internal/web/templates/privacy.html

 1{{define "width"}}bounded{{end}}
 2{{define "title"}}privacy · {{.Site}}{{end}}
 3{{define "content"}}
 4<div class="landing">
 5<h1>Privacy</h1>
 6
 7<h2>The software</h2>
 8<p>This site runs <a href="https://gitbay.org/krz/gitbay">gitbay</a>, a
 9self-hosted, CLI-first git forge. The software makes no external
10requests from your browser: no analytics, no CDNs, no webfonts, no
11tracking of any kind. Everything you see is served from this host.</p>
12<p>What the server stores is what a forge needs to function: your
13account (username, email addresses, public SSH/PGP keys), the
14repositories and their contents, issues, merge requests, comments, and
15a security audit log of account and repository actions (recording the
16acting user, the action, and the public key fingerprint used). Web
17sessions use a single cookie, only after you log in. Private
18repositories are visible only to accounts you grant; to everyone else
19they are indistinguishable from nonexistent.</p>
20<p>Your data is portable by design: <code>gitbay auth export</code>
21downloads your account bundle, git data is yours by clone, and
22<code>gitbay migrate</code> moves everything to another instance.
23<code>gitbay auth delete</code>, or the bottom of the settings page,
24deletes the account seven days after the mailed link is opened; what it
25wrote on other people's repositories stays, attributed to
26<code>ghost</code>.</p>
27
28<h2>The mobile client</h2>
29<p>The iOS app is a client for an instance you name at sign-in. It has
30no account of its own, no sign-up, and no server of ours behind it: it
31speaks only to that instance, over HTTPS.</p>
32<p>Signing in stores one API token in the device Keychain. Which account
33is active is kept in app preferences; nothing else is retained on the
34device. The app embeds no analytics, no crash reporting, and no
35third-party SDK, so there is nothing to opt out of. Removing the account
36deletes the token from the Keychain.</p>
37<p>Tokens are minted over SSH or on the settings page and can be revoked at any time with
38<code>gitbay auth token revoke</code>, which ends the app's access
39immediately.</p>
40
41<h2>This instance ({{.Host}})</h2>
42{{if .Notice}}{{range paragraphs .Notice}}<p>{{.}}</p>{{end}}
43{{else}}<p class="desc">The operator of this instance has not added
44instance-specific notes. Questions about backups, retention, or
45jurisdiction go to the operator.</p>{{end}}
46</div>
47{{end}}