Merge pull request #357 from getsolus/privacy

Add privacy policy

docs/user/privacy.md

@@ -0,0 +1,47 @@
+# Privacy Policy
+
+## Solus Installations
+
+- Solus does not collect or store data from user's machines.
+- Solus does not use telemetry or automatic error reporting.
+- Some packages may include their own built-in telemetry (examples: Firefox, Steam). Solus cannot control data collected in this way. These packages may allow you to disable this telemetry.
+
+## Solus Forum (discuss.getsol.us)
+
+- You may view the forum without providing personal data
+- Cookies are used to store login information
+- We collect personal information when you register for an account:
+  - *Username* and (optional) *password* for account identification and authorization.
+  - *Email address* for account recovery and notifications.
+  - (optional) *Third party login information* to allow signing in using an SSO provider like *GitHub*.
+  - This information will be retained and processed to authenticate logins. The information will be retained until you delete your account.
+
+### Third Party Hosts
+
+Solus cannot control how data is collected and processed on the third party hosts we use. We use the following hosts:
+
+#### Cloudflare
+
+- The Solus package mirror `cdn.getsol.us` is hosted by Cloudflare
+- [Cloudflare Privacy Policy](https://www.cloudflare.com/privacypolicy/)
+
+#### Github
+
+- The Solus homepage `getsol.us`, and the help center `help.getsol.us` are hosted by Github Pages
+- Solus repositories are hosted on Github under the [`getsolus` organization](https://github.com/getsolus/)
+- [Github Privacy Policy](https://docs.github.com/en/site-policy/privacy-policies/github-privacy-statement)
+
+#### Matrix
+
+- The Solus matrix rooms are hosted by the Matrix.org homeserver
+- [Matrix.org Homeserver Privacy Notice](https://matrix.org/legal/privacy-notice) 
+
+
+## Your rights under the GDPR
+
+If you are covered by the [GDPR](https://gdpr.eu/) you have rights as a data subject. Your rights are detailed under [Chapter 3 of the GDPR](https://gdpr.eu/article-12-how-controllers-should-provide-personal-data-to-the-subject/). Additionally, you have the right to lodge a complaint with your national [Data Protection Authority](https://edpb.europa.eu/about-edpb/board/members_en).
+
+## Privacy Contact
+
+Any concerns or requests about personal data should be sent to [[email protected]](mailto:[email protected])
+