       +
       		LoggedInUser: user,

     

       163
       163
       +
       	})

     

       164
       164
       +
       }

     

       165
       165
       +
       

     

       166
       166
       +
       func (s *State) PrivacyPolicy(w http.ResponseWriter, r *http.Request) {

     

       167
       167
       +
       	user := s.oauth.GetUser(r)

     

       168
       168
       +
       	s.pages.PrivacyPolicy(w, pages.PrivacyPolicyParams{

     

       169
       169
       +
       		LoggedInUser: user,

     

       170
       170
       +
       	})

     

       171
       171
       +
       }

     

       172
       172
       +
       

     

       159
       173
        
       func (s *State) Timeline(w http.ResponseWriter, r *http.Request) {

     

       160
       174
        
       	user := s.oauth.GetUser(r)

     

       161
       175