this repo has no description
tangled.org
1{{ define "title" }}privacy policy{{ end }}
2{{ define "content" }}
3 <div class="max-w-4xl mx-auto px-4 py-8">
4 <div class="bg-white dark:bg-gray-800 rounded-lg shadow-sm p-8">
5 <div class="prose prose-gray dark:prose-invert max-w-none">
6 <h1>Privacy Policy</h1>
7
8 <p>
9 <strong>Last updated:</strong>
10 {{ now.Format "January 2, 2006" }}
11 </p>
12
13 <p>
14 This Privacy Policy describes how Tangled ("we," "us," or "our")
15 collects, uses, and shares your personal information when you use our
16 platform and services (the "Service").
17 </p>
18
19 <h2>1. Information We Collect</h2>
20
21 <h3>Account Information</h3>
22 <p>When you create an account, we collect:</p>
23 <ul>
24 <li>Your chosen username</li>
25 <li>Email address</li>
26 <li>Profile information you choose to provide</li>
27 <li>Authentication data</li>
28 </ul>
29
30 <h3>Content and Activity</h3>
31 <p>We store:</p>
32 <ul>
33 <li>Code repositories and associated metadata</li>
34 <li>Issues, pull requests, and comments</li>
35 <li>Activity logs and usage patterns</li>
36 <li>Public keys for authentication</li>
37 </ul>
38
39 <h2>2. Data Location and Hosting</h2>
40 <div
41 class="bg-blue-50 dark:bg-blue-900/20 border border-blue-200 dark:border-blue-800 rounded-lg p-4 my-6">
42 <h3 class="text-blue-800 dark:text-blue-200 font-semibold mb-2">
43 EU Data Hosting
44 </h3>
45 <p class="text-blue-700 dark:text-blue-300">
46 <strong>
47 All Tangled service data is hosted within the European Union.
48 </strong>
49 Specifically:
50 </p>
51 <ul class="text-blue-700 dark:text-blue-300 mt-2">
52 <li>
53 <strong>Personal Data Servers (PDS):</strong>
54 Accounts hosted on Tangled PDS (*.tngl.sh) are located in Finland
55 </li>
56 <li>
57 <strong>Application Data:</strong>
58 All other service data is stored on EU-based servers
59 </li>
60 <li>
61 <strong>Data Processing:</strong>
62 All data processing occurs within EU jurisdiction
63 </li>
64 </ul>
65 </div>
66
67 <div
68 class="bg-yellow-50 dark:bg-yellow-900/20 border border-yellow-200 dark:border-yellow-800 rounded-lg p-4 my-6">
69 <h3 class="text-yellow-800 dark:text-yellow-200 font-semibold mb-2">
70 External PDS Notice
71 </h3>
72 <p class="text-yellow-700 dark:text-yellow-300">
73 <strong>Important:</strong>
74 If your account is hosted on Bluesky's PDS or other self-hosted
75 Personal Data Servers (not *.tngl.sh), we do not control that data.
76 The data protection, storage location, and privacy practices for
77 such accounts are governed by the respective PDS provider's
78 policies, not this Privacy Policy. We only control data processing
79 within our own services and infrastructure.
80 </p>
81 </div>
82
83 <h2>3. Third-Party Data Processors</h2>
84 <p>
85 We only share your data with the following third-party processors:
86 </p>
87
88 <h3>Resend (Email Services)</h3>
89 <ul>
90 <li>
91 <strong>Purpose:</strong>
92 Sending transactional emails (account verification, notifications)
93 </li>
94 <li>
95 <strong>Data Shared:</strong>
96 Email address and necessary message content
97 </li>
98 <li>
99 <strong>Location:</strong>
100 EU-compliant email delivery service
101 </li>
102 </ul>
103
104 <h3>Cloudflare (Image Caching)</h3>
105 <ul>
106 <li>
107 <strong>Purpose:</strong>
108 Caching and optimizing image delivery
109 </li>
110 <li>
111 <strong>Data Shared:</strong>
112 Public images and associated metadata for caching purposes
113 </li>
114 <li>
115 <strong>Location:</strong>
116 Global CDN with EU data protection compliance
117 </li>
118 </ul>
119
120 <h2>4. How We Use Your Information</h2>
121 <p>We use your information to:</p>
122 <ul>
123 <li>Provide and maintain the Service</li>
124 <li>Process your transactions and requests</li>
125 <li>Send you technical notices and support messages</li>
126 <li>Improve and develop new features</li>
127 <li>Ensure security and prevent fraud</li>
128 <li>Comply with legal obligations</li>
129 </ul>
130
131 <h2>5. Data Sharing and Disclosure</h2>
132 <p>
133 We do not sell, trade, or rent your personal information. We may share
134 your information only in the following circumstances:
135 </p>
136 <ul>
137 <li>With the third-party processors listed above</li>
138 <li>When required by law or legal process</li>
139 <li>
140 To protect our rights, property, or safety, or that of our users
141 </li>
142 <li>
143 In connection with a merger, acquisition, or sale of assets (with
144 appropriate protections)
145 </li>
146 </ul>
147
148 <h2>6. Data Security</h2>
149 <p>
150 We implement appropriate technical and organizational measures to
151 protect your personal information against unauthorized access,
152 alteration, disclosure, or destruction. However, no method of
153 transmission over the Internet is 100% secure.
154 </p>
155
156 <h2>7. Data Retention</h2>
157 <p>
158 We retain your personal information for as long as necessary to
159 provide the Service and fulfill the purposes outlined in this Privacy
160 Policy, unless a longer retention period is required by law.
161 </p>
162
163 <h2>8. Your Rights</h2>
164 <p>Under applicable data protection laws, you have the right to:</p>
165 <ul>
166 <li>Access your personal information</li>
167 <li>Correct inaccurate information</li>
168 <li>Request deletion of your information</li>
169 <li>Object to processing of your information</li>
170 <li>Data portability</li>
171 <li>Withdraw consent (where applicable)</li>
172 </ul>
173
174 <h2>9. Cookies and Tracking</h2>
175 <p>We use cookies and similar technologies to:</p>
176 <ul>
177 <li>Maintain your login session</li>
178 <li>Remember your preferences</li>
179 <li>Analyze usage patterns to improve the Service</li>
180 </ul>
181 <p>You can control cookie settings through your browser preferences.</p>
182
183 <h2>10. Children's Privacy</h2>
184 <p>
185 The Service is not intended for children under 16 years of age. We do
186 not knowingly collect personal information from children under 16. If
187 we become aware that we have collected such information, we will take
188 steps to delete it.
189 </p>
190
191 <h2>11. International Data Transfers</h2>
192 <p>
193 While all our primary data processing occurs within the EU, some of
194 our third-party processors may process data outside the EU. When this
195 occurs, we ensure appropriate safeguards are in place, such as
196 Standard Contractual Clauses or adequacy decisions.
197 </p>
198
199 <h2>12. Changes to This Privacy Policy</h2>
200 <p>
201 We may update this Privacy Policy from time to time. We will notify
202 you of any changes by posting the new Privacy Policy on this page and
203 updating the "Last updated" date.
204 </p>
205
206 <h2>13. Contact Information</h2>
207 <p>
208 If you have any questions about this Privacy Policy or wish to
209 exercise your rights, please contact us through our platform or via
210 email.
211 </p>
212
213 <div
214 class="mt-8 pt-6 border-t border-gray-200 dark:border-gray-700 text-sm text-gray-600 dark:text-gray-400">
215 <p>
216 This Privacy Policy complies with the EU General Data Protection
217 Regulation (GDPR) and other applicable data protection laws.
218 </p>
219 </div>
220 </div>
221 </div>
222 </div>
223{{ end }}