Hello,

We need to provide Legal Notice of Durare for us to be placed in at least B Category of https://providers.xmpp.net/. Building on previous thread for diasp.in service me and @pun have drafted a version. It is not perfect yet, and will go further corrections and revisions. We should make a clear and simple notice in English, not legalese.

Durare Terms of Service (Version 0.1)

By using any of the services provided by Durare you agree to our terms of use. These conditions can be changed at any time without prior notice. However we highly evaluate transparency and will do our best to make sure users are notified as soon as possible about any major changes via our forum on Codema.

1. Resource Limitations - Resources are scarce. Use Durare service with responsibility, please try not to share large chunks of files or spam. We have set a total size limit of 1GB/day/user to make sure the services are available for everyone to use.

2. Account expiration - Accounts those are inactive for more than 1 year are deleted to manage the resource availability. Account owner will be notified, if contact details are shared with us, before the deletion.

3. Password - Password reset is only possible if you have shared your email when applying for account invite, otherwise, passwords cannot be recovered.

4. Legal responsibilities - As for anything else you do, be aware that Durare is not responsible for what you write, nor for the safeguard of your own privacy. We therefore invite you to make the most of all the existing tools to defend your rights. We remind you not to upload on the site copyright protected materials that could endanger the existence of our very servers (and all services connected to it).

The aim of Durare is to promote open source, free software and all kind of copyleft content. Embrace it and support artists and projects that release their work under those licenses. Please refer to our privacy policy to learn more about how your information is being stored and used.

5. Refraining from certain activities - You may not engage in the following activities through the services provided by Durare:

1. Misuse of services by distributing viruses or malware, engaging in a denial of service attack, or attempting to gain unauthorized access to any computer system, including Durare servers.

2. Contributing to the abuse of others by distributing material where the production process created violence or sexual assault against persons or animals.

6. Account Termination - Durare may terminate your service if the account has engaged in any of the banned activities listed above.

7. No Warranty - You understand and agree that Durare provides you primarily with internet-based services. Therefore, services are offered as is, subject to availability and without liability to you. As much as we wouldn't like letting any of our users down, we just cannot give any warranty as to the reliability, accessibility, or quality of our services. You agree that the use of our services is at your sole and exclusive risk.

Privacy Policy

1. We do not read, share or sell your data. We are hosting Durare because we care about privacy on the internet. We are funded by people like you via donation.

2. Our server is located in Finland and hosted with Hetzner based in Germany. Their Privacy Policy is at https://www.hetzner.com/legal/privacy-policy/.

3. We use disk encryption on all data to prevent data leak in cases where servers are stolen, confiscated, or in any way physically tempered with.

4. Applications like Gajim, Conversations support End to End Encryption (E2EE). If E2EE is enabled, no one other than sender and recipients will be able to read the messages. Not even the admins can read your messages. E2EE is not enabled by default in all applications. You may have to manually enable encryption for each conversation in some applications. We recommend E2EE for all conversations. (Remember to back up your encryption keys, we will not be able to retrieve your messages in case the keys are lost.)

5. We provide and require SSL/TLS encryption on all provided services.

6. Federation - XMPP service provided by Durare is based on Federation Protocols. This enables users signed up at different service providers to interact with each other. Because of the nature of the protocols (ability to send each other messages, likes, share files, chat) some of the data is naturally shared with other entities. However, sharing data with other service provider is the user's choice and is configured by the users in their settings per service including the decision of with whom and what to share.

7. You may be shown embedded videos and link previews from other websites while using services provided by Durare. This may expose you to web tracking by external services, such as (but not limited to) Facebook, Twitter, and Google.

What is Stored?

• Email address, if provided during account creation

• Date of registration and last login (to detect inactive users)

• Username and password hash

• Profile information and avatar

• IP addresses for incorrect login attempts

• Contacts and MUCs added to the account

• Uploaded files (180 Days)

• Message archive (MAM) (can be disabled on your client)

• Offline messages

If you have any doubts on our terms of service, please contact us on diasp.in@autistici.org

Please feel free to comment something that you would like to add, remove or any other suggestion.