[
https://issues.apache.org/jira/browse/COMDEV-534?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17761854#comment-17761854
]
Sebb commented on COMDEV-534:
-----------------------------
The statistics page loads data from api.snoot.io.
AFAICT, we don't have a privacy agreement with them, and their website privacy
policy [1] says they may collect PII, and furthermore that the Policy can be
changed at any time without notice. Furthermore, the link to the vendor's
website is broken.
[1] https://snoot.io/privacy.html
> 3rd party downloads not allowed by privacy policy
> -------------------------------------------------
>
> Key: COMDEV-534
> URL: https://issues.apache.org/jira/browse/COMDEV-534
> Project: Community Development
> Issue Type: Bug
> Components: Projects Tool
> Reporter: Sebb
> Priority: Major
>
> The projects.a.o website relies on Google charts.
> AFAIK, we don't have a privacy agreement for these, and according to the
> terms of use, they cannot be used downloaded and used locally:
> https://developers.google.com/chart/interactive/faq#offline
> Some possible solutions:
> - use an alternative charting library that is not in conflict with the
> Privacy Policy
> - ask the user's permission before making requests to such 3rd party sites;
> if the user refuses, charts and graphs cannot be displayed, but the site
> should otherwise continue to function
> - find some way of proxying the requests via an ASF host that strips out all
> client-specific headers.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
