site/privacy.html
Rama main · réplica de lectura del repositorio original.
<!DOCTYPE html>
<html lang="en">
<head>
<!-- from goatcounter -->
<script data-goatcounter="https://jcz.goatcounter.com/count"
async src="//gc.zgo.at/count.js"></script>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>Privacy Policy - ActaLog</title>
<meta name="description" content="Privacy Policy for ActaLog - Learn how we handle your data and protect your privacy.">
<!-- Open Graph -->
<meta property="og:title" content="Privacy Policy - ActaLog">
<meta property="og:description" content="Privacy Policy for ActaLog workout tracker.">
<meta property="og:type" content="website">
<meta property="og:url" content="https://johnzastrow.github.io/actalog/privacy.html">
<!-- Favicon -->
<link rel="icon" type="image/svg+xml" href="assets/logo.svg">
<link rel="alternate icon" href="assets/logo.svg">
<!-- Fonts -->
<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Bebas+Neue&family=JetBrains+Mono:wght@400;700&display=swap" rel="stylesheet">
<link rel="stylesheet" href="styles.css">
<style>
.policy-section {
max-width: 900px;
margin: 0 auto;
padding: 120px 24px 60px;
}
.policy-header {
text-align: center;
margin-bottom: 4rem;
}
.policy-title {
font-family: 'Bebas Neue', sans-serif;
font-size: clamp(2.5rem, 6vw, 4rem);
color: #fff;
margin-bottom: 1rem;
letter-spacing: 2px;
}
.policy-subtitle {
color: #888;
font-size: 1rem;
}
.policy-content {
color: #ccc;
line-height: 1.8;
}
.policy-content h2 {
font-family: 'Bebas Neue', sans-serif;
font-size: 1.75rem;
color: #00bcd4;
margin-top: 3rem;
margin-bottom: 1rem;
letter-spacing: 1px;
}
.policy-content h3 {
font-family: 'Bebas Neue', sans-serif;
font-size: 1.25rem;
color: #ffc107;
margin-top: 2rem;
margin-bottom: 0.75rem;
letter-spacing: 1px;
}
.policy-content p {
margin-bottom: 1rem;
color: #aaa;
}
.policy-content ul {
margin-bottom: 1.5rem;
padding-left: 1.5rem;
}
.policy-content li {
margin-bottom: 0.5rem;
color: #aaa;
}
.policy-content strong {
color: #fff;
}
.policy-table {
width: 100%;
border-collapse: collapse;
margin: 1.5rem 0;
background: rgba(255, 255, 255, 0.02);
border-radius: 8px;
overflow: hidden;
}
.policy-table th,
.policy-table td {
padding: 12px 16px;
text-align: left;
border-bottom: 1px solid rgba(255, 255, 255, 0.1);
}
.policy-table th {
background: rgba(0, 188, 212, 0.1);
color: #00bcd4;
font-family: 'Bebas Neue', sans-serif;
letter-spacing: 1px;
font-size: 0.9rem;
}
.policy-table td {
color: #aaa;
font-size: 0.95rem;
}
.policy-table tr:last-child td {
border-bottom: none;
}
.highlight-box {
background: rgba(0, 188, 212, 0.1);
border-left: 3px solid #00bcd4;
padding: 1.25rem 1.5rem;
margin: 1.5rem 0;
border-radius: 0 8px 8px 0;
}
.highlight-box p {
margin: 0;
color: #ccc;
}
.contact-box {
background: rgba(255, 193, 7, 0.1);
border: 1px solid rgba(255, 193, 7, 0.3);
padding: 1.5rem;
border-radius: 8px;
margin: 2rem 0;
text-align: center;
}
.contact-box a {
color: #ffc107;
text-decoration: none;
}
.contact-box a:hover {
text-decoration: underline;
}
.back-link {
display: inline-flex;
align-items: center;
gap: 8px;
color: #00bcd4;
text-decoration: none;
margin-bottom: 2rem;
font-size: 0.95rem;
transition: color 0.2s;
}
.back-link:hover {
color: #fff;
}
.effective-date {
display: inline-block;
background: rgba(255, 255, 255, 0.05);
padding: 0.5rem 1rem;
border-radius: 20px;
font-size: 0.85rem;
color: #888;
margin-bottom: 0.5rem;
}
</style>
</head>
<body>
<!-- Noise Texture Overlay -->
<div class="noise-overlay"></div>
<!-- Navigation -->
<nav class="nav">
<div class="nav-container">
<div class="nav-logo">
<a href="index.html" style="text-decoration: none; color: inherit;">
<span class="logo-text">ACTALOG</span>
</a>
</div>
<div class="nav-links">
<a href="features.html" class="nav-link">FOR ADMINS</a>
<a href="tech.html" class="nav-link">DEVELOPERS</a>
</div>
</div>
</nav>
<!-- Privacy Policy Content -->
<section class="policy-section">
<a href="index.html" class="back-link">
<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2">
<path d="M19 12H5M12 19l-7-7 7-7"/>
</svg>
Back to Home
</a>
<div class="policy-header">
<span class="effective-date">Last Updated: December 2025</span>
<h1 class="policy-title">PRIVACY POLICY</h1>
<p class="policy-subtitle">How we handle your data and protect your privacy</p>
</div>
<div class="policy-content">
<div class="highlight-box">
<p><strong>TL;DR:</strong> We collect only what's necessary to run the app. We don't sell your data, we use privacy-friendly analytics (no cookies, no tracking), and we don't use advertising. Your workout data stays yours.</p>
</div>
<h2>1. ABOUT THIS WEBSITE</h2>
<p>This marketing website (johnzastrow.github.io/actalog) is a static informational site. Here's what it does and doesn't do:</p>
<h3>What This Site Does NOT Do</h3>
<ul>
<li>Set cookies or use local storage</li>
<li>Track your browsing behavior across sites</li>
<li>Collect any personal information</li>
<li>Display advertising</li>
<li>Sell or share data with third parties</li>
</ul>
<h3>Analytics</h3>
<p>This site uses <a href="https://www.goatcounter.com/" target="_blank" style="color: #00bcd4;">GoatCounter</a>, a privacy-friendly analytics service. GoatCounter:</p>
<ul>
<li>Does not use cookies</li>
<li>Does not track users across sites</li>
<li>Does not collect personal information</li>
<li>Only counts page views and basic referrer data</li>
<li>Is open source and GDPR compliant</li>
</ul>
<p>See <a href="https://www.goatcounter.com/help/privacy" target="_blank" style="color: #00bcd4;">GoatCounter's Privacy Policy</a> for details.</p>
<h3>External Resources</h3>
<p>This site loads fonts from Google Fonts. When you visit, your browser requests font files from Google's servers, which transmits your IP address to Google. This is standard web practice for typography. See <a href="https://policies.google.com/privacy" target="_blank" style="color: #00bcd4;">Google's Privacy Policy</a> for details.</p>
<h2>2. ABOUT THE APPLICATION</h2>
<p>The ActaLog application (when self-hosted or used via a hosted instance) handles user data as described below.</p>
<h3>Data We Collect</h3>
<table class="policy-table">
<tr>
<th>Data Type</th>
<th>Purpose</th>
<th>Required</th>
</tr>
<tr>
<td>Email address</td>
<td>Account identification, password recovery</td>
<td>Yes</td>
</tr>
<tr>
<td>Password</td>
<td>Authentication (stored securely hashed)</td>
<td>Yes</td>
</tr>
<tr>
<td>Display name</td>
<td>Personalization</td>
<td>Yes</td>
</tr>
<tr>
<td>Workout data</td>
<td>Core app functionality</td>
<td>User-provided</td>
</tr>
<tr>
<td>Profile image</td>
<td>Personalization</td>
<td>No</td>
</tr>
</table>
<h3>Data We DON'T Collect</h3>
<ul>
<li>Location data</li>
<li>Device sensor data</li>
<li>Payment information</li>
<li>Social media profiles</li>
<li>Advertising identifiers</li>
<li>Health data from external devices</li>
</ul>
<h2>3. HOW WE USE YOUR DATA</h2>
<table class="policy-table">
<tr>
<th>Purpose</th>
<th>Legal Basis (GDPR)</th>
</tr>
<tr>
<td>Provide workout tracking service</td>
<td>Contract performance</td>
</tr>
<tr>
<td>Send account emails (verification, password reset)</td>
<td>Contract performance</td>
</tr>
<tr>
<td>Protect against unauthorized access</td>
<td>Legitimate interest</td>
</tr>
<tr>
<td>Maintain security audit logs</td>
<td>Legitimate interest</td>
</tr>
</table>
<h3>We Do NOT</h3>
<ul>
<li>Sell your data to anyone</li>
<li>Share data with advertisers</li>
<li>Use data for marketing without consent</li>
<li>Profile you for automated decisions</li>
<li>Train AI models on your data</li>
</ul>
<h2>4. DATA SECURITY</h2>
<p>We implement industry-standard security measures:</p>
<ul>
<li><strong>Password hashing:</strong> bcrypt with cost factor 12</li>
<li><strong>Transport encryption:</strong> HTTPS/TLS required</li>
<li><strong>SQL injection prevention:</strong> Parameterized queries only</li>
<li><strong>Audit logging:</strong> All security events logged</li>
<li><strong>Account protection:</strong> Automatic lockout after failed attempts</li>
</ul>
<h2>5. YOUR RIGHTS</h2>
<p>Depending on your location, you may have the following rights:</p>
<h3>For EU Users (GDPR)</h3>
<ul>
<li><strong>Access:</strong> Request a copy of your data</li>
<li><strong>Rectification:</strong> Correct inaccurate data</li>
<li><strong>Erasure:</strong> Request deletion of your data</li>
<li><strong>Portability:</strong> Export data in standard format</li>
<li><strong>Objection:</strong> Object to certain processing</li>
</ul>
<h3>For California Users (CCPA)</h3>
<ul>
<li>Right to know what personal information is collected</li>
<li>Right to delete personal information</li>
<li>Right to opt-out of sale (we don't sell data)</li>
</ul>
<h2>6. DATA EXPORT</h2>
<p>You can export your workout data at any time through the application in JSON or CSV format. For a complete export of all personal data, contact the instance administrator.</p>
<h2>7. DATA RETENTION</h2>
<table class="policy-table">
<tr>
<th>Data Type</th>
<th>Retention Period</th>
</tr>
<tr>
<td>Account information</td>
<td>Until account deletion</td>
</tr>
<tr>
<td>Workout data</td>
<td>Until account deletion</td>
</tr>
<tr>
<td>Security audit logs</td>
<td>12 months</td>
</tr>
<tr>
<td>Password reset tokens</td>
<td>1 hour</td>
</tr>
</table>
<h2>8. THIRD-PARTY SERVICES</h2>
<p>The application uses minimal external services:</p>
<ul>
<li><strong>Email (SMTP):</strong> For sending verification and password reset emails</li>
<li><strong>Hosting provider:</strong> Where the application is deployed</li>
</ul>
<p>We do not integrate with advertising networks, analytics services, or social media platforms.</p>
<h2>9. SELF-HOSTING</h2>
<p>ActaLog is open source. When you self-host, you are the data controller. This privacy policy applies to instances operated by the project maintainers. Self-hosted instances should maintain their own privacy documentation.</p>
<h2>10. CHILDREN'S PRIVACY</h2>
<p>ActaLog is not intended for children under 16. We do not knowingly collect personal information from children.</p>
<h2>11. CHANGES TO THIS POLICY</h2>
<p>We may update this policy from time to time. Significant changes will be announced via the application or changelog.</p>
<h2>12. CONTACT</h2>
<div class="contact-box">
<p>For privacy-related inquiries or to exercise your rights:</p>
<p style="margin-top: 1rem;">
<a href="https://github.com/johnzastrow/actalog/issues/new" target="_blank">Open a GitHub Issue</a>
</p>
</div>
<h2>SUMMARY</h2>
<table class="policy-table">
<tr>
<th>What We Do</th>
<th>What We Don't Do</th>
</tr>
<tr>
<td>Collect only necessary data</td>
<td>Sell your data</td>
</tr>
<tr>
<td>Encrypt passwords securely</td>
<td>Track your browsing</td>
</tr>
<tr>
<td>Allow data export</td>
<td>Use advertising</td>
</tr>
<tr>
<td>Delete data on request</td>
<td>Share with third parties</td>
</tr>
<tr>
<td>Log security events</td>
<td>Profile for marketing</td>
</tr>
</table>
</div>
</section>
<!-- Footer -->
<footer class="footer">
<div class="footer-container">
<div class="footer-content">
<div class="footer-brand">
<div class="footer-logo">ACTALOG</div>
<p class="footer-tagline">Track Your CrossFit Journey</p>
</div>
<div class="footer-links">
<div class="footer-column">
<h4 class="footer-heading">PRODUCT</h4>
<a href="features.html">For Admins</a>
<a href="index.html#features">Features</a>
</div>
<div class="footer-column">
<h4 class="footer-heading">LEGAL</h4>
<a href="privacy.html">Privacy Policy</a>
</div>
<div class="footer-column">
<h4 class="footer-heading">SUPPORT</h4>
<a href="https://github.com/johnzastrow/actalog/issues/new" target="_blank">Get Help</a>
<a href="https://github.com/johnzastrow/actalog" target="_blank">GitHub</a>
</div>
</div>
</div>
<div class="footer-bottom">
<p>© 2026 ActaLog. Made for athletes, by athletes.</p>
</div>
</div>
</footer>
<script src="script.js"></script>
</body>
</html>