Create the text of the Privacy Policy: A humane privacy policy

[aschrijver]

The website needs its own, short privacy policy. I am not a lawyer, but luckily the website does contain many features that are related to privacy issues.

• Website contains no trackers, no cookies are set
• We do not collect analytics data, nor do we have logs
• We have no Ads on the website

BUT:

• The website is hosted on Github Pages, so we must make reference of that
• We might enable full-text search using Algolia, so must mention that
• We'll probably integrate with Discourse for comments, so must mention that

Github Pages

Github has a long (but clear) privacy policy. It say very little about Github Pages however, other than this:

• https://help.github.com/en/articles/github-privacy-statement#github-pages

If you create a GitHub Pages website, it is your responsibility to post a privacy statement that accurately describes how you collect, use, and share personal information and other visitor information, and how you comply with applicable data privacy laws, rules, and regulations. Please note that GitHub may collect Technical Information from visitors to your GitHub Pages website, including logs of visitor IP addresses, to maintain the security and integrity of the website and service.

We must provide a link to this section in "Third party providers" section.

Algolia

Update: I checked Algolia. The Community Plan is only for a single github user. Having a team requires at least a Standard Plan which is $29/month. Therefore we should probably not use Algolia and stick with Lunr. Lunr probably stores the index in the repo (need to check) and is otherwise completely contained in the site.

When using Algolia there is a Dashboard where analytics and other information is available based on the search engine. This probably means Algolia MUST be mentioned as a 3rd-party provider.

The minimal-mistakes theme comes with Algolia search provider out-of-the-box. It is not added to our site yet, but instructions are here:

• https://mmistakes.github.io/minimal-mistakes/docs/configuration/#algolia

Algolia requires an API key, which requires a Community Plan account for free use. The privacy policy that then applies is here:

• https://www.algolia.com/policies/privacy

Lunr

Check the privacy implications of using the default search option in minimal-mistakes which uses Lunr. I expect these to be only containing content that was already part of the repo, so no additional privacy implications.

Discourse

For the Discourse integration (e.g. showing comment threads) we can refer to our own forum privacy policy. I suggest creating a separate section that offers a summary, then provides the link to the full policy that resides on community.humanetech.com

Other requirements

• A date from when the policy is effective
• A mention about the (CC-BY) license for content, and that all submitted data will be permanently and publicly available (see Wikipedia PP for example)

Need to investigate other requirements:

• Age restrictions of those committing to the website
• GDPR compliance

[aschrijver]

I just noted the existence of _pages/terms.md which contains Terms and Conditions and Privacy Policy texts provided for the minimal mistakes theme.

Some of these texts may be usable for inclusion in the PP, after which the page can be deleted.