I found a handy site for taking notes, but everything it says about the privacy of this one:

“Anonymous by default, no adverts. We offer a high level of privacy for both writers and readers. You don’t need to create an account to post something. There are no adverts on the entire page and we don’t use any social media scripts. You can rest assured that information about your activity on the site will not be used by advertising companies or social media.”

This is in the “About” section.

There is no information about what information the site collects about the user.

  • maynarkh@feddit.nl
    link
    fedilink
    arrow-up
    33
    ·
    10 months ago

    Legally, it should mean no personally identifiable information is collected, since they are not accurately described. In practice, I’d expect at least IPs to be logged, but not used meaningfully. This is of course if the site services the EU.

    • 𝘋𝘪𝘳𝘬@lemmy.ml
      link
      fedilink
      arrow-up
      8
      arrow-down
      5
      ·
      10 months ago

      If the site services the EU and does not have a privacy policy it’s downright illegal according to the GDPR.

      Art. 14 GDPR, “Information to be provided where personal data have not been obtained from the data subject”:

      Where personal data have not been obtained from the data subject, the controller shall provide the data subject with the following information […] the identity and the contact details of the controller […] the purposes of the processing for which the personal data are intended […] where applicable, that the controller intends to transfer personal data to a recipient in a third country or international organisation …

      https://gdpr-info.eu/art-14-gdpr/

      • PermanentlyJetlagged@lemmy.ml
        link
        fedilink
        arrow-up
        15
        ·
        10 months ago

        Is it just me or does this not make sense? It says you must declare the purposes of the processing for which personal data are intended, but this is under the section for when no personal data is collected. How does that work?

        • sudneo@lemmy.world
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          10 months ago

          personal data have not been obtained from the data subject

          Reads to me like data that I (data subject) did not provide myself, but that the processor collects. I guess an example could be IP address.

          • OhNoMoreLemmy@lemmy.ml
            link
            fedilink
            arrow-up
            1
            ·
            10 months ago

            More generally any personal data obtained from a third party. E.g. if you’re generating a credit score you might contact someone else with a record of financial transactions.

          • 4am@lemm.ee
            link
            fedilink
            arrow-up
            8
            arrow-down
            3
            ·
            10 months ago

            Found someone salty that their site didn’t comply and is big angy about having to clean it up and stop being shady 😏

                • CallumWells@lemmy.ml
                  link
                  fedilink
                  English
                  arrow-up
                  1
                  ·
                  10 months ago

                  To be fair, depending on your interpretation of “shady” I’m pretty sure you can find a lot of laws most people wouldn’t describe someone ignoring to be doing anything shady. ( I think that sentence should make sense)

      • hedgehog@ttrpg.network
        link
        fedilink
        arrow-up
        6
        ·
        10 months ago

        That section is only applicable if personal data has been obtained by some means other than from the data subject. If a site doesn’t collect or process any personal information, period, then that section (and the rest of the GDPR) isn’t applicable.