Home Explore Help
Register Sign In
biotorrents
/
Gazelle
forked from Oppaitime/Gazelle
Watch 2
Star 0
Fork 0
Code Issues 0 Pull Requests 0 Releases 2 Wiki Activity
Browse Source

GDPR/DMCA: 2nd draft under counsel

biotorrents 4 years ago
parent
f3643602ee
commit
45c60ee4e0
3 changed files with 72 additions and 135 deletions
Unified View Show Diff Stats
  1. 12
    24
      sections/legal/dmca.php
  2. 59
    110
      sections/legal/privacy.php
  3. 1
    1
      sections/register/step1.php

+ 12
- 24
sections/legal/dmca.php View File

1 
 <?php
 1 
 <?php
2 
 declare(strict_types=1);
 2 
 declare(strict_types=1);
3
3
4 
-View::show_header('DMCA');
5 
-?>
4 
+View::show_header('DMCA'); ?>
6
5
7 
 <h2>DMCA Information</h2>
 6 
 <h2>DMCA Information</h2>
8
7
9 
 <section class="tldr">
 8 
 <section class="tldr">
10 
   <p>
 9 
   <p>
11 
     <em>If</em> you're a copyright owner or an agent of one,
 10 
     <em>If</em> you're a copyright owner or an agent of one,
12 
-    <em>and</em> you believe that user-generated content (UGC) on the domain
11 
+    <em>and</em> you believe that user-generated content on the domain
13 
     https://biotorrents.de infringes your copyrights:
 12 
     https://biotorrents.de infringes your copyrights:
14 
     <em>then</em> you may notify our Digital Millennium Copyright Act (DMCA) agent in writing.
 13 
     <em>then</em> you may notify our Digital Millennium Copyright Act (DMCA) agent in writing.
15 
   </p>
 14 
   </p>
17 
   <ul class="p">
 16 
   <ul class="p">
18
17
19 
     <li>
 18 
     <li>
20 
-      Identification of the copyrighted work claimed to have been infringed.
19 
+      Identification of the copyrighted work you claim is infringed.
21 
       <em>Please include your copyright registration number or proof of status pending.</em>
 20 
       <em>Please include your copyright registration number or proof of status pending.</em>
22 
       Claims for U.S. works require registration.
 21 
       Claims for U.S. works require registration.
23 
-      Requests without a registration number will be ignored.
24 
     </li>
 22 
     </li>
25
23
26 
     <li>
 24 
     <li>
27 
-      Identification of the material that is claimed to be infringing.
25 
+      Identification of the material you claim is infringing.
28 
       To speed up processing, please include:
 26 
       To speed up processing, please include:
29 
       (1) the permalink <code>[PL]</code> URI, <em>and</em>
 27 
       (1) the permalink <code>[PL]</code> URI, <em>and</em>
30 
       (2) the BitTorrent <code>info_hash</code>.
 28 
       (2) the BitTorrent <code>info_hash</code>.
31 
     </li>
 29 
     </li>
32
30
33 
     <li>
 31 
     <li>
34 
-      A statement that you have a good faith belief that use of the material in the manner complained of is not
35 
-      authorized by the copyright owner, its agent, or the law.
32 
+      A statement that you have a good faith belief that the material's use in the manner you complain of
33 
+      isn't authorized by the copyright owner, its agent, or the law.
36 
     </li>
 34 
     </li>
37
35
38 
     <li>
 36 
     <li>
39 
-      A statement that the information in the notification is accurate, and under penalty of perjury,
40 
-      that you're authorized to act on behalf of the owner of an exclusive right that is allegedly infringed.
37 
+      A statement that the notification's information is accurate, and under penalty of perjury,
38 
+      that you're authorized to act on behalf of an allegedly infringed exclusive right.
41 
     </li>
 39 
     </li>
42
40
43
41
56 
     Omics Tools LLC reserves the right to ignore requests for unregistered works.
 54 
     Omics Tools LLC reserves the right to ignore requests for unregistered works.
57 
   </p>
 55 
   </p>
58
56
59 
-  <p>
60 
-    We authenticate all valid requests.
61 
-    As a stopgap pending investigation,
62 
-    access to the targets of valid requests will be expeditiously disabled.
63 
-  </p>
64 
-
65 
-  <p>
66 
-    All relevant parties will be notified and updated during the investigation.
67 
-    The targets of successful claims will then be deleted.
68 
-  </p>
69 
-
57 
+  <?php
58 
+  /*
70 
   <p>
 59 
   <p>
71 
     Circumstances that may delay processing, including not limited:
 60 
     Circumstances that may delay processing, including not limited:
72 
   </p>
 61 
   </p>
73
62
74 
   <ul class="p">
 63 
   <ul class="p">
75 
-
76 
     <li>
 64 
     <li>
77 
       URI formulations that violate BioTorrents.de's normal access rules,
 65 
       URI formulations that violate BioTorrents.de's normal access rules,
78 
       e.g., unsecured HTTP, <em>or</em> requests that fail to identify specific pieces of UGC.
 66 
       e.g., unsecured HTTP, <em>or</em> requests that fail to identify specific pieces of UGC.
88 
       or encoded in other formats than UTF-8 or ASCII.
 76 
       or encoded in other formats than UTF-8 or ASCII.
89 
     </li>
 77 
     </li>
90
78
91 
-
92 
     <li>
 79 
     <li>
93 
       PO boxes, addresses outside the U.S., or addresses that can't accept USPS Certified Mail.
 80 
       PO boxes, addresses outside the U.S., or addresses that can't accept USPS Certified Mail.
94 
       VoIP telephone numbers or numbers without a <code>+1</code> country code.
 81 
       VoIP telephone numbers or numbers without a <code>+1</code> country code.
103 
       Any email that violates
 90 
       Any email that violates
104 
       <a href="https://www.law.cornell.edu/uscode/text/15/7704">15 USC 7704(a)</a>.
 91 
       <a href="https://www.law.cornell.edu/uscode/text/15/7704">15 USC 7704(a)</a>.
105 
     </li>
 92 
     </li>
106 
-
107 
   </ul>
 93 
   </ul>
94 
+  */ ?>
108
95
109 
   <p>
 96 
   <p>
97 
+    We'll expeditiously disable access to the targets of valid requests.
110 
     Our agent to receive notifications of claimed infringement is:
 98 
     Our agent to receive notifications of claimed infringement is:
111 
   </p>
 99 
   </p>
112
100

+ 59
- 110
sections/legal/privacy.php View File

6 
 <h2>Privacy Policy</h2>
 6 
 <h2>Privacy Policy</h2>
7
7
8 
 <section class="tldr">
 8 
 <section class="tldr">
9 
-
10 
   <p>
 9 
   <p>
11 
-    This policy explains how Omics Tools LLC handles the personal data we collect from you when you use our website.
12 
-    You grant consent on account registration by checking the box that reads,
13 
-    "I consent to the privacy policy and may revoke my consent at any time."
10 
+    Omics Tools LLC safeguards the personal data we collect from you on our website.
11 
+    You consent on account registration by checking the box labelled,
12 
+    "I consent to the privacy policy."
14 
   </p>
 13 
   </p>
15
14
16
15
19 
   </h3>
 18 
   </h3>
20
19
21 
   <p>
 20 
   <p>
22 
-    We collect usernames, email addresses, GPG keys,
23 
-    passphrases, API keys, site activity and preferences,
24 
-    IP addresses, and server error logs.
21 
+    We collect and use personal data defined as
25 
   </p>
 22 
   </p>
26
23
24 
+  <ul>
25 
+    <li>
26 
+      usernames, email addresses, passphrases, and 2FA seeds;
27 
+    </li>
28 
+
29 
+    <li>
30 
+      GPG keys, IRC keys, API keys, passkeys, and authkeys;
31 
+    </li>
32 
+
33 
+    <li>
34 
+      IP addresses, and login and access timestamps;
35 
+    </li>
36 
+
37 
+    <li>
38 
+      account preferences, activity, and history;
39 
+    </li>
40 
+
41 
+    <li>
42 
+      and server error logs.
43 
+    </li>
44 
+  </ul>
45 
+
27 
   <p>
 46 
   <p>
28 
-    We don't collect access logs or compile personal data for any commercial reason.
29 
-    Also, we explicitly deny all known browser features, including not limited:
30 
-    camera, microphone, sensors, wake-lock, USB, encrypted media, autoplay, etc.
47 
+    We don't collect cross-origin data.
48 
+    Also, we don't access
49 
+    <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Feature-Policy#directives">browser features</a>
50 
+    such as camera, microphone, and sensors.
31 
   </p>
 51 
   </p>
32
52
33 
   <p>
 53 
   <p>
34 
-    You directly provide us with most of the data we collect.
35 
-    We collect and process your personal data when you
54 
+    You directly provide us with most personal data.
55 
+    We collect data when you
36 
   </p>
 56 
   </p>
37
57
38 
   <ul>
 58 
   <ul>
45 
     </li>
 65 
     </li>
46
66
47 
     <li>
 67 
     <li>
48 
-      participate in our forums and chat rooms, and
68 
+      participate in our forums and chat rooms,
49 
     </li>
 69 
     </li>
50
70
51 
     <li>
 71 
     <li>
52 
-      use our website with cookies or API keys.
72 
+      and use our website with cookies or API keys.
53 
     </li>
 73 
     </li>
54 
   </ul>
 74 
   </ul>
55 
   <br />
 75 
   <br />
60 
   </h3>
 80 
   </h3>
61
81
62 
   <p>
 82 
   <p>
63 
-    We only use your data to manage your account and administer the site.
64 
-    We never sell or otherwise provide data to third parties, except by authenticated subpoena.
65 
-  </p>
66 
-
67 
-  <p>
68 
-    All data read, written, or deleted under this policy will only be managed by SQL queries,
69 
-    and any data returned will only be provided as raw output (database dumps).
83 
+    We use your personal data to manage your account and administer the site.
84 
+    We don't sell or provide data to third parties, except as required by law.
70 
   </p>
 85 
   </p>
71
86
72 
   <p>
 87 
   <p>
73 
-    We securely store your data on our hardened MariaDB instance.
74 
-    Only Unix socket connections are allowed, and certain services like IRC are denied.
75 
-    Database tools aren't accessible on the public internet.
88 
+    We store your personal data on our own servers.
89 
+    Sensitive data is encrypted or hashed, defined as:
90 
+    email and IP addresses, private messages, passphrases, and API keys.
76 
   </p>
 91 
   </p>
77
92
78 
   <p>
 93 
   <p>
79 
-    Email and IP addresses, and private messages between users,
80 
-    are encrypted and then decrypted in memory.
81 
-    Certain data is hashed before storage and therefore unrecoverable,
82 
-    including passphrases and API keys.
83 
-    Please don't request ciphertext.
94 
+    We'll keep your personal data until account termination.
95 
+    Please contact us to terminate your account.
96 
+    Termination deletes your personal data and revokes your passkey.
84 
   </p>
 97 
   </p>
85
98
86 
   <p>
 99 
   <p>
87 
-    We'll keep your data for your account's lifetime.
88 
-    When that time expires, we'll delete your data by written request.
100 
+    Note that we may need to keep data for archiving purposes.
89 
   </p>
 101 
   </p>
90
102
91
103
94 
   </h3>
 106 
   </h3>
95
107
96 
   <p>
 108 
   <p>
97 
-    We'd like to make sure you're fully aware of your data protection rights.
98 
-    Each user is entitled to GDPR protection regardless of their jurisdiction.
99 
-  </p>
100 
-
101 
-  <p>
102 
-    Please attach a screenshot of your profile page to prove account ownership for any transaction.
103 
-    It's okay to redact sensitive data like email and passkey.
109 
+    EU residents are entitled to GDPR protections.
110 
+    Please attach a screenshot of your profile page to prove account ownership,
111 
+    and redact sensitive data if you wish.
104 
   </p>
 112 
   </p>
105
113
106 
   <ul class="p">
 114 
   <ul class="p">
107 
     <li>
 115 
     <li>
108 
       <strong>Access.</strong>
 116 
       <strong>Access.</strong>
109 
-      You have the right to request copies of your data.
117 
+      You have the right to request copies of your personal data.
110 
       We may charge a small fee for this service.
 118 
       We may charge a small fee for this service.
111 
     </li>
 119 
     </li>
112
120
113 
     <li>
 121 
     <li>
114 
       <strong>Rectification.</strong>
 122 
       <strong>Rectification.</strong>
115 
-      You have the right to request that we correct what you believe is inaccurate,
116 
-      and to request that we complete what you believe is not.
123 
+      You have the right to request we correct what you believe is inaccurate,
124 
+      and to request we complete what you believe is not.
117 
     </li>
 125 
     </li>
118
126
119 
     <li>
 127 
     <li>
120 
       <strong>Erasure.</strong>
 128 
       <strong>Erasure.</strong>
121 
-      You have the right to request that we erase your data, under certain conditions.
129 
+      You have the right to request we erase your personal data on certain conditions.
122 
     </li>
 130 
     </li>
123
131
124 
     <li>
 132 
     <li>
125 
       <strong>Restrict Processing.</strong>
 133 
       <strong>Restrict Processing.</strong>
126 
-      You have the right to request that we restrict processing your data,
127 
-      under certain conditions.
134 
+      You have the right to request we restrict processing your personal data on certain conditions.
128 
     </li>
 135 
     </li>
129
136
130 
     <li>
 137 
     <li>
131 
       <strong>Object to Processing.</strong>
 138 
       <strong>Object to Processing.</strong>
132 
-      You have the right to object to our processing your data, under certain conditions.
139 
+      You have the right to object to our processing your personal data on certain conditions.
133 
     </li>
 140 
     </li>
134
141
135 
     <li>
 142 
     <li>
136 
       <strong>Data Portability.</strong>
 143 
       <strong>Data Portability.</strong>
137 
-      You have the right to request that we transfer data we've collected to you or to others,
138 
-      under certain conditions.
144 
+      You have the right to request we transfer personal data we've collected to you or to others,
145 
+      on certain conditions.
139 
     </li>
 146 
     </li>
140 
   </ul>
 147 
   </ul>
141
148
142 
   <p>
 149 
   <p>
143 
     If you make a request, we have one month to respond.
 150 
     If you make a request, we have one month to respond.
144 
-    Please contact us if you'd like to exercise any of these rights.
151 
+    Please contact us if you'd like to exercise these rights.
145 
   </p>
 152 
   </p>
146
153
147
154
154 
     When you log into our website, we save cookies to your browser's local storage.
 161 
     When you log into our website, we save cookies to your browser's local storage.
155 
   </p>
 162 
   </p>
156
163
157 
-  <p>
158 
-    We strongly encourage you to use an updated browser with sandboxed tabs,
159 
-    and to set your browser to deny disk access and wipe transient data on shutdown.
160 
-  </p>
161 
-
162 
   <p>
 164 
   <p>
163 
     We use cookies to keep you signed in.
 165 
     We use cookies to keep you signed in.
164 
     Our secure session cookie parameters include:
 166 
     Our secure session cookie parameters include:
208 
   </h3>
 210 
   </h3>
209
211
210 
   <p>
 212 
   <p>
211 
-    We regularly review our policy and publish updates here.
212 
-    Updates will usually describe new security developments.
213 
-    We last updated this policy on 2021-02-11.
213 
+    We last updated this policy on 2021-02-12.
214 
   </p>
 214 
   </p>
215
215
216
216
219 
   </h3>
 219 
   </h3>
220
220
221 
   <p>
 221 
   <p>
222 
-    If you have any questions about our policy,
223 
-    the data we hold on you,
224 
-    or you'd like to exercise one of your data protection rights,
222 
+    If you have questions about our policy,
223 
+    the personal data we hold on you,
224 
+    or you'd like to exercise your data protection rights,
225 
     please don't hesitate to contact us.
 225 
     please don't hesitate to contact us.
226 
   </p>
 226 
   </p>
227
227
245 
     gdpr at biotorrents dot de
 245 
     gdpr at biotorrents dot de
246 
   </p>
 246 
   </p>
247
247
248 
-
249 
-  <h3>
250 
-    How to contact the authorities
251 
-  </h3>
252 
-
253 
-  <p>
254 
-    Should you wish to report a complaint,
255 
-    or if you feel that we haven't satisfactorily addressed your concerns,
256 
-    contact the Information Commissioner's Office.
257 
-  </p>
258 
-
259 
-
260 
-  <h3>
261 
-    COPPA
262 
-  </h3>
263 
-
264 
-  <p>
265 
-    Omics Tools LLC doesn't knowingly collect data from under-thirteens.
266 
-    Our terms require that all users be 18 or older.
267 
-    If you believe a child gave out personal data on BioTorrents.de,
268 
-    please contact us at once.
269 
-  </p>
270 
-
271 
-  <p>
272 
-    <strong>
273 
-      Email
274 
-    </strong>
275 
-    <br />
276 
-    coppa at biotorrents dot de
277 
-  </p>
278 
-
279 
-
280 
-  <h3>
281 
-    HIPAA
282 
-  </h3>
283 
-
284 
-  <p>
285 
-    Omics Tools LLC doesn't knowingly collect data that violates patient privacy.
286 
-    We publish guides on how to anonymize data, and our rules restrict unsanitized data.
287 
-    If you believe that content on BioTorrents.de compromises a patient's identity,
288 
-    please contact us at once.
289 
-  </p>
290 
-
291 
-  <p>
292 
-    <strong>
293 
-      Email
294 
-    </strong>
295 
-    <br />
296 
-    hipaa at biotorrents dot de
297 
-  </p>
298 
-
299 
   <p>
 248 
   <p>
300 
     Please use
 249 
     Please use
301 
     <a href="https://pgp.mit.edu/pks/lookup?op=get&search=0x760EBED7CFE266D7" target="_blank">GPG 760EBED7CFE266D7</a>
 250 
     <a href="https://pgp.mit.edu/pks/lookup?op=get&search=0x760EBED7CFE266D7" target="_blank">GPG 760EBED7CFE266D7</a>

+ 1
- 1
sections/register/step1.php View File

89 
       <td align="left">
 89 
       <td align="left">
90 
         <input type="checkbox" name="readwiki" id="readwiki" value="1" <?php if (!empty($_REQUEST['readwiki'])) { ?>
 90 
         <input type="checkbox" name="readwiki" id="readwiki" value="1" <?php if (!empty($_REQUEST['readwiki'])) { ?>
91 
         checked="checked"<?php } ?> />
 91 
         checked="checked"<?php } ?> />
92 
-        <label for="readwiki">I consent to the privacy policy and may revoke my consent at any time</label>
92 
+        <label for="readwiki">I consent to the <a href="/legal.php?p=privacy">privacy policy</a></label>
93 
         <br /><br />
 93 
         <br /><br />
94
94
95 
       </td>
 95 
       </td>

Write Preview
Loading…
Cancel
Save