From 523b03375528bb212a138a876c6fec0968a083e6 Mon Sep 17 00:00:00 2001 From: Ari Archer Date: Thu, 28 Nov 2024 23:23:47 +0200 Subject: [PATCH] Update legal framework language, make policies clearer. Signed-off-by: Ari Archer --- src/static/legal.sig | Bin 566 -> 566 bytes src/static/legal.txt | 50 ++++++++++++++--------------- src/templates/legal.j2 | 70 +++++++++++++++++++++-------------------- 3 files changed, 61 insertions(+), 59 deletions(-) diff --git a/src/static/legal.sig b/src/static/legal.sig index 2b658e0888c6bdf3a95695a34159cfad0573fe40..2d22e7b266b9878b5ea8f575e6e101fa9097f9e5 100644 GIT binary patch delta 541 zcmV+&0^B zT`~Q$#;~XT?JkoLWs;gnbe)M8T)@o+=z@`LW-7@Q#%!=M*S8#IH49cQr82#fq{e(p z>6JQ^IU0JWS%}%w2k9JG>@Lh6Myh@(8s7P+i&TpCeQXO(HmgtFO>9VQqQvLH73<9Z zoPC7llB%X{q<^|i+dg1_${6fx3d@RkWKoWcR9kx4L5O;d_pUYV?IOrd<|q19uZJww zbxV1rnuby-j{{ZU1SOvi1m8M`UehQdk6Z7sM-=FT;mMJWEGrYKHGs9CUI=Tc@<$FE zT4SWW`TOD9v29)hz%z+uE#xXE;@@#AHg=V>T70AQm48##{iKARR3#6vdpv|Hm$Vn3 zTE5C9fv$qvAK@hr{O|uPlIReI>dbSc>}C zY|S6Zj~kK delta 541 zcmV+&0^ z>fN)%mwNhG3vtsYPmDUldECuPsk(&(>8aWT3Xjx_3i zn2AKTA5b80bA3F~mrq9W0Me=Ht_eq#ue$eX*6tNRYkwmxvD*4$FJMRDwoin2+Ttd5 zgN&jpm5pR+@^xlpZui->>)VQ$7sTv(MaRG26oLie`Y7(~&)hP9H!*rsKqFK_+?j9n zmi+avc(XdcYo0cBZ1tdoVp%>G%+XIYInx~1K*0%$G{MZpkoRHp!=5|2+bx~Yn=Qs} f8{Z(w?G^&a;)3tQc9 @@ -42,14 +42,14 @@ {% endblock %} {% block header %} -

Legal information of Ari-web

+

Legal framework of Ari-web

{% endblock %} {% block main %}

- This is the legal information of ari-web which covers topics such as logging policy, + This is the legal framework of Ari-web which covers topics such as logging policy, privacy policy, data control, data control compliance, as well as other legal aspects - when it comes to using ari-web services. By using or requesting to use any ari-web services + when it comes to using Ari-web services. By using or requesting to use any Ari-web services you agree to the legal framework outlined in this document, and agree to keep yourself updated with or without notice.

@@ -99,7 +99,7 @@
  • - Ari-web Members + Ari-web Members , coppa
    • @@ -196,7 +196,8 @@

    - Collectively, we are called Ari-web. You are an outside party using our free (libre and gratis) and open source services. + Collectively, we are called Ari-web. You are an outside party using our free (Libre and Gratis) and open source services. + Although, responsibility for Ari-web goes to the Authoritative party.

    # Liability Disclaimer

    @@ -208,7 +209,7 @@

    - In no event shall ari-web be liable for any indirect, special, incidental, or consequential damages related to your + In no event shall Ari-web be liable for any indirect, special, incidental, or consequential damages related to your use of its services.

    @@ -217,7 +218,8 @@

    Ari-web will make reasonable efforts to protect your privacy unless circumstances call for access termination, transfer, or limitation with or without notice, such as in cases of legal compliance or suspected misuse of services. - Ari-web reserves the right to manage your access at its discretion. + Ari-web reserves the right to manage your access at its discretion. We will report any violations of the law to the + required authorities if needed with the information you have consented to be logged for genuine interest.

    # Modifications and Exceptions

    @@ -258,7 +260,7 @@
  • ISP: HostHatch
  • Hardware: 1 vCPU core, 1024 MB of RAM, 1000 GB of HDD storage + 20 GB NVMe storage, 2500 GB of network bandwidth.
  • Purpose: Storing data
    • -
  • Access: Cut off from the rest of the internet except rate limited and strongly autheticated port 22 traffic for SSH.
    • +
  • Access: Cut off from the rest of the internet except rate limited and strongly authenticated port 22 traffic for SSH.
    • @@ -272,7 +274,7 @@ any changes to terms or policies. While Ari-web strives to maintain this level of transparency, it acknowledges that certain circumstances may limit the extent of disclosure. Users are encouraged to reach out with any questions or concerns regarding transparency in the services provided. Ari-web will do their best to notify of changes - of ToS, but it is your responsibility to keep up with the changes. + of the legal framework, but it is your responsibility to keep up with the changes.

    # Services

    @@ -378,7 +380,7 @@ We collect and process personal data and logs only for specified, legitimate purposes and ensure that such data is accurate, up-to-date, and retained only as long as necessary for those purposes. Users have rights regarding their personal data, including access, rectification, and erasure, which we honor in accordance with GDPR requirements even for non-EU citizens. We believe that such freedom - is an essential basic human right. + is a basic human right.

    @@ -388,15 +390,16 @@

    - If you notice any resource or action violating the law, GDPR, COPPA, or DMCA, contact the Authoritative party with all information and - full paths and URLs/URIs of the violating content. Without sufficient information, the Authoritative party cannot do anything about + If you notice any resource or action violating the law, GDPR, COPPA, or DMCA, contact Ari-web with all information and + full paths and URLs/URIs of the violating content. Without sufficient information, we cannot do anything about the violations, so you may be requested for more information to be able to process your request.

    - By using our services, you acknowledge our commitment to these regulations and understand that we will take all necessary steps to ensure compliance with the law, GDPR, COPPA, and DMCA. - Furthermore, you acknowledge that you are the age of digital consent to allow your data to be processed, or that your legal guardians have consented to your data being processed - for non-commential uses, for instance, instant messaging or serving of posts to provide functionality to our provided services. + By using our services, you acknowledge our commitment to these regulations and understand that we will take all necessary steps to ensure + compliance with the law, GDPR, COPPA, and DMCA. Furthermore, you acknowledge that you are the age of digital consent and allow your data to be processed, + or that your legal guardians have consented to your data being processed for non-commercial uses, for instance, instant messaging or serving of + user-generated content to provide functionality to our provided services.

    @@ -418,9 +421,8 @@

    - You reserve the right to request mass data deletion of any data logged or stored, even if GDPR does not apply in your - jurisdiction by simply sending a request to gdpr@ari.lt. - Logs are mainly collected for moderation and service stability ensurance. + You reserve the right to request mass data deletion of any data logged or stored by simply sending a request to + bye@ari.lt. Logs are mainly collected for moderation and service stability insurance.

    @@ -436,7 +438,7 @@ All Your IP address (logs are rotated every 64 days), access URI, authentication attempts, timestamp, response code, and parameters Your IP address (temporarily for up to a week in-memory), all data you sent to be processed and expect it to be stored (such as comments, messages, files, ...), cookies - You are responsible for your own privacy by using client-side encryption. Data on Ari-web is mninimally processed, and even though we strive for best privacy and security, we place the responsibility of true privacy so only you see your data by using client-side encryption on you. (See OpenPGP). Your IP may be stored indefinitely if we notice large amount of potentially abusive traffic from you to block your IP address. Most logs are rotated every 64 days. + You are responsible for your own privacy by using client-side encryption. Data on Ari-web is minimally processed, and even though we strive for best privacy and security, we place the responsibility of true privacy so only you see your data by using client-side encryption on you. (See OpenPGP). Your IP may be stored indefinitely if we notice large amount of potentially abusive traffic from you to block your IP address. Most logs are rotated every 64 days. @@ -448,7 +450,7 @@ Matrix (matrix.ari.lt) - Error reporting information with nonidenfiable or minimally idenfiable information. + Error reporting information with nonindefinable or minimally identifiable information. All Matrix rooms and events as well as files to be stored, federated or not. Federates the aforementioned events to other servers out of our control due to the nature of the mash nature of the Matrix protocol. @@ -463,20 +465,20 @@ Git forge (Forgejo at git.ari.lt) Any events or actions taken by You on git Forge, including authenticating, creating repositories, organisations, using runners (actions), deleting repositories, commits, etc. - All repositories (private and public) and their data as well as metadata, user profile data, authentication data, prefrences, blocked users, avatars, descriptions, emails, organizations, etc. - Git forge is meant to store data like a versioned file store of sort (i.e. Git VCS), therefore, all you send there will be served, to public or not (depending on your prefrences). + All repositories (private and public) and their data as well as metadata, user profile data, authentication data, preferences, blocked users, avatars, descriptions, emails, organizations, etc. + Git forge is meant to store data like a versioned file store of sort (i.e. Git VCS), therefore, all you send there will be served, to public or not (depending on your preferences). Email mailboxes of Ari-web email using Mailcow (mail.ari.lt) - All actions performed on email are agressively logged. This includes: Email subject, email headers, rSpamD scan result, ClamAV antivirus results, access and authentication of both email and web UI, sent and received mail, IP address spam statistics, mailbox spam statistics, email (and its body) spam statistics (fuzzy hashes and scores mainly). This ensures full stability and deliverability of the email server. + All actions performed on email are logged. This includes: Email subject, email headers, rSpamD scan result, ClamAV antivirus results, access and authentication of both email and web UI, sent and received mail, IP address spam statistics, mailbox spam statistics, email (and its body) spam statistics (fuzzy hashes and scores mainly). This ensures full stability and deliverability of the email server. All data related to your email is stored. This includes: IP address, email body, attachments, headers, spam scores and metadata, email threads, WebUI accounts (and their associated data), etc. Even though we try to ensure best security of emails as well as secure access and storage, you are responsible for ensuring your total privacy. We are NOT allowed to invade your privacy unless circumstances call for it, although, to be safe, we suggest public key encryption to be used. See Termination, Limitation, and Transfer for more details. Semi-managed email using custom domains using Mailcow (goes to mail.ari.lt) - All data related to email mailboxes is logged as described above. Although, email hosting with custom domains comes with its own caviates as well, for instance, you may be requested to add DMARC reports support to your domain. All administrator actions will also be logged and stored relating to your custom domain like login attempts, change of settings and rules as well as related events. + All data related to email mailboxes is logged as described above. Although, email hosting with custom domains comes with its own unique logging as well, for instance, you may be requested to add DMARC reports support to your domain. All administrator actions will also be logged and stored relating to your custom domain like login attempts, change of settings and rules as well as related events. Mailbox information is stored as described above. Administrator information is stored similarly to mailbox WebUI accounts, including authentication information and various domain-related information such as logs and private keys (like DKIM). You, as the domain administrator, are required to ensure best security practices when using Ari-web email and to not violate the described terms in this document. Your violation of these terms will be considered a breach, therefore, your access will be terminated with notice. @@ -491,7 +493,7 @@ RoundCube webmail (rc.ari.lt) Logs error information. - Stores your sessions as well as your password in an encrypted format as well as user prefrences, identities, and other related webmail data. + Stores your sessions as well as your password in an encrypted format as well as user preferences, identities, and other related webmail data. @@ -505,7 +507,7 @@ Akkoma/fediverse instance (ak.ari.lt) All actions taken by administrators are logged as well as errors / warnings / faults related to various parts of the applications. - Stores all data sent to the server, federated or not, such as user-generated content (posts, dms), descriptions, content warnings, avatars, alt texts, interractions, tags, avatars, uploads, etc. and federates them to other servers out of our control due to the nature of the mash nature of the ActivityPub protocol. + Stores all data sent to the server, federated or not, such as user-generated content (posts, DMs), descriptions, content warnings, avatars, alt texts, interactions, tags, avatars, uploads, etc. and federates them to other servers out of our control due to the nature of the mesh nature of the ActivityPub protocol. @@ -516,7 +518,7 @@

    Ari-web tries to provide the best uptime, although, there is zero guarantee on any sort of service availability in percentage. You get what you get essentially. Although, expect minor - downtime monthly or bimonthly for maintenence tasks such as a maintenence reboot or a configuration + downtime monthly or bimonthly for maintenance tasks such as a maintenance reboot or a configuration change. This assumption is not to be construed as a guarantee.

    @@ -532,7 +534,7 @@

    - Termination or Limitation of Services: ari-web may terminate or limit services if Ari-web deems the service too difficult to control or moderate, + Termination or Limitation of Services: Ari-web may terminate or limit services if Ari-web deems the service too difficult to control or moderate, or if a constant pattern of violations or one extreme and severe violation is detected. For individuals, services may be terminated without notice if they continue to violate the terms of service or engage in behaviour that Ari-web considers unacceptable. Such decisions will be based on the outlines in this document as well as Ari-web interpretation of this document and their own discretion. @@ -561,8 +563,8 @@

    Ari-web and its services are subject to international laws as well as the laws of the United States of America, Lithuania, and Sweden. - Users acknowledge that these jurisdictions govern the use of ari-web services and any disputes that may arise in connection with them. - This statement is intended to clarify the legal framework applicable to the services offered by ari-web and does not create any + Users acknowledge that these jurisdictions govern the use of Ari-web services and any disputes that may arise in connection with them. + This statement is intended to clarify the legal framework applicable to the services offered by Ari-web and does not create any binding obligations beyond this acknowledgment.

    @@ -582,7 +584,7 @@ Any member (volunteer) considered an Ari-web member (volunteer) is affiliated with Ari-web in a way where they are related and working on making Ari-web a better place for everyone at their own discretion. Furthermore, Ari-web as a non-legally-formed organization of individuals, cannot be affiliated with any legal entities. Affiliations are handled by the Authoritative party - inidividually, and all benifits from that affiliation will be used at the Authoritative party's discretion whether it be by + individually, and all benefits from that affiliation will be used at the Authoritative party's discretion whether it be by using it to support Ari-web, other projects, or for personal use.

    @@ -644,7 +646,7 @@

    - Ari-web, as a project almost exclussively out of the Authoritative party's pocket, costs as follows: + Ari-web, as a project almost exclusively out of the Authoritative party's pocket, costs as follows: