[privacy] Added privacy policy

2 files changed, 33 insertions, 0 deletions

diff --git a/src/_header.html b/src/_header.html
index 23e1534..f40f189 100644
--- a/src/_header.html
+++ b/src/_header.html
@@ -61,6 +61,7 @@
 			<a href="/license.html" title="CC BY-SA 4.0 and GNU GPLv3">CC BY-SA 4.0 and GNU GPLv3</a>
 			<br><br>
 			<a href="/policies.html" title="Policies">Policies</a><br>
+			<a href="/privacy.html" title="Privacy policy">Privacy policy</a><br>
 			<a href="/regarding-js.html" title="Regarding usage of JavaScript">Regarding JavaScript</a><br>
 			<a href="/acknowledgements.html" title="Acknowledgements">Acknowledgements</a><br>
 			<br>
diff --git a/src/privacy.md b/src/privacy.md
new file mode 100644
index 0000000..a469aae
--- /dev/null
+++ b/src/privacy.md
@@ -0,0 +1,32 @@
+# Privacy policy
+
+This website, [syndamia.com](https://syndamia.com) and [tiny.syndamia.com](https://tiny.syndamia.com), offers no user data submission (user accounts, reply forms, etc.).
+
+**No data is ever collected to be sold** *but* some data may be collected, primarily [http logs](#http-logs), but [no collection with Javascript](#no-collection-with-javascript).
+However, I have no control over the used [third-party services](#third-party-services)
+
+## HTTP logs
+
+General HTTP requests and data surrounding them are saved, which may include: IP address, timestamps, exact page request, user agent, etc.
+These depend on apache2 defaults.
+
+One such data line could look something like:
+
+```
+1.1.1.1 - - [11/Jul/2023:14:28:11 +0300] "GET / HTTP/1.1" 200 668 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/113.0"
+```
+
+These logs could be useful when issues pop up, including server being too slow or being attacked in some way.
+
+## Third-party services
+
+My domain is bought with [namecheap](https://www.namecheap.com/) and it's associated DNS entries are managed with namecheap servers.
+This means that DNS entries, or more simply, domain configurations, first go through namecheap, and that may or may not mean they can collect data from you.
+
+Analogously, my server is hosted on [hetzner](https://www.hetzner.com/) servers, which may or may not be doing some sort of data collection.
+
+## No collection with Javascript
+
+[This site uses Javascript](/regarding-js.html), so some feature settings data may be temporarily stored in your browser.
+For what exactly that data is, read [here](/regarding-js.html#data-in-browser-storage).
+However, for now there are no plans on integrating any sort of statistics or personal data collection.