Move the account deletion endpoint from /maintenance/users/deletion to either: * https://danbooru.donmai.us/users/deactivate * https://danbooru.donmai.us/users/:id/deactivate This incidentally allows the Owner-level user to deactivate accounts belonging to other users. This is meant for things like deactivating inactive accounts with invalid or abusive names. This is limited to accounts below Gold level for security.
478 lines
22 KiB
Plaintext
478 lines
22 KiB
Plaintext
<% page_title "Privacy Policy" %>
|
||
|
||
<% @app_name = Danbooru.config.canonical_app_name %>
|
||
<% @canonical_url = Danbooru.config.canonical_url %>
|
||
<% @contact_email = Danbooru.config.contact_email %>
|
||
|
||
<div id="c-static">
|
||
<div id="a-privacy-policy" class="prose fixed-width-container">
|
||
<h1>Privacy Policy</h1>
|
||
|
||
<p><em>Last updated: July 5, 2020</em></p>
|
||
|
||
<p>This privacy policy describes what information <%= @app_name %>
|
||
(collectively "we", "us", "our") collects about you when you use our website
|
||
or services (referred to as our "Site" or "Services"), how we use your
|
||
information, and what rights you have in relation to your information.</p>
|
||
|
||
<p>If there are any terms or conditions in this privacy policy that you do
|
||
not agree with, please discontinue your use of our Site and our Services.
|
||
If you have any questions or concerns about this policy, or our practices
|
||
in regards to your personal information, you may contact us at
|
||
<%= link_to @contact_email, "mailto:#{@contact_email}" %>.</p>
|
||
|
||
<h4>What We Collect</h4>
|
||
|
||
<h6>Information You Provide To Us</h6>
|
||
|
||
<p><em>Summary: We collect information you directly give us.</em></p>
|
||
|
||
<p>We collect information you directly provide to us when you use our
|
||
Services. What information we collect depends on how you use our Services.
|
||
The information we may collect includes:</p>
|
||
|
||
<ul class="list-bulleted">
|
||
<li><strong>Account information</strong>.
|
||
We collect your username, password, and optionally your email address
|
||
when you create an account with us. We also store your account
|
||
preferences and settings. You may update your account information at
|
||
any time, including to change your username or to deactivate your
|
||
account, as described below.
|
||
</li>
|
||
|
||
<li><strong>Content you submit</strong>.
|
||
We collect content you submit to the Site. This includes images,
|
||
videos, or written content you post or upload to the Site, including
|
||
posts, comments, forum posts, translation notes, wiki pages, pools,
|
||
artist commentaries, and any other contributions you make to the Site.
|
||
</li>
|
||
|
||
<li><strong>Actions you take</strong>.
|
||
We collect information about actions you take when using the Site. This
|
||
includes favoriting or voting on content, flagging or reporting
|
||
content, sending private messages, saving searches, sending private
|
||
messages, and viewing forum threads. This also includes any edits or
|
||
changes you make to any content on the Site.
|
||
</li>
|
||
|
||
<li><strong>Payment information</strong>.
|
||
We collect information necessary to process your payment if you make a
|
||
purchase with us. This information includes your credit card number,
|
||
security code, and expiration date, your email address, your location
|
||
(such as your country, your postal code, your billing address, and your
|
||
location at time of purchase), and your IP address.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Other information</strong>.
|
||
You may choose to provide other information directly to us. For
|
||
example, we may collect information when you participate in surveys,
|
||
polls, promotions, giveaways, or other site-sponsored activities, or
|
||
you request support from us, or you contact us directly by email.
|
||
</li>
|
||
</ul>
|
||
|
||
<h6>Information We Collect Automatically</h6>
|
||
|
||
<p><em>Summary: We collect some information about you
|
||
automatically, including your IP address, information about your computer,
|
||
and information about your site usage.</em></p>
|
||
|
||
<ul class="list-bulleted">
|
||
<li><strong>Log and usage data</strong>. We may log information about you
|
||
when you visit or use our Services. This information may include your
|
||
IP address, browser type and version, computer or device type, device
|
||
characteristics such as screen resolution or operating system version,
|
||
language and timezone preferences, or your geolocation or country
|
||
information. This may also include information about your usage of the
|
||
Site, including posts you have viewed, pages you have visited, links
|
||
you have clicked, and searches you have performed.
|
||
</li>
|
||
|
||
<li><strong>Cookies</strong>. We may receive information from cookies,
|
||
which are pieces of data your browser stores and sends back to us when
|
||
making requests, and similar technologies. We use this information to
|
||
maintain login sessions and to store account settings and preferences.
|
||
</li>
|
||
</ul>
|
||
|
||
<h6>Information We Collect From Other Sources</h6>
|
||
|
||
<p><em>Summary: If you choose to link other sites to your
|
||
<%= @app_name %> account, we will receive profile information about you
|
||
from those sites.</em></p>
|
||
|
||
<p>We may receive information about you from other sources and combine that
|
||
information with other information we have about you. For example, we may
|
||
give you the option to link your <%= @app_name %> account to your accounts
|
||
on other sites, such as your Google, Twitter, or other accounts. If you
|
||
choose to link a third-party account to your <%= @app_name %> account, we
|
||
will collect information about you from that account as described in the
|
||
section titled <em>How We Handle Linked Accounts</em> below.</p>
|
||
|
||
<h4>How We Use Your Information</h4>
|
||
|
||
<p><em>Summary: We use your information to provide services to
|
||
you, to operate the Site, and to enforce our Terms of Service.</em></p>
|
||
|
||
<p>We use your information to:</p>
|
||
|
||
<ul class="list-bulleted">
|
||
<li>
|
||
<strong>Provide services to you</strong>.
|
||
We may use your information to provide you with our Services, and to
|
||
provide you with support or customer service.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Manage your account</strong>.
|
||
We may use your information to allow you to login and manage your
|
||
account, to store your account preferences, to help you recover access
|
||
to your account, and to send you administrative messages or notices
|
||
pertaining to you.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Protect our Services</strong>.
|
||
We may use your information to maintain the safe and secure operation
|
||
of our Services, including to enforce our Terms of Service, to detect
|
||
and prevent abuse of our Services, to moderate our Services, to block
|
||
spam, to prevent fraud, and to debug and troubleshoot problems with the
|
||
Site.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Monitor usage of our Services</strong>.
|
||
We may use your information to maintain and improve our Services,
|
||
to analyze trends, to monitor site usage and performance, to generate
|
||
internal reports and analytics, to research and develop new Services,
|
||
and to provide public reports about usage of the Site, including
|
||
information about popular searches, popular pages, and post view
|
||
counts.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Facilitate account creation and login</strong>.
|
||
If you choose to link a third-party account (such as your Google or
|
||
Twitter account) to your <%= @app_name %> account, we may use the
|
||
information you allowed us to collect from those third parties to
|
||
create a new <%= @app_name %> account for you, or to allow you to login
|
||
to <%= @app_name %> using your third-party account. See the section
|
||
below titled <em>How We Handle Linked Accounts</em> for
|
||
further information.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Respond to legal requests</strong>.
|
||
If we receive a subpoena or other legal request, we may need to inspect
|
||
the data we hold to determine how to respond.
|
||
</li>
|
||
</ul>
|
||
|
||
<h4>How Information About You Is Shared</h4>
|
||
|
||
<p><em>Summary: Most activity on <%= @app_name %> is public. We
|
||
won't share your information with advertisers without your consent. We
|
||
won't share information about you with third parties, except as required
|
||
under certain conditions.</em></p>
|
||
|
||
<p>When you use the Site, certain information about you may be shared with
|
||
other users, with Site moderators or other authorized users, or with the
|
||
general public. For example:</p>
|
||
|
||
<ul class="list-bulleted">
|
||
<li>
|
||
Any content you create or submit to the Site will be visible to other
|
||
users and to the general public, unless stated otherwise. This includes
|
||
your uploads, comments, forum posts, pools, wiki pages, translation
|
||
notes, and any other contributions you make to the Site.
|
||
</li>
|
||
|
||
<li>
|
||
Any edits you make to the Site will be visible to other users and to
|
||
the general public, unless stated otherwise. This includes your tag
|
||
edits, pool edits, wiki edits, translation note edits, artist edits,
|
||
commentary edits, and any other kind of edit, change, or modification
|
||
you make to any other content on the Site.
|
||
</li>
|
||
|
||
<li>
|
||
Your other personal activities on the Site, such as your favorites,
|
||
favorite groups, and saved searches, will normally be visible to other
|
||
users and to the general public, unless stated otherwise, or you choose
|
||
to make these things private.
|
||
</li>
|
||
|
||
<li>
|
||
Certain information, such as your favorites or favorite groups, you may
|
||
choose to make private. This information may still be visible to Site
|
||
moderators or to other authorized users in connection with legitimate
|
||
needs in operating the Site.
|
||
</li>
|
||
|
||
<li>
|
||
Your username will be publicly associated with any content you create
|
||
or edit on the Site. The date and time you created or edited the
|
||
content will also be publicly visible. Moderators may also be able to
|
||
see the IP address associated with any content you create or edit on
|
||
the Site.
|
||
</li>
|
||
|
||
<li>
|
||
When other users view your profile, they will be able to see
|
||
information about your activities on the Site, such as your username,
|
||
signup date, uploads, favorites, votes, post edit history, comments,
|
||
forum posts, Gold or Platinum status.
|
||
</li>
|
||
|
||
<li>
|
||
When you send another user a private message, the recipient of that
|
||
message will be able to see the content of your message, your username,
|
||
and the date and time the message was sent. Recipients may choose to
|
||
share your message publicly or with other users. Recipients may
|
||
choose to have private messages forwarded to their email accounts and,
|
||
as a result, any messages received by those users will be subject to
|
||
the terms and policies of the user’s email provider.
|
||
</li>
|
||
|
||
<li>
|
||
We may, at our sole discretion, allow Site moderators or other
|
||
authorized users to view private messages for legitimate needs in
|
||
connection with operating the Site, such as to prevent spam or to
|
||
enforce our Terms of Service.
|
||
</li>
|
||
|
||
<li>
|
||
We may allow third parties to access, collect, archive, or redistribute
|
||
information collected from our API or from public data dumps we may
|
||
provide. This information may be stored by third parties even after it
|
||
has been removed from <%= @app_name %>.
|
||
</li>
|
||
</ul>
|
||
|
||
<p>Otherwise, we do not share, sell, or give away your personal information
|
||
to third parties unless one of the following circumstances applies:</p>
|
||
|
||
<ul class="list-bulleted">
|
||
<li>
|
||
<strong>With your consent</strong>.
|
||
We may share your information with your consent or at your direction.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>With our service providers</strong>.
|
||
We may share information with vendors, consultants, and other service
|
||
providers (but not with advertisers or ad partners) who need access to
|
||
such information to carry out work for us. The partner's use of
|
||
personal data will be subject to appropriate confidentiality and
|
||
security measures.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Aggregated or anonymized information</strong>.
|
||
We may share information about you that has been aggregated or anonymized
|
||
such that it cannot reasonably be used to identify you. For example, we
|
||
may show the total number of times a post has been visited without
|
||
identifying who the visitors were, or how many times a tag has been
|
||
searched without identifying who the searchers were.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>To enforce our policies and rights</strong>.
|
||
We may share information if we believe your actions are in violation of
|
||
our user agreements, rules, or other policies, or to protect the
|
||
rights, property, and safety of ourselves and others.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>To comply with the law</strong>.
|
||
We may share information in response to a request for information if we
|
||
believe disclosure is in accordance with, or required by, any applicable
|
||
law, regulation, legal process or governmental request, including, but not
|
||
limited to, meeting national security or law enforcement requirements. To
|
||
the extent the law allows it, we will attempt to provide you with prior
|
||
notice before disclosing your information in response to such a request.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>In an emergency</strong>.
|
||
We may share information if we believe it's necessary to prevent imminent
|
||
and serious bodily harm to a person.
|
||
</li>
|
||
|
||
<li>
|
||
<strong>Business transfers</strong>. We may share or transfer your
|
||
information in connection with, or during negotiations of, any merger,
|
||
sale of company assets, financing, or acquisition of all or a portion
|
||
of our business to another company.
|
||
</li>
|
||
</ul>
|
||
|
||
<h6>How We Handle Linked Accounts</h6>
|
||
|
||
<p><em>Summary: If you link other sites to your <%= @app_name %>
|
||
account, we will receive profile information about you from those sites. We
|
||
won't disclose any information about you to those sites.</em></p>
|
||
|
||
<p>We may offer you the ability to sign up or login using third-party
|
||
social media accounts (such as your Google or Twitter accounts), or to link
|
||
other third-party accounts to your <%= @app_name %> account. If you choose
|
||
to do this, we will receive certain profile information about you from the
|
||
third-party service. The profile information we receive may vary depending
|
||
on the service concerned, but will often include your username, email
|
||
address, profile picture, as well as other information included in your
|
||
public profile.
|
||
|
||
<p>We will use the information we receive only for the purposes that are
|
||
described in this Privacy Policy, or to provide features that are described
|
||
to you when you link your account. You may unlink third-party accounts
|
||
from your account at any time, at which point we will delete any
|
||
information about you we have collected from these services.</p>
|
||
|
||
<p>We will not use any information collected about you from third-party
|
||
services for marketing purposes without your consent. We will not disclose
|
||
any information about you or your usage of our Site to any third-party
|
||
websites you have linked your <%= @app_name %> account with. Please note,
|
||
however, that we do not control, and are not responsible for, the behavior
|
||
of third-party websites. We recommend that you review their privacy
|
||
policies to understand how they collect, use and share your personal
|
||
information, and how you can set your privacy preferences on their sites
|
||
and apps.</p>
|
||
|
||
<h4>Controlling Your Information</h4>
|
||
|
||
<h6>Accessing and Changing Your Information</h6>
|
||
|
||
<p>If you would like to review or change the information in your account,
|
||
such as your user name, password, email address, or other settings, you
|
||
can visit your <%= link_to "account settings", settings_path %> and update
|
||
your settings.</p>
|
||
|
||
<h6>Deleting Your Account</h6>
|
||
|
||
<p><em>Summary: You may deactivate your account, but we may
|
||
retain your IP address and your public contributions to the Site.</em></p>
|
||
|
||
<p>If you wish to to close your <%= @app_name %> account, you may deactivate your account
|
||
<%= link_to "here", deactivate_users_path %>.</p>
|
||
|
||
<p>When your account is deactivated, we will delete your non-public personal
|
||
information from our active systems, including your email address,
|
||
password, account preferences, saved searches, and private favorites, and
|
||
we will disassociate your username from content you have submitted to
|
||
the Site, including your uploads, votes, comments, forum posts, private
|
||
messages, translation notes, wiki pages, tag edits, and other public
|
||
contributions you have made to the Site.</p>
|
||
|
||
<p>Please note that content that you have submitted to the Site will not
|
||
be removed from the Site after deactivating your account. In particular,
|
||
your uploads will not be removed from the Site, private messages you have
|
||
sent to other users will not be deleted, your comments and forum posts will
|
||
still be visible to others unless you delete them before deleting your
|
||
account. Comments, forum posts, or messages posted by other users
|
||
mentioning you by name or quoting you will still be visible to others.</p>
|
||
|
||
<p>We may retain certain other information about you even after you
|
||
deactivate your account, including your IP address, your user ID, your past
|
||
usernames, and other identifiers associated with your account. We may
|
||
retain this information as required by law or as necessary for legitimate
|
||
business needs, such as for preventing spam, abuse, or violations of our
|
||
Terms of Service.</p>
|
||
|
||
<h6>Controlling Email Communications</h6>
|
||
|
||
<p>If you would like to opt out of receiving emails from the Service, you
|
||
may unsubscribe by clicking on the unsubscribe link in the emails that we
|
||
send or by disabling email notifications in your
|
||
<%= link_to "account settings", settings_path %>. We may still send you
|
||
emails relating to the use or security of your account, such as when
|
||
resetting your password.</p>
|
||
|
||
<h6>Controlling Cookies</h6>
|
||
|
||
<p>Most web browsers are set to accept cookies by default. If you prefer,
|
||
you can usually choose to set your browser to remove or reject first- and
|
||
third-party cookies. Please note that if you choose to remove or reject
|
||
cookies, this could affect the availability and functionality of our
|
||
Site.</p>
|
||
|
||
<h4>Other Information</h4>
|
||
|
||
<h6>Minors</h6>
|
||
|
||
<p>Persons under the age of 18 are not allowed to create an account or
|
||
otherwise use our Services. By using our Services, you represent that you
|
||
are over the age required by the laws of your country to create an account
|
||
or otherwise use our Services.</p>
|
||
|
||
<h6>Data Retention</h6>
|
||
|
||
<p><em>Summary: We keep your information for as long as
|
||
necessary to fulfill the purposes outlined in this privacy policy, unless
|
||
otherwise required by law.</em></p>
|
||
|
||
<p>We store the information we collect for as long as it is necessary for
|
||
the purpose(s) for which we originally collected it. We may retain certain
|
||
information for legitimate business purposes or as required by law.</p>
|
||
|
||
<p>When we have no ongoing legitimate business need to process your
|
||
personal information, we will either delete or anonymize it, or, if this is
|
||
not possible (for example, because your personal information has been
|
||
stored in backup archives), then we will securely store your personal
|
||
information and isolate it from any further processing until deletion is
|
||
possible.</p>
|
||
|
||
<h6>International Data Transfers</h6>
|
||
|
||
<p><em>Summary: We store data in the United States and operate under US law.</em></p>
|
||
|
||
<p>We are based in the United States and we process and store information
|
||
on servers located in the United States. We may store information on
|
||
servers and equipment in other countries depending on a variety of factors,
|
||
including the locations of our users and service providers. By accessing or
|
||
using the Site or otherwise providing information to us, you consent to
|
||
the processing, transfer and storage of information in and to the U.S. and
|
||
other countries, where you may not have the same rights as you do under
|
||
local law.</p>
|
||
|
||
<h6>Information Security</h6>
|
||
|
||
<p><em>Summary: We take reasonable measures to secure your
|
||
data. We will promptly notify you of breaches of your personal
|
||
information.</em></p>
|
||
|
||
<p>We take reasonable measures to protect your personal information from
|
||
loss, theft, misuse, unauthorized access, disclosure, alteration, or
|
||
destruction. We also enforce technical and administrative access controls
|
||
to limit access to non-public personal information by staff members or
|
||
designated representatives of <%= @app_name %>. However, although we will
|
||
do our best to protect your personal information, transmission of personal
|
||
information to and from our Services is at your own risk. You should only
|
||
access our Services within a secure environment.</p>
|
||
|
||
<p>In the event that we become aware of a privacy breach which has resulted
|
||
or may result in unauthorized access, use or disclosure of your personal
|
||
information, we will investigate the matter and promptly notify you and the
|
||
applicable Supervisory Authority of the breach, unless the breach is
|
||
unlikely to result in a risk to the rights and freedoms of natural
|
||
persons.</p>
|
||
|
||
<h6>Changes to this Policy</h6>
|
||
|
||
<p><em>Summary: We may update this policy from time to time.</em></p>
|
||
|
||
<p>We may update this Privacy Policy from time to time. The updated policy
|
||
will be indicated by a new "Last updated" date at the top of this page. If
|
||
we make material changes to this Privacy Policy, we may, at our discretion,
|
||
notify you either by prominently posting a notice of such changes or by
|
||
directly sending you a notification. We encourage you to review this
|
||
Privacy Policy frequently to stay informed of how we handle your personal
|
||
information.</p>
|
||
|
||
<p>Changes to this Privacy Policy will go into effect as soon as the
|
||
updated Privacy Policy is accessible. By continuing to use our Services
|
||
after changes to our Privacy Policy go into effect, you agree to be bound
|
||
by the revised policy.</p>
|
||
</div>
|
||
</div>
|