I don’t know what to write in both of these pages before I publish my project. I would greatly appreciate if someone would help me in this regard as I know nothing about the legal side of hosting open source apps nor do I want to spend too much time on this.

For context, my project is a web app that I specifically made sure to be as private as possible. All data generated by the user is made to be completely stored locally in the browser with no trackers or analytics installed. The data can be modified and deleted as per the user’s will along with the ability to import and export the data as JSON files. A local account is required to save progress else the data will be wiped on exiting the site and the core functionalities of the site do not depend on whether an account has been created or not. The only privacy risk would be occasional loading of external resources like image links which I couldn’t find a viable alternative to.

Frankly this is just a small side FOSS project which I do not intend to capitalise on. I still want to mention the TOS and the Privacy Policy just in case, but I couldn’t be bothered to write all this legal matter by hand.

  • umami_wasabi@lemmy.ml
    link
    fedilink
    arrow-up
    7
    arrow-down
    3
    ·
    edit-2
    25 days ago

    I guess LLMs are OK at this as most ToS and Privacy Policies have quite fixed formats.

  • Dragonish@lemmy.dbzer0.com
    link
    fedilink
    arrow-up
    3
    ·
    25 days ago

    my understanding is that terms of service would be helpful but not needed if someone trued to sue because you blocked access to the site. I would not expect ToS for a site like you are explaining, but if it did it would say “the web admin will ban you if you are naughty, you have been warned”

    For privacy policy i think what you wrote to give us context is near perfect. Explain how your app stores data, be specific about encryption at rest and in motion. If your app is designed to hold name, email address, billing info you should highlight that in your policy. including a (monitored) contact email for questions would be nice, but not needed imo unless you are storing PII

  • paysrenttobirds@sh.itjust.works
    link
    fedilink
    arrow-up
    2
    ·
    25 days ago

    This may not be the best advice, but it is what I did for a project that was required to have these statements. There are online templates and services that will create and host your terms and data privacy policy for free, with upgrades of you want more customized wording. The format is clunky and in my case allowed for more data collection than the app would ever actually do because I did not pay to customize it, but it serves the purpose. Termsfeed.com privacypolicygenerator.com You could just generate one to see the general idea and then customize it yourself if you don’t need the hosting.