Mirrors/cobalt
1
0
Fork 0
mirror of https://github.com/wukko/cobalt.git synced 2024-11-15 12:50:01 +00:00
Code Issues Projects Releases Packages Wiki Activity

web/about/privacy: initial privacy policy page

Browse source
This commit is contained in:
wukko 2024-09-05 09:58:45 +06:00
parent 0408fc446a
commit 4921e5c151
No known key found for this signature in database
GPG key ID: 3E30B3F26C7B4AA2
1 changed files with 71 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

72
web/src/routes/about/privacy/+page.svelte
View file

@ -1 +1,71 @@
<div>privacy policy</div> <script lang="ts">
import { t } from "$lib/i18n/translations";
import OuterLink from "$components/misc/OuterLink.svelte";
</script>
<div id="privacy-body" class="long-text-noto">
<section id="general">
<h3>general terms</h3>
<p>
cobalt's privacy policy is simple: we don't collect or store anything about you. what you do is solely your business, not ours or anyone else's.
</p>
<p>
when using saving functionality, in some cases cobalt will encrypt & temporarily store information needed for tunnelling. it's stored in processing server's RAM for 90 seconds and irreversibly purged afterwards. no one has access to it, even instance owners, as long as they don't modify the official cobalt image.
</p>
<p>
processed/tunnelled files are never cached anywhere. everything is tunnelled live. cobalt is essentially a fancy proxy service.
</p>
</section>
<section id="encryption">
<h3>encryption</h3>
<p>
temporarily stored tunnel data is encrypted using the AES-256 standard. decryption keys are only included in the access link and never logged/cached/stored anywhere. only the end user has access to the link & encryption keys. keys are generated uniquely for each requested tunnel.
</p>
</section>
<section id="plausible">
<h3>anonymous traffic analytics</h3>
<p>
for sake of privacy, we use
<OuterLink href="https://plausible.io/"> plausible's anonymous traffic analytics</OuterLink>
to get an approximate number of active cobalt users. no identifiable information about you or your requests is ever stored. all data is anonymized and aggregated. the plausible instance we use is hosted & managed by us.
</p>
<p>
plausible doesn't use cookies and is fully compliant with GDPR, CCPA, and PECR.
</p>
<p>
<OuterLink href="https://plausible.io/privacy-focused-web-analytics">
{$t("settings.privacy.analytics.learnmore")}
</OuterLink>
</p>
<p>
if you wish to opt out of anonymous analytics, you can do it in <a href="/settings/privacy#analytics">privacy settings</a>.
</p>
</section>
<section id="cloudflare">
<h3>web privacy & security</h3>
<p>
we use cloudflare for ddos & bot protection. we also use cloudflare pages for deploying & hosting the static web app. all of these are required to provide the best experience for everyone. it's the most private & reliable provider that we know of.
</p>
<p>
cloudflare is fully compliant with GDPR and HIPAA.
</p>
<p>
<OuterLink href="https://www.cloudflare.com/trust-hub/privacy-and-data-protection/">
learn more about cloudflare's dedication to privacy.
</OuterLink>
</p>
</section>
</div>
<style>
#privacy-body h3 {
margin-bottom: -5px;
font-size: 17px;
}
</style>