These terms are based on the work made by tosdr.org and their checklist.
The InfoHub software is licensed under GNU GENERAL PUBLIC LICENSE Version 3. You can modify the software and use it however you want.
The branding "Applies to the InfoHub terms" and/or the corresponding logo can only be used on your site if you, the site owner, apply to the terms in this document.
Created at: 2020-02-08 by Peter Lembke, InfoHub Updated at: 2021-09-23 by Peter Lembke, InfoHub
- you - that is you the responsible party for the site.
- site - That is the InfoHub website you are responsible for.
- InfoHub - That is we that create the InfoHub software.
- InfoHub software - The software that you use on your site.
- users - Persons and other InfoHub servers that you invite log in to your site.
- we - That is you and the people at InfoHub and your users together.
InfoHub never ever use ANY cookies on live sites. We are not allowed to add any cookies to InfoHub on a live site.
While developing InfoHub we use a debugging cookie so that xdebug and similar debug tools works during development.
If you see InfoHub using any cookie then please report an issue on GitHub.
InfoHub can change the terms in this document at every new version of the InfoHub software.
Old releases keep their terms.
The terms will not have a changelog. If you are interested then you can compare terms from different releases on GitHub.
The document has a date when it was first added and last modified by InfoHub.
The very purpose of InfoHub is to be a private place on the web. The data provided by users remain their own property.
Yes.
- The user can download private data.
- The user can delete private data.
- The user can delete its log in account.
InfoHub software provide the tools for this.
You, the site owner must make these tools available to all users.
The user should not use a site if this download tool is missing.
A person can not register or demand to become a user of the site. A person can be invited by you site owner to become a user of the site. You, the site owner can just as easy revoke the invitation.
You as a site owner has no obligation to take backups or care for the user data. The user must take backups of its own data and make sure they can read the data themselves.
InfoHub software provide a data download tool for data added to the Tree plugin.
You the site owner must make that tool available to all users.
If a user do not have that tool available then it is the users responsibility to not add any data to your site until the tool is available.
A 3rd party is every service that the InfoHub software exchange data with that is not a user.
The InfoHub software and the site owner can use any service from the server as long as it never ever share private user data in any way.
- Examples of allowed services: RSS, Yr.no
- Examples of prohibited practice: Scrape other sites pages.
One example that is prohibited is sending an email or SMS to a user. This is prohibited because there is a 3rd party involved and the user telephone/email address are then revealed.
The use of 3rd party client side services are prohibited because all data must go through the server. We can not secure the client side if we do not know what code is running there.
Examples of prohibited services: Google Maps, Spotify, Soundcloud, Open street map, YouTube, Vimeo, Daily motion. Also CDN services, iframes and files linked from any server are prohibited.
It is the users responsibility to not use a site that provide client side 3rd party services.
The user must protect its data by using secure web browsers like Firefox, Safari, Brave, DuckDuckGo. And also be sure not to use browser plugins that leak data to 3rd party.
The InfoHub software need to be on a private web server or at a web hosting company so the users can connect. You as a site owner is responsible for using https in your domain address. The user is responsible for not using a site that have issues with the certificate.
You the site owner is not allowed to remove the client side scanner that detects possible data breaches.
You as a site owner must apply to the laws of your country.
If a site owner can not protect the anonymity and privacy of the site users then the site owner must quickly delete all the users private data and the users log in accounts and all database backups that contain private user data.
How do you handle decisions about suspension of a user account when you feel the user breached the terms?
A person can only become a user by an invitation from you the site owner. You, the site owner can at any time redraw the invite without having to give the user any reason. But it is always best to communicate human to human before doing this.
Examples of reasons could be that the user have poor security on its computer, browser, browser plugins. Have shared the log in credentials with others. Have uploaded more material than agreed on. Have not logged in to the site for a month. Have done manipulations to the client side code.
If you as a site owner do not want a specific user on your site then mark the user as "You got two weeks notice to move from this site, and then you will be automatically deleted".
The InfoHub software will refuse the user to save any more data to the server Storage.
The InfoHub software show a message to the user when the user log in. The user can download its private data and delete the account.
The user can later find another InfoHub home to use and upload the data there.
After the time period the InfoHub software will delete the user private data and the user account.
The deletion will occur regardless if the user have seen the message or not and regardless if the user have downloaded its data or not.
There might be a situation where an older database backup have to be restored on the site and a user account are accidentally restored. That account will then be deleted by the InfoHub software at the next clean out.
If the privacy of the site have been breached then the site owner might delete all user accounts and all user data without any notice to protect everyone's privacy.
If you as a site owner want to go to court and sue InfoHub then please do. The InfoHub Software is licensed as GNU GPL v3, and we operate in Sweden.
If the user want to sue you as a site owner the please do. The user is obligated to have read the TERMS.md and know about who is responsible for what.
In any case it is always best to resolve issues human to human before going further.
It is the user's responsibility to regularly use the data download tool to have a copy of the own data.
It is the user's responsibility to have a working copy of its encryption key.
You, the site owner that "Applies to the InfoHub terms" must check with the site buyer if they intend to continue with "Applies to the InfoHub terms" or not. If the new owner will apply then you only need to change the responsible persons name so all users can see that.
If the new owner will not apply to the terms then you must mark all users with "New owner will not apply to the InfoHub terms".
The users then have two weeks notice to accept the new owner by marking that. Or their account will be deleted.
The user can download its data before the account is deleted.
If you shut down the site then it would be nice to give the users a two weeks notice before the users and their data are automatically deleted.
The user private data are encrypted with a key that only the user have. The encrypted private data might be saved on the server database. The server database might get a backup made by you the site owner or by the web hosting company.
You, the site owner should make a statement about the backup strategy and also check with the hosting company how their backups work and relay that information to the user. Should is not a must.
You, the site owner should also make a statement on how the backups are stored and have a plan so that there is no risk of exposing the backups to others. Should is not a must.
The user should only use sites that can tell what backup strategy they are following.
The InfoHub plugins must be clean from advertising. You could mention optional related plugins in the documentation. You must not show advertising to the user. Not even if the data comes from the server. If you want to promote something then use other channels for that, like social media.
The client software are not allowed to track usage statistics, not even anonymous data. The client must be free from trackers. The InfoHub server can have anonymous usage statistics but that need to be stored in a tool that you manage. Like https://matomo.org/ if you host it yourself.
Server bugs are logged to a text file with no personal data. You are allowed to send anonymous data to a log tool you host yourself, like GrayLog.
A client bug is always shown on screen at the top. Client bugs are never reported back to the server. They might have to be in the future. You are allowed to forward anonymous client bug data to a log tool you host yourself, like GrayLog.
End of document