This is the main driving factor behind our payment model, which aims to cover only the costs of hosting and domain expenses, and donates the rest directly to The TOR Project, one of the largest organisations fighting for digital freedom, all while preserving your anonymity through the use of Bitcoin and Monero payments.
We try to keep things under lock-and-key as much as possible. Remote access into the server is only possible for myself, using an SSH Key that only exists as part of a pin-locked hardware PGP key. This ensures no one but myself can access the server and potentially tamper with it's contents.
-Failing that, root login is disabled by default, with only a single unpriviliged user accessible via SSH. This user requires a complex password to access sudo, and does not have read or write permissions to any confidential service data.
+We try to keep things under lock-and-key as much as possible. Remote access into the server is only possible for myself, using an SSH Key that only exists as part of a pin-locked hardware PGP key. This ensures no one but myself can access the server infrastructure.
+Failing that, root login is disabled by default, with only a single unpriviliged user accessible via SSH. This user requires a complex password to access sudo, and does not have read or write permissions to any confidential service data.
+As proof of our word, our NixOS system configuration is publicly auditable, find links for it on the homepage and in our privacy policy.
Highlight Types: Hoverable, Internal Link, External Link.
I greatly appreciate your gratitude if you consider this choice.
-Some other ways of supporting Distrust and it's goals without spending a dime are by strengthening the networks it relies on. Below are some examples.
If you are interested, email me with your desired username. Immediate payment is not required, and can be delayed for up to a month; We will still provision your account.
Highlight Types: Hoverable, Internal Link, External Link.
diff --git a/site/privacy-policy.html b/site/privacy-policy.html index c10239d..b3f2d99 100644 --- a/site/privacy-policy.html +++ b/site/privacy-policy.html @@ -85,15 +85,17 @@Distrust is dedicated to protecting your privacy and upholding your right to anonymity, freedom of expression, and digital security.
-The only personal information required is a username and a contact address for account setup; no extra data, analytics, or trackers are used.
-Service logs are maintained for no more than one hour, strictly for operational debugging, after which they are automatically deleted.
+The only personal information required is a username for account setup; no extra data, analytics, or trackers are used.
+Service logs are maintained for no more than one hour, strictly for operational debugging, after which they are automatically deleted.
All payments are processed through privacy-focused cryptocurrencies (BTC and XMR), and any funds received beyond core hosting costs are donated to privacy advocacy initiatives such as the TOR Project.
-Server infrastructure is hardened, regularly audited, and accessible only via secure means by the sole administrator.
-Your data is never sold or shared, except where strictly required by French law (I strongly recommend you read up on it here before you store any unencrypted data on our servers), and users can request access to or deletion of their minimal personal information at any time.
+Server infrastructure is hardened, publicly auditable, and accessible only via secure means by the sole administrator. You can view the NixOS system configuration used to deploy the server on the clearnet as well as over TOR.
+Files uploaded to our services are not encrypted by default. If there is anything you want to remain private you must take measures to encrypt it yourself. +
Your data is never sold or shared, except where strictly required by French law (I strongly recommend you read up on it here before you store any unencrypted data on our servers), and users can request access to or deletion of their minimal personal information at any time.
+To request account deletion, simply send me an email using your @distrust.network address. I will aim to reply within 48h and action the request within 72h to 96h.
Anonymous account provisioning is fully supported, and users can reach out via the secure contact details provided for any privacy-related questions or requests.
Every aspect of our policy is designed to maximize your privacy and align with our mission of supporting a safer, more private internet for all.
Highlight Types: Hoverable, Internal Link, External Link.