feat: add privacy policy and terms of service pages - #7
Merged
Merged
Conversation
Both pages describe what the app and the site actually do rather than a template. The privacy policy names the update check in UpdateChecker.swift as the only outbound connection, links the file, and says how to block it, which is what makes the no-collection claim checkable. It also discloses Google Fonts as the site's only third party. The terms lean on the MIT licence and state that the licence wins in any conflict, with a short section asking forks to pick their own name. Both are linked from the footer alongside hello@spreadpaper.app.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
/privacyand/terms, linked from the footer alongsidehello@spreadpaper.app.Why now
r/macapps gates main-feed posts behind a trust tier. Their Transparency path requires a real developer identity plus a site carrying a privacy policy and terms of service, and the site had neither. These pages are also the sort of thing directories and press pitches quietly expect.
What the privacy policy says
Written from what the code actually does rather than from a template. It states plainly that nothing is collected, then names the one thing that does touch the network:
UpdateChecker.swiftasksapi.github.comfor the latest release and fetchesCHANGELOG.md, sending aSpreadPaper/<version>user agent. The page links that file and explains how to block the call.That specificity is the point. A policy claiming to collect nothing while the app quietly opens a connection reads as a lie the first time somebody runs Little Snitch, even though it is not one. Disclosing it turns the liability into the proof.
It also discloses Google Fonts, which is the site's only third party and does receive visitor IP addresses, and covers Cloudflare request logs, the forwarding of
hello@spreadpaper.app, and GDPR rights.What the terms say
The MIT licence is the agreement and wins in any conflict. No warranty, in the licence's own terms. Official builds come only from GitHub releases. Your images stay yours and nothing is claimed over them. Contributions are taken as MIT. Forks are welcome but should pick their own name. Netherlands, Dutch law.
Checks
npm run checkclean,npm testpasses, both pages are in the sitemap.Two facts worth a second pair of eyes
hello@spreadpaper.appas the contact address.