From 1bfccd5a06ab284522424043552fea4375e5a1bd Mon Sep 17 00:00:00 2001
From: "Felix W. Dekker" <felix@fwdekker.com>
Date: Thu, 22 Apr 2021 18:03:30 +0200
Subject: [PATCH] Completely rewrite privacy policy

Fixes #2. Fixes #3.
---
 package.json        |  2 +-
 src/main/index.html | 64 +++++++++++++++++++++++++++++++++------------
 2 files changed, 48 insertions(+), 18 deletions(-)

diff --git a/package.json b/package.json
index 88dc102..da3f6da 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "privacy-policy",
-    "version": "1.1.4",
+    "version": "1.2.0",
     "description": "The privacy policy of my website",
     "author": "Felix W. Dekker",
     "browser": "dist/bundle.js",
diff --git a/src/main/index.html b/src/main/index.html
index bb1e7cd..b6e1df4 100644
--- a/src/main/index.html
+++ b/src/main/index.html
@@ -40,31 +40,61 @@
                 For inquiries, please email me at <kbd>felix</kbd> at this very domain.
             </p>
 
-            <h3>Analytics</h3>
+            <h3>Summary</h3>
+            <ul>
+                <li>
+                    Usually, no personal information is collected.
+                    However, if an error occurs, your IP address is stored in the server's error log for up to five
+                    weeks.
+                </li>
+                <li>
+                    This website uses <a href="https://github.com/zgoat/goatcounter">&#9099; GoatCounter</a> to perform
+                    analytics.
+                </li>
+            </ul>
+
+            <h3>Collected information</h3>
+            <h4>Normal operation</h4>
+            <p>The following information may be collected:</p>
+            <ul>
+                <li>URL of the visited page,</li>
+                <li><code>Referer</code> header,</li>
+                <li><code>User-Agent</code> header,</li>
+                <li>screen size,</li>
+                <li>country and region name based on IP address, and</li>
+                <li>a hash of all of the following: the IP address, the <code>User-Agent</code> header, and a random
+                    number.
+                </li>
+            </ul>
+
             <p>
-                This website collects non-tracking analytics using a self-hosted instance of
-                <a href="https://github.com/zgoat/goatcounter">&#9099; GoatCounter</a> to help understand how this
-                website is being used.
-                No personally identifiable data are collected, and collected data are never exposed to or shared with
-                third-party services.
-                Users can opt out by configuring their browser to block requests to <b>stats.fwdekker.com</b>.
+                In short, no personal information is collected, nor can it be derived from the stored information.
+                The hash described above is kept in memory for 8&nbsp;hours only to identify a browser session; it is
+                never stored on disk.
             </p>
 
-            <h3>Cookies</h3>
             <p>
-                Some pages on this website make use of cookies.
-                These cookies are sent to this website's server(s) during requests.
-                This website uses cookies only for technical purposes, such as keeping users in or to enable technical
-                features of the website.
-                This website never uses cookies for the purposes of advertising or tracking.
+                The above data are collected using a self-hosted instance of
+                <a href="https://github.com/zgoat/goatcounter">&#9099; <b>GoatCounter</b></a>.
+                GoatCounter on this website can be toggled on or off by visiting
+                <a href="https://fwdekker.com/#toggle-goatcounter">fwdekker.com/#toggle-goatcounter</a>.
+                Alternatively, GoatCounter can be disabled by configuring your browser to block all requests to
+                <a href="https://stats.fwdekker.com/">stats.fwdekker.com</a>.
             </p>
 
-            <h3>Logs</h3>
+            <p>
+                Some pages on this website make use of <b>cookies</b>, localStorage, and similar methods.
+                These storage methods are used exclusively for technical purposes, such as keeping users logged in or to
+                store achievements and preferences.
+                These data are never used for the purposes of advertising or tracking.
+            </p>
+
+            <h4>Back-end errors</h4>
             <p>
                 Some requests to this website result in errors in the back end.
-                Back-end errors are described in zero or more log entries, each of which contains the requester's IP
-                address, the date and time of the error, the full HTTP request that caused the error, and the error
-                message describing the nature of the error.
+                Back-end errors are described in zero or more log entries, each of which contains the requester's
+                IP&nbsp;address, the date and time of the error, the URL of the visited page, and the error message
+                describing the nature of the error.
                 Log entries are removed within five weeks after the associated error occurs.
             </p>
         </section>