diff --git a/src/lib/popover/analytics-consent.svelte b/src/lib/popover/analytics-consent.svelte new file mode 100644 index 0000000..3b5ad46 --- /dev/null +++ b/src/lib/popover/analytics-consent.svelte @@ -0,0 +1,113 @@ + + + +

Telemetry

+

+ OwlBoard collects anonymous usage data, such as the most visited pages. Any personal data is anonymized to ensure it cannot be linked to individuals. +

+

+ This data is used to focus efforts, improving the most used features. +

+

+ By selecting Accept, you are helping to steer OwlBoard's future - if + you change your mind, head over to Settings. +

+

+ Nobody can be identified using any data stored, all data is available for + all to see here. +

+

+ Further information can be found in the Privacy Policy. +

+ + + + + \ No newline at end of file diff --git a/src/lib/stores/SetTelemetryConsent.ts b/src/lib/stores/SetTelemetryConsent.ts new file mode 100644 index 0000000..73136fd --- /dev/null +++ b/src/lib/stores/SetTelemetryConsent.ts @@ -0,0 +1,14 @@ +import { get } from "svelte/store"; +import { telemetry } from "./telemetryConsent"; + +export function setTelemetryTrue() { + telemetry.set(true); +} + +export function setTelemetryFalse() { + telemetry.set(false); +} + +export function getTelemetry(): boolean { + return get(telemetry); +} \ No newline at end of file diff --git a/src/lib/stores/telemetryConsent.ts b/src/lib/stores/telemetryConsent.ts new file mode 100644 index 0000000..a044abd --- /dev/null +++ b/src/lib/stores/telemetryConsent.ts @@ -0,0 +1,25 @@ +// src/stores.js +import { writable, type Writable } from "svelte/store"; +import { browser } from "$app/environment"; + +// Initialize the store with a boolean value from local storage +export const telemetry: Writable = writable(fromLocalStorage("telemetry", false)); +toLocalStorage(telemetry, "telemetry"); + +function fromLocalStorage(storageKey: string, fallback: boolean): boolean { + if (browser) { + const storedValue = localStorage.getItem(storageKey); + if (storedValue !== null && storedValue !== "undefined") { + return storedValue === "true"; + } + } + return fallback; +} + +function toLocalStorage(store: Writable, storageKey: string) { + if (browser) { + store.subscribe((value: boolean) => { + localStorage.setItem(storageKey, String(value)); + }); + } +} \ No newline at end of file diff --git a/src/lib/stores/version.ts b/src/lib/stores/version.ts index 93662ab..b0c06dc 100644 --- a/src/lib/stores/version.ts +++ b/src/lib/stores/version.ts @@ -1,2 +1,2 @@ -export const version: string = "2025.03.4"; +export const version: string = "2025.03.5"; export const versionTag: string = ""; diff --git a/src/routes/+layout.svelte b/src/routes/+layout.svelte index 81ff23a..b60d261 100644 --- a/src/routes/+layout.svelte +++ b/src/routes/+layout.svelte @@ -5,6 +5,7 @@ import DevBanner from "$lib/DevBanner.svelte"; import { page } from "$app/stores"; import { Toaster } from "svelte-french-toast"; + import AnalyticsConsent from "$lib/popover/analytics-consent.svelte"; @@ -16,8 +17,7 @@ Check out the source code on Gitea (https://git.fjla.net/OwlBoard) It's easier to read there --> - - + + {#if dev} diff --git a/src/routes/more/privacy/+page.svelte b/src/routes/more/privacy/+page.svelte index df38eaa..6b3e485 100644 --- a/src/routes/more/privacy/+page.svelte +++ b/src/routes/more/privacy/+page.svelte @@ -10,39 +10,57 @@
-

- OwlBoard stores the minimum amount of data necessary to provide its functions for your use. No personal data is stored unless you report an issue. To review the specific - data that we store, please visit My Data. -

-

OwlBoard does not utilize any cookies. IP addresses and browser fingerprints are not logged.

-

If You Do Not Sign Up

-

- If you choose not to sign up, no personal data will be processed or stored unless you report an issue. Any personal settings are stored locally in your browser and do not - leave your device. -

-

If You Sign Up

-

- If you sign up for the rail staff version of OwlBoard, we do require the storage of some data. However, none of this data can be used to personally identify you. Any - personal settings are stored locally in your browser and do not leave your device. -

-

- During the sign-up process, you will be asked to provide a work email address, which will be checked to confirm its origin from a railway company. Once confirmed, an email - containing a registration link will be sent to you. At this point, the username portion of your email address is discarded. For example, if your email address is - 'a-user@owlboard.info', only 'owlboard.info' will be stored. This host portion of your email address is stored to filter and display relevant results prominently. -

-

The email server may store the address and message content as part of its regular operation, and your consent to this is implied when you sign up.

-

In addition to the host portion of your email address, a randomly generated UUID is stored for the purpose of authorizing access to the rail staff data.

-

- If you enable location data, your location will be sent to the server when you navigate to the homepage to determine your closest stations. This data is never stored on the - server after the nearest stations have been send to your device. -

-

Reporting an Issue

-

When you report an issue, certain data is collected, including your browser's User Agent string and the size of the window in which you are viewing the website.

-

- Any data submitted when reporting an issue will be publicly viewable alongside the OwlBoard/backend git repository. -

+

Your Data

+

+ OwlBoard logs the IP addresses of its users, this is done on the basis of legitimate + interest to ensure the security of the platform and to protect all users from + malicious activity. See Data Sharing for details on how + we may share this data. +

+

Telemetry

+

+ If you opt-in to Telemetry, you will share your IP address and information about the + type of device and software you're using to access the service. This data is + anonymised and cannot be traced back to any individual. You can opt-in or opt-out in + your Settings. All of the anonymised data can be viewed + at: liwan.fjla.uk at any time. +

+

+ Telemetry data is used to identify which areas of the webapp are used most frequently + and where improvements need to be made. +

+

Registering

+

+ If you register, your email address will be used to verify that you work for an + organisation that is permitted to access staff data on the service. An activation + email will be sent before your email address is anonymised. For example, if your + email address is hello@owlboard.info, it will be anonymized to @owlboard.info. +

+

+ You will be assigned a unique identifier which will be stored alongside your + anonymised email address as well as in your browser. This is how the service + verifies that you are authorised to access staff data. +

+ +

Data Sharing

+

+ OwlBoard utilises CrowdSec, a security service that helps to protect the platform from + malicious activity. As part of its operation, CrowdSec analyzes IP addresses and may + share certain information with its community of users to identify and mitigate + security threats. If your IP address is identified as part of a security incident or + threat, it may be shared with CrowdSec's network for further analysis and to prevent + malicious activity. This sharing of IP addresses is done under the legitimate + interest basis for ensuring the security of the platform and protecting all users + from malicious activity. +

+

+ CrowdSec anonymizes and processes data in accordance with its own privacy policy, which + is available for review here. We recommend reviewing their policy to understand how + they handle your data. +

+

+ +