Skip to content

Commit

Permalink
Add Terms of Service + Privacy Policy changes
Browse files Browse the repository at this point in the history
@JeremyGamer13
JeremyGamer13 committed Nov 11, 2023
1 parent 4c5a4b7 commit 3a16d02
Showing 2 changed files with 227 additions and 42 deletions.
117 changes: 75 additions & 42 deletions static/privacy.html
View file
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
<!DOCTYPE html>
<html lang="en">
<head>
<title>PenguinMod Privacy Policy</title>
<title>PenguinMod - Privacy Policy</title>
<meta charset="utf8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<style>
@@ -28,12 +28,12 @@

<body>
<header>
<h1>PenguinMod Privacy Policy</h1>
<h1>Privacy Policy</h1>
</header>

<main>
<!-- UPDATE THIS WHEN MAKING CONTENT CHANGES -->
<p><i>Updated October 14th, 2023 at 9:50 AM (Central Time)</i></p>
<p><i>Updated November 10th, 2023 at 7:17 PM (Mountain Time)</i></p>

<!-- some things are intentionally not formatted as they are in the HTML file on the website -->
<p>
@@ -55,10 +55,10 @@ <h1>PenguinMod Privacy Policy</h1>
"Host" may also refer to the server host of PenguinMod's project sharing.
</p>
<p>
A "Project Approver" or "Approver" is a person who has the ability to approve or reject projects, and reply to messages
from users who had moderation actions happen towards their project or account.
A "Project Moderator" is a person who has the ability to remove projects or content from those projects,
and reply or send messages to users who had moderation actions happen towards their project or account.
<br><br>
These people can contact Administrators aswell.
These people can contact Administrators aswell, and may have extra permissions such as banning users.
</p>

<h2>General</h2>
@@ -72,44 +72,68 @@ <h2>General</h2>
<p>
When using the website, your IP may be logged temporarily, but never permanently, (deleted after a server restart or update).
This is to help us identify users who may be spamming or attacking the site. Your IP is only saved if you are blocked from the project servers.
<br>
Your IP may also be logged temporarily when viewing a project, along with information about the project you viewed.
</p>

<h2>Advertisments</h2>
<p>
When advertisements are served on any PenguinMod page, third parties may be placing and reading cookies on your browser,
or using web beacons to collect information. PenguinMod itself does not do this, and you may be able to find more information here:<br>
- <a href="https://support.google.com/publisherpolicies/answer/10437794">What we must disclose in our privacy policy</a><br>
- <a href="http://www.google.com/policies/privacy/partners/">How Google uses data when you use our partners' sites or apps</a><br>
or using web beacons to collect information. PenguinMod itself does not do this, and you may be able to find more information here:
<ul>
<li><a href="https://support.google.com/publisherpolicies/answer/10437794">What we must disclose in our privacy policy</a></li>
<li><a href="http://www.google.com/policies/privacy/partners/">How Google uses data when you use our partners' sites or apps</a></li>
</ul>
</p>

<h2>Project Sharing & Accounts</h2>
<p>
Accounts are logged into using <a href="https://auth.itinerary.eu.org/">Scratch Auth</a>,
which requires you to have a <a href="https://scratch.mit.edu/">Scratch</a> account.
<br>
When you use Scratch Auth, it can access:<br>
- your IP address<br>
- your general location (using your IP address)<br>
- your public <a href="https://scratch.mit.edu/">Scratch</a> Account information<br>
<br><br>
When you use Scratch Auth, it can access:
<ul>
<li>your IP address</li>
<li>your general location (using your IP address)</li>
<li>your public <a href="https://scratch.mit.edu/">Scratch</a> Account information</li>
</ul>
<br><br>
Accounts do not actually exist on PenguinMod, but instead PenguinMod stores data that is attached to a certain username.
When you "log-in" to an account, you are actually only gaining access to perform actions to data that is attached to a certain username,
or create data to be attached to your username.
</p>
<p>
When using our Project Sharing:<br>
- any projects uploaded will have their project name logged<br>
- any projects uploaded are publicly viewable (including unapproved projects if you have the URL to them)<br>
- any projects uploaded can be modified by admins or hosts of the service in any way (project image, project name, project code, etc.)<br>
When using our Project Sharing:
<ul>
<li>any projects uploaded will have their project name logged</li>
<li>any projects uploaded are publicly viewable (including unapproved projects if you have the URL to them)</li>
<li>any projects uploaded can be modified by admins or hosts of the service in any way (project image, project name, project code, etc.)</li>
</ul>
</p>
<p>
Uploaded projects will be publicly visible to any project approvers on the website.
This should ensure all projects are thoroughly reviewed before being publicly displayed on the website.
Information available to Project Approvers and Service Administrators include:<br>
- the date any project was uploaded or Updated<br>
- the name, project instructions & notes, thumbnail, project data, uploader's name, uploader's <a href="https://scratch.mit.edu/">Scratch</a> account and uploader's profile picture for any project<br>
- the date a project was rejected<br>
- the date, contents, and type of any moderator message or response to a moderator message<br>
Uploaded projects will be publicly visible to all users on the website.
Any user may report a project or report another user to Project Moderators if they believe the <a href="https://penguinmod.com/guidelines/uploading">Uploading Guidelines</a> have been violated.
<br><br>
Project Information available to users, Project Moderators and Service Administrators include:
<ul>
<li>the project name, project instructions & notes, project thumbnail, project data, uploader's name, uploader's <a href="https://scratch.mit.edu/">Scratch</a> account and uploader's profile picture for any project</li>
<li>the date any project was uploaded, updated or featured</li>
<li>the likes, votes, favorites and views attached to that project</li>
<li>whether or not the project has been updated</li>
<li>any other internal information about the project</li>
</ul>
Information available only to Project Moderators and Service Administrators include:
<ul>
<li>the date a project was removed</li>
<li>the date, contents, and type of any moderator message or response to a moderator message</li>
<li>any above information users can access</li>
</ul>
Information available only to Service Administrators include:
<ul>
<li>the indiviudal users who liked, favorited or voted a project</li>
<li>the IP of users who viewed a project (until server reset)
<li>any above information users or Project Moderators can access</li>
</ul>
</p>
<p>
Your IP will temporarily be saved in the server when you view a project.
@@ -127,20 +151,24 @@ <h2>Other services</h2>
<p>Built-in Scratch extensions that require Wi-Fi (such as Translate, Text to Speech, LEGO, micro:bit, etc.) may connect to the Scratch API to implement these features. <a href="https://scratch.mit.edu/privacy_policy/">Refer to the Scratch privacy policy for more information</a>. The Translate extension may instead make requests to a TurboWarp API, which may then forward your request to the Scratch API and log the message being translated and the result for caching and performance.</p>
<p>In rare circumstances, connections that are appear to be spam may have their IP logged for up to 24 hours. This happens very infrequently and only in cases of extreme abuse.</p>
<p>
Built-in PenguinMod and Custom extensions that require Wi-Fi or use Wi-Fi to get online data (HTTP, Website Requests, Extended Audio, CloudLink, HTML iframes, Storage, etc.) may connect to any user-specified API, which will grant the owner of the website being connected to:<br>
- your full IP address (and possibly general location using your IP address)<br>
- the ability to show or display anything (if the extension is showing the info returned to the user)<br>
- any other things public APIs can do or access<br>
Built-in PenguinMod and Custom extensions that require Wi-Fi or use Wi-Fi to get online data (HTTP, Website Requests, Extended Audio, CloudLink, HTML iframes, Storage, etc.) may connect to any user-specified API, which will grant the owner of the website being connected to:
<ul>
<li>your full IP address (and possibly general location using your IP address)</li>
<li>the ability to show or display anything (if the extension is showing the info returned to the user)</li>
<li>any other things public APIs can do or access</li>
</ul>
</p>
<p>This document does not apply to third-parties, including other users or bots connected to cloud variables, links to external websites, custom extensions, or some advanced URL parameters.</p>

<h2>Editor extensions</h2>
<h4>Core - HTML iframes (referred to as "iframes" here)</h4>
<p>
"iframes" may connect to user-specified websites. These websites may be allowed to access: <br>
- your IP address<br>
- your general location (using your IP address)<br>
- any web API<br>
"iframes" may connect to user-specified websites. These websites may be allowed to access:
<ul>
<li>your IP address</li>
<li>your general location (using your IP address)</li>
<li>any web API</li>
</ul>
The websites specified may also display any content, however PenguinMod will attempt to automatically scan the website
for any potential viruses or vulnerabilities. Major adult websites are also blocked, and most others are blocked aswell.
<br>
@@ -149,26 +177,31 @@ <h4>Core - HTML iframes (referred to as "iframes" here)</h4>
</p>
<h4>Core - Scratch Authentication (referred to as "Scratch Auth Extension" here)</h4>
<p>
The "Scratch Auth Extension" will connect to <a href="https://auth.itinerary.eu.org/">Scratch Auth</a> for Log-In. Scratch Auth can access: <br>
- your IP address<br>
- your general location (using your IP address)<br>
- your public <a href="https://scratch.mit.edu/">Scratch</a> Account information<br>
The "Scratch Auth Extension" will connect to <a href="https://auth.itinerary.eu.org/">Scratch Auth</a> for Log-In. Scratch Auth can access:
<ul>
<li>your IP address</li>
<li>your general location (using your IP address)</li>
<li>your public <a href="https://scratch.mit.edu/">Scratch</a> Account information</li>
</ul>
The "Scratch Auth Extension" also allows your public Scratch account information to be accessible to the PenguinMod project,
however other tools, extensions or APIs are required to get information past your Scratch username.
</p>
<h4>User-submitted (G1nX) - Better Storage</h4>
<p>
Better Storage will connect to <a href="https://auth.itinerary.eu.org/">Scratch Auth</a> for Log-In. Scratch Auth can access: <br>
- your IP address<br>
- your general location (using your IP address)<br>
- your public <a href="https://scratch.mit.edu/">Scratch</a> Account information<br>
Better Storage will connect to <a href="https://auth.itinerary.eu.org/">Scratch Auth</a> for Log-In. Scratch Auth can access:
<ul>
<li>your IP address</li>
<li>your general location (using your IP address)</li>
<li>your public <a href="https://scratch.mit.edu/">Scratch</a> Account information</li>
</ul>
Better Storage can also access any info that Scratch Auth can.
The owner of Better Storage may also view any saved data using their keys for security and safety.
</p>

<h2>Contact</h2>

<p><a href="https://discord.gg/NZ9MBMYTZh">Our Discord Server</a></p>
<p>Email us at <a href="mailto:[email protected]">[email protected]</a></p>
<p>Join <a href="https://discord.gg/NZ9MBMYTZh">our Discord Server</a></p>

<div style="width: 100%; height: 32px;"></div>
</main>
152 changes: 152 additions & 0 deletions static/terms.html
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,152 @@
<!DOCTYPE html>
<html lang="en">
<head>
<title>PenguinMod - Terms of Service</title>
<meta charset="utf8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<style>
body {
font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;
margin: 0; padding: 0;
}
header {
background-color: hsla(194, 100%, 50%, 1);
color: white;
text-align: center;
padding: 20px 0;
}
main {
max-width: 900px;
margin: auto;
}
@media (prefers-color-scheme: dark) {
body { background: #111; color: #eee; }
a { color: #4af; }
}
</style>
</head>

<body>
<header>
<h1>Terms of Service</h1>
</header>

<main>
<!-- UPDATE THIS WHEN MAKING CONTENT CHANGES -->
<p><i>Updated November 10th, 2023 at 7:17 PM (Mountain Time)</i></p>

<!-- some things are intentionally not formatted as they are in the HTML file on the website -->
<p>
This document applies to
<a href="https://penguinmod.com">https://penguinmod.com</a>,
<a href="https://studio.penguinmod.com">https://studio.penguinmod.com</a>,
<a href="https://extensions.penguinmod.com">https://extensions.penguinmod.com</a>
and <a href="https://projects.penguinmod.com">https://projects.penguinmod.com</a>
</p>
<p>
You may see websites such as <a href="https://scratch.mit.edu/">"Scratch"</a>,
<a href="https://turbowarp.org/">"TurboWarp"</a>, and <a href="https://auth.itinerary.eu.org/">"Scratch Auth"</a> referenced.
</p>
<p>
A "Service Administrator", "Admin", "Moderator", "Mod" or "Administrator" is a person who can either
directly access the server files for PenguinMod,
or a person who can contact the server host that is able to access the server files and server process.
"Host" may also refer to the server host of PenguinMod's project sharing.
</p>
<p>
A "Project Moderator" is a person who has the ability to remove projects or content from those projects,
and reply or send messages to users who had moderation actions happen towards their project or account.
<br><br>
These people can contact Administrators aswell, and may have extra permissions such as banning users.
</p>

<h2>General</h2>
<p>
By using PenguinMod, you agree to the terms outlined below. If you do not agree with these terms, please refrain from
using our website.
</p>

<h2>Your use of PenguinMod</h2>
<p>
When uploading projects or posting content on PenguinMod, your content must abide by the
<a href="https://penguinmod.com/guidelines/uploading">Uploading Guidelines</a>
at all times.
</p>

<h2>Advertisments</h2>
<p>
Advertisement Content: We use Google AdSense to display advertisements on PenguinMod. These ads are provided by Google
and are subject to Google's policies. PenguinMod is not responsible for the content of these ads.
</p>

<h2>Data Collection</h2>
<p>
<b>Information Collected:</b> We collect only the user's username and their IP address.
<br>
<b>Purpose of Collection:</b>
<ul>
<li>
<b>Username:</b> Usernames are collected for the sole purpose of displaying them to other users within the PenguinMod
community.
</li>
<li>
<b>IP Address:</b> IP addresses are collected for security reasons to validate user identity and ensure the integrity of the
PenguinMod platform. Requests coming from the same IP too many times may lose connection to PenguinMod's online services.
</li>
<li>
<b>Cookie Usage:</b> PenguinMod uses cookies to enhance user experience and store user progress and preferences on the website.
Users can manage cookie preferences through their browser settings.
</li>
</ul>
</p>

<h2>Third-Party Information Sharing</h2>
<p>PenguinMod does not share any user information, including usernames and IP addresses, with third parties.</p>

<h2>Security</h2>
<ul>
<li><b>Authentication System:</b> PenguinMod employs a secure authentication system ("Scratch Auth") to safeguard user login.</li>
<li><b>Vulnerabilities:</b> PenguinMod has active developers and a small set of users looking through our code to ensure proper security.</li>
</ul>

<h2>Limitation of Liability and Disclaimer</h2>
<p>
No Assumption of Responsibility: PenguinMod, its owners, administrators, and affiliates do not assume responsibility for
any issues, damages, or consequences arising from the use of the website.
</p>

<h2>Exclusion of Damages</h2>
<p>
PenguinMod is not liable for any direct, indirect, incidental, consequential,
or special damages, including but not limited to loss of data, revenue, or profits.
</p>

<h2>Use at Your Own Risk</h2>
<p>
Despite above security measures, users must acknowledge that they are using PenguinMod at their own risk.
PenguinMod is not responsible for any harm, loss, or damage to users' devices, data, or any other property.
</p>

<h2>Warranties</h2>
<p>
PenguinMod makes no warranties, express or implied, regarding the accuracy,
reliability, or availability of the website or its content.
</p>

<h2>Changes to Terms</h2>
<p>
PenguinMod reserves the right to update or modify these terms of service at any time without prior notice. Users are
encouraged to review this document periodically for any changes.
<br><br>
By continuing to use PenguinMod, you agree to abide by the most recent version of these terms.
</p>

<h2>Contact</h2>

<p>Email us at <a href="mailto:penguinmodhelp@gmail.com">penguinmodhelp@gmail.com</a></p>
<p>Join <a href="https://discord.gg/NZ9MBMYTZh">our Discord Server</a></p>

<div style="width: 100%; height: 32px;"></div>
</main>
</body>
</html>

0 comments on commit 3a16d02

Please sign in to comment.