diff --git a/src/pages/privacy-policy.md b/src/pages/privacy-policy.md index cbd9c48..c2d0556 100644 --- a/src/pages/privacy-policy.md +++ b/src/pages/privacy-policy.md @@ -41,7 +41,11 @@ Emails sent from Stripe should be sent via a sudovanilla.org email, as of Novemb All payments should done via sudovanilla.org with a Stripe user dashboard. If not, report back. -SudoVanilla prints phyical copies of all receipts, as of November 15th 2024. +~~SudoVanilla prints phyical copies of all receipts, as of November 15th 2024.~~ (Out of ink) + +**Retention Period** + +Stripe seems to keep all records so far, with no retention period. ## Analytics @@ -59,9 +63,32 @@ All analytics are public to view: - [sudovanilla.org](https://stats.sudovanilla.org/share/KfVISbb3ize2FhSJ/sudovanilla.org) - [studio.sudovanilla.org](https://stats.sudovanilla.org/share/EeQwCMbGzkygdN04/studio.sudovanilla.org) +**Retention Period** + +The stats are kept as long as possible, they do not get reset unless the entire Umami setup is reset. + ## Services: -**SudoVanilla Ark** +**SudoVanilla Gateway** (Not in effect yet) + +When you sign up for any services on SudoVanilla, most of the time you'll be required go through SudoVanilla Gateway. + +**Logs** + +Gateway is powered by LogTo, which is selfhosted on the primary server, it has audit logs for the admin to view. + +The following is what SudoVanilla can see in these logs: + - Event Key + - User + - Application + - Time + - Log ID + - User Agent + - IPv4 Address + +Some data is also logged when you interact with the Gateway like user-agent and IP address, without an account, as LogTo also logs certain "interactions". Such as focusing on the email input as you're signing-in or creating an account. + +**SudoVanilla Ark (Forgejo)** When you sign up for SudoVanilla Ark, the following information is recorded: - ID @@ -92,7 +119,7 @@ All content you upload to Zipline on SudoVanilla do not expire. When you sign up for SudoVanilla Share, the following information is recorded: - Username -**Deletion Request** +## Deletion Request If you're not comfortable with SudoVanilla keeping data suchs as emails you send, physical copies of your reciepts, or etc; then you can request this information to be deleted by [sending an email](mailto:privacy-deletion-PLEASE-REMOVE-THIS-FOR-SPAM-PROTECTION@sudovanilla.org?subject=Privacy%20Request&body=I%20want%20the%20following%20information%20deleted%3A%20).