From f6f107e02c7a4aa7326c9a82310a239327d81ed6 Mon Sep 17 00:00:00 2001 From: Christophe Besson Date: Sun, 11 Oct 2026 23:43:34 +0200 Subject: feat(hub): tell the person at sign-up what the hub keeps and why A line under the Register button: creating an account accepts the hub's terms of use, and the law requires the hub to keep the connection log (IP address, date, action) for one year, even after the account is deleted. It links to the legal pages of the hub in use, so a self-hosted hub shows its own operator's documents. A notice, not a checkbox: the account rests on the contract and the log on a legal obligation, so there is no consent to ask for, and one that blocks sign-up would be neither free nor withdrawable. legalUrl() moves to platform.js, shared by the sidebar and the form. Co-Authored-By: Claude Opus 5.5 --- packages/meshbay-hub/src/meshbay_hub/static/auth-page.js | 9 +++++++++ 1 file changed, 9 insertions(+) (limited to 'packages/meshbay-hub/src/meshbay_hub/static/auth-page.js') diff --git a/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js b/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js index 57db475..e014f61 100644 --- a/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js +++ b/packages/meshbay-hub/src/meshbay_hub/static/auth-page.js @@ -571,6 +571,11 @@ export function RegisterPage() { `; } + // The legal line under the button is a notice, not a checkbox. The account + // is held under the terms (a contract) and the connection log under a legal + // obligation; neither rests on consent, and a box nobody may leave unticked + // would be asking for one that is not free (GDPR art. 7.4) and could not be + // withdrawn — the log is kept for its year whatever the person answers. return html` <${AuthShell}>