Terms of service and Privacy
This document was added to the website in May 2018 in order to assure compliance with the General Data Protection Regulation; a regulation in the European Union on data protection and privacy for all individuals within the European Union (EU) and the European Economic Area (EEA).
Who we are
My name is David Revoy, founder/author/artist of Pepper&Carrot and I own the websites published at the addresses https://www.peppercarrot.com/ and http://www.davidrevoy.com/. The sources of https://www.peppercarrot.com/ are available at https://framagit.org/peppercarrot/website and distributed under the GPL3. The data (comments, avatars etc.) are not in this repository, it only contains this website's the "engine".
The contributors to the project are listed at https://framagit.org/peppercarrot/webcomics/blob/master/AUTHORS.md. Most of them have the ability to modify the source code of the artworks, translations and engine of the websites I put online, but they do not have access to the data that's collected (comment system: email, name, (cat)avatar(generated), IP; log of the website).
Therefore, I, David Revoy, am the only responsible for managing your data collected on the mentioned websites (except about "embedded content from other websites", see below).
You can contact me at email@example.com to discuss any issue in relation to your data displayed on the websites.
What personal data we collect, why we collect it, and how long we retain it
When visitors leave comments on the site we collect the data shown in the comments form, and also the visitor’s IP address. We also generate a catavatar picture from the name of the commenter and keep the picture on a cached folder.
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue. Removing a comment or editing is not possible for the user via the web interface because the engine of the website PluXML doesn't allow it. In case you want the modification or deletion of a comment, please just add another comment from the same machine (so I can see your IP, this prevents having someone else wanting to edit or delete your message) and ask David Revoy to edit or remove your comment. I'll do it manually as soon as possible.
We use only store cookies on your webbrowser to let your webbrowser remember your last selected language, and a session ID represented by a hash to allow continuity in the page you browse on the website. The session ID expires in less than 24 hours, after that a new one is generated. The language cookie labeled with plxMyMultiLingue keeps around for a month. You can check yourself the content by entering this address on the Firefox browser: chrome://browser/content/preferences/cookies.xul, then filter the website by entering
peppercarrot. Navigating the website without cookies is not a problem; it will just fall back to the detected language (the one declared by your web browser). The comment system doesn't remember your name. If the field to enter a comment already proposes a name or an email, it is done by your web browser.
Embedded content from other websites
I don't use analytic services, so I can't share the visitor statistics with anyone (I don't use Google Analytics or other scripts to track you). I don't do any automated decision making and/or profiling on the user data. The hosting company of the website OVH and domain-name registrar Gandi own respectively the machine where the website is hosted and its internet address. Therefore, these companies might log your access to the site.
How I protect your data
The data (email, name, avatar, IP when you leave a comment; the log of the website) are protected and the files can be accessed only via FTP/SSH with code access of the server. I am the only person with this access right now. It is not possible to access this folder via public access.
What data breach/moderation procedures we have in place
As I don't collect any sensible information about our visitors (only IP and optional email for the comment system) a big hack of our database couldn't affect really our end-user. In the worst case, a hacker could discover your email address, or duplicate your comment. No password can be stolen as no password will ever be asked for leaving a comment on www.peppercarrot or davidrevoy.com. In case of getting evidence of impersonation through the comments, or modification of the content of your comment by someone else; I'll moderate the comment.
Thank you for reading.
Contact information: firstname.lastname@example.org
Note: the source of this document is the markdown file TERMS-OF-SERVICE-AND-PRIVACY.md available at the root of https://framagit.org/peppercarrot/website/