diff --git a/docs/user/privacy.md b/docs/user/privacy.md new file mode 100644 index 000000000..fb329261f --- /dev/null +++ b/docs/user/privacy.md @@ -0,0 +1,47 @@ +# Privacy Policy + +## Solus Installations + +- Solus does not collect or store data from user's machines. +- Solus does not use telemetry or automatic error reporting. +- Some packages may include their own built-in telemetry (examples: Firefox, Steam). Solus cannot control data collected in this way. These packages may allow you to disable this telemetry. + +## Solus Forum (discuss.getsol.us) + +- You may view the forum without providing personal data +- Cookies are used to store login information +- We collect personal information when you register for an account: + - *Username* and (optional) *password* for account identification and authorization. + - *Email address* for account recovery and notifications. + - (optional) *Third party login information* to allow signing in using an SSO provider like *GitHub*. + - This information will be retained and processed to authenticate logins. The information will be retained until you delete your account. + +### Third Party Hosts + +Solus cannot control how data is collected and processed on the third party hosts we use. We use the following hosts: + +#### Cloudflare + +- The Solus package mirror `cdn.getsol.us` is hosted by Cloudflare +- [Cloudflare Privacy Policy](https://www.cloudflare.com/privacypolicy/) + +#### Github + +- The Solus homepage `getsol.us`, and the help center `help.getsol.us` are hosted by Github Pages +- Solus repositories are hosted on Github under the [`getsolus` organization](https://github.com/getsolus/) +- [Github Privacy Policy](https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement) + +#### Matrix + +- The Solus matrix rooms are hosted by the Matrix.org homeserver +- [Matrix.org Homeserver Privacy Notice](https://matrix.org/legal/privacy-notice) + + +## Your rights under the GDPR + +If you are covered by the [GDPR](https://gdpr.eu/) you have rights as a data subject. Your rights are detailed under [Chapter 3 of the GDPR](https://gdpr.eu/article-12-how-controllers-should-provide-personal-data-to-the-subject/). Additionally, you have the right to lodge a complaint with your national [Data Protection Authority](https://edpb.europa.eu/about-edpb/board/members_en). + +## Privacy Contact + +Any concerns or requests about personal data should be sent to [privacy@getsol.us](mailto:privacy@getsol.us) +