Privacy, considered.
A draft framework for how privacy information should be presented.
Last reviewed: not yet reviewed
About this draft
This page is reserved for a clear explanation of privacy practices once those practices have been defined and reviewed.
Accounts
An account is used to comment and to keep a list of saved research and skills.
An account is used to comment and to keep a list of saved research and skills.
- TODO: state exactly which fields an account stores (email, display name, password hash) and where they are held.
- TODO: describe the lawful basis for processing, retention period and how someone deletes their account.
- TODO: name the authentication provider and any sub-processors once chosen.
Comments
Comments are public and attached to a piece of research or to a skill.
Comments are public and attached to a piece of research or to a skill.
- TODO: describe what is published with a comment (display name and text) and whether an email is ever visible.
- TODO: explain moderation, hiding and deletion, including how a person asks for their comment to be removed.
- TODO: state the retention period for hidden comments.
Anonymous analytics
A random visitor identifier is stored in the browser so page views can be counted without an account.
A random visitor identifier is stored in the browser so page views can be counted without an account.
- TODO: confirm the identifier is random, stored only in the browser, and rotated on the stated schedule.
- TODO: list what is recorded (page path, time, referring domain) and what is deliberately not recorded.
- TODO: explain how to opt out and whether a cookie consent banner is required in each market.
What belongs here
A final notice should accurately describe the information involved, its purposes, any service providers, retention, and the choices available to people. No such operational claims are made here.