Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Privacy policy changes #326

Open
wants to merge 9 commits into
base: master
Choose a base branch
from
6 changes: 3 additions & 3 deletions content/docs/policies/privacy/extension.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,9 +24,9 @@ We use your data to provide and improve the service. By using the service, you a

We don't know how many users have enabled the pause button or turned on light mode.

- **We never send Scratch account information or extension settings outside of your browser.**
- **We never send Scratch account information or extension settings outside of your browser without your permission.**

Extension settings only leave your device if you've enabled Chrome/Firefox/Edge Sync.
Extension settings only leave your device if you've enabled Chrome/Firefox/Edge Sync or when you share your list of enabled addons upon sending a feedback.

- **By default, the extension only interacts with the Scratch website and this website.**

Expand All @@ -42,7 +42,7 @@ Temporarily-stored information might include:

- Your Scratch account's username and user ID.
- Values of the `scratchcsrftoken` and `scratchlanguage` cookies.
- Value of your Scratch authentication token "X-Token".
- Value of your Scratch authentication token, `X-Token`.
- Your most recent Scratch messages.

## Permanently-Stored Information
Expand Down
10 changes: 5 additions & 5 deletions content/docs/policies/privacy/website.md
Original file line number Diff line number Diff line change
Expand Up @@ -37,16 +37,17 @@ We might, however, use local storage capabilities to store basic preferences, su

## Analytics

We use a self-hosted Plausible Analytics instance routed through our analytics subdomain to count website visits, downloads, etc. Plausible works without collecting any personal data or personally identifiable information, and without using cookies. You can see the same data we can see on the [public analytics dashboard](https://analytics.scratchaddons.com).
We use a self-hosted Plausible Analytics instance routed through our analytics subdomain to count website visits, interactions, etc. Plausible works without collecting any personal data or personally identifiable information, and without using cookies. You can see the same data we can see on the [public analytics dashboard](https://analytics.scratchaddons.com).

## Feedback

When sending feedback through <https://scratchaddons.com/feedback>, some data included in the request is:

- Text written in the "identifiers" field, if any.
- Text written in "feedback" field.
- The version number for your Scratch Addons instance.
- The version number of your Scratch Addons instance.
- Your browser's user agent string (which often includes your browser's and operating system's names and version numbers).
- Optionally, the list of currently enabled addons of your Scratch Addons instance.
Hans5958 marked this conversation as resolved.
Show resolved Hide resolved

Feedback is sent to a public open source [Glitch.com Node.js server instance](https://glitch.com/edit/#!/scratchaddons-feedback) which then redirects the information to a [Discord](https://discord.com) server. We do not log the IP addresses of the users that send feedback. You can verify this by looking at the Glitch server source code linked above.

Expand All @@ -55,9 +56,8 @@ Feedback is sent to a public open source [Glitch.com Node.js server instance](ht
When using our website, third party services might be reached, such as:
- [Cloudflare](https://www.cloudflare.com/privacypolicy/) for website hosting
- [GitHub](https://docs.github.com/en/github/site-policy/github-privacy-statement) for website hosting
- [cdn.jsdelivr.net](https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net) for library CDN
- [Skypack](https://www.skypack.dev/legal/privacy-policy) for library CDN
- [Google services](https://policies.google.com/privacy) such as YouTube and Google Fonts
- [jsDelivr CDN](https://www.jsdelivr.com/terms/privacy-policy) for library CDN
- [Google services](https://policies.google.com/privacy) such as YouTube
- [Glitch](https://glitch.com/legal/privacy) for sending feedback

## Links to Other Websites
Expand Down