Disroot
/
Disroot-Privacy-Policy
8
0
Fork 0
Code Pull Requests Releases Activity

Change to February, update numbering, update changelog

This commit is contained in:
meaz 2024-02-14 07:03:00 +01:00
parent af70b3f905
commit 26bb501a1c
Signed by: meaz
GPG Key ID: CD7A47B2F1ED43B4
1 changed files with 18 additions and 17 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
fullbar.en.md
View File

@ -7,7 +7,7 @@ text_align: left
---
<br>
**v1.5 - January 2024**
**v1.5 - February 2024**
<a name="about"></a>
<br>
@ -105,7 +105,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="email"></a>
<br>
## 4.1 - **Disroot Email** (https://webmail.disroot.org)
## 4.1. - **Disroot Email** (https://webmail.disroot.org)
- This service requires login with **Disroot** credentials.
- All emails, unless encrypted by the user (with GnuPG/PGP, for example) are stored unencrypted on our servers.
@ -115,7 +115,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="cloud"></a>
<br>
## 4.2 - **Disroot Cloud** (https://cloud.disroot.org)
## 4.2. - **Disroot Cloud** (https://cloud.disroot.org)
- This service requires login with **Disroot** credentials.
- All files sent to the cloud are encrypted with a key-pair created based on the user password to add an extra level of security. Note, however, that the keys are stored on the server, which compromises the level of security to some degree (e.g.: if an attacker knows your password and obtain the encryption key-pair, can decrypt the data). However, **no** "Master Key" does exist on our setup, which means the Admins cannot decrypt any file stored on the cloud without knowing user's password prior.
@ -124,7 +124,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="chat"></a>
<br>
## 4.3 - **Disroot XMPP Chat** (https://webchat.disroot.org)
## 4.3. - **Disroot XMPP Chat** (https://webchat.disroot.org)
- This service requires login with **Disroot** credentials.
- The roster (your XMPP contact list) is stored on the server's database.
@ -132,11 +132,11 @@ We store all data in **our own servers**, located in a data center in the **Neth
- Server logs, which store information such as, but not limited to, your IP address and your username are stored for a period of 24 hours after which they are deleted from the server. No backup of log files is created. Logs are kept to prevent brute-force attacks on accounts and to provide quick insight when debugging issues.
- Given that XMPP is a **federated** protocol, when interacting with users or chat-rooms hosted on third party servers, data is sent to other independently operated and owned servers in the network over which we have no control.
- Files uploaded to the server are stored as is (plain-text or encrypted) for a period of 1 month.
- If using [Movim](https://webchat.disroot.org), all the articles and comments published by you on our services. Using the Movim configuration panel you can choose to leave the instance. If you do so, all the data related to your XMPP account will be destroyed.
- If using [Movim](https://webchat.disroot.org), all the articles and comments published by you on our services are stored on the server. Using the Movim configuration panel you can choose to leave the instance. If you do so, all the data related to your XMPP account will be destroyed.
<a name="search"></a>
<br>
## 4.4 - **Disroot Search** (https://search.disroot.org)
## 4.4. - **Disroot Search** (https://search.disroot.org)
- This service does not require login or providing any personal data.
- **No log data** (IP address, session cookie, etc.) is stored on the server.
@ -145,7 +145,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="upload"></a>
<br>
## 4.5 - **Disroot Upload** (https://upload.disroot.org)
## 4.5. - **Disroot Upload** (https://upload.disroot.org)
- This service does not require login or providing any personal data.
- **No log data** (IP address, session cookie, etc.) is stored on the server.
@ -155,7 +155,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="pads"></a>
<br>
## 4.6 - **Disroot Pads** (https://pad.disroot.org)
## 4.6. - **Disroot Pads** (https://pad.disroot.org)
- This service does not require login or providing any personal data.
- **No log data** (IP address, session cookie, etc.) is stored on the server.
@ -166,7 +166,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="bin"></a>
<br>
## 4.7 - **Disroot Bin** (https://bin.disroot.org)
## 4.7. - **Disroot Bin** (https://bin.disroot.org)
- This service does not require login or providing any personal data.
- **No log data** (IP address, session cookie, etc.) is stored on the server.
@ -177,7 +177,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="scribe"></a>
<br>
## 4.8 - **Disroot Scribe** (https://scribe.disroot.org)
## 4.8. - **Disroot Scribe** (https://scribe.disroot.org)
- This service requires to create separate account to interact with discussions.
- Server logs, which store information such as, but not limited to, your IP address and your username are stored for a period of 24 hours after which they are deleted from the server. No backup of log files is created. Logs are kept to prevent brute-force attacks on accounts and to provide quick insight when debugging issues.
@ -187,7 +187,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="translate"></a>
<br>
## 4.09 - **Disroot Translate** (https://translate.disroot.org)
## 4.9. - **Disroot Translate** (https://translate.disroot.org)
- This service does not require login.
- **No log data** (IP address, session cookie, etc.) is stored on the server.
@ -205,7 +205,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="git"></a>
<br>
## 4.11 - **Disroot Git** (https://git.disroot.org)
## 4.11. - **Disroot Git** (https://git.disroot.org)
- This service requires to create a separate git account to interact with others.
- Server logs, which store information such as, but not limited to, your IP address, your username, error messages and User Agent, are stored for a period of 24 hours after which they are deleted from the server. No backup of log files is created. Logs are kept to prevent brute-force attacks on accounts and to provide quick insight when debugging issues.
@ -213,14 +213,14 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="audio"></a>
<br>
## 4.12 - **Disroot Audio** (https://mumble.disroot.org)
## 4.12. - **Disroot Audio** (https://mumble.disroot.org)
- This service requires to connect with an username, but it is not mandatory to register it on the server.
- **No log data** (IP address, session cookie, etc.) is stored on the server, only the username and its associated certificate are saved, if the user decided to register.
<a name="cryptpad"></a>
<br>
## 4.13 - **Disroot CryptPad** (https://cryptpad.disroot.org)
## 4.13. - **Disroot CryptPad** (https://cryptpad.disroot.org)
- This service does not require login or providing any personal data. However, an account can be created in order to save files.
- **No log data** (Ip address, session cookie, etc) is stored on the server.
@ -229,7 +229,7 @@ We store all data in **our own servers**, located in a data center in the **Neth
<a name="akkoma"></a>
<br>
## 4.14 - **Disroot Akkoma** (https://fe.disroot.org)
## 4.14. - **Disroot Akkoma** (https://fe.disroot.org)
- This service requires login with **Disroot** credentials.
- Server logs, which store information such as, but not limited to, your IP address and your username are stored for a period of 24 hours after which they are deleted from the server. No backup of log files is created. Logs are kept to prevent brute-force attacks on accounts and to provide quick insight when debugging issues.
@ -287,14 +287,15 @@ Access to your personal data, stored files and other information you provide to
Any and all changes to this **Privacy Statement** will be publicly available and communicated to all users via our social networks and blog post. We recommend that you regularly check for any changes on this Statement.
You can follow the history of changes on this document on our version control system [**here**](https://git.disroot.org/Disroot/Disroot-Privacy-Policy/commits/branch/main) or the [**changelog**](https://git.disroot.org/Disroot/Disroot-Privacy-Policy/src/branch/main/changelog) for more detailed information.
You can follow the history of changes on this document on our version control system [**here**](https://git.disroot.org/Disroot/Disroot-Privacy-Policy/commits/branch/main) or in the section 6 of this document.
#### Last update of this Privacy Statement:
- January, 2024: add Translate, Movim and Scribe information, remove Forum and Project Board
- February, 2024: add Translate, Movim and Scribe information, remove Forum and Project Board
- April, 2023: add Upload information about retention periods.
- December, 2022: add Akkoma information
- September, 2022: update XMPP information about file retention
<br>
[Back to top](#top)