Initial implementation of /policies page

snikket_web/__init__.py

@@ -145,19 +145,14 @@ class AppConfig:
     site_name = environ.var("")
     avatar_cache_ttl = environ.var(1800, converter=int)
     languages = environ.var([
-        # Keep `en` as the first language, because it is used as a fallback
-        # if the language negotiation cannot find another match. It is more
-        # likely that users are able to read english (or find a suitable
-        # online translator) than, for instance, danish.
-        "en",
         "da",
         "de",
+        "en",
         "fr",
         "id",
         "it",
         "pl",
         "sv",
-        "zh_Hans_CN",
     ], converter=autosplit)
     apple_store_url = environ.var(
         "https://apps.apple.com/us/app/snikket/id1545164189",
@@ -168,6 +163,9 @@ class AppConfig:
     # tools may also very well override it.
     max_avatar_size = environ.var(1024*1024, converter=int)
     show_metrics = environ.bool_var(True)
+    retention_days = environ.var(7, converter=int, name="SNIKKET_RETENTION_DAYS")
+    operator_name = environ.var(None, name="SNIKKET_OPERATOR_NAME")
+    provider_name = environ.var(None, name="SNIKKET_PROVIDER_NAME")
 
 
 _UPPER_CASE = "".join(map(chr, range(ord("A"), ord("Z")+1)))
@@ -200,6 +198,9 @@ def create_app() -> quart.Quart:
     app.config["APPLE_STORE_URL"] = config.apple_store_url
     app.config["MAX_AVATAR_SIZE"] = config.max_avatar_size
     app.config["SHOW_METRICS"] = config.show_metrics
+    app.config["RETENTION_DAYS"] = config.retention_days
+    app.config["OPERATOR_NAME"] = config.operator_name
+    app.config["PROVIDER_NAME"] = config.provider_name
 
     app.context_processor(proc)
     app.register_error_handler(

snikket_web/main.py

@@ -111,6 +111,16 @@ async def about() -> str:
         extra_versions=extra_versions,
     )
 
+@bp.route("/policies")
+async def policies() -> str:
+    return await render_template(
+        "policies.html",
+        snikket_domain=current_app.config["SNIKKET_DOMAIN"],
+        retention_days=current_app.config["RETENTION_DAYS"],
+        operator_name=current_app.config["OPERATOR_NAME"],
+        provider_name=current_app.config["PROVIDER_NAME"],
+    )
+
 
 @bp.route("/meta/demo.html")
 async def demo() -> str:

snikket_web/templates/policies.html

@@ -0,0 +1,131 @@
+{% extends "base.html" %}
+{% from "library.j2" import standard_button %}
+{% block head_lead %}
+<title>{% trans %}Service Policies{% endtrans %}</title>
+{% endblock %}
+{% block body %}
+<main>
+	<div class="box el-2">
+		<h1>{% trans %}Service Policies{% endtrans %}</h1>
+		<p>{% trans %}Here you will find the policies and legal notices that govern your use of the {{ snikket_domain }} communication service.{% endtrans %}</p>
+
+		<p>{% trans %}If you do not agree to these policies, or are below the minimum age required to understand and consent to
+these terms, you must not use this service.{% endtrans %}</p>
+
+		<p>{% trans %}This page contains the following policies:{% endtrans %}</p>
+
+		<ul>
+			<li><strong><a href="#tos">{% trans %}Terms of Service{% endtrans %}</a></strong> {% trans %}The terms describe the acceptable use of our service, what we expect from you and what you can expect from us.{% endtrans %}</li>
+			<li><strong><a href="#privacy">{% trans %}Privacy Policy{% endtrans %}</a></strong> {% trans %}The what, why and how we handle your personal data here on {{ snikket_domain }}.{% endtrans %}</li>
+		</ul>
+
+		<h2 id="tos">{% trans %}Terms of Service{% endtrans %}</h2>
+
+		<h3>{% trans %}1. Introduction{% endtrans %}</h3>
+
+		<p>{% trans %}Snikket is a privacy-oriented communication and messaging system that is designed to give you freedom of choice, privacy, and control over your communication and your data.{% endtrans %}</p>
+
+		<p>{% trans %}The Snikket software allows anyone to set up their own online communication service, and connect it to other services in the network. There is a global network of Snikket services online run by independent operators. When you read about the "Service" in this document, it refers to this particular Snikket messaging and communication service available at the internet address <em>{{ snikket_domain }}</em>.{% endtrans %}</p>
+
+		{%- if operator_name and provider_name -%}
+		<p>{% trans %}The Service is operated by <em>{{ operator_name }}</em> (us, the "Operator"), using facilities provided by <em>{{ provider_name }}</em>.{% endtrans %}</p>
+		{%- elif operator_name -%}
+		<p>{% trans %}The Service is operated by <em>{{ operator_name }}</em> (us, the "Operator").{% endtrans %}</p>
+		{%- else -%}
+		<p>{% trans %}The Service is operated privately by us (the "Operator").{% endtrans %}</p>
+		{%- endif -%}
+
+		<p>{% trans %}The Service is using software developed by <em>Snikket Community Interest Company</em> and community contributors (collectively "the Developers"). The Developers are not associated with this Service, and they are not responsible for its reliability, security, maintenance, messages it sends, content it hosts, or the actions and activities of the Operator and users of the Service.{% endtrans %}</p>
+
+		<p>{% trans %}"Snikket" and the parrot logo are trademarks of Snikket Community Interest Company.{% endtrans %}</p>
+
+		<h3>{% trans %}2. Your Data{% endtrans %}</h3>
+
+		<p>{% trans %}Certain data that you provide to us may be stored on your behalf to provide you with a secure, reliable and pleasant communication experience. You can request a copy of your data from the Operator at any time, and you can close your account if you no longer wish to use our service. For more information about the data we store, how long we store it for, and the purposes we store it for, please see the <a href="#privacy">Privacy Policy</a>.{% endtrans %}</p>
+
+		<p><strong>{% trans %}Legal basis for data processing.{% endtrans %}</strong> {% trans %}We process your data on the basis of Legitimate Interest. This means that we process your data only as necessary to deliver the Service, and in a manner that you understand and expect. This Legitimate Interest pertains to providing you with a secure communication service through which you may exchange messages, files and other data with other users and services. The processing of user data we undertake is necessary to provide this service.{% endtrans %}</p>
+
+		<p><strong>{% trans %}Third parties.{% endtrans %}</strong> {% trans %}Note well that, according to the nature of an open communication network, certain data you exchange with others (including messages and files) in the course of using the Service may be shared with, and possibly stored by, other users and their service operators on the basis of Legitimate Interest or any other applicable legal basis. We have no control over such copies of the data.{% endtrans %}</p>
+
+		<h3>{% trans %}3. Third-party services{% endtrans %}</h3>
+
+		<p><strong>{% trans %}Communication with third-party services.{% endtrans %}</strong> {% trans %}This Service is part of a global messaging network facilitated by standard technologies such as XMPP. In a similar fashion to the email and phone networks, this network allows people to communicate with each other even if they are using different services managed by different operators. When you communicate with users and groups that reside on other services, certain data may necessarily be exchanged with those services for the purposes of facilitating your communication. This includes your username, profile (e.g. display name and picture), messages and files that you send to the users and groups on those services.{% endtrans %}</p>
+
+		<p><strong>{% trans %}Third-party policies.{% endtrans %}</strong> {% trans %}Our Service may allow you to access, use, or interact with third-party websites, apps, content, and other products and services. When you use third-party services, their terms and privacy policies govern your use of those services.{% endtrans %}</p>
+
+		<p><strong>{% trans %}Right to be forgotten.{% endtrans %}</strong> {% trans %}Your copy of your data on {{ snikket_domain }} will be erased upon your request to us. You may also make such requests to the operators of third-party services you have communicated with, however these services are not under our control and we cannot guarantee they will forget your data. Such services can be located anywhere in the world, and are subject to local laws and regulations.{% endtrans %}</p>
+
+		<h3>{% trans %}4. Acceptable use{% endtrans %}</h3>
+
+		<p><strong>{% trans %}Legal and acceptable purposes.{% endtrans %}</strong> {% trans %}You agree to access and use the Service only for legal, authorized, and acceptable purposes. You will not use (or assist others in using) our Service in ways that: (a) violate or infringe the rights of the Operator, users, or others, including privacy, publicity, intellectual property, or other proprietary rights; (b) involve sending illegal or impermissible communications such as unsolicited bulk communications (e.g. spam).{% endtrans %}</p>
+
+		<p><strong>{% trans %}Encryption.{% endtrans %}</strong> {% trans %}In the event that you wish to use encrypted communications within the Services, it is your responsibility to ensure this is permitted in under the laws and regulations applicable to you based on where and how you use the Services.{% endtrans %}</p>
+
+		<h3>{% trans %}5. Availability of Services{% endtrans %}</h3>
+
+		<p><strong>{% trans %}General availability{% endtrans %}</strong> {% trans %}Our Services may be interrupted, including for maintenance, upgrades, or network or equipment failures. We may discontinue some or all of our Services, including certain features and the support for certain devices and platforms, at any time.{% endtrans %}</p>
+
+		<p><strong>{% trans %}Termination of access.{% endtrans %}</strong> {% trans %}We may remove your access to the Service at any time, at our sole discretion.{% endtrans %}</p>
+
+		<p><strong>{% trans %}Emergency services inaccessibility.{% endtrans %}</strong> {% trans %}The Communication Service is not to be used to make calls to any emergency services.  Therefore you must arrange for other communications such as though a mobile phone or otherwise to enable you to contact any emergency services.  We disclaim any liability relating to the inability to use the Communication Services in this way.{% endtrans %}</p>
+
+		<hr/>
+
+		<h2 id="privacy">{% trans %}Privacy Policy{% endtrans %}</h2>
+
+		<h3 id="what-information-does-a-snikket-service-collect">{% trans %}What information does a Snikket service collect?{% endtrans %}</h3>
+		<h4 id="basic-account-information">{% trans %}Basic account information{% endtrans %}</h4>
+		<p>{% trans %}When you create an account on this service, your username will be stored, along with a hashed version of your password.{% endtrans %}</p>
+		<p>{% trans %}You may additionally provide a profile picture (avatar) and display name. These will be shared with other users on the network, so they are able to identify you. You can control visibility of this information in the profile section of the {{ snikket_domain }} website.{% endtrans %}</p>
+		<p>{% trans %}Contacts that you add within the app will be stored in your contact list on the {{ snikket_domain }} server. This is so that the server can identify who you have permitted to view your online status, profile and other information, and to synchronize your Snikket contacts if you have multiple apps or devices.{% endtrans %}</p>
+
+		<h4 id="messages">{% trans %}Messages{% endtrans %}</h4>
+
+		<p>{% trans %}When you send or receive a message on Snikket, we store this temporarily in your personal &ldquo;message archive&rdquo; on {{ snikket_domain }}. The purpose of your message archive is to enable an app you use with your account to &ldquo;catch up&rdquo; on recent conversations. This allows Snikket to:{% endtrans %}</p>
+		<ul>
+			<li>{% trans %}ensure delivery of messages even if you are temporarily offline or
+			experiencing connectivity issues, and{% endtrans %}</li>
+			<li>{% trans %}allow synchronization of messages across multiple devices and apps
+			that you may use.{% endtrans %}</li>
+		</ul>
+
+		<p>{% trans %}The data stored for each entry in the message archive is:{% endtrans %}</p>
+		<ul>
+			<li>{% trans %}A unique identifier for the message{% endtrans %}</li>
+			<li>{% trans %}The time and date that the message was sent/received{% endtrans %}</li>
+			<li>{% trans %}The sender and recipient of the message{% endtrans %}</li>
+			<li>{% trans %}The message contents (encrypted according to your app&rsquo;s settings){% endtrans %}</li>
+		</ul>
+
+		<p>{% trans %}Entries in the message archive are stored for a minimum of {{ retention_days }} days. The server will routinely erase all entries after they have been in the archive for this amount of time.{% endtrans %}</p>
+
+		<p>{% trans %}We encourage the use of encryption of your message contents, as is the default within the Snikket app.{% endtrans %}</p>
+
+		<h4 id="uploaded-files">{% trans %}Uploaded files{% endtrans %}</h4>
+		<p>{% trans %}You may also use the server to upload files (including images and videos) within your conversations. These files will remain on the server for a minimum of {{ retention_days }} days. This allows your contacts time to retrieve the file, even if they are offline. Similarly to message archives, the server will routinely erase files beyond this age.{% endtrans %}</p>
+
+		<p>{% trans %}Uploaded files are assigned a long random identifier, included in the link to the file. This ensures your files can only be viewed by people you share the link with.{% endtrans %}</p>
+
+		<p>{% trans %}The server will store the following information for every shared file:{% endtrans %}</p>
+		<ul>
+			<li>{% trans %}A unique identifier{% endtrans %}</li>
+			<li>{% trans %}The time and date that the file was uploaded{% endtrans %}</li>
+			<li>{% trans %}The file name{% endtrans %}</li>
+			<li>{% trans %}The file size{% endtrans %}</li>
+			<li>{% trans %}The file type (as reported by the app){% endtrans %}</li>
+			<li>{% trans %}The file contents (encrypted according to your app&rsquo;s settings){% endtrans %}</li>
+		</ul>
+
+		<p>{% trans %}The Snikket app will automatically encrypt file contents when sharing a file within an encrypted conversation.{% endtrans %}</p>
+		<p>{% trans %}Once you share a file with a contact, understand that the contact may store a copy of the file on their device that is beyond our control and may remain even after the file is removed from {{ snikket_domain }}.{% endtrans %}</p>
+
+		<h4 id="access-and-network-information">{% trans %}Access and network information{% endtrans %}</h4>
+		<p>{% trans %}The Snikket server may record the time and general location from which you connect to your account or perform certain security-related actions, such as changing your password.{% endtrans %}</p>
+		<p>{% trans %}This is to help identify unauthorized access to your account, and detect when your account becomes inactive for administrative purposes (for example, so that it may be erased when no longer needed).{% endtrans %}</p>
+
+		<h4 id="cookies">{% trans %}Cookies{% endtrans %}</h4>
+		<p>{% trans %}When you access your account through the {{ snikket_domain }} website, one or more small pieces of data known as &ldquo;cookies&rdquo; may be stored in your web browser. These essential cookies allow us to securely identify your browser as you move between different pages on {{ snikket_domain }}, and therefore protect your account from unauthorized access. The cookies are not shared with third-parties or used for tracking, advertising or any such purposes.{% endtrans %}</p>
+
+	</div>
+</main>
+{% endblock %}

snikket_web/translations/fr/LC_MESSAGES/messages.po

@@ -6,18 +6,18 @@
 msgid ""
 msgstr ""
 "Project-Id-Version: PROJECT VERSION\n"
-"Report-Msgid-Bugs-To: translations@snikket.org\n"
+"Report-Msgid-Bugs-To: EMAIL@ADDRESS\n"
 "POT-Creation-Date: 2022-01-17 17:27+0100\n"
-"PO-Revision-Date: 2022-04-11 13:00+0000\n"
-"Last-Translator: David Baraniak <admin@chipmnk.dev>\n"
-"Language-Team: French <http://i18n.sotecware.net/projects/snikket/web-portal/"
-"fr/>\n"
+"PO-Revision-Date: 2021-06-19 15:01+0000\n"
+"Last-Translator: Link Mauve <linkmauve@linkmauve.fr>\n"
+"Language-Team: French <https://i18n.sotecware.net/projects/snikket/web-"
+"portal/fr/>\n"
 "Language: fr\n"
 "MIME-Version: 1.0\n"
 "Content-Type: text/plain; charset=UTF-8\n"
 "Content-Transfer-Encoding: 8bit\n"
 "Plural-Forms: nplurals=2; plural=n > 1;\n"
-"X-Generator: Weblate 4.8.1\n"
+"X-Generator: Weblate 4.5.1\n"
 "Generated-By: Babel 2.9.0\n"
 
 #: snikket_web/admin.py:68 snikket_web/templates/admin_delete_user.html:10
@@ -221,8 +221,6 @@ msgid ""
 "The account data you tried to import is too large to upload. Please contact "
 "your Snikket operator."
 msgstr ""
-"Les données du compte que vous avez essayé d'importer sont trop volumineuses "
-"pour être téléchargées. Veuillez contacter votre opérateur Snikket."
 
 #: snikket_web/invite.py:112
 msgid "Username"
@@ -263,11 +261,11 @@ msgstr "Changer de mot de passe"
 
 #: snikket_web/invite.py:244
 msgid "Account data file"
-msgstr "Fichier de données du compte"
+msgstr ""
 
 #: snikket_web/invite.py:248
 msgid "Import data"
-msgstr "Importer les données"
+msgstr ""
 
 #: snikket_web/invite.py:269
 #, python-format
@@ -275,9 +273,6 @@ msgid ""
 "The account data you tried to import is in an unknown format. Please upload "
 "an XML file in XEP-0227 format (provided format: %(mimetype)s)."
 msgstr ""
-"Les données du compte que vous avez essayé d'importer sont dans un format "
-"inconnu. Veuillez télécharger un fichier XML au format XEP-0227 (format "
-"fourni : %(mimetype)s)."
 
 #: snikket_web/invite.py:289 snikket_web/templates/unauth.html:18
 #: snikket_web/user.py:178
@@ -346,11 +341,11 @@ msgstr "Mettre à jour le profil"
 
 #: snikket_web/user.py:82
 msgid "Account data"
-msgstr "Données du compte"
+msgstr ""
 
 #: snikket_web/user.py:86
 msgid "Upload"
-msgstr "Télécharger"
+msgstr ""
 
 #: snikket_web/user.py:111
 msgid "Incorrect password."
@@ -374,11 +369,11 @@ msgstr "Profil mis à jour"
 
 #: snikket_web/user.py:184
 msgid "Export"
-msgstr "Exporter"
+msgstr ""
 
 #: snikket_web/user.py:202
 msgid "You currently have no account data to export."
-msgstr "Vous n'avez actuellement aucune donnée de compte à exporter."
+msgstr ""
 
 #: snikket_web/templates/_footer.html:4
 #, python-format
@@ -1019,7 +1014,7 @@ msgstr "Statut du serveur Snikket"
 
 #: snikket_web/templates/admin_system.html:71
 msgid "Storage used by shared files"
-msgstr "Stockage utilisé par les fichiers partagés"
+msgstr ""
 
 #: snikket_web/templates/admin_system.html:79
 msgid "Connected devices"
@@ -1319,22 +1314,22 @@ msgid ""
 "You can now safely close this page, or log in to the web portal to <a href="
 "\"%(login_url)s\">manage your account</a>."
 msgstr ""
-"Vous pouvez maintenant fermer cette page en toute sécurité, ou vous "
-"connecter au portail web pour <a href=\"%(login_url)s\">gérer votre "
-"compte</a>."
 
 #: snikket_web/templates/invite_success.html:21
+#, fuzzy
+#| msgid "Operation successful"
 msgid "Import successful"
-msgstr "Importation réussie"
+msgstr "Opération réussie"
 
 #: snikket_web/templates/invite_success.html:22
 msgid "Congratulations! Your account data has been successfully imported."
 msgstr ""
-"Félicitations ! Les données de votre compte ont été importées avec succès."
 
 #: snikket_web/templates/invite_success.html:26
+#, fuzzy
+#| msgid "Using the Snikket app"
 msgid "Moving to Snikket?"
-msgstr "Nouveau utilisateur Snikket ?"
+msgstr "En utilisant l’application Snikket"
 
 #: snikket_web/templates/invite_success.html:27
 msgid ""
@@ -1343,15 +1338,10 @@ msgid ""
 "information, etc.) from your previous account. When you have exported the "
 "data from your previous account, upload it using the form below."
 msgstr ""
-"Si vous passez d'une autre instance de Snikket ou d'un autre service "
-"compatible XMPP, vous pouvez éventuellement importer les données (contacts, "
-"informations de profil, etc.) de votre ancien compte. Lorsque vous avez "
-"exporté les données de votre ancien compte, téléchargez-les en utilisant le "
-"formulaire ci-dessous."
 
 #: snikket_web/templates/invite_success.html:30
 msgid "Upload account data"
-msgstr "Télécharger les données du compte"
+msgstr ""
 
 #: snikket_web/templates/invite_view.html:6
 #, python-format
@@ -1406,9 +1396,10 @@ msgstr "Télécharger sur l’App Store"
 
 #: snikket_web/templates/invite_view.html:32
 msgid "Get it on F-Droid"
-msgstr "Obtenez-le sur F-Droid"
+msgstr ""
 
 #: snikket_web/templates/invite_view.html:35
+#, fuzzy
 msgid "Send to mobile device"
 msgstr "Envoyer vers l'appareil"
 
@@ -1487,14 +1478,10 @@ msgid ""
 "After downloading Snikket from the App Store, you have to return to this "
 "invite link and tap on \"Open the app\" to proceed."
 msgstr ""
-"Après avoir téléchargé Snikket depuis l'App Store, vous devez revenir à ce "
-"lien d'invitation et cliquer sur \"Ouvrir l'application\" pour continuer."
 
 #: snikket_web/templates/invite_view.html:101
 msgid "First download Snikket from the App Store using the button below:"
 msgstr ""
-"Téléchargez d'abord Snikket depuis l'App Store en utilisant le bouton ci-"
-"dessous :"
 
 #: snikket_web/templates/invite_view.html:103
 #: snikket_web/templates/invite_view.html:131
@@ -1502,9 +1489,6 @@ msgid ""
 "After the installation is complete, you can return to this page and tap the "
 "\"Open the app\" button to continue with the setup:"
 msgstr ""
-"Une fois l'installation terminée, vous pouvez revenir à cette page et "
-"appuyer sur le bouton \"Ouvrir l'application\" pour poursuivre la "
-"configuration :"
 
 #: snikket_web/templates/invite_view.html:121
 #: snikket_web/templates/invite_view.html:130
@@ -1516,13 +1500,10 @@ msgid ""
 "After installing Snikket via F-Droid, you have to return to this invite link "
 "and tap on \"Open the app\" to proceed."
 msgstr ""
-"Après avoir installé Snikket via F-Droid, vous devez revenir à ce lien "
-"d'invitation et appuyer sur \"Ouvrir l'application\" pour continuer."
 
 #: snikket_web/templates/invite_view.html:129
 msgid "First install Snikket from F-Droid using the button below:"
 msgstr ""
-"Installez d'abord Snikket depuis F-Droid en utilisant le bouton ci-dessous :"
 
 #: snikket_web/templates/library.j2:18
 msgid "Copy link"
@@ -1589,8 +1570,10 @@ msgstr "Éditer votre profil"
 
 #: snikket_web/templates/user_home.html:33
 #: snikket_web/templates/user_manage_data.html:4
+#, fuzzy
+#| msgid "Manage users"
 msgid "Manage your data"
-msgstr "Gérer vos données"
+msgstr "Gérer les utilisateurs"
 
 #: snikket_web/templates/user_home.html:39
 msgid "Your Snikket"
@@ -1618,16 +1601,16 @@ msgstr ""
 "autres appareils connectés."
 
 #: snikket_web/templates/user_manage_data.html:8
+#, fuzzy
+#| msgid "Your account"
 msgid "Export account"
-msgstr "Exportation du compte"
+msgstr "Votre compte"
 
 #: snikket_web/templates/user_manage_data.html:9
 msgid ""
 "Download your account data as a file for backup purposes or to move your "
 "account to another service."
 msgstr ""
-"Téléchargez les données de votre compte sous forme d'un fichier à des fins "
-"de sauvegarde ou pour transférer votre compte vers un autre service."
 
 #: snikket_web/templates/user_passwd.html:5
 msgid "Change your password"