nova-web/web/templates/legal/privacy.html

{% include 'common/begin.html' %}

<main>
    <h1>Privacy</h1>
    <p>
        We can gurantee that the following information is completely up-to-date. We don't have lawyers,
        but write this pricacy policy to the best of our knowledge and belief.
    </p>

    <h2>Data we collect</h2>
    <p>
        <h3>Website requests</h3>
        <ul>
            <li>
                Full HTTP request information, including IP address, user agent, other headers, cookies, parameters, JSON payload, request body, etc.
            </li>
            <li>
                We use <a href="https://www.cloudflare.com/privacypolicy/" target="_blank"><i>
                    Cloudflare
                </i></a> to protect against botnets, DDoS and other attacks.
                Please also read their privacy policy.
            </li>
            <li>
                May be kept for an indefinite period of time.
            </li>
        </ul>

        <h3>Accounts</h3>
        <ul>
            <li>
                Creation date, last usage date & time and other statistics
            </li>
            <li>
                May be kept for an indefinite period of time.
            </li>
        </ul>

        <h3>API requests</h3>
        <ul>
            Full HTTP request information, including IP address, user agent, other headers, cookies, parameters, JSON payload, request body, etc.
            <li>
                May be kept for an indefinite period of time.
            </li>
            <li>
                May be given to third parties, but not for ads, but for the functionality.
            </li>
        </ul>
    </p>

    <h2>How you can protect your privacy</h2>
    <p>
        Privacy is not just a human right, but one of our biggest concerns.
        Thus, we provide you some information about how you can avoid tracking.
    <p>

    <h3>Use the <a href="https://noscript.net/" target="_blank">NoScript browser extension</a></h3>
    <p>
        The drawbacks of using NoScript are that some features may not work and that you have to manually allow certain scripts etc.
        <br><br>
        We personally don't recommend disabling JavaScript on our website, but if you are really concerned about your privacy, go ahead.
    </p>

    <h3>Clear your browser history and cookies</h3>
    <p>
        We mainly use cookies to provide functionality, e.g. to store your session token, so you do not have to log in every time you visit our website.
        But malware could attack your browser and steal your cookies, which is why you should clear your cookies regularly.
        Additionally, malware could decrypt and read your browser password database, which is why you should use a secure password manager instead.
        We recommend <a href="https://keepass.info/" target="_blank">KeePass</a> and <a href="https://bitwarden.com/" target="_blank">Bitwarden</a>.  
        You can use the built-in incognito mode of your browser or clear your history and cookies manually.
        Additionally, you can use a browser extension like
        <a href="https://github.com/Cookie-AutoDelete/Cookie-AutoDelete" target="_blank">Cookie AutoDelete</a>
        to automatically delete cookies.
    </p>

    <h3>Other attack vectors (browser, OS, ...)</h3>
    <p>
        There are a lot of other different ways your privacy could be compromised, but we cannot list them all here.
        You can find more information about how to protect your privacy on the following websites:
        <ul>
            <li>
                <a href="https://www.privacyguides.org/en/" target="_blank">PrivacyGuides</a>
            </li>
            <li>
                <a href="https://techlore.tech/goincognito" target="_blank">Techlore's GoIncognito course</a>
            </li>
            <li>
                <a href="https://thenewoil.org/" target="_blank">TheNewOil</a>
            </li>
        </ul>
    </p>
</main>

{% include 'common/end.html' %}