qwik-site/content/pages/articles/privacy_policy.md
2021-08-12 15:50:26 +02:00

2.9 KiB

%%- title: qwik - privacy policy header: Privacy Policy date: Last updated 12th August 2021 -%%

Introduction

We want to keep this short but informative, but a tl;dr:

We do not want to collect data, and all data collected should be logical. (i.e. emails for a gitea account or so).

We will change this Privacy Policy from time to time to reflect the current situation. Please keep an eye out. Some extra words

This notice is very general and there might be exceptions for each individual service we offer. Consider reading about the services before you use them, but they are all doing their best to be privacy friendly.

We will list some exceptions further down the privacy policy.

Data collection

IP Addresses and User Agents

We do not keep nginx access logs - so we can't see who has connected. However, our main server uses modsecurity to protect against different types of attacks. If one of your requests is flagged as an attack, modsecurity will write to an audit log. This will log your User Agent.

Cookies

Our main page (qwik.space) does not have any cookies.

Data retention

The modsecurity log is kept until we clear it from time to time.

Data sharing

We do not share any data with third parties unless we have to by law or state otherwise.

Exceptions

Here are some services that make exceptions to the above statements:

XMPP

Our XMPP server caches messages and uploads for up to seven days. If your client uses encryption (such as OMEMO) the cached messages and uploads will be encrypted. We strongly advise using encryption.

Gitea

Gitea will collect your email upon registration. (Sadly we don't know any way to disable this.) However, the email isn't used for anything so it can be whatever. We would maybe even advise you to use a temporary or throwaway email.

Gitea will require a username on signup, which you might consider personal. We would advise you to not use your real name and instead use an alias.

Gitea also uses some cookies, but this is for your comfort. For example keeping you signed in and remembering your settings or what not.

Hedgedoc

Hedgedoc will collect your email upon registration. This email will just be used for logging in.

The documents you write will be stored unecrypted. This also applies to image uploads.

Hedgedoc also uses some cookies, they will be used to keeping you signed in and remembering your settings.

Nitter, Bibliogram, Libreddit, Searx

These services all use cookies to remember your settings.

Recommendations

The internet is not a good place when it comes to privacy. If you want to limit the risks of something or someone invading your privacy online, we recommend:

  • Use Tor (properly)
  • Use throwaway emails when signing up for stuff
  • Use fake names or aliases to protect your name
  • (Generally) don't give out personal information online...