Gazelle/sections/legal/privacy.php

<?php
declare(strict_types=1);

View::show_header('Privacy'); ?>

<h2>Privacy Policy</h2>

<section class="tldr">

  <p>
    This policy explains how Omics Tools LLC handles the personal data we collect from you when you use our website.
    You grant consent on account registration by checking the box that reads,
    "I consent to the privacy policy and may revoke my consent at any time."
  </p>


  <h3>
    Data collection: what and how
  </h3>

  <p>
    We collect usernames, email addresses, GPG keys,
    passphrases, API keys, site activity and preferences,
    IP addresses, and server error logs.
  </p>

  <p>
    We don't collect access logs or compile personal data for any commercial reason.
    Also, we explicitly deny all known browser features, including not limited:
    camera, microphone, sensors, wake-lock, USB, encrypted media, autoplay, etc.
  </p>

  <p>
    You directly provide us with most of the data we collect.
    We collect and process your personal data when you
  </p>

  <ul>
    <li>
      register online for our services,
    </li>

    <li>
      query the tracker for BitTorrent peers,
    </li>

    <li>
      participate in our forums and chat rooms, and
    </li>

    <li>
      use our website with cookies or API keys.
    </li>
  </ul>
  <br />


  <h3>
    Data use and storage
  </h3>

  <p>
    We only use your data to manage your account and administer the site.
    We never sell or otherwise provide data to third parties, except under subpoena.
  </p>

  <p>
    All data read, written, or deleted under this policy will only be managed by SQL queries,
    and any data returned will only be provided as database dumps.
  </p>

  <p>
    We securely store your data in our hardened MariaDB instance.
    Only Unix socket connections are allowed, and certain services like IRC are denied.
    Database tools aren't accessible on the public internet.
  </p>

  <p>
    Email and IP addresses, and private messages between users,
    are encrypted and then decrypted in memory.
    Certain data is hashed before storage and therefore unrecoverable,
    including passphrases and API keys.
    Please don't request ciphertext.
  </p>

  <p>
    We'll keep your data for your account's lifetime.
    Once this period expires, we'll delete your data by written request.
  </p>


  <h3>
    GDPR data protection rights
  </h3>

  <p>
    We'd like to make sure you're fully aware of your data protection rights.
    Every user is entitled to GDPR protections regardless of their jurisdiction:
  </p>

  <ul class="p">
    <li>
      <strong>Access.</strong>
      You have the right to request copies of your personal data.
      We may charge a small fee for this service.
    </li>

    <li>
      <strong>Rectification.</strong>
      You have the right to request that we correct what you believe is inaccurate,
      and to request that we complete what you believe is not.
    </li>

    <li>
      <strong>Erasure.</strong>
      You have the right to request that we erase your personal data, under certain conditions.
    </li>

    <li>
      <strong>Restrict Processing.</strong>
      You have the right to request that we restrict processing your personal data,
      under certain conditions.
    </li>

    <li>
      <strong>Object to Processing.</strong>
      You have the right to object to our processing your personal data, under certain conditions.
    </li>

    <li>
      <strong>Data Portability.</strong>
      You have the right to request that we transfer data we've collected to you or others,
      under certain conditions.
    </li>
  </ul>

  <p>
    If you make a request, we have one month to respond.
    Please contact us if you'd like to exercise any of these rights.
  </p>


  <h3>
    Cookies: what and how
  </h3>

  <p>
    Cookies are text files placed on your computer to store functional information.
    When you log into our website, we save cookies to your browser's local storage.
  </p>

  <p>
    We strongly encourage you to use an updated browser with sandboxed tabs,
    and to set your browser to deny disk permissions and to wipe transient data on shutdown.
  </p>

  <p>
    We use cookies to keep you signed in.
    Our secure session cookie parameters include
  </p>

  <ul>
    <li>
      one-day expiry time,
    </li>

    <li>
      scoped to https://biotorrents.de,
    </li>

    <li>
      TLS 1.2+ transmission only,
    </li>

    <li>
      unavailable to JavaScript APIs, and
    </li>

    <li>
      strict same-origin policy.
    </li>
  </ul>

  <p>
    You can set your browser to deny cookies
    but our website won't function as intended.
  </p>


  <h3>
    Other websites' policies
  </h3>

  <p>
    BioTorrents.de links to other websites.
    Our privacy policy only applies to our website.
    If you click an external link, please read their privacy policy.
  </p>


  <h3>
    Changes to our policy
  </h3>

  <p>
    We regularly review our policy and publish updates here.
    Updates will usually describe new security developments.
    We last updated this policy on 2021-02-11.
  </p>


  <h3>
    How to contact us
  </h3>

  <p>
    If you have any questions about our policy,
    the data we hold on you,
    or you'd like to exercise one of your data protection rights,
    please don't hesitate to contact us.
  </p>

  <p>
    <strong>
      Address
    </strong>
    <br />

    Data Protection Officer<br />
    Omics Tools LLC<br />
    30 N Gould St Ste 4000<br />
    Sheridan, WY 82801
  </p>

  <p>
    <strong>
      Email
    </strong>
    <br />
    gdpr at biotorrents dot de
  </p>

  <p>
    Please use
    <a href="https://pgp.mit.edu/pks/lookup?op=get&search=0x760EBED7CFE266D7" target="_blank">GPG 760EBED7CFE266D7</a>
    if you wish.
  </p>


  <h3>
    How to contact the appropriate authority
  </h3>

  <p>
    Should you wish to report a complaint,
    or if you feel that we haven't satisfactorily addressed your concerns,
    contact the Information Commissioner's Office.
  </p>
</section>

<?php View::show_footer();