Vinnie Falco wrote:
The site records whatever you give it, plus what is publicly available. If you enter your name we record that. When you sign up, an account is created which remembers settings. If you then, for example, submit a News item, then when a moderator approves the posting your screen name will appear along with your avatar as the author of the news item. And when someone clicks the name or avatar they will see your User Profile page. There will eventually be controls to let you decide what appears on that page. Right now I think there's nothing there except the avatar. But there will be things like, whether or not you are an author, how many reviews you've participated in, and so on.
Yes well there are a lot of ideas! The over-arching theme is to aggregate all of the publicly available information about you which is relevant to participation in Boost. How many GitHub issues you create, how many commits to boostorg repos do you make, how many reviews do you write or manage, and so on.
Hi Vinnie, Earlier you said something approximately "I don't know what our privacy policy is" - but actually you do; you have described it quite well when the question is asked in a different way, for example in the extracts I've quoted above. Your privacy policy is just a statement of what information you're going to collect and what you're going to do with it. You should also be clear that you're not going to collect anything from site visitors who don't log in, and you should say something about how registered users can have their info deleted (e.g. a "delete account" button). Andrey Semashev wrote:
I think, Boost website should be owned by Boost Foundation
The important question IMO is who is the "data controller" in the legal sense. I.e., to put it crudely, if someone wants to sue are they going to sue the Boost Foundation or C++ Alliance? I'd say we want C++ Alliance to be the Data Controller and take the legal responsibility for the site they've created; if not, there would need to be some sort of arrangement where the Foundation approves what C++ Alliance does. I guess that the boost.org domain is registered by the Foundation. (I can't tell for sure as the whois records are "redacted for privacy"; is that deliberate?). So I guess there is some sort of (informal?) agreement that allows C++ Alliance to point the DNS records at the new site, while in principle the Foundation retain ultimate control. If that's true, I would hope that a statement on the site saying "this website is operated by C++ Alliance, send all your legal correspondence to us" would be sufficient to establish them as Data Controller. But maybe it isn't - I am not a lawyer! Regards, Phil.