From 19a4eada25fce21e73ac2bf310361c352f4f0683 Mon Sep 17 00:00:00 2001 From: Dmitry Verkhoturov Date: Sun, 7 Nov 2021 12:47:02 +0100 Subject: [PATCH] move privacy section of readme to the docs site --- README.md | 15 --------------- site/src/pages/index.md | 14 ++++++++++++++ 2 files changed, 14 insertions(+), 15 deletions(-) diff --git a/README.md b/README.md index 196921ed..76d3dedc 100644 --- a/README.md +++ b/README.md @@ -45,7 +45,6 @@ All remark42 documentation is available [by the link](https://remark42.com/docs/ - [Admin users](#admin-users) - [Docker parameters](#docker-parameters) - [Build from the source](#build-from-the-source) - - [Privacy](#privacy) ## Install @@ -105,20 +104,6 @@ services: * to build a single binary for direct execution - `make OS= ARCH=`. This step will produce executable `remark42` file with everything embedded -## Privacy - -* Remark42 is trying to be very sensitive to any private or semi-private information. -* Authentication requesting the minimal possible scope from authentication providers. All extra information returned by them is immediately dropped and not stored in any form. -* Generally, Remark42 keeps user ID, username and avatar link only. None of these fields exposed directly - ID and name hashed, avatar proxied. -* There is no tracking of any sort. -* Login mechanic uses JWT stored in a cookie (HttpOnly, secured). The second cookie (XSRF_TOKEN) is a random ID preventing CSRF. -* There is no cross-site login, i.e. user's behavior can't be analyzed across independent sites running Remark42. -* There are no third-party analytic services involved. -* User can request all information Remark42 knows about and export to gz file. -* Supported complete cleanup of all information related to user's activity. -* Cookie lifespan can be restricted to session-only. -* All potentially sensitive data stored by Remark42 hashed and encrypted. - ## Related projects * [A Helm chart for Remark42 on Kubernetes](https://github.com/groundhog2k/helm-charts/tree/master/charts/remark42) diff --git a/site/src/pages/index.md b/site/src/pages/index.md index 471ca81c..f2b7d66e 100644 --- a/site/src/pages/index.md +++ b/site/src/pages/index.md @@ -31,4 +31,18 @@ Remark42 gives you opportunity to have self-hosted, lightweight, and simple (yet * Integration with automatic SSL (direct or via reproxy) * Privacy focused +## Privacy + +* Remark42 is trying to be very sensitive to any private or semi-private information. +* Authentication requesting the minimal possible scope from authentication providers. All extra information returned by them is immediately dropped and not stored in any form. +* Generally, Remark42 keeps user ID, username and avatar link only. None of these fields exposed directly - ID and name hashed, avatar proxied. +* There is no tracking of any sort. +* Login mechanic uses JWT stored in a cookie (HttpOnly, secured). The second cookie (XSRF_TOKEN) is a random ID preventing CSRF. +* There is no cross-site login, i.e. user's behavior can't be analyzed across independent sites running Remark42. +* There are no third-party analytic services involved. +* User can request all information Remark42 knows about and export to gz file. +* Supported complete cleanup of all information related to user's activity. +* Cookie lifespan can be restricted to session-only. +* All potentially sensitive data stored by Remark42 hashed and encrypted. +
— The Remark42 Team