From 4795af5714df04f9bc0b00c8c83b06776e6a95a7 Mon Sep 17 00:00:00 2001 From: ashley Date: Fri, 3 Oct 2025 00:20:23 +0200 Subject: [PATCH] update privacy policy --- html/priv.ejs | 205 +++++++++++++++++++++++++++++++++----------------- 1 file changed, 134 insertions(+), 71 deletions(-) diff --git a/html/priv.ejs b/html/priv.ejs index 8eeaefc7..381bf6c8 100644 --- a/html/priv.ejs +++ b/html/priv.ejs @@ -355,6 +355,7 @@
  • Translate Page (SimplyTranslate)
  • Third-Party Requests & Proxy
  • API Logs Policy
    • +
  • Server Admin Tool: poke-nginx-analytics
  • Legal Bases (GDPR)
  • Your Rights
  • Data Retention
    • @@ -385,6 +386,7 @@ Translate Page (SimplyTranslate) Third-Party Requests & Proxy API Logs Policy + Server Admin Tool: poke-nginx-analytics Legal Bases (GDPR) Your Rights Data Retention @@ -401,64 +403,63 @@

    Poke Privacy Policy

    - We don’t collect any data about you. No telemetry, no trackers! Because Poke is free software, you can also check the source and self-host. +We don’t collect personal data about you. No telemetry, no trackers, no profiling. The only “analytics” we ship is an optional poke-nginx-analytics script for server admins — and it runs locally, never phones home, and just reads your own logs. Because Poke is free software, you can check the source, self-host, and audit everything yourself.

    Instance: poketube.fun - Version date: + Version date:

    - What’s New — Policy Update - September 28, 2025 + What’s New — Policy Updates + October 3, 2025

    - We clarified how third-party requests work waaay better! Highlights: + Added a section for our server-admin script poke-nginx-analytics. TL;DR: it’s local-only, read-only, and configurable for privacy (IP masking, bot filtering). Source code is linked.

    -
    - Review weather changes - -
    +
  • Read the new “Server Admin Tool” section
    • +
  • Script source: backend-services/scripts/poke-nginx-analytics.sh
    • + +
    + +
    +

    Preamble

    +

    + Welcome to Poke’s Privacy Policy. We don’t collect personal data about you, we don’t run telemetry, and we don’t track you around the web. + The only “analytics” involved is an optional poke-nginx-analytics script for server operators, which runs locally on their own machines, + never phones home, and only summarizes their own access logs. + Poke is free software you can read, remix, and run yourself. +

    +

    Not legal advice lol

    +
    - -
    -

    Preamble

    -

    - Welcome to Poke’s Privacy Policy. We don’t collect data about you and we don’t run telemetry. Poke is free software you can read, remix, and run yourself. -

    -

    Not legal advice lol

    -
    - - -
    -

    TL;DR

    -
    -
    -
      -
    • No data collected. at all!!
      • -
    • No telemetry. We don’t phone home.
      • -
    • No third-party trackers. Yippe!!
      • -
    • YouTube can’t see what you watch here. Its all done on the backend.
      • -
    -
    -
    -
      -
    • Poke Account: no email required, no personal info needed.
      • -
    • Poke Maps: uses OpenStreetMap data; map tiles/attribution may have separate privacy rules depending on the tile server you use.
      • -
    • No required cookies. Preferences (like theme or layout) may live in local storage on your device.
      • -
    -
    -
    -
    + +
    +

    TL;DR

    +
    +
    +
      +
    • No personal data collected. nothing about you is stored.
      • +
    • No telemetry. We don’t phone home.
      • +
    • No third-party trackers. Yippe!!
      • +
    • YouTube can’t see what you watch here. It’s all done on the backend.
      • +
    +
    +
    +
      +
    • Poke Account: no email required, no personal info needed.
      • +
    • Poke Maps: uses OpenStreetMap data; tile servers have their own privacy rules.
      • +
    • Optional server admin tool: poke-nginx-analytics is local-only, read-only, and never sends data anywhere.
      • +
    • No required cookies. Preferences (like theme or layout) may live in local storage on your device.
      • +
    +
    +
    +
    @@ -539,25 +540,13 @@

    @@ -576,16 +565,14 @@ from (source language), to (target language), and text (the content you entered). Your browser never connects to SimplyTranslate.org directly.

    +
    + + +
    +

    Third-Party Requests & Proxy

    - We rely on the community-run - SimplyTranslate service (a privacy-friendly - translation front-end). SimplyTranslate is a free software project: you can see the - source code and its - legal notice. - Our backend integration is handled in - - Poke’s server code - . + Where external services are necessary (maps, weather, translation), Poke uses server-side proxying to avoid exposing your browser directly. + We don’t inject trackers into proxied calls. External services have their own privacy terms that apply to those specific requests.

    @@ -593,7 +580,7 @@

    API Logs Policy

    - When you request any resource from the poke api (for example: thumbnails, API endpoint) information about the request may be logged. + When you request any resource from the Poke API (for example: thumbnails, API endpoint) information about the request may be logged.

    Information about a request is limited to:

    +
    +

    Server Admin Tool: poke-nginx-analytics

    +

    + We ship an optional, admin-side shell script to help operators understand IPv4/IPv6 traffic and status codes from their own servers’ Nginx access logs. + It’s free software and lives here: + + backend-services/scripts/poke-nginx-analytics.sh + . +

    + +
    + Privacy : the script is local-only and read-only. It makes no network requests, writes no files by default, and sends nothing anywhere. It just reads the log files you point it at and prints aggregate counts to your terminal. +
    + +

    What it reads from your logs

    +

    + The script parses standard Nginx access logs (including rotated .1 and compressed .gz) using the fields already present in your log format: +

    + +

    It does not collect any new data, fingerprint users, or correlate logs with other sources.

    + +

    How it decides “success” vs “fail”

    + + +

    What it outputs (to your terminal)

    + + +

    How it works (under the hood)

    + + +

    What it does not do

    + + + +