Privacy policy updates

src/pages/en/legal/cozy-privacy-policy.mdx

@@ -5,74 +5,53 @@ description: The privacy policy for the Cozy Discord bots.
 layout: /src/layouts/Page.astro
 ---
 
-# Foreword
+## Foreword
 
 The following document was created as required by the European Union General Data Protection Regulation (EU GDPR).
 You can find more information about that regulation on [gdpr.eu](https://gdpr.eu/).
 
-This document details what and why data is collected by The Quilt Project through the Cozy Discord bots, except "Cozy (Stats)",
-how it is used and how to use your rights related to your data.
+This document details what and why data is collected by The Quilt Project through the Cozy Discord bots, except "Cozy (Stats)", how it is used and how to use your rights related to your data.
 
 The Quilt Project ("Us", "We", "Our") is the data controller for the data collected through the Cozy Discord bots.
 
-# Data Collected
+## Data Collected
 
-## Applications
-
-When you submit an application to join the server, we save your User ID along with some metadata. Your answers aren't
-stored.
-
-We use this data to maintain a list of previous applications that have been submitted by each user, which allows us to
-look them up on Discord when we need to review them.
-
-## Filter Events
+### Filter Events
 
 When you trigger an automatic filter, we record your User ID and the location of the message that triggered it.
 The message content isn't saved.
 
-We use this data to conduct analytics.
+We use this data to allow moderators to review and action messages that are triggered by the automatic filters.
 
-## Threads
+### Threads
 
 If you are designated as the owner of a thread by creating it, or having the current owner transfer it to you,
 your User ID is saved alongside the thread ID.
 
 We use this data to allow you to manage the threads you own.
 
-## Suggestions
-
-### Voting
-
-When you vote positively or negatively, we save your User ID alongside the suggestion and your vote.
-
-We use this data to make sure you can't vote more than once.
-
-### Creating a suggestion
-
-When you create a suggestion, we save your User ID, Username, Avatar Url, Message and whether it was proxied or not.
-
-We use this data to display and keep track of the suggestions. This data can be seen on the public analytics dashboard, without the User ID or Username.
-
-## User Flags
+### User Flags
 
 We save three flags about you:
-- Has Used PluralKit: whether you have used PluralKit previously or not. We use that to log new usages of PluralKit for
-review by the moderators.
+- Has Used PluralKit: whether you have used PluralKit previously or not. We use that to log new usages of PluralKit for review by the moderators.
 - Auto Publish: whether your messages sent in a news channel should be automatically published.
 - Sync Nicknames: whether your nickname should be synced between Quilt guilds.
 
-# Data Retention
+## Data Retention
 
 Data is retained indefinitely. We do not delete any data unless you request it.
 
-# Data Governance
+## Data Governance
+
+Database access is limited to the minimum of The Quilt Project benevolent workers required to operate the service. We do not share any data with third parties. We do not sell any data.
 
-Database access is limited to the minimum of The Quilt Project benevolent workers required to operate the service. We do not share any data with third parties.
-We do not sell any data. Your data isn't shared with any contracted sub-processors.
+Data is stored in the United States of America, with the following processors:
+- [Backblaze](https://www.backblaze.com)
+- [Capitol Hosting Solutions](https://chs.gg)
 
-Data is stored in a country part of the European Economic Area (EEA). Data is encrypted at rest and in transit.
+Data is encrypted in transit.
 
-# Access, rectification, erasure, restriction, portability, and objection
+## Access, rectification, erasure, restriction, portability, and objection
 
 Every user is entitled to the following:
 
@@ -96,15 +75,15 @@ that we have collected to another organization, or directly to you, under certai
 your personal data, under certain conditions.
 
 If you would like to exercise those rights, contact us at [privacy@quiltmc.org](mailto:privacy@quiltmc.org).
-We may ask you to verify your identity before processing your request, using a service such as [Aperture](https://aperture.starchild.systems).
-We will respond to your request within 30 days as required by law.
+We may ask you to verify your identity before processing your request.
+We will respond to your request within one month as required by law.
 
-# Changes to the Privacy Policy
+## Changes to the Privacy Policy
 
 We keep this privacy policy under regular review and places any updates on this web page.
 If we do this, we will post the changes on this page and update the "Edited" date at the top of this page.
 
-# Contact
+## Contact
 
 If you have any questions about this privacy policy, please contact us at
 [privacy@quiltmc.org](mailto:privacy@quiltmc.org).

src/pages/en/legal/index.mdx

@@ -13,7 +13,5 @@ or in the `#discord-meta` channel on Discord.
 
 You can find the privacy polices on the left of the page, or underneath:
 * [Cozy Privacy Policy](/en/legal/cozy-privacy-policy/)
-* [Membership Privacy Policy](/en/legal/membership-privacy-policy/)
 * [ModMail Privacy Policy](/en/legal/modmail-privacy-policy/)
 * [Metricity Privacy Policy](/en/legal/metricity-privacy-policy/)
-* [Non-profit Bylaws](/en/legal/bylaws/fr/) ([English translation](/en/legal/bylaws/en/))

src/pages/en/legal/modmail-privacy-policy.mdx

@@ -5,69 +5,67 @@ description: The privacy policy for the ModMail Discord bot and web interface.
 layout: /src/layouts/Page.astro
 ---
 
-# Foreword
+## Foreword
 
 The following document was created as required by the European Union General Data Protection Regulation (EU GDPR).
 You can find more information about that regulation on [gdpr.eu](https://gdpr.eu/).
 
-Our ModMail+ instance is contracted to Starchild Systems.
-This document details what and why data is collected by Starchild Systems for QuiltMC,
-how it is used and how to use your rights related to your data.
+This document details what and why data is collected by The Quilt Project through the our Modmail bot, how it is used and how to use your rights related to your data.
 
-The Quilt Project ("Us", "We", "Our") is the data controller for the data collected by Starchild Systems for QuiltMC.
+The Quilt Project ("Us", "We", "Our") is the data controller for the data collected through our Modmail Discord bot.
 
-# Data Collected
+## Data Collected
 
-## Discord Bot
+### Discord Bot
 
-We collect message content and attachments sent to the ModMail+ instance through Direct Message or by typing inside the thread channel.
+We collect message content and attachments sent to the ModMail bot through Direct Message or by typing inside the thread channel.
 
 We also collect the following information about the sender:
 * Discord ID
 * Discord Username
-* Discord Discriminator
+* Discord Discriminator (if applicable)
 * Discord Avatar URL
 
 We collect that data to preserve historical data and conduct moderation. The data is persisted across leaving the guild and is essential to the operation of the service.
 
-Attachments are stored inside a Content Delivery Network (CDN) owned by Starchild Systems to preserve data after the thread is closed.
-
-## Web Interface
+### Web Interface
 
 The web interface doesn't store any personal data.
 
-# Data Retention
+## Data Retention
 
 Data is retained indefinitely. We do not delete any data unless you request it.
 
-# Data Governance
+## Data Governance
+
+Database access is limited to the minimum of The Quilt Project benevolent workers required to operate the service. We do not share any data with third parties. We do not sell any data.
 
-Database access is limited to the minimum of Starchild Systems employees required to operate the service. We do not share any data with third parties.
-We do not sell any data. Your data isn't shared with any contracted sub-processors other than Starchild Systems.
+Data is stored in the United States of America, with the following processors:
+- [Backblaze](https://www.backblaze.com)
+- [Capitol Hosting Solutions](https://chs.gg)
 
-Data is stored in a country part of the European Economic Area (EEA). Data is encrypted at rest and in transit.
+Data is encrypted in transit.
 
-# Cookies
+## Cookies
 
 Cookies are text files placed on your computer to collect standard Internet information.
 
 For further information, visit [allaboutcookies.org](https://allaboutcookies.org).
 
-## How do we use cookies?
+### How do we use cookies?
 
-We use cookies inside the web interface to keep you signed in.
+We use cookies inside the Modmail web interface to keep you signed in.
 
-## How to manage cookies?
+### How to manage cookies?
 
-You can set your browser not to accept cookies, and the above website tells you how to remove cookies from your browser.
-However, in a few cases, some of our website features may not function as a result.
+You can set your browser not to accept cookies. However, the web interface will not work if you do this, because you have to be signed in to use the website, and we can't keep you signed in without using cookies.
 
-# Access, rectification, erasure, restriction, portability, and objection
+## Access, rectification, erasure, restriction, portability, and objection
 
 Every user is entitled to the following:
 
 **The right to access** – You have the right to request Us for copies of your personal data.
-Starchild Systems may charge you a small fee on Our behalf for this service.
+We may charge a small fee for this service.
 
 **The right to rectification** – You have the right to request that We correct any information
 you believe is inaccurate. You also have the right to request Us to complete the information
@@ -87,21 +85,15 @@ your personal data, under certain conditions.
 
 If you would like to exercise those rights, contact us at [privacy@quiltmc.org](mailto:privacy@quiltmc.org)
 or by sending a message to the ModMail+ Discord Bot.
-We may ask you to verify your identity before processing your request, using a service such as [Aperture](https://aperture.starchild.systems).
+We may ask you to verify your identity before processing your request.
 We will respond to your request within 30 days as required by law.
 
-# Analytics
-
-We use [Cloudflare Web Analytics](https://www.cloudflare.com/en-gb/web-analytics/) to
-collect anonymous usage statistics of the web interface.
-Cloudflare does not collect or process personal data for Us.
-
-# Changes to the Privacy Policy
+## Changes to the Privacy Policy
 
 We keep this privacy policy under regular review and places any updates on this web page.
 If we do this, we will post the changes on this page and update the "Edited" date at the top of this page.
 
-# Contact
+## Contact
 
 If you have any questions about this privacy policy, please contact us at
-[privacy@quiltmc.org](mailto:privacy@quiltmc.org) or by sending a message to the ModMail+ Discord Bot.
+[privacy@quiltmc.org](mailto:privacy@quiltmc.org) or by sending a message to the ModMail Discord Bot.