Skip to content

Make the site's privacy section accurate and name who runs it - #6

Merged
aquaxs1 merged 1 commit into
mainfrom
claude/datenschutz-compliance-check-2ymes0
Oct 17, 2026
Merged

aquaxs1 merged 1 commit into
mainfrom
claude/datenschutz-compliance-check-2ymes0

Conversation

@aquaxs1

@aquaxs1 aquaxs1 commented Oct 16, 2026

Copy link
Copy Markdown
Owner

What changes

Privacy section in site/terms.html (#privacy), rewritten

  • Who is responsible: Sebi; contact Telegram @aquaXs. Section 11 (Contact) says the same, and GitHub issues stay the place for bugs.
  • The app: no account, no server, no update check, no telemetry, no network connection (checked in the source, see below). The only file it keeps is ~/.cipherbox/config.json, holding the salt and a version number. Encrypted files are written next to the originals, and deleting the config folder makes them unreadable.
  • This website:
    • Hosted by Vercel Inc. (USA), which processes connection data (IP address, time, requested file, browser) to deliver the pages and protect them against abuse. Legal basis Art. 6(1)(f) GDPR; Vercel is certified under the EU-US Data Privacy Framework.
    • The site sets no cookies and stores nothing in the browser. It has no analytics, no scripts and no third-party fonts.
    • This replaces "Nothing about your visit is stored or shared", which was not true because the host sees every request.
  • Downloads and GitHub links: they go to github.com, and GitHub Inc. (USA, also DPF-certified) is contacted only when you click.
  • Your rights: Art. 15–21 GDPR via Telegram, and the Austrian Datenschutzbehörde (dsb.gv.at).
  • "Last updated" is now 16 October 2026.

Footer

  • index, download, setup and terms now link to terms.html#privacy.
  • .legal h3 spacing added to style.css.

Checked

  • App source: main.py, crypto_utils.py and config_manager.py import no networking module (no urllib, requests, socket, http or webbrowser). config_manager writes only salt and version to ~/.cipherbox/config.json. encrypt_file writes to file_path.parent.
  • Site: served locally and loaded every page (index, download, setup, terms, 404) in Chromium (Playwright):
    • 0 requests to other hosts, 0 console errors, no HTTP errors;
    • a Privacy link in every footer (404 has no footer);
    • no horizontal overflow at 390 px width;
    • screenshots look right.
  • site/vercel.json is unchanged and still valid. The site has no Google Fonts or other external fonts (it uses system fonts), so no font work was needed.

Generated by Claude Code

The terms said "Nothing about your visit is stored or shared", but the
host (Vercel) processes connection data such as IP addresses for every
request. The privacy section now names Sebi as responsible (contact:
Telegram @aquaXs) and covers:
- the app: no network connection; it keeps only the salt in
  ~/.cipherbox/config.json; encrypted files sit next to the originals
- the website: Vercel hosting, legal basis, Data Privacy Framework; no
  cookies, storage, scripts or third-party fonts
- downloads and GitHub links: GitHub is contacted only on click
- GDPR rights and the Austrian Datenschutzbehörde
Every page with a footer now links to terms.html#privacy.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_012X43phyqZg3WP5RthcUqM6
@vercel

vercel Bot commented Oct 16, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
cipher-box-file-encrypter Ready Ready Preview Oct 16, 2026 10:34pm UTC

@aquaxs1
aquaxs1 merged commit cae54f7 into main Oct 17, 2026
16 checks passed

This branch was successfully deployed

1 active deployment
Preview — 2df75b49 Deployed Oct 16, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants