Monorepo for Tangled
tangled.org
tangled.org
1# Privacy Policy
2
3**Last updated:** January 15, 2025
4
5This Privacy Policy describes how Tangled ("we," "us," or "our")
6collects, uses, and shares your personal information when you use our
7platform and services (the "Service").
8
9## 1. Information We Collect
10
11### Account Information
12
13When you create an account, we collect:
14
15- Your chosen username
16- Email address
17- Profile information you choose to provide
18- Authentication data
19
20### Content and Activity
21
22We store:
23
24- Code repositories and associated metadata
25- Issues, pull requests, and comments
26- Activity logs and usage patterns
27- Public keys for authentication
28
29## 2. Data Location and Hosting
30
31### EU Data Hosting
32
33**All Tangled service data is hosted within the European Union.**
34Specifically:
35
36- **Personal Data Servers (PDS):** Accounts hosted on Tangled PDS
37 (*.tngl.sh) are located in Finland
38- **Application Data:** All other service data is stored on EU-based
39 servers
40- **Data Processing:** All data processing occurs within EU
41 jurisdiction
42
43### External PDS Notice
44
45**Important:** If your account is hosted on Bluesky's PDS or other
46self-hosted Personal Data Servers (not *.tngl.sh), we do not control
47that data. The data protection, storage location, and privacy
48practices for such accounts are governed by the respective PDS
49provider's policies, not this Privacy Policy. We only control data
50processing within our own services and infrastructure.
51
52## 3. Third-Party Data Processors
53
54We only share your data with the following third-party processors:
55
56### Resend (Email Services)
57
58- **Purpose:** Sending transactional emails (account verification,
59 notifications)
60- **Data Shared:** Email address and necessary message content
61
62### Cloudflare (Image Caching)
63
64- **Purpose:** Caching and optimizing image delivery
65- **Data Shared:** Public images and associated metadata for caching
66 purposes
67
68### Posthog (Usage Metrics Tracking)
69
70- **Purpose:** Tracking usage and platform metrics
71- **Data Shared:** Anonymous usage data, IP addresses, DIDs, and browser
72 information
73
74## 4. How We Use Your Information
75
76We use your information to:
77
78- Provide and maintain the Service
79- Process your transactions and requests
80- Send you technical notices and support messages
81- Improve and develop new features
82- Ensure security and prevent fraud
83- Comply with legal obligations
84
85## 5. Data Sharing and Disclosure
86
87We do not sell, trade, or rent your personal information. We may share
88your information only in the following circumstances:
89
90- With the third-party processors listed above
91- When required by law or legal process
92- To protect our rights, property, or safety, or that of our users
93- In connection with a merger, acquisition, or sale of assets (with
94 appropriate protections)
95
96## 6. Data Security
97
98We implement appropriate technical and organizational measures to
99protect your personal information against unauthorized access,
100alteration, disclosure, or destruction. However, no method of
101transmission over the Internet is 100% secure.
102
103## 7. Data Retention
104
105We retain your personal information for as long as necessary to provide
106the Service and fulfill the purposes outlined in this Privacy Policy,
107unless a longer retention period is required by law.
108
109## 8. Your Rights
110
111Under applicable data protection laws, you have the right to:
112
113- Access your personal information
114- Correct inaccurate information
115- Request deletion of your information
116- Object to processing of your information
117- Data portability
118- Withdraw consent (where applicable)
119
120## 9. Cookies and Tracking
121
122We use cookies and similar technologies to:
123
124- Maintain your login session
125- Remember your preferences
126- Analyze usage patterns to improve the Service
127
128You can control cookie settings through your browser preferences.
129
130## 10. Children's Privacy
131
132The Service is not intended for children under 16 years of age. We do
133not knowingly collect personal information from children under 16. If
134we become aware that we have collected such information, we will take
135steps to delete it.
136
137## 11. International Data Transfers
138
139While all our primary data processing occurs within the EU, some of our
140third-party processors may process data outside the EU. When this
141occurs, we ensure appropriate safeguards are in place, such as Standard
142Contractual Clauses or adequacy decisions.
143
144## 12. Changes to This Privacy Policy
145
146We may update this Privacy Policy from time to time. We will notify you
147of any changes by posting the new Privacy Policy on this page and
148updating the "Last updated" date.
149
150## 13. Contact Information
151
152If you have any questions about this Privacy Policy or wish to exercise
153your rights, please contact us through our platform or via email.
154
155---
156
157This Privacy Policy complies with the EU General Data Protection
158Regulation (GDPR) and other applicable data protection laws.