diff options
| author | Daniel Micay <danielmicay@gmail.com> | 2020-11-17 21:40:13 -0500 |
|---|---|---|
| committer | Daniel Micay <danielmicay@gmail.com> | 2020-11-17 21:41:24 -0500 |
| commit | 7b1b2fa7c78a1be7a8a6c14c7d3dd179a3a8cc14 (patch) | |
| tree | d2a0a2151f95c92cebc5f3de7e7e1268d4453cf9 | |
| parent | fc695cb1ee1457eaffaba7b00b01cf2883b6416c (diff) | |
document baseline privacy policy
| -rw-r--r-- | static/faq.html | 28 |
1 files changed, 28 insertions, 0 deletions
diff --git a/static/faq.html b/static/faq.html index fa286520..a15ee5cf 100644 --- a/static/faq.html +++ b/static/faq.html @@ -79,6 +79,7 @@ tracking and silent SMS?</a></li> <li><a href="#default-connections">Which connections do the OS and bundled apps make by default?</a></li> + <li><a href="#privacy-policy">What is the privacy policy for GrapheneOS services?</a></li> <li><a href="#default-dns">Which DNS servers are used by default?</a></li> <li><a href="#custom-dns">How do I use a custom DNS server?</a></li> <li><a href="#private-dns-ip">Why does Private DNS not accept IP @@ -546,6 +547,33 @@ </li> </ul> + <h3 id="privacy-policy"> + <a href="#privacy-policy">What is the privacy policy for GrapheneOS services?</a> + </h3> + + <p>GrapheneOS services follow the <a href="https://www.eff.org/dnt-policy">EFF's + privacy-friendly Do Not Track (DNT) policy</a> for all users of our publicly available + services, not just those opting out of tracking via Do Not Track. Our policy is the + same with "DNT User" redefined as "user" to cover any user. This serves as a standard + privacy policy across all of our public services:</p> + + <ul> + <li>attestation.app</li> + <li>connectivitycheck.grapheneos.org</li> + <li>grapheneos.org</li> + <li>releases.grapheneos.org</li> + <li>time.grapheneos.org</li> + </ul> + + <p>Our implementation of the policy primarily consists of making sure our servers only + retain logs for 10 days. In practice, we follow much stricter privacy guidelines than + than the rules laid out in the EFF policy. However, we don't want to define our own + complex, ad-hoc privacy policy rather than reusing a sensible one with serious thought + put into it by experts.</p> + + <p>Our mail server (mail.grapheneos.org) isn't offered as a public service and doesn't + have a privacy policy since it's only used internally by GrapheneOS developers.</p> + <h3 id="default-dns"> <a href="#default-dns">Which DNS servers are used by default?</a> </h3> |