From 406c35958e14e6343443b41650132925dbf2f1bb Mon Sep 17 00:00:00 2001 From: "M. Sarmad Qadeer" Date: Sat, 27 Apr 2024 03:00:49 +0500 Subject: [PATCH] web: add privacy page to website (#4096) * web: add privacy page to website * web: fix a blog frontmatter * web: fix privacy link from other docs * update --------- Co-authored-by: Evgeny Poberezkin --- .gitignore | 1 + PRIVACY.md | 14 ++++--- README.md | 6 +-- ...ransparency-v5-7-better-user-experience.md | 1 - docs/TRANSPARENCY.md | 8 ++-- website/.eleventy.js | 3 ++ website/langs/en.json | 2 +- website/src/_includes/footer.html | 4 +- website/src/_includes/layouts/privacy.html | 42 +++++++++++++++++++ website/src/_includes/navbar.html | 2 + website/web.sh | 1 + 11 files changed, 67 insertions(+), 17 deletions(-) create mode 100644 website/src/_includes/layouts/privacy.html diff --git a/.gitignore b/.gitignore index d7106ec8fa..63e7a018ad 100644 --- a/.gitignore +++ b/.gitignore @@ -54,6 +54,7 @@ website/translations.json website/src/img/images/ website/src/images/ website/src/js/lottie.min.js +website/src/PRIVACY.md # Generated files website/package/generated* diff --git a/PRIVACY.md b/PRIVACY.md index ac355ac7f1..3b4ba2ba8a 100644 --- a/PRIVACY.md +++ b/PRIVACY.md @@ -1,16 +1,20 @@ +--- +layout: layouts/privacy.html +--- + # SimpleX Chat Privacy Policy and Conditions of Use SimpleX Chat is the first communication network based on a new protocol stack that builds on the same ideas of complete openness and decentralization as email and web, with the focus on providing security and privacy of communications, and without compromising on usability. SimpleX Chat communication protocol is the first protocol that has no user profile IDs of any kind, not even random numbers, cryptographic keys or hashes that identify the users. SimpleX Chat apps allow their users to send messages and files via relay server infrastructure. Relay server owners and providers do not have any access to your messages, thanks to double-ratchet end-to-end encryption algorithm (also known as Signal algorithm - do not confuse with Signal protocols or platform) and additional encryption layers, and they also have no access to your profile and contacts - as they do not provide any user accounts. -Double ratchet algorithm has such important properties as [forward secrecy](./docs/GLOSSARY.md#forward-secrecy), sender [repudiation](./docs/GLOSSARY.md#) and break-in recovery (also known as [post-compromise security](./docs/GLOSSARY.md#post-compromise-security)). +Double ratchet algorithm has such important properties as [forward secrecy](/docs/GLOSSARY.md#forward-secrecy), sender [repudiation](/docs/GLOSSARY.md#) and break-in recovery (also known as [post-compromise security](/docs/GLOSSARY.md#post-compromise-security)). If you believe that any part of this document is not aligned with our mission or values, please raise it with us via [email](chat@simplex.chat) or [chat](https://simplex.chat/contact#/?v=1&smp=smp%3A%2F%2FPQUV2eL0t7OStZOoAsPEV2QYWt4-xilbakvGUGOItUo%3D%40smp6.simplex.im%2FK1rslx-m5bpXVIdMZg9NLUZ_8JBm8xTt%23%2F%3Fv%3D1%26dh%3DMCowBQYDK2VuAyEALDeVe-sG8mRY22LsXlPgiwTNs9dbiLrNuA7f3ZMAJ2w%253D%26srv%3Dbylepyau3ty4czmn77q4fglvperknl4bi2eb2fdy2bh4jxtf32kf73yd.onion). ## Privacy Policy -SimpleX Chat Ltd uses the best industry practices for security and encryption to provide client and server software for secure [end-to-end encrypted](./docs/GLOSSARY.md#end-to-end-encryption) messaging via private connections. This encryption cannot be compromised by the relays servers, even if they are modified or compromised, via [man-in-the-middle attack](./docs/GLOSSARY.md#man-in-the-middle-attack), unlike most other communication platforms, services and networks. +SimpleX Chat Ltd uses the best industry practices for security and encryption to provide client and server software for secure [end-to-end encrypted](/docs/GLOSSARY.md#end-to-end-encryption) messaging via private connections. This encryption cannot be compromised by the relays servers, even if they are modified or compromised, via [man-in-the-middle attack](/docs/GLOSSARY.md#man-in-the-middle-attack), unlike most other communication platforms, services and networks. SimpleX Chat software is built on top of SimpleX messaging and application protocols, based on a new message routing protocol allowing to establish private connections without having any kind of addresses or other identifiers assigned to its users - it does not use emails, phone numbers, usernames, identity keys or any other user profile identifiers to pass messages between the user applications. @@ -20,7 +24,7 @@ While SimpleX Chat Ltd is not a communication service provider, and provide publ We see users and data sovereignty, and device and provider portability as critically important properties for any communication system. -SimpleX Chat security assessment was done in October 2022 by [Trail of Bits](https://www.trailofbits.com/about), and most fixes were released in v4.2 – see [the announcement](./blog/20221108-simplex-chat-v4.2-security-audit-new-website.md). +SimpleX Chat security assessment was done in October 2022 by [Trail of Bits](https://www.trailofbits.com/about), and most fixes were released in v4.2 – see [the announcement](/blog/20221108-simplex-chat-v4.2-security-audit-new-website.md). ### Your information @@ -34,7 +38,7 @@ You can transfer the profile to another device by creating a backup of the app d #### Messages and Files -SimpleX relay servers cannot decrypt or otherwise access the content or even the size of your messages and files you send or receive. Each message is padded to a fixed size of 16kb. Each file is sent in chunks of 64kb, 256kb, 1mb or 8mb via all or some of the configured file relay servers. Both messages and files are sent end-to-end encrypted, and the servers do not have technical means to compromise this encryption, because part of the [key exchange](./docs/GLOSSARY.md#key-exchange) happens out-of-band. +SimpleX relay servers cannot decrypt or otherwise access the content or even the size of your messages and files you send or receive. Each message is padded to a fixed size of 16kb. Each file is sent in chunks of 64kb, 256kb, 1mb or 8mb via all or some of the configured file relay servers. Both messages and files are sent end-to-end encrypted, and the servers do not have technical means to compromise this encryption, because part of the [key exchange](/docs/GLOSSARY.md#key-exchange) happens out-of-band. Your message history is stored only on your own device and the devices of your contacts. While the recipients' devices are offline, messaging relay servers temporarily store end-to-end encrypted messages – you can configure which relay servers are used to receive the messages from the new contacts, and you can manually change them for the existing contacts too. @@ -82,7 +86,7 @@ Additional technical information can be stored on our servers, including randoml #### SimpleX Directory -[SimpleX Directory](./docs/DIRECTORY.md) stores: your search requests, the messages and the members profiles in the registered groups. You can connect to SimpleX Directory via [this address](https://simplex.chat/contact#/?v=1-4&smp=smp%3A%2F%2Fu2dS9sG8nMNURyZwqASV4yROM28Er0luVTx5X1CsMrU%3D%40smp4.simplex.im%2FeXSPwqTkKyDO3px4fLf1wx3MvPdjdLW3%23%2F%3Fv%3D1-2%26dh%3DMCowBQYDK2VuAyEAaiv6MkMH44L2TcYrt_CsX3ZvM11WgbMEUn0hkIKTOho%253D%26srv%3Do5vmywmrnaxalvz6wi3zicyftgio6psuvyniis6gco6bp6ekl4cqj4id.onion). +[SimpleX Directory](/docs/DIRECTORY.md) stores: your search requests, the messages and the members profiles in the registered groups. You can connect to SimpleX Directory via [this address](https://simplex.chat/contact#/?v=1-4&smp=smp%3A%2F%2Fu2dS9sG8nMNURyZwqASV4yROM28Er0luVTx5X1CsMrU%3D%40smp4.simplex.im%2FeXSPwqTkKyDO3px4fLf1wx3MvPdjdLW3%23%2F%3Fv%3D1-2%26dh%3DMCowBQYDK2VuAyEAaiv6MkMH44L2TcYrt_CsX3ZvM11WgbMEUn0hkIKTOho%253D%26srv%3Do5vmywmrnaxalvz6wi3zicyftgio6psuvyniis6gco6bp6ekl4cqj4id.onion). #### User Support diff --git a/README.md b/README.md index d1ac0b676d..f800e9f5b1 100644 --- a/README.md +++ b/README.md @@ -412,13 +412,13 @@ We have never provided or have been requested access to our servers or any infor We do not log IP addresses of the users and we do not perform any traffic correlation on our servers. If transport level security is critical you must use Tor or some other similar network to access messaging servers. We will be improving the client applications to reduce the opportunities for traffic correlation. -Please read more in [Terms & privacy policy](./PRIVACY.md). +Please read more in [Privacy Policy](./PRIVACY.md). ## Security contact -To report a security vulnerability, please send us email to chat@simplex.chat. We will coordinate the fix and disclosure. Please do NOT report security vulnerabilities via GitHub issues. +Please see our [Security Policy](./docs/SECURITY.md) on how to report security vulnerabilities to us. We will coordinate the fix and disclosure. -Please treat any findings of possible traffic correlation attacks allowing to correlate two different conversations to the same user, other than covered in [the threat model](https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md#threat-model), as security vulnerabilities, and follow this disclosure process. +Please do NOT report security vulnerabilities via GitHub issues. ## License diff --git a/blog/20240426-simplex-legally-binding-transparency-v5-7-better-user-experience.md b/blog/20240426-simplex-legally-binding-transparency-v5-7-better-user-experience.md index 77254bbbea..46336a8673 100644 --- a/blog/20240426-simplex-legally-binding-transparency-v5-7-better-user-experience.md +++ b/blog/20240426-simplex-legally-binding-transparency-v5-7-better-user-experience.md @@ -1,4 +1,3 @@ - --- layout: layouts/article.html title: "SimpleX network: legally binding transparency, v5.7 released with better user experience for calls and messages" diff --git a/docs/TRANSPARENCY.md b/docs/TRANSPARENCY.md index 55808c83c8..547660861b 100644 --- a/docs/TRANSPARENCY.md +++ b/docs/TRANSPARENCY.md @@ -1,12 +1,12 @@ --- title: Transparency Reports permalink: /transparency/index.html -revision: 09.04.2024 +revision: 26.04.2024 --- # Transparency Reports -**Updated**: Apr 9, 2024 +**Updated**: Apr 26, 2024 SimpleX Chat Ltd. is a company registered in the UK – it develops communication software enabling users to operate and communicate via SimpleX network, without user profile identifiers of any kind, and without having their data hosted by any network infrastructure operators. @@ -17,8 +17,8 @@ This page will include any and all reports on requests for user data. Our objective is to consistently ensure that no user data and absolute minimum of the metadata required for the network to function is available for disclosure by any infrastructure operators, under any circumstances. **Helpful resources**: -- [Privacy policy](https://github.com/simplex-chat/simplex-chat/blob/stable/PRIVACY.md) -- [Privacy and security: technical details and limitations](https://github.com/simplex-chat/simplex-chat?tab=readme-ov-file#privacy-and-security-technical-details-and-limitations) +- [Privacy policy](../PRIVACY.md) +- [Privacy and security: technical details and limitations](../README.md#privacy-and-security-technical-details-and-limitations) - Whitepaper: - [Trust in servers](https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md#trust-in-servers) - [Encryption Primitives Used](https://github.com/simplex-chat/simplexmq/blob/stable/protocol/overview-tjr.md#encryption-primitives-used) diff --git a/website/.eleventy.js b/website/.eleventy.js index 09fc7c2c44..64aedbc04c 100644 --- a/website/.eleventy.js +++ b/website/.eleventy.js @@ -394,6 +394,9 @@ module.exports = function (ty) { if (parsed.path.startsWith("../../blog")) { parsed.path = parsed.path.replace("../../blog", "/blog") } + if (parsed.path.startsWith("../PRIVACY.md")) { + parsed.path = parsed.path.replace("../PRIVACY.md", "/privacy") + } parsed.path = parsed.path.replace(/\.md$/, ".html").toLowerCase() return uri.serialize(parsed) } diff --git a/website/langs/en.json b/website/langs/en.json index 9d431ffbdb..e606fb9bf2 100644 --- a/website/langs/en.json +++ b/website/langs/en.json @@ -24,7 +24,7 @@ "copyright-label": "© 2020-2023 SimpleX | Open-Source Project", "simplex-chat-protocol": "SimpleX Chat protocol", "terminal-cli": "Terminal CLI", - "terms-and-privacy-policy": "Terms & Privacy Policy", + "terms-and-privacy-policy": "Privacy Policy", "hero-header": "Privacy redefined", "hero-subheader": "The first messenger
without user IDs", "hero-p-1": "Other apps have user IDs: Signal, Matrix, Session, Briar, Jami, Cwtch, etc.
SimpleX does not, not even random numbers.
This radically improves your privacy.", diff --git a/website/src/_includes/footer.html b/website/src/_includes/footer.html index 1c23806760..0cc1b16f8d 100644 --- a/website/src/_includes/footer.html +++ b/website/src/_includes/footer.html @@ -20,11 +20,9 @@ {{ "simplex-chat-protocol" | i18n({}, lang ) | safe }} - {{ "terms-and-privacy-policy" | i18n({}, lang ) | safe }} - + + + + + + + SimpleX Privacy Policy + + + + + + {% if image %} + + {% else %} + + {% endif %} + + + + + + + + + + {% include "navbar.html" %} + +
+
{{ content | safe }}
+
+ + {% include "footer.html" %} + + + diff --git a/website/src/_includes/navbar.html b/website/src/_includes/navbar.html index 55836bd576..89b3a122d8 100644 --- a/website/src/_includes/navbar.html +++ b/website/src/_includes/navbar.html @@ -60,6 +60,8 @@ >Whitepaper +
  • {{ "terms-and-privacy-policy" | i18n({}, lang ) | safe }}
  • {{ "smp-protocol" | i18n({}, lang ) | safe }} diff --git a/website/web.sh b/website/web.sh index e64f74d21d..ca34b00cdd 100755 --- a/website/web.sh +++ b/website/web.sh @@ -8,6 +8,7 @@ rm website/src/docs/lang/*/README.md cp -R blog website/src cp -R images website/src rm website/src/blog/README.md +cp PRIVACY.md website/src cd website langs=()