+ ) : null
+ }
+ {OnlyLogo ? (
+ null
+ ):
+
+ 
+
{Description}
+
+ ) : null
+ }
+ {OnlyLogo ? (
+ null
+ ):
+
+
+
+ :
+ null
+ }
+
+
Last Updated: December 3rd, 2024
+ +## Contact for data protection issues + +If you have any questions regarding data protection, please contact SudoVanilla at privacy (at) sudovanilla.org. + +## Where is the personal data stored? + +SudoVanilla runs it's main server locally, as everything is selfhosted. SudoVanilla is located in the Unites States. + +## Support + +**Email** + +When you send an email to any sudovanilla.org emails, your email address and the information you sent is collected. All emails are archived. + +## Donations and Other Payments + +**Payments** + +Payment information are processed for when you donate to SudoVanilla or any other purchases. Stripe is used as the preferred payment processor for all of SudoVanilla and it's donations. + +Stripe logs the following details: + - Charge ID + - Expire Date + - Last 4 digits of the card + - Card Type + - Origin Country + - Issuer + - Owner + - Owner Email + +If you don't want your information shared with SudoVanilla, it is recommended to use https://privacy.com to create a masked card. You can join Privacy with SudoVanilla's invite link to https://app.privacy.com/join/MCHG9. + +Emails sent from Stripe should be sent via a sudovanilla.org email, as of November 15th 2024. If not, report back. + +All payments should done via sudovanilla.org with a Stripe user dashboard. If not, report back. + +~~SudoVanilla prints phyical copies of all receipts, as of November 15th 2024.~~ (Out of ink) + +**Retention Period** + +Stripe seems to keep all records so far, with no retention period. + +## Analytics + +SudoVanilla uses Umami analytics software on it's main website and it's studio webite. + +The following is recorded: + - Page visited + - Referrers + - User Agent + - OS + - Device Type + - Country + +All analytics are public to view: + - [sudovanilla.org](https://stats.sudovanilla.org/share/KfVISbb3ize2FhSJ/sudovanilla.org) + - [studio.sudovanilla.org](https://stats.sudovanilla.org/share/EeQwCMbGzkygdN04/studio.sudovanilla.org) + +**Retention Period** + +The stats are kept as long as possible, they do not get reset unless the entire Umami setup is reset. + +## Services: + +**SudoVanilla Gateway** + +When you sign up for any services on SudoVanilla, most of the time you'll be required go through SudoVanilla Gateway. + +**Logs** + +Gateway is powered by LogTo, which is selfhosted on the primary server, it has audit logs for the admin to view. + +The following is what SudoVanilla can see in these logs: + - Event Key + - User + - Application + - Time + - Log ID + - User Agent + - IPv4 Address + +Some data is also logged when you interact with the Gateway like user-agent and IP address, without an account, as LogTo also logs certain "interactions". Such as focusing on the email input as you're signing-in or creating an account. + +**SudoVanilla Ark (Forgejo)** + +When you sign up for SudoVanilla Ark, the following information is recorded: + - ID + - Email + - Username + - Created Date + - Last Sign-In Date + +**Opengist** + +When you sign up for Opengist on SudoVanilla, the following information is recorded: + - ID + - Username + - Created Date + +**SudoVanilla Cloud (Cloudreve)** + +When you sign up for SudoVanilla Cloud, the following information is recorded: + - Email + - Quota Used + +**SudoVanilla Share (Pingvin)** + +All files you share on SudoVanilla Share are deleted after 72 hours. + +When you sign up for SudoVanilla Share, the following information is recorded: + - Email + - Username + +**Zipline** + +All content you upload to Zipline on SudoVanilla do not expire. + +When you sign up for SudoVanilla Share, the following information is recorded: + - Username + +## Deletion Request + +If you're not comfortable with SudoVanilla keeping data suchs as emails you send, physical copies of your reciepts, or etc; then you can request this information to be deleted by [sending an email](mailto:privacy-deletion-PLEASE-REMOVE-THIS-FOR-SPAM-PROTECTION@sudovanilla.org?subject=Privacy%20Request&body=I%20want%20the%20following%20information%20deleted%3A%20). + +If you would like to delete your SudoVanilla Gateway account, feel free to [send an email](mailto:privacy-deletion-PLEASE-REMOVE-THIS-FOR-SPAM-PROTECTION@sudovanilla.org?subject=Privacy%20Request&body=I%20want%20the%20following%20information%20deleted%3A%20). All accounts attached to your SudoVanilla Gateway will be deleted. + +If you would like to delete your SudoVanilla Ark account, go to your [Account settings](privacy-deletion-PLEASE-REMOVE-THIS-FOR-SPAM-PROTECTION@sudovanilla.org) and follow the prompt in the "Delete your account" portion. If you're unable to access your SudoVanilla Ark account, please send a reset password request instead, then try again. \ No newline at end of file diff --git a/src/pages/privacy-policy/social.md b/src/pages/privacy-policy/social.md new file mode 100644 index 0000000..d970fd3 --- /dev/null +++ b/src/pages/privacy-policy/social.md @@ -0,0 +1,66 @@ +--- +layout: '../../layouts/Markdown.astro' +Title: 'SudoVanilla Social Privacy Policy' +--- + +Last Updated: January 3rd, 2025
+ +This privacy policy describes how social.sudovanilla.org ("social.sudovanilla.org", "we", "us") collects, protects and uses the personally identifiable information you may provide through the social.sudovanilla.org website or its API. The policy also describes the choices available to you regarding our use of your personal information and how you can access and update this information. This policy does not apply to the practices of companies that social.sudovanilla.org does not own or control, or to individuals that social.sudovanilla.org does not employ or manage. + +# What information do we collect? + +* **Basic account information**: If you register on this server, you may be asked to enter a username, an e-mail address and a password. You may also enter additional profile information such as a display name and biography, and upload a profile picture and header image. The username, display name, biography, profile picture and header image are always listed publicly. +* **Posts, following and other public information**: The list of people you follow is listed publicly, the same is true for your followers. When you submit a message, the date and time is stored as well as the application you submitted the message from. Messages may contain media attachments, such as pictures and videos. Public and unlisted posts are available publicly. When you feature a post on your profile, that is also publicly available information. Your posts are delivered to your followers, in some cases it means they are delivered to different servers and copies are stored there. When you delete posts, this is likewise delivered to your followers. The action of reblogging or favouriting another post is always public. +* **Direct and followers-only posts**: All posts are stored and processed on the server. Followers-only posts are delivered to your followers and users who are mentioned in them, and direct posts are delivered only to users mentioned in them. In some cases it means they are delivered to different servers and copies are stored there. We make a good faith effort to limit the access to those posts only to authorized persons, but other servers may fail to do so. Therefore it's important to review servers your followers belong to. You may toggle an option to approve and reject new followers manually in the settings. **Please keep in mind that the operators of the server and any receiving server may view such messages**, and that recipients may screenshot, copy or otherwise re-share them. **Do not share any sensitive information over Mastodon.** +* **IPs and other metadata**: When you log in, we record the IP address you log in from, as well as the name of your browser application. All the logged in sessions are available for your review and revocation in the settings. The latest IP address used is stored for up to 12 months. We also may retain server logs which include the IP address of every request to our server. + +# What do we use your information for? + +Any of the information we collect from you may be used in the following ways: + +* To provide the core functionality of Mastodon. You can only interact with other people's content and post your own content when you are logged in. For example, you may follow other people to view their combined posts in your own personalized home timeline. +* To aid moderation of the community, for example comparing your IP address with other known ones to determine ban evasion or other violations. +* The email address you provide may be used to send you information, notifications about other people interacting with your content or sending you messages, and to respond to inquiries, and/or other requests or questions. + +# How do we protect your information? + +We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. Among other things, your browser session, as well as the traffic between your applications and the API, are secured with SSL, and your password is hashed using a strong one-way algorithm. You may enable two-factor authentication to further secure access to your account. + +# What is our data retention policy? + +We will make a good faith effort to: + +* Retain server logs containing the IP address of all requests to this server, in so far as such logs are kept, no more than 90 days. +* Retain the IP addresses associated with registered users no more than 12 months. + +You can request and download an archive of your content, including your posts, media attachments, profile picture, and header image. + +You may irreversibly delete your account at any time. + +# Do we use cookies? + +Yes. Cookies are small files that a site or its service provider transfers to your computer's hard drive through your Web browser (if you allow). These cookies enable the site to recognize your browser and, if you have a registered account, associate it with your registered account. + +We use cookies to understand and save your preferences for future visits. + +# Do we disclose any information to outside parties? + +We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety. + +Your public content may be downloaded by other servers in the network. Your public and followers-only posts are delivered to the servers where your followers reside, and direct messages are delivered to the servers of the recipients, in so far as those followers or recipients reside on a different server than this. + +When you authorize an application to use your account, depending on the scope of permissions you approve, it may access your public profile information, your following list, your followers, your lists, all your posts, and your favourites. Applications can never access your e-mail address or password. + +# Site usage by children + +If this server is in the EU or the EEA: Our site, products and services are all directed to people who are at least 16 years old. If you are under the age of 16, per the requirements of the GDPR (General Data Protection Regulation) do not use this site. + +If this server is in the USA: Our site, products and services are all directed to people who are at least 13 years old. If you are under the age of 13, per the requirements of COPPA (Children's Online Privacy Protection Act) do not use this site. + +Law requirements can be different if this server is in another jurisdiction. + +- - - + +This document is CC-BY-SA. Originally adapted from the [Discourse privacy policy](https://github.com/discourse/discourse). + +Please also view the [Privacy Policy for SudoVanilla Gateway](https://sudovanilla.org/privacy-policy/#:~:text=SudoVanilla%20Gateway,creating%20an%20account.). \ No newline at end of file diff --git a/src/pages/refund-policy.md b/src/pages/refund-policy.md new file mode 100644 index 0000000..4d0ea9d --- /dev/null +++ b/src/pages/refund-policy.md @@ -0,0 +1,8 @@ +--- +layout: '../layouts/Markdown.astro' +Title: 'Refund Policy' +--- + +**Donations** + +SudoVanilla only accepts donations via Stripe or Liberapay, all donations sent to SudoVanilla are final and refunds will not be allowed. \ No newline at end of file diff --git a/src/pages/services.astro b/src/pages/services.astro new file mode 100644 index 0000000..d9d0754 --- /dev/null +++ b/src/pages/services.astro @@ -0,0 +1,253 @@ +--- +// Layout +import Default from "@layouts/Default.astro"; + +// Components +import Heading from "@components/Heading.astro"; +import {Card} from "@sudovanilla/pandora" +--- + +
+
+Last Updated: December 19th, 2024
+This policy goes into effect on January 1st, 2025
+ +## Hardware + +All physical servers must be on-premise, where the owner of SudoVanilla can access it locally by hand and over the local network. + +## Domain and URLs + +Everything that runs on SudoVanilla must be viewed via only the "sudovanilla.org" domain and it's subdomains. Any other domains such as "sudovanilla.com", "korbsstudio.com", "minpluto.org", and any other domains are not allowed. + +Any content hosted on services provided by SudoVanilla needs to pulling from the "sudovanilla.org" domain and it's subdomains and not outside sources. Services should either proxy the content or provide it locally in the source code. + +If you host any content on services such as SudoVanilla Ark, SudoVanilla's Opengist, or etc and you need to host media from an external source for API usage or to make the media dynamic, SudoVanilla has it's own image proxy that can be used. The image proxy is "https://image.proxy.sudovanilla.org/" followed by your external URL. + +Example would be: "https://image.proxy.sudovanilla.org/https://md.sudovanilla.org/images/Screenshot%20From%202024-12-03%2022-07-36.png". You can use something like "/560,fit/" between the parameters to force the image to resize. + +The image proxy does not support video or audio, you can use SudoVanilla's Zipline instance for this usage. Zipline supports video and audio formats. + +**Exceptions** + - [All Clients](https://sudovanilla.org/services#Clients) + +## Software + +Software such as NodeJS packages(NPM, Yarn, PNPM, Bun, JavaScript, TypeScript) built by SudoVanilla must be uploaded to only the SudoVanilla Registry. + +Software such as Docker or OCI images built by SudoVanilla must be uploaded to only the SudoVanilla Registry. + +Software such as source code of any kind, and anything else built by SudoVanilla must be uploaded to only SudoVanilla Ark or SudoVanilla's Opengist. + +All software built by SudoVanilla is not allowed on any other sources besides SudoVanilla Ark or SudoVanilla Registry. Re-uploading, cloning, or forking any software to any other outside sources such as GitHub is not allowed. SudoVanilla is aware that not allowing this can be controversial in the open source community, some exceptions have been made, view "Exceptions" list below this section of the Umbrella Policy. + +NOTE: The open source licenses that SudoVanilla projects use 'can't legally enforce' this restriction of the Umbrella Policy, if you proceed SudoVanilla will not hesitate 'if caught' to send a takedown request to you or eventfully the webmaster. Exceptions are still allowed, view "Exceptions" list below this section of the Umbrella Policy. SudoVanilla will never send takedown requests to said exceptions unless you violated the open source license of the project. + +SudoVanilla mirrors projects it personally likes and mirrors from other sources to it's own server, if you're the developer of the software that was mirrored and do not want it mirrored anymore, please send a request takedown via email. Doing so will be publicly added to a transparency report. + +SudoVanilla sometimes re-publish Docker images and NodeJS packages that it uses it's own projects to it's own server. + +**Exceptions** + - Codeberg - "codeberg.org" + - Pub Solar - "git.pub.solar" + +## Gateway + +When logging into a service hosted by SudoVanilla such as SudoVanilla Ark, Penpot, Opengist, Pingvin, and etc it must be setup to only allow a login via the gateway using the OpenID Connect method. SudoVanilla Gateway is a login portal where your central account is for most SudoVanilla services. + +If the software in question is not able to provide a method for this, more specifically allow for an OpenID Connect login, the software will be disabled and removed from SudoVanilla. + +**Exceptions** + - [All Clients](https://sudovanilla.org/services#Clients) + - SudoVanilla Cloud + - Jellyfin + +SudoVanilla Gateway is selfhosted, powered by LogTo
+ +## Communication and Socials + +Any socials accounts operated by SudoVanilla and Korbs must be ran under the "sudovanilla.org" domain. This means that the platform must be at least part of the Fediverse and using ActivityPub to communicate with other servers. + + - Mastodon - [@korbs@social.sudovanilla.org](https://social.sudovanilla.org/@korbs) + - Lemmy - [@korbs@lemmy.sudovanilla.org](https://lemmy.sudovanilla.org/u/Korbs) + +## Media and Streaming + +Any video provided by SudoVanilla such as tutorials, generic captures, or updates should be published to SudoVanilla's media domain, "md.sudovanilla", or to it's ocean domain, "ocean.sudovanilla.org". + +If SudoVanilla were to stream any content such as live stream, it's .m3u8 source must be under "live.sudovanilla.org". + +## Exceptions + +SudoVanilla is not capable of keep every service it uses within it's walls, therefore some exceptions have been made: + - Email + - SMTP + - VPNs + - Domain Registrar + - Status Page \ No newline at end of file diff --git a/src/styles/index.scss b/src/styles/index.scss new file mode 100644 index 0000000..8f28565 --- /dev/null +++ b/src/styles/index.scss @@ -0,0 +1,113 @@ +@font-face { + font-family: OpenSans; + src: url(/fonts/Open_Sans/static/OpenSans-Regular.ttf); + font-weight: normal; +} + +@font-face { + font-family: OpenSans; + src: url(/fonts/Open_Sans/static/OpenSans-Bold.ttf); + font-weight: bold; +} + +@font-face { + font-family: Raleway; + src: url(/fonts/Raleway/static/Raleway_Regular.ttf); + font-weight: normal; +} + +@font-face { + font-family: Raleway; + src: url(/fonts/Raleway/static/Raleway-Bold.ttf); + font-weight: bold; +} + +:root { + --pandora-text: white; + --pandora-shadows: #121212; + --pandora-borders: white; +} + +body { + margin: auto; + max-width: 1200px; + padding: 0px 24px !important; + font-family: OpenSans; + color: white; + background: black; + cursor: default; + transition: 1s color, 1s background; + mobilebar { + display: none; + } + @media screen and (max-width: 800px) { + header, .sidebar { + display: none; + } + mobilebar { + display: flex; + } + .mobile-docs-dropdown { + display: block !important; + } + .document-layout { + flex-direction: column; + } + } +} + +table { + font-family: Arial, Helvetica, sans-serif; + border-collapse: collapse; + width: 100%; + + td, + th { + border: 1px solid transparent; + padding: 8px; + } + + tr:nth-child(odd) { + background-color: transparent; + } + + tr:nth-child(even) { + background-color: transparent; + } + + tr:hover { + background-color: transparent; + } + + th { + padding-top: 12px; + padding-bottom: 12pqx; + text-align: left; + background-color: transparent; + color: white; + } +} + + +* { + ::-webkit-scrollbar { + width: 0px; + } +} + +a { + color: white; + text-decoration: none; + cursor: pointer; +} + +.page-content { + max-width: 1200px; + width: 100%; +} + +.markdown { + a { + text-decoration: underline; + } +} \ No newline at end of file diff --git a/tsconfig.json b/tsconfig.json new file mode 100644 index 0000000..a704ae4 --- /dev/null +++ b/tsconfig.json @@ -0,0 +1,26 @@ +{ + "extends": "astro/tsconfigs/strict", + "include": [".astro/types.d.ts", "**/*"], + "exclude": ["dist"], + "compilerOptions": { + "baseUrl": ".", + "paths": { + "@components/*": [ + "src/components/*" + ], + "@library/*": [ + "src/library/*" + ], + "@layouts/*": [ + "src/layouts/*" + ], + "@assets/*": [ + "src/assets/*" + ], + "@styles/*": [ + "src/styles/*" + ] + }, + "jsx": "preserve" + } +} \ No newline at end of file