feat: add privacy, terms, and cookies pages

Footer and login legal links were stubs. Point them at real marketing pages that follow the Figma content-page template.
2026-08-17 11:15:04 -06:00
parent 99419915d7
commit 0167b03231
16 changed files with 634 additions and 9 deletions
@@ -0,0 +1,28 @@
+{
+  "_comment": "Cookies Settings. Figma Content page Template (19003:23305): banner + labeled body stacks. There are no optional cookies to toggle.",
+  "banner": {
+    "title": "Cookies Settings",
+    "description": "CommunityRule uses one cookie, to keep you signed in.",
+    "author": "Media Economies Design Lab",
+    "date": "2026-08-15"
+  },
+  "updated": "Last updated August 15, 2026.",
+  "intro": [
+    "CommunityRule sets one cookie, named cr_session, after you sign in with a magic link. It keeps you signed in for up to 30 days. There are no advertising or analytics cookies to turn off."
+  ],
+  "sections": [
+    {
+      "heading": "The session cookie",
+      "paragraphs": [
+        "Sign out to clear it on this browser. Blocking it in your browser will sign you out and keep you from staying signed in. Browsing templates does not set this cookie."
+      ]
+    },
+    {
+      "heading": "Local drafts",
+      "paragraphs": [
+        "Drafts in progress may also be stored in your browser’s local storage, which is not a cookie. Clearing this site’s data removes those local drafts.",
+        "See the [Privacy Policy](/privacy) for what else we collect."
+      ]
+    }
+  ]
+}
@@ -0,0 +1,43 @@
+{
+  "_comment": "Privacy policy. Owns personal data, hosting, and how ranking works. API usage and licenses live on Terms. Grounded in MEDLab Cloudron + SES mail relay + facet-matrix recommendations. Not a substitute for university counsel review.",
+  "banner": {
+    "title": "Privacy Policy",
+    "description": "What we collect, where it is stored, and how template recommendations work.",
+    "author": "Media Economies Design Lab",
+    "date": "2026-08-15"
+  },
+  "updated": "Last updated August 15, 2026.",
+  "intro": [
+    "This page is about CommunityRule. The campus [Privacy Statement](https://www.colorado.edu/compliance/policies/privacy-statement) also applies. CommunityRule is a project of the [Media Economies Design Lab](https://www.colorado.edu/lab/medlab/) at the University of Colorado Boulder."
+  ],
+  "sections": [
+    {
+      "heading": "What we collect",
+      "paragraphs": [
+        "Your email, to sign you in, change your email, or invite a stakeholder. In-progress drafts in your browser and, after you save, on our servers. Files you attach to a Rule. Messages you send through the organizer form, which go to MEDLab by email. Page performance metrics (URL, timing, and browser), which are written to our server logs and are not tied to your account.",
+        "We do not sell this information or use it for advertising. As a public university project, some records may be subject to the Colorado Open Records Act."
+      ]
+    },
+    {
+      "heading": "Where it is stored",
+      "paragraphs": [
+        "Accounts, drafts, published Rules, uploads, and the recommendation table live on servers MEDLab operates. The app is not hosted on a third-party cloud app platform.",
+        "Sign-in and invite emails are sent through MEDLab’s mail system, which relays through Amazon SES to deliver them. Ordinary server logs may include the request URL and IP address."
+      ]
+    },
+    {
+      "heading": "Recommendations",
+      "paragraphs": [
+        "When you choose community details in the wizard (such as size or organization type), we use those answers to reorder templates and methods. The same ranking is available when those filters are sent to the templates API.",
+        "Ranking is a matching table we maintain. It is not an AI or machine-learning model, it does not train on your drafts, and we do not send your data to an AI service."
+      ]
+    },
+    {
+      "heading": "Your account",
+      "paragraphs": [
+        "You can sign out, delete a Rule you published, or delete your account from your profile. Deleting your account removes your login and draft. Published Rules are public and stay public unless you delete them first.",
+        "Questions: [medlab@colorado.edu](mailto:medlab@colorado.edu)."
+      ]
+    }
+  ]
+}
@@ -0,0 +1,36 @@
+{
+  "_comment": "Terms of service. Owns licenses, API use, and acceptable use. Privacy owns data, hosting, and ranking. Not a substitute for university counsel review.",
+  "banner": {
+    "title": "Terms of Service",
+    "description": "How you may use CommunityRule, including licenses and the templates API.",
+    "author": "Media Economies Design Lab",
+    "date": "2026-08-15"
+  },
+  "updated": "Last updated August 15, 2026.",
+  "intro": [
+    "CommunityRule is a toolkit for drafting and publishing community governance documents (“Rules”). It is a project of the [Media Economies Design Lab](https://www.colorado.edu/lab/medlab/) at the University of Colorado Boulder. It is not legal advice."
+  ],
+  "sections": [
+    {
+      "heading": "Licenses",
+      "paragraphs": [
+        "Guides, template copy, and other materials we publish here, and Rules you publish, are licensed [CC BY-SA 4.0](https://creativecommons.org/licenses/by-sa/4.0/). Do not publish material you cannot share under that license.",
+        "CommunityRule is open source. Application source code is [GPL-3.0 or later](https://www.gnu.org/licenses/gpl-3.0.html). You can read and fork it on [Gitea](https://git.medlab.host/CommunityRule/community-rule)."
+      ]
+    },
+    {
+      "heading": "Templates API",
+      "paragraphs": [
+        "The curated template library is available as JSON without signing in. [GET /api/templates](/api/templates) lists templates; GET /api/templates/{slug} returns one template. Reuse that copy under CC BY-SA.",
+        "Do not overload this hosted API. If you need your own copy, run the GPL-licensed source yourself."
+      ]
+    },
+    {
+      "heading": "Using the service",
+      "paragraphs": [
+        "Do not break, overload, or misuse the site or its APIs. We may suspend access to protect it or other people. The service is offered as-is for research and education; to the extent the law allows, MEDLab and the University of Colorado are not liable for your use of it or of a Rule created here.",
+        "Questions: [medlab@colorado.edu](mailto:medlab@colorado.edu)."
+      ]
+    }
+  ]
+}