Privacy policy: Difference between revisions

From DXGL Wiki
Jump to navigation Jump to search
(→‎Protection of information: Sunset TLS 1.2, launch limited functionality HTTP mode)
Line 58: Line 58:
* Any user may create an account on the AppDB system, which is also separate from the MediaWiki system.
* Any user may create an account on the AppDB system, which is also separate from the MediaWiki system.
** E-mail addresses in the AppDB system are not publicly displayed, but registered users may be able to e-mail you through the site if you submit any content to the AppDB.
** E-mail addresses in the AppDB system are not publicly displayed, but registered users may be able to e-mail you through the site if you submit any content to the AppDB.
* This website has a phpBB based forum, with separate registration. You may control the availability of your information to other useres via the User Control Panel link at the top left of the page.
* This website has a phpBB based forum, with separate registration. You may control the availability of your information to other users via the User Control Panel link at the top left of the page.  E-mail addresses are not disclosed to other users, although users may be able to e-mail each other using a web based form.
 
== Minimum Age to use services ==
In order to ensure compliance with the laws of the United States, you must be 13 years of age or older to register an account on this website.  Any user account found to belong to a user under 13 years of age (or the minimum age for your country, often 16 in Europe) will have that account information permanently deleted without notice.
* No personal information entered into this website will be used for any form of targeted marketing, however please note that if advertising is ever added to this website it may perform said marketing using data that isn't part of any user account maintained on this site (such data is strictly confidential and only disclosed per the terms below).
* This section does not apply to usage of this site where no personal data is provided.  However, if you are a minor please remember to get your parents' permission before installing any software provided on this website.


== Use of information ==
== Use of information ==

Revision as of 06:32, 14 November 2019

Please read the privacy policy before using this site.

Please look at the bottom of the page at https://www.dxgl.info/wiki/Privacy_policy to determine the last time the Privacy Policy was modified. To view changes, please click here.

Information automatically gathered

As with all web servers, when you access this site, the following standard information may be automatically stored by the server:

  • The current date and time
  • The page requested
  • Your user agent ID (which tells the type of browser you are using)
  • IP address may be logged if a server error occurs; this is a limitation of Nginx error logging. For normal access your IP address will not be logged.

These logs are occasionally deleted to create a `clean slate` when I debug my site, and sometimes to speed up backup operations, as I treat them as temporary.

BitTorrent downloads

This website offers one or more downloads using the "BitTorrent" protocol, for instance to distribute archive copies of the DXGL software and website. In order to deliver the content, your IP address will be temporarily stored and shared with other users, for the sole purpose to facilitate the acceleration of the content's downloading. This is so your BitTorrent client can share downloaded content with other users and help accelerate the delivery of the content. In addition, your BitTorrent client may publicly share your IP address over decentralized networks for the same purpose. Once you disconnect your BitTorrent client, the server will soon discontinue sharing your IP address.

Since for the purpose of avoiding the distribution of illegal or infringing files the BitTorrent tracker is programmed to only accept Torrent info-hashes authorized by this site, copyright protection organizations are requested to refrain from scraping IP addresses from this tracker.

The tracker is available via unencrypted HTTP for the purpose of compatibility with older and/or embedded BitTorrent clients. If your client supports HTTPS tracker URLs, you may modify the tracker portion of the Magnet link from http to https before pasting into your client.

Protection against unauthorized access

This server may contain one or more software applications designed to prevent unauthorized access to secure areas of the server. In this case, the logs generated by this security software will be e-mailed to a special mailbox on the server, and may be retained indefinitely and disclosed to the attacker's ISP as described under Use of Information.

  • Abuse logs will NOT be generated through normal, unauthenticated browsing of this website and only apply to private, administrative areas. For normal browsing, the rest of the Information Automatically Gathered section applies.

Cookies

  • Certain areas of this website use "cookies" so that the software can track logins and session information. Other than for the purpose of validating logins, these cookies are not used to identify you.
  • In addition, as described in the "Matomo" section below, one or more anonymized cookies are used for site analytics purposes.
  • You may disable cookies on your web browser if you wish; however you will be logged out of any area of the site using a login.
  • Embedded YouTube videos are set to use "Privacy-enhanced mode" and will not set cookies automatically on your system. YouTube however may set cookies as soon as you click to play those videos. For privacy information regarding YouTube, please see https://www.google.com/intl/en/policies/privacy/

Matomo

  • This website uses the Matomo platform (formerly known as Piwik) in order to gather aggregated information regarding the use of this website. No personal information is gathered as a result of this software, with the exception of IP address which will be used for statistical purposes.
    • This information is stored locally on the web server (this is self-hosted software), and will not be disclosed except under very limited circumstances as explained under the "Use of information" section.
    • Collected IP addresses will be partially anonymized; IPv4 addresses will have the last two octets set to 0 and IPv6 addresses will have the last 80 bits set to 0.
    • You may disable tracking by two methods.
      • If your browser has "Do Not Track" enabled, this will automatically disable analytics collection.
      • If you do not have "Do Not Track" enabled or your browser does not support this feature, you may use the following opt-out checkbox to disable or re-enable tracking on this website:


Information you provide

You may provide information to this website in the following ways:

  • By creating or editing a page (including discussion pages)
  • By requesting a Wiki account or confirming account creation
  • If you add to a discussion page while not logged on, your IP address will be recorded.
  • If you request a Wiki account, you will need to provide a valid E-mail address.
  • Any user may create a Bugzilla account, which is separate from the MediaWiki system. An E-mail address is required to send the activation E-mail and is used as your username.
    • Please note that E-mail addresses are publicly displayed when entering bug reports, so consider getting a free `disposable` account for use on public services such as Bugzilla.
  • Any user may create an account on the AppDB system, which is also separate from the MediaWiki system.
    • E-mail addresses in the AppDB system are not publicly displayed, but registered users may be able to e-mail you through the site if you submit any content to the AppDB.
  • This website has a phpBB based forum, with separate registration. You may control the availability of your information to other users via the User Control Panel link at the top left of the page. E-mail addresses are not disclosed to other users, although users may be able to e-mail each other using a web based form.

Minimum Age to use services

In order to ensure compliance with the laws of the United States, you must be 13 years of age or older to register an account on this website. Any user account found to belong to a user under 13 years of age (or the minimum age for your country, often 16 in Europe) will have that account information permanently deleted without notice.

  • No personal information entered into this website will be used for any form of targeted marketing, however please note that if advertising is ever added to this website it may perform said marketing using data that isn't part of any user account maintained on this site (such data is strictly confidential and only disclosed per the terms below).
  • This section does not apply to usage of this site where no personal data is provided. However, if you are a minor please remember to get your parents' permission before installing any software provided on this website.

Use of information

  • Server logs may be used for the purpose of diagnosing site problems.
  • All page edits are automatically made visible to the public.
  • Your username, or IP address if you are not logged on, will be visible to the public whenever an edit is made.
  • IP addresses or user names will act as your signature on any edits or discussions on this site, and will be used to help protect against abuse.
  • E-mail addresses will be used to send a validation link upon account registration. If an account is approved, it will be associated with your username for the life of your account. E-mail addresses collected through the Contact form or by direct e-mail will be used for the sole purpose of responding to your message.
  • The Bugzilla system will display your e-mail address along with any bug report you submit.
  • The forum will collect the IP address used to register for an account, as well as your E-mail address, which will be available to other registered members. This information is associated with your username for the life of the account.
  • Information submitted to this website will not be given to third parties, except in special circumstances:
    • If abuse of this site is detected, your information may be disclosed to your Internet provider's abuse contact.
    • In case of spam, your information (or the information provided by the spambot) may be reported to the provider's abuse contact as well as to anti-spam services, web safety forums, or trademark owners.
    • In extreme situations, such as criminal activity, information may be disclosed to the relevant authorities as the situation dictates.
    • Information may be disclosed in response to a valid legal order, warrant, or subpoena.
      • Information will NOT be disclosed if a legal order is from a foreign country, and such disclosure would violate human rights laws or be in violation of United States law. In this unlikely scenario (politics are not allowed on this website) I would seek assistance from legal counsel before continuing.

Protection of information

  • To protect sensitive information, certain areas of this website are protected with TLS and strong encryption. To ensure maximum security and proper functionality, please make sure your web browser is up to date, as this site supports TLS 1.2 with Perfect Forward Secrecy on supported browsers.
  • A web browser supporting at least TLS 1.2 and SHA-2 certificates is required to access many parts of this website.
  • To ensure maximum protection, parts of the website that require HTTPS will be inaccessible over plaintext HTTP. In addition, the https part of the site will deliver a Strict Transport Security header to instruct your browser to only use HTTPS. This site has been submitted to HSTS preloading lists on all major web browsers,
  • To ensure the security of the connection you can check that the certificate has been issued by Let's Encrypt Authority X3. Any CA other than Let's Encrypt means that your connection has more than likely been compromised, and you should run an anti-malware program, or if you are on a work or school network check with your network administrator.
    • For additional information on the protection of your privacy when connecting to this website please visit https://www.grc.com/fingerprints.htm?domain=www.williamfeely.info using a web browser that properly supports Extended Validation certificates (such as Chrome or Firefox) and ensure that "Gibson Research Corporation [US]" is displayed in the Address Bar. This will display the current fingerprint being used by www.williamfeely.info so you can compare it with the fingerprint displayed in your web browser's certificate information.

External links

  • External links are provided for your convenience in certain areas of this site. Please note that they are subject to their own privacy practices, and you should review their privacy policies.

Removal of information

If you have been granted a user name and would like it removed, please leave a message under the discussion tab of this page, with the title USERNAME REMOVAL. You must be logged on to the username that you wish to have removed.

  • Your username will still be associated to any contributions you have made, but I will blank out all personal information from the database.
  • To remove a Bugzilla account or any other account you may have on this website, please leave a message at https://www.dxgl.info/contact/ and I will remove the account from the Bugzilla system.
  • To remove a forum account, please send a Private Message to username William, and I will delete the username from the forums.

Access to data

If you would like access to data collected as part of any user accounts, please leave a message at https://www.dxgl.info/contact/ using the e-mail address that matches your user account. If your e-mail address has changed, please make sure to change it in your user account before contacting, for security purposes.