15 KiB
created, modified
| created | modified |
|---|---|
| 2025-04-08T09:52:54-03:00 | 2025-04-11T13:22:58-03:00 |
Privacy Policy
This privacy policy describes how Capytal ("capytal.cc", "we", "us", "Capytal.cc") may collect personal information and to what degree when you use our websites and services ("Services"), such as when you:
- Visit our website at https://capytal.cc;
- Access our services under one of our domains: "capytal.cc", "capytal.company", and/or "lored.dev";
- Access any website of ours that links to this privacy notice;
- Use downloadable software provided by us;
- Engage with us in other related ways, including any sales, marketing, or events.
[!tldr] Too Long; Didn't Read (TL;DR)
Our services are developed by people who care about privacy and do not like to have their personal and identifiable data tracked by analytics tools without their consent. We try our best to keep our services in line with regulations such as GDPR, LGDP, and CCPA, while still providing useful data to understand our users and their priorities. The only type of data collected by our tracking scripts are:
- Pages that you visit;
- Referrer URL;
- Operating system, browser type and device (User-Agent header);
- Preferred language (Accept-Language header);
- Timezone-based location (this limits us to just know the country configured in your system);
- Accessibility settings;
- Additional metadata about the pages you visit;
We do not use cookies to track these informations, we cannot and do not want to be able to associate an user to any of the said data. The data collected by us is mostly used to understand things such as what operating system we must prioritize support, what accessibility concerns we should take care of more, and what languages we should focus on supporting in our services and websites.
We do not share any of this data to any third-party, any data provided to us stay with us and it is used just between us and our first-party services. Any shared data is due to integrations such as embedded or referred content (for example, YouTube embedded videos).
What We Collect Automatically by Default
Capytal by default do not collect any personally-identifiable information on our Services, IP addresses may or may not appear on automatically-generated log files but these automatically-generated log files are deleted after every 48 hours.
Your browser or system may or may not send additional information such as user-agents that we may automatically collect to provide useful analytics to our developers and administrators.
We use a self-hosted and self-managed script and analytics tool (Medama) to provide us additional data on how you interact with our Services. All analytical data by default is anonymised, accessed in bulk, and cannot be pointed to you or any other specific user of our Services, regardless of if you are registered in one of our Services or not. We DO NOT USE Cookies, IP addresses, and technologies like local storage, session cookies, IP addresses hashing to collect additional analytical data about you by default, however, we may use said technologies to provide core functionality on our Services, such data in most cases is by default not personally-identifiable or used to track you or specific users.
The following information is collected to provide us analytical data:
Page Events
When you access or exits a page in one of our Services, we collect that information for to our servers. Information collected includes but is not exhaustive to:
- Timestamps of the event;
- A randomly generated ID;
- Event type ("load" or "unload");
- Page URL;
- Referrer URL;
- Is you are a new visitor or not (See below how we track unique visitors);
- Has you visited the same page before (See below how we track unique visitors);
- Timezone of your browser or system;
- Time spent on a page in milliseconds;
- Additional metadata about events (such as if you are logged on the accessed Service or not, what page theme you are using, clicked links or buttons such as for downloading a file or contacting us).
How We Determine Unique Visitors
We do not use IP addresses or Cookies to determine unique visitors by default. To preserve privacy and not rely or personal identifiers, we use a browser cache-based approach to track unique visitors of our Services. If you visit one of our Services websites, your browser will cache our tracking script, and reuse it on future visits instead of requesting to our services again. This allows us to differentiate between new and returning visitors, and does not allows us to identify individual users.
HTTP Headers
Your browser sends us additional data used to better serve our Services. We collect some of this data on our analytics tool: "Accept-Language" header used by your browser to tell us what languages you prefer using; "User-Agent" header, which includes information about your browser type, device and operating system.
Location
We do not use IP addresses or IP geolocation to determine your location. Instead, we determine your country based on your browser's timezone. Capytal cannot determine your exact city or region, this is intentional to preserve end user privacy.
What Information You Disclose to Us We Collect
Capytal just collects personally-identifiable information when you disclose it to us while using our Services, such as when registering an account.
We do not collect personally-identifiable and analytical data in a matter that one can be associated to another. All analytical data collected automatically as mentioned above, is stored in a anonymised form and cannot be associated with a specific user or personally-identifiable information.
When using our Services, the following personal information may be disclose to us:
-
Username
Your username is used to allow you to login to our Services; -
Password
We store a hashed password derivate from your password to allow you to login to our Services secretly; -
Email
Your email is used to contact you and to register you on Services that do not use username. We never share your email with any third-parties; -
Service specific additional data
You may disclose to us additional data required to use one of our Services. This includes, for example, but is not exhaustive to:- Messages, posts and chats;
- Images, videos, and other used-generated content;
- Technical information, such as log files or hardware specification, may be requested in Services focused on bug tracking and report;
- Your public SSH keys, used on, for example, our Forge service to give you access to specific features of the Service;
- IPs and other medatada. Your system, browser or application may or may not send information in the form of IP addresses and other forms such as user-agents, this information might be recorded on automatically-generated log files, these are deleted every 48 hours, in addition to being private and not shared to any third-parties.
What Do We Use Your Personal Information For?
Core Functionality
Some of our Services require personal information to work properly. In some cases, you can substitute personal information for pseudonymous or valid false personal information (such as non-working email addresses) if you do not want to disclose personal information. Most Services on Capytal require some degree of personal information to provide core functionality.
Moderation and Detect Malicious Activity
Your personal information might be collected on automatically-generated log files to detect possible malicious activity, to aid in moderation of other users, or to detect bots that are improperly programmed.
Automatically-generated log files are deleted every 48, though we might choose to keep some log files in some cases, such as in the case of an outage or attack on our infrastructure.
What Measures We Employ to Protect You Personal Information?
Capytal employs a variety of security measures to protect personal information from being breached by malicious actors. These measures include hashing, encryption, containerization and other industry-standard measures.
Do We Use Cookies and Other Technologies?
Yes. Some of our Services may use cookies and similar technologies to store your preferences or check if you are logged into an account. These cookies do not store any personally-identifiable information in most cases and are not used to get analytical data about you.
Is Information Shared to Other Third-parties?
We do not share your personal information with third-parties. However, some Capytal services may be federated, meaning that any messages, chats, public account data are shared with any similar servers, such as in case of ActivityPub-compatible Services (example of these services include but is not exhaustive to: Mastodon, Pixelfed, and Lemmy). In these Services, we have no control over how federated data may be processed by federated third-party services with our Services.
Some information and data, such as username, posts, and user-generated content may be shared publicly by you while using our Services. This include cases such as, for example, creating a public bug report on our Forge Service. It is up to you to not share personally-identifiable information on these public channels, we do not take responsibility on personally-identifiable information being shared by you accidentally or not on these public Services.
Legal Action Exception
Your personally-identifiable data may be requested by legal authorities and used for legal and regulatory responsibilities if necessary, in such cases we may try to preserve and fight for your privacy if we think the reason isn't justifiable, but we cannot prevent authorities to access your information if preventing it results in legal and financial issues for us.
Embedded and Referenced Content
Embedded content from other providers may be available in our Service, these providers may track your interaction with their and our content. For example, if you click in an embedded video from YouTube, Google will track you interaction.
Similarly, content and other third-parties services may be referenced via hyperlinks, accessing third-parties content may end with your data being shared with a third-party which we cannot have control over on how and what data is handled and processed.
You are recommended to review third-party's Privacy Policies before interacting with them.
Data Retention Policy
Automatically-generated log files or server logs are deleted every 48 hours, but may be kept for longer to investigate malicious behaviour as outline above.
Information that you provide to us might be store indefinitely or as long as Capytal and our Services survives, unless you personally delete it yourself or request us to delete it.o
Your Rights
Whether your area has enacted or not the European Union's General Data Protection Regulation (GDPR), Brazil's General Personal Data Protection Law (Portuguese: Lei Geral de Proteção de Dados Pessoais) (LGPD), California Consumer Privacy Act (CCPA), or similar law or regulation, you have the following rights if permissible by law:
The Right of Access
The right of access ensures you are allowed to know what personal information Capytal has collected, stored or recorded about you. Also referred as "The Right to Know".
The Right to Ratification
The right to ratification means that you are allowed to change any personal information about you on our Services that you see as invalid, false or misleading.
The Right to Data Control
The right to data control means that you can request us to anonymise, block or delete any unnecessary, excessive, or non-compliant personal data of yours.
The Right to Data Independence
The right of data independence means that you can request us to provide means to move your personal data to another service or product provider.
The Right to Data Knowledge
The right of data knowledge means that you have the right to know if and how your personal data has been shared to third-parties if permissible by law. Legal and regulatory authorities may request us to not disclose sharing of personal data.
The Right to Erasure
The right to erasure means that any personally-identifiable information that Capytal has collected, stored or recorded about can be requested by you to be deleted in up to 96 hours after the request. Note that you will have to provide us some personal information that we can go search for and delete. Also referred as "The Right to Delete" or "The Right to be forgotten".
To exercise your rights, send an email to legal@capytal.cc
Versions of This Policy
We provide translated versions of this policy in different languages, so users of our Services can understand how we collect, process and secure their data regardless of their native language. The Brazilian Portuguese version of this Policy applies specifically to users under the jurisdiction of the Federative Republic of Brazil, otherwise, the English version (the version you are currently accessing) applies to all other users under any other jurisdiction. Versions provided in different languages than the mentioned before, are provided for accessibility purposes and have been provided by our community, these versions are not written for legal purposes and have not been verified to be used in Court.
Copies of this Policy are also available on our Forge, these copies are formatted differently to provide better version management and comparison of the Policy versions.
Changes to This Privacy Policy
We reserve the right to make changes to this privacy policy at any time.
In the case of significant changes to this privacy policy, you will be notified by us via email in a period of, at minimum, 30 days before the new policy is applied. If you are not registered on any of our Services and/or have not disclosed to us any direct way to contact you, the same notification will be sent on our social media platforms. It is recommended to check this page often, referring to the date of the last modification listed at the bottom. You can also check for differences between the Policy past versions on our Forge.
If you object any of the changes to the Policy, you must cease using this Website and any of the Services provided by Capytal that this Policy applies on. By accessing this Website or our Services, you agree with the terms described by this Policy.
Unless stated otherwise, the current privacy policy listed in this page (https://capytal.cc/PRIVACY.md) applies to all data we collect about you.
Legal Contact Information
For any questions, legal concerns, or exercising of your rights, contact us via email at legal@capytal.cc
Lastest update: April 11, 2025 (2025-04-11)