Skip to content

Add legal pages and self-host third-party libraries - #9

Merged
InventivetalentDev merged 2 commits into
masterfrom
legal-pages
Sep 21, 2026
Merged

InventivetalentDev merged 2 commits into
masterfrom
legal-pages

Conversation

@InventivetalentDev

Copy link
Copy Markdown
Member

Summary

  • Adds an imprint (/imprint), privacy policy (/privacy) and terms of service (/terms) as standalone static pages, modelled on the Aken legal pages. They are linked from the main page footer, the About page, the cookie notice and the sitemap. The links use target="_self" so the AngularJS router (html5Mode) doesn't intercept them.
  • Serves all third-party libraries (jQuery, AngularJS and its modules, UI Bootstrap, UI Router, Bootstrap JS, TouchSwipe, Font Awesome with fonts, bootstrap-switch, cookieconsent) from static/vendor/ instead of CDNs. The downloaded files match the previous SRI hashes. Opening the site no longer sends visitor IP addresses to third parties.
  • The bookmarklet now loads jQuery from remote-sli.de instead of code.jquery.com.
  • The instruction videos use YouTube's privacy-enhanced domain (youtube-nocookie.com).

Before merging

  • Load the main page and check the layout and Font Awesome icons (not tested in a browser; the local build needs npm install).
  • Review the legal text, especially the 7-day Workers Logs retention and treating the rs-last-visit-* cookies as strictly necessary.

Bookmarklets saved before this change still load jQuery from code.jquery.com. The privacy policy says so.

🤖 Generated with Claude Code

InventivetalentDev and others added 2 commits September 21, 2026 14:20
Standalone static pages under /imprint, /privacy and /terms, linked from
the main page footer, the About page, the cookie notice and the sitemap.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Serve jQuery, AngularJS, Bootstrap, Font Awesome, cookieconsent and the
other libraries from /vendor instead of CDNs, so opening the site no
longer sends visitor IP addresses to third parties. The bookmarklet loads
jQuery from remote-sli.de too, and the instruction videos use YouTube's
privacy-enhanced domain. The privacy policy is updated to match.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
@InventivetalentDev
InventivetalentDev merged commit 5c8c15e into master Sep 21, 2026
1 check passed
@InventivetalentDev
InventivetalentDev deleted the legal-pages branch September 21, 2026 12:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant