4 ms·

Is this page really the entirety of your privacy policy? https://keys.openpgp.org/about/privacy https://keys.openpgp.org/about/privacy Because it's missing a to

Is this page really the entirety of your privacy policy? https://keys.openpgp.org/about/privacy https://keys.openpgp.org/about/privacy Because it's missing a ton of information, like who you actually are, how long you intend to keep the data, etc. I'm sorry to say, but this is really concerning.

Valodim 3y ago
We keep the data around for exactly as long as required to fulfill the purposes stated in the policy. If we kept it around longer, the policy would say so. This is not a "cover your corporate ass" legalese privacy policy, it's intended to be clear and understandable. We also did check it with a lawyer specialized on privacy. Of course if you don't like it, you're free to not use our community service :)
- yau8edq12i 3y ago
  [flagged]
- yau8edq12i 3y ago
  [flagged]
twiss 3y ago
Just to check, are you looking at a translated (non-English) version of the page? It seems like those are outdated, unfortunately. The English version does specify a log retention period of 30 days. (The version you're served depends depends on the Accept-Language setting in your browser.)
- yau8edq12i 3y ago
  Yes, I'm looking at a translated version. I didn't see any link to the English version, nor any indication that the version I looked at was obsolete. I guess non English speakers can just go f themselves. Log retention is only part of the equation. How long does the project keep the email addresses?
  - twiss 3y ago
    Email addresses are typically stored in the User ID in OpenPGP keys, so as long as the OpenPGP key is on keys.openpgp.org, the email address will be there as well. They can be deleted by the owner whenever, of course.
    - yau8edq12i 3y ago
      [flagged]
      - Valodim 3y ago
        As already started, we keep it as long as necessary to perform the service, specifically from the time we get user consent to the time that consent is revoked (via api, web, or a revision signature).
  - jmuguy 3y ago
    Well - where are you looking at the translated version? Because the version at the link you provided is in english.
    - yau8edq12i 3y ago
      Read the GP comment...
james_in_the_uk 3y ago
A lot of the bases are covered. It would need a bit more to be fully compliant. The trade-off between simplicity and comprehensiveness is hotly debated in privacy circles.

Valodim 3y ago

We keep the data around for exactly as long as required to fulfill the purposes stated in the policy. If we kept it around longer, the policy would say so. This is not a "cover your corporate ass" legalese privacy policy, it's intended to be clear and understandable. We also did check it with a lawyer specialized on privacy. Of course if you don't like it, you're free to not use our community service :)

yau8edq12i 3y ago
[flagged]
yau8edq12i 3y ago
[flagged]

twiss 3y ago

Just to check, are you looking at a translated (non-English) version of the page? It seems like those are outdated, unfortunately. The English version does specify a log retention period of 30 days. (The version you're served depends depends on the Accept-Language setting in your browser.)

yau8edq12i 3y ago
Yes, I'm looking at a translated version. I didn't see any link to the English version, nor any indication that the version I looked at was obsolete. I guess non English speakers can just go f themselves. Log retention is only part of the equation. How long does the project keep the email addresses?
- twiss 3y ago
  Email addresses are typically stored in the User ID in OpenPGP keys, so as long as the OpenPGP key is on keys.openpgp.org, the email address will be there as well. They can be deleted by the owner whenever, of course.
  - yau8edq12i 3y ago
    [flagged]
    - Valodim 3y ago
      As already started, we keep it as long as necessary to perform the service, specifically from the time we get user consent to the time that consent is revoked (via api, web, or a revision signature).
- jmuguy 3y ago
  Well - where are you looking at the translated version? Because the version at the link you provided is in english.
  - yau8edq12i 3y ago
    Read the GP comment...

james_in_the_uk 3y ago

A lot of the bases are covered. It would need a bit more to be fully compliant. The trade-off between simplicity and comprehensiveness is hotly debated in privacy circles.