Skip to content

docs: add draft Privacy Policy and Terms of Service#71

Draft
punchIn-app-bot wants to merge 4 commits into
mainfrom
docs/privacy-and-terms
Draft

docs: add draft Privacy Policy and Terms of Service#71
punchIn-app-bot wants to merge 4 commits into
mainfrom
docs/privacy-and-terms

Conversation

@punchIn-app-bot

Copy link
Copy Markdown
Member

Summary

  • Add a combined Privacy Policy (PRIVACY.md) and Terms of Service (TERMS.md) covering the whole trackmytime.today product — the local-first app, the feedback service, and this email-alias relay.
  • This relay's behaviour is described in the Privacy Policy's "When you email us" section: forwards alias mail to the operator inbox, stores a 30-day thread map (sender + alias + timestamp) in KV, stores no message content, masks the operator's personal address, and logs only verdict/error types.
  • Content is grounded in the actual data flows across the punchin, punchin-email, and punchin-feedback repos; identical canonical copies are committed in all three repos. Publisher PunchIn-App (individual); governing law Massachusetts. Both files carry a DRAFT — pending legal review banner + delete-before-publish reviewer checklist.

Type of change

  • Bug fix in routing / header rewriting / delivery (→ PATCH)
  • New or changed inbound/relay behaviour visible to senders or recipients (→ MINOR)
  • New config var or binding, or a newly supported alias category (→ MINOR)
  • New robustness / safety guard with no change for normal mail (→ PATCH)
  • Internal refactor / dependency update (→ PATCH)
  • Test additions only (no version bump)
  • CI / docs only (no version bump)

Checklist

Code

  • npm test passes — N/A (docs only, no code changed)
  • npm run check (wrangler dry-run) passes — N/A (docs only)
  • New behaviour has a test added alongside it — every new rejection path is covered — N/A (docs only)
  • No secret or personal address added to wrangler.toml [vars] (secrets go via wrangler secret put) — N/A (no config changed)
  • The safety guards (alias allowlist, relay sender verification, auto-submitted drop, header allowlist) are not weakened without a documented rationale — N/A (no code changed)

Version & changelog

  • Version bump not required (tests / CI / docs only)
  • package.json version updated
  • docs/CHANGELOG.md new section added at the top
  • README.md version badge URL updated
  • CLAUDE.md **Version:** header updated

Documentation

  • CLAUDE.md updated where relevant — N/A (legal docs, not architecture)
  • README.md updated if behaviour or setup changed — N/A (no behaviour change)

Contributions are under Apache-2.0 — no separate CLA to sign (per CONTRIBUTING.md).


⚠️ These are drafts pending legal review, not legal advice — the warranty, liability, and governing-law clauses need an attorney before publishing. The DRAFT banner and reviewer checklist in each file must be removed before going live. Opened as a draft PR for that reason.

🤖 Generated with Claude Code

Add combined PRIVACY.md and TERMS.md covering the whole trackmytime.today
product: the local-first app, opt-in cloud sync, the feedback service, and the
@trackmytime.today email-alias relay. Content is grounded in the actual data
flows across the punchin, punchin-email, and punchin-feedback repositories;
identical canonical copies live in all three repos.

Publisher is PunchIn-App (individual operator); governing law is Massachusetts.
Both documents are DRAFTS pending legal review — they carry a review banner and a
delete-before-publish reviewer checklist, and are not legal advice.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Jun 8, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
punchin-email b411a01 Commit Preview URL

Branch Preview URL
Jun 10 2026, 06:39 PM

@punchIn-app-bot punchIn-app-bot added the documentation Improvements or additions to documentation label Jun 8, 2026
Signed-off-by: PunchIn Bot <contact@trackmytime.today>
Signed-off-by: PunchIn Bot <contact@trackmytime.today>
… (#73)

## Summary

<!-- What does this PR do and why? One to three bullet points. -->

- **Stacked on #71** (`docs/privacy-and-terms`): corrects the draft
Terms of Service §7, which still says the email relay and feedback
service are Apache-2.0 — both were relicensed to **BUSL-1.1** in #72
(v1.6.1) and punchin-feedback#4.
- Mirrors the existing punchin bullet's plain-language style: individual
self-hosting free (domain / project they personally control),
organisational deployment needs a commercial licence, AGPL-3.0
conversion on the shared Change Date (2 June 2030), links to each repo's
`LICENSE`.
- Merge **after** #71 lands (GitHub will retarget this PR to `main`
automatically when the base branch is deleted).

## Type of change

<!-- Check all that apply -->

- [ ] Bug fix in routing / header rewriting / delivery (→ `PATCH`)
- [ ] New or changed inbound/relay behaviour visible to senders or
recipients (→ `MINOR`)
- [ ] New config var or binding, or a newly supported alias category (→
`MINOR`)
- [ ] New robustness / safety guard with no change for normal mail (→
`PATCH`)
- [ ] Internal refactor / dependency update (→ `PATCH`)
- [ ] Test additions only (no version bump)
- [x] CI / docs only (no version bump)

## Checklist

### Code

- [x] `npm test` passes — N/A (docs-only; no code touched)
- [x] `npm run check` (wrangler dry-run) passes — N/A (docs-only)
- [x] New behaviour has a test added alongside it — every new rejection
path is covered — N/A
- [x] No secret or personal address added to `wrangler.toml [vars]`
(secrets go via `wrangler secret put`)
- [x] The safety guards (alias allowlist, relay sender verification,
auto-submitted drop, header allowlist) are not weakened without a
documented rationale — N/A (not touched)

### Version & changelog

- [x] Version bump not required (tests / CI / docs only) **OR**
- [x] `package.json` `version` updated — N/A (no bump)
- [x] `docs/CHANGELOG.md` new section added at the top — N/A (no bump)
- [x] `README.md` version badge URL updated — N/A (no bump)
- [x] `CLAUDE.md` `**Version:**` header updated — N/A (no bump)

### Documentation

- [x] `CLAUDE.md` updated where relevant (Repository Structure / Email
Flow / Robustness Guards / Configuration & Bindings) — N/A (TERMS.md
only)
- [x] `README.md` updated if behaviour or setup changed — N/A

### Contributor License Agreement

> I have read and agree to the PunchIn Email Worker Contributor License
Agreement.

Co-authored-by: Claude Fable 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant