% Django HTML to LaTeX conversion
% By Natasha L.
% www.lupinia.net | github.com/lupinia
\documentclass[11pt,letterpaper]{article}
\usepackage[letterpaper,top=0.5in, bottom=0.75in, left=0.5in, right=0.5in]{geometry}
\usepackage{tgpagella}
\usepackage[T1]{fontenc}
\usepackage[bookmarks=true,bookmarksnumbered=true,colorlinks=true,linkcolor=magenta,urlcolor=blue]{hyperref}
\parskip 3pt
\begin{document}
\title{\Huge Site Policies: Privacy Policy}
\author{By Meadow Whisper (Natasha L.) - \url{www.meadow.pet}}
\date{Revised: November 18, 2023}
\maketitle
\emph{\textbf{Last update:} Added information about Second Life systems/API interactions and bots on 18 November 2023.}
Scripts and static content for this site are served from the domain cdn.fur.vc. This domain is solely owned and operated by Lupinia Studios, so it is also held to this same privacy policy.
The underlying application code powering this site is entirely open-source, and may be \href{https://github.com/lupinia/awi}{reviewed on GitHub}.
\section{General Browsing Information Collected}
When you browse through any website, information about your visit can be collected. I automatically collect and temporarily store the following information:
\begin{itemize}
\item Your IP address;
\item The date and time of your visit;
\item The pages you visited;
\item The address of the website you came from when you came to visit (if you have referrer information turned on); and
\item The type of browser used to view the site.
\end{itemize}
I use analytical software to process this log information (locally installed and privately maintained), but it's never shared with or sent to third parties under any circumstances, not even for my own analysis. This log data contains no personally-identifiable information (PII); browser data can potentially be identifying, but I have no interest in doing this, I'm only interested in statistical information to improve the site. So, I welcome anyone to anonymize any or all of their browser information; it's helpful for me to know what browser you're using, what language(s) you read/speak, and the date/time of your visit, but you are under no obligation to provide this information, so please use whatever proxies/anonymization measures you feel are necessary. For more information about browser fingerprinting, and to see what information your browser transmits when browsing, go to \href{https://panopticlick.eff.org/}{https://panopticlick.eff.org/}.
\section{Cookies}
This site does not use any third-party tracking cookies or statistic systems whatsoever. No Google Analytics, no Sitemeter, nothing.
Session cookies are used to enhance various features, but most of the site will work fine without them, so they can be disabled in your browser unless you're a registered user attempting to log in, or attempting to view mature content (see the Personally-Provided Information section below). As of the last revision to this document, there are no persistent cookies currently in use.
\section{Javascript}
For various reasons, including personal preference and engineering experience, this site makes minimal use of Javascript. And in areas where scripting is required, all functionality will gracefully function without Javascript enabled. So, if you choose to disable Javascript for privacy/security reasons, everything should function correctly (and if it doesn't, please \href{http://www.lupinia.net/contact/}{let me know}). In fact, I encourage all internet users to disable Javascript by default on all sites they visit, for privacy and security reasons.
If you do want to enable Javascript-related functionality, allow scripts for cdn.fur.vc and mapbox.com in addition to the domain you used to access this site. No other Javascript domains should be necessary for this site.
\subsection{Mapbox}
All embedded maps use Mapbox, and they're completely Javascript-based. To enable them, allow Javascript for mapbox.com. As far as I can tell, there are no cookies placed by the scripts I used to embed their code, but if you encounter them, \href{http://www.lupinia.net/contact/}{please let me know}. You can find Mapbox's privacy policy at \href{http://www.lupinia.net/contact/}{please let me know}.
\section{Personally-Provided Information}
You don't have to provide any information to use this site, but there are a few areas that invite you to do so. Any information you provide through these methods will be carefully guarded, and not shared with any third parties.
\subsection{User Accounts}
User accounts may be created, using only as much information as you supply. A valid email address is required to activate your account, but it is absolutely never shared with third parties for any reason, nor is it used for anything other than account maintenance and account-related communications. Please note that logging in to your account requires session cookies - this is an inescapable limitation of all internet architecture.
\subsection{Birthdate}
The mature content filter for non-logged-in users requires a valid birthdate to ensure that visitors are over age 18 when viewing mature content. This is not stored in any way, once it is processed by the filter script, and it cannot be retrieved by third parties in any way.
For users with user accounts, entering your birthdate into the form will set a True/False flag in the database indicating whether you were over age 18 when you provided that data, along with the date/time when you submitted the form (for validation purposes), but the birthdate you enter will not be stored.
For anonymous users, entering your birthdate into the form will set a session variable for 48 hours indicating whether you are over age 18. The underlying code for this form can be found \href{https://github.com/lupinia/awi/blob/master/awi\_access/forms.py}{here}. Please note that this functionality will not work without session cookies - this is an inescapable limitation of all internet architecture.
\subsection{Contact Form}
The contact form is only used to send an email to me. A valid email address is required in order to receive a response. Upon successfully sending a message through the form, your IP address and user agent will be recorded in a temporary caching system for up to 24 hours, as a spam/abuse reduction measure - it will not be stored, recorded, or used in any way beyond that time, and I have no means of retrieving it once the ``cool down'' time has passed. \textbf{This information is never shared with third parties.}
If I determine a message sent through this contact form to be spam, I will add certain keywords from the message to a database on this site. Future messages sent through the contact form will be checked against this list, and if a match is found, the sender's email address, IP address, and user agent will be recorded permanently, in order to block that sender from future access to the site. I maintain this spam keyword list manually, and I prioritize avoiding false positives when selecting keywords to add to the list, but if you feel I've made a mistake, please \href{https://github.com/lupinia/awi/issues}{open a support issue} and I'll review your request. I reserve the right to share this information (spam keywords, spam sender addresses, and spammer IP addresses/user agents) with security researchers of my choosing, for academic purposes or for the development of defensive technologies.
The underlying code for the contact form can be found \href{https://github.com/lupinia/awi/tree/master/deerconnect}{here}.
\noindent\makebox[\linewidth]{\rule{\linewidth}{0.4pt}}
\section{Second Life Systems}
In addition to browsing this website directly, some scripted systems within Second Life interact with this site indirectly, via the use of various web APIs running on this server. At a minimum, these systems may record and store additional information beyond what's described above, including:
\begin{itemize}
\item Second Life legacy usernames and unique identifiers (UUIDs) of users who own objects containing scripts that directly connect to web APIs on this site.
\item In-world location of objects containing scripts that directly connect to web APIs on this site, including region name and coordinates.
\item The unique identifiers (UUIDs) of objects containing scripts that directly connect to web APIs on this site
\end{itemize}
This information is required for in-world scripts to authenticate with the web APIs on this site and ensure usage of these APIs is restricted to authorized scripts/users only.
\subsection{Sales and Rentals (CasperVend, CasperLet, and Second Life Marketplace)}
I use CasperLet to manage Second Life rental properties, and CasperVend for in-world sales (including distribution of certain free items). Both of these systems are governed by the \href{https://wiki.casperdns.com/index.php/CasperTech\_Wiki:Privacy\_policy}{CasperTech Privacy Policy}. Sales of my items on the Second Life Marketplace are governed by the \href{https://wiki.casperdns.com/index.php/CasperTech\_Wiki:Privacy\_policy}{CasperTech Privacy Policy}, and records of my Marketplace sales are synchronized with CasperVend.
\section{Second Life Scripted Agents ("Bots")}
Within Second Life, ``bots'' are normal user accounts operated by automation software instead of by a human operator. The usage of bots in SL is governed by Linden Labs' \href{https://wiki.secondlife.com/wiki/Linden\_Lab\_Official:Scripted\_Agent\_Policy}{Official Scripted Agent Policy}, and all bots I operate fully comply with this policy. As of this policy revision, this includes only one bot account, \href{https://wiki.secondlife.com/wiki/Linden\_Lab\_Official:Scripted\_Agent\_Policy}{Official Scripted Agent Policy}.
All bots I operate run independently on servers I manage, using the \href{https://corrade.grimore.org/}{Corrade viewer}. \textbf{No data received/viewed by my bots is shared with any third parties.}
Chat/conversations received by bots (including local chat at reduced range, as well as IMs sent to bots and group IMs in groups the bot is a member of) are automatically logged as a normal function of bot operation, and while these logs may be reviewed manually as-needed for diagnostic purposes or to investigate security/abuse incidents, these logs are considered temporary/ephemeral and are discarded when no longer necessary for minimal engineering/security purposes.
\begin{center}
\line(1,0){250}
\end{center}
\section*{About the Author, and Contact Information}
Meadow Whisper (Natasha L.) is a web application developer, and avid photographer and writer, living in the DC metro area. Visit \url{www.meadow.pet} to learn more. Contact information, including an email form and links to other websites, can be found at \url{www.meadow.pet/contact}.
\copyright 2023 by Meadow Whisper (Natasha L.), and is free for distribution, but may not be modified or used for monetary gain. Original version and further downloads available at \url{https://softpaw.eu/about/privacy.htm}
\end{document}