[jira] [Commented] (COMDEV-534) 3rd party downloads not allowed by privacy policy

["Sebb (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/COMDEV-534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17761854#comment-17761854 ] 

Sebb commented on COMDEV-534:
-----------------------------

The statistics page loads data from api.snoot.io.

AFAICT, we don't have a privacy agreement with them, and their website privacy policy [1] says they may collect PII, and furthermore that the Policy can be changed at any time without notice. Furthermore, the link to the vendor's website is broken.


[1] https://snoot.io/privacy.html

> 3rd party downloads not allowed by privacy policy
> -------------------------------------------------
>
>                 Key: COMDEV-534
>                 URL: https://issues.apache.org/jira/browse/COMDEV-534
>             Project: Community Development
>          Issue Type: Bug
>          Components: Projects Tool
>            Reporter: Sebb
>            Priority: Major
>
> The projects.a.o website relies on Google charts.
> AFAIK, we don't have a privacy agreement for these, and according to the terms of use, they cannot be used downloaded and used locally:
> https://developers.google.com/chart/interactive/faq#offline
> Some possible solutions:
> - use an alternative charting library that is not in conflict with the Privacy Policy
> - ask the user's permission before making requests to such 3rd party sites; if the user refuses, charts and graphs cannot be displayed, but the site should otherwise continue to function
> - find some way of proxying the requests via an ASF host that strips out all client-specific headers.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@community.apache.org
For additional commands, e-mail: dev-help@community.apache.org