<script>
    import Header from "$lib/navigation/header.svelte";
    import Nav from "$lib/navigation/nav.svelte";
    const title = "Privacy Policy";
</script>

<svelte:head>
    <meta name="robots" content="noindex">
</svelte:head>

<Header {title} />
<div>
    <h2>Your Data</h2>
        <p>
            OwlBoard logs the IP addresses of its users, this is done on the basis of legitimate
            interest to ensure the security of the platform and to protect all users from
            malicious activity.  See <a href="#datasharing">Data Sharing</a> for details on how
            we may share this data.
        </p>
        <p>
            With the exception of sending emails, all data is held - and always remains within -
            the United Kingdom.
        </p>
        <h3>Telemetry</h3>
        <p>
            If you opt-in to Telemetry, you will share your IP address and information about the
            type of device and software you're using to access the service.  This data is
            anonymised and cannot be traced back to any individual.  You can opt-in or opt-out in
            your <a href="/more/settings">Settings</a>.  All of the anonymised data can be viewed
            at: <a target="_blank" href="https://liwan.fjla.uk">liwan.fjla.uk</a> at any time.
        </p>
        <p>
            All of the data that is stored is held within the United Kingdom.
        </p>
        <p>
            Telemetry data is used to identify which areas of the webapp are used most frequently
            and where improvements need to be made.
        </p>
        <h3>Registering</h3>
        <p>
            If you register, your email address will be used to verify that you work for an
            organisation that is permitted to access staff data on the service.  An activation
            email will be sent before your email address is anonymised.  For example, if your
            email address is hello@owlboard.info, it will be anonymized to @owlboard.info.
        </p>
        <p>
            OwlBoard emails are sent using Proton Mail, a privacy-first email service based in
            Switzerland.  To facilitate this, your email address will be securely sent to
            Proton Mail securely.
        </p>
        <p>
            You will be assigned a unique identifier which will be stored alongside your
            anonymised email address as well as in your browser.  This is how the service
            verifies that you are authorised to access staff data.
        </p>
    
    <h2 id="datasharing">Data Sharing</h2>
        <p>
            OwlBoard utilises CrowdSec, a security service that helps to protect the platform from
            malicious activity.  As part of its operation, CrowdSec analyzes IP addresses and may
            share certain information with its community of users to identify and mitigate
            security threats.  If your IP address is identified as part of a security incident or
            threat, it may be shared with CrowdSec's network for further analysis and to prevent
            malicious activity.  This sharing of IP addresses is done under the legitimate
            interest basis for ensuring the security of the platform and protecting all users
            from malicious activity.
        </p>
        <p>
            CrowdSec anonymizes and processes data in accordance with its own privacy policy, which
            is available for review here.  We recommend reviewing their policy to understand how
            they handle any data collected.
        </p>
</div>

<Nav />

<style>
    div {
        text-align: left;
    }

    h2 {
        color: var(--second-text-color);
        margin: auto;
        width: 90vw;
        padding-top: 20px;
    }

    h3 {
        color: var(--second-text-color);
        margin: auto;
        width: 90vw;
        padding-top: 10px;
    }
    p {
        color: white;
        margin: auto;
        padding-top: 5px;
        padding-bottom: 8px;
        width: 90vw;
        max-width: 550px;
    }
</style>
