mirror of
https://github.com/nexu-io/open-design.git
synced 2026-07-03 12:27:55 +08:00
docs: correct PRIVACY.md to reflect telemetry is on by default (opt-out) (#4631)
* docs: correct PRIVACY.md to reflect telemetry is on by default (opt-out)
PRIVACY.md stated telemetry is opt-in and "off by default" and that the app
"never starts sending anything before you do." The shipped behavior is the
opposite: `apps/web/src/state/config.ts` defaults `telemetry: { metrics:
true, content: true }` so fresh installs emit onboarding/ui_click events from
the first frame, and the first-run banner is a single-acknowledgement
informed-disclosure notice ("I get it"), not an opt-in gate. The daemon gate
(`if (telemetry?.metrics !== true) return`) therefore lets events flow before
any user decision.
Update the doc to describe the actual opt-out model: telemetry is on by
default, the banner is informed disclosure, and Settings -> Privacy (and the
banner footer) provide a one-click opt-out with per-category toggles. No code
change — this aligns the documentation with what ships.
* docs: clarify the consent banner footer only points to Settings
Per review on #4631: the first-run banner footer carries informational text
('Data sharing is on by default. You can turn it off any time in Settings ->
Privacy.') and does not itself expose an opt-out control — the toggle lives
only in Settings -> Privacy. Reword so the doc matches the shipped UI.
This commit is contained in:
22
PRIVACY.md
22
PRIVACY.md
@@ -5,17 +5,23 @@ when it collects it, and how you stay in control. It documents the behavior
|
||||
shipped in the app — the same controls live under **Settings → Privacy**.
|
||||
|
||||
Open Design is **local-first**. Your projects, generated files, and BYOK API
|
||||
keys stay on your machine. The app works fully offline; nothing in this page
|
||||
applies unless you explicitly turn telemetry on.
|
||||
keys stay on your machine, and the app works fully offline. Usage telemetry,
|
||||
described below, is the one category of data the app may send — it is **on by
|
||||
default**, and you can turn it off at any time under **Settings → Privacy**.
|
||||
|
||||
## Telemetry is opt-in
|
||||
## Telemetry is opt-out
|
||||
|
||||
Usage telemetry is **off by default**. On first run the app shows a privacy
|
||||
consent banner asking you to make a choice — it never starts sending anything
|
||||
before you do. You can change your decision at any time under
|
||||
**Settings → Privacy**, where each category below has its own toggle.
|
||||
Usage telemetry is **on by default**. On first run the app shows a privacy
|
||||
disclosure banner so you can see what is collected before doing anything else.
|
||||
It is an informed-disclosure notice with a single **I get it** acknowledgement,
|
||||
not an opt-in gate — and because telemetry is already enabled, the app may begin
|
||||
sending events (such as onboarding and UI-interaction events) from first launch.
|
||||
|
||||
## What is collected when you opt in
|
||||
You stay in control: the banner footer tells you sharing is on and points you to
|
||||
**Settings → Privacy**, where you can turn telemetry off and toggle each category
|
||||
below — and you can change your decision at any time.
|
||||
|
||||
## What is collected
|
||||
|
||||
When telemetry is enabled, the app may send the following to the Open Design
|
||||
team. Each category is independently controllable in Settings.
|
||||
|
||||
Reference in New Issue
Block a user