Privacy Policy

We store information about access to and users on the nerves-hub.org website, the nerves-hub.org API and repository. This data is stored in the US on Amazon AWS servers.

Websites

All requests to the nerves-hub.org website are logged. The logs include information about the time the request was made and to which URL, the IP address it was from and browser user agent. Devices additionally report a serial number and firmware metadata as detailed in the nerves_hub device library.

The logged data is only available to nerves-hub.org’s administrative team, but may be made available in aggregate and anonymized forms.

Cookies

A cookie is a string of information that a website stores on a visitor’s computer, and that the visitor’s browser provides to the website each time the visitor returns.

The websites uses cookies to help identify logged in users. Website visitors who do not wish to have cookies placed on their computers should not log in to the websites.

API

A registered user is required to publish firmware, to otherwise consume the API a user is not required. See the “User information” section below for more information about what user information is stored and is public.

Requests to the API is logged and the same information is stored as for the websites.

Repository

Firmware metadata and contents are available to all user accounts associated with a tenant and all devices enabled to access that firmware. Firmware metadata and contents are also visible to the nerves-hub.org administrative team. Firmware metadata may be made available in aggregate and anonymized forms. Even though firmware metadata and contents have limited availability, care still needs to be taken to not include private or confidential information in the clear in the firmware. If credentials are accidentally published they should be changed immediately.

Requests to the repository is logged and the same information is stored as for the websites.

User information

For registered users their username, email address, and cryptographically hashed password is stored and is required to be provided by users. In addition to this profile information, such as user’s full name and social media handles, may be stored of the user if the user chooses to provide it.

Disclosure

nerves-hub.org may disclose personally identifiable information under special circumstances, such as to comply with subpoenas or when your actions violate the Terms of Service.

United States Jurisdiction

The nerves-hub.org service is hosted in the United States. This Privacy Policy is intended to comply with privacy laws in the United States and may not comply with all privacy laws in other countries.

If you are a non-US user of the service, by using our service and providing us with data, you acknowledge, agree and provide your consent that your personal information may be processed in the United States for the purposes identified in this Privacy Policy. In addition, such data may be stored on servers located outside your resident jurisdiction, which may have less stringent privacy practices than your own. By using the nerves-hub.org service and providing us with your data, you consent to the transfer of such data and any less stringent privacy practices.

Communication

All emails to ***@nerves-hub.org are stored, including the email address of the sender and the contents of the email. This information is available internally to nerves-hub.org but will not be disclosed to the outside. See the “Disclosure” section for exceptions to this.

Questions

Any questions about this Privacy Policy should be addressed to support@nerves-hub.org.

Changes

Although most changes are likely to be minor, nerves-hub.org may change its Privacy Policy from time to time, and at nerves-hub.org’s sole discretion. The detailed history of changes can be found in the git repository history for this document.

nerves-hub.org encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of the nerves-hub.org websites and the repository after any change in this Privacy Policy will constitute your acceptance of such change.

Credit and License

This policy document is based on hex.pm’s Privacy Policy which is partly based on npm’s Privacy Policy and WordPress.org privacy policy.

This document may be reused under a Creative Commons Attribution-ShareAlike License.