davidnet/legal
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
No description
13 commits 1 branch 0 tags 66 KiB
Find a file
Exact
dedestem 87539ece1d
 Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 
privacy_policy.md:
- State GDPR Article 6 lawful basis per data category
- Quantify backup retention (7 daily/4 weekly/6 monthly, verified against
  infrastructure/charts/cluster-backup/values.yaml) and its implication for
  post-deletion data
- Describe the actual day1/5/7 deletion timeline and moderator-immediate
  path, and disclose the argon2id-hashed deletion-certificate record kept
  as proof of deletion
- Describe the export-ready email notification

sub_processors.md:
- Add Strato's email/SMTP role (verified against core/utils/emails.ts in
  davidnet-backend, smtp.strato.com) - it was only listed as domain registrar
- Add the international-transfer mechanism for Cloudflare (EU SCCs + Data
  Privacy Framework, verified against Cloudflare's own published DPA)

security.md:
- Add encryption-in-transit (HTTPS/TLS) and password-hashing (argon2id,
  verified against routes/auth/signup.ts) statements
- Add a breach-notification commitment (GDPR Article 33/34)
- Add a safe-harbor statement for good-faith vulnerability reporters

All docs: add a revision-history pointer to /legal/versions instead of a
static last-updated date, since the version history already derives an
accurate timestamp from the real sync record and a hand-maintained date
would drift out of sync with actual edits.
2026-10-20 21:57:05 +02:00
.gitignore Ignore .claude worktrees and local settings 2026-10-06 19:23:01 +02:00
acceptable_use_policy.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
community_guidelines.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
contact.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
cookies.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
dmca_policy.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
privacy_policy.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
security.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
sub_processors.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00
terms_of_service.md Fix remaining legal-doc gaps: lawful basis, retention, breach notice, encryption, transfers 2026-10-20 21:57:05 +02:00