Privacy surface for friends #55

New issue

Closed

opened 2026-08-03 22:43:04 +00:00 by TheAnachronism · 1 comment

TheAnachronism commented

2026-08-03 22:43:04 +00:00

Owner

Part of #41

Question

What must a friend be told before installing — especially password/sid storage for re-login (ADR-0001), network access to their tt-rss instance, and any other privacy-relevant behavior?

Part of #41 ## Question What must a friend be told before installing — especially password/sid storage for re-login (ADR-0001), network access to their tt-rss instance, and any other privacy-relevant behavior?

TheAnachronism added the

wayfinder:grilling

label

2026-08-03 22:43:05 +00:00

TheAnachronism referenced this issue

2026-08-03 22:43:43 +00:00

Friend install and update docs #56

TheAnachronism referenced this issue

2026-08-04 19:07:16 +00:00

Contributor and user docs bar #51

TheAnachronism self-assigned this

2026-08-04 19:17:26 +00:00

TheAnachronism commented

2026-08-04 19:19:46 +00:00

Author

Owner

Resolution

Privacy surface for sideload 1.0 beta (criteria only — write later):

Must-disclose (install/update docs)

Plain-language list for installers / users (do not use the word “friend” in this prose):

Password + session id (sid) are stored on-device (secure storage) so the app can silently re-login when the session expires (ADR-0001).
Network: the app talks over the network to the user’s own tt-rss base URL to fetch content and send mark/star actions — not to a central app backend.

README

Keeps the short privacy blurb + link already locked by Contributor and user docs bar (substance unchanged; avoid “friend” wording there too).

Not must for beta

Formal privacy-policy document
In-app first-run / pre-Sign-in disclosure gate
Required mention of third-party media hosts (ytimg / vumbnail / open-original)
Required “no analytics / telemetry” claim
Uninstall / data-wipe framed as a privacy must (alpha→beta reinstall stays an install note elsewhere)

Why

Sideload testers need informed consent about stored credentials and where network traffic goes — not a legal privacy policy or in-app consent theater. Broader media/third-party detail is optional color, not a readiness gate.

## Resolution **Privacy surface** for sideload **1.0 beta** (criteria only — write later): ### Must-disclose (install/update docs) Plain-language list for installers / users (do **not** use the word “friend” in this prose): 1. **Password + session id (`sid`)** are stored on-device (secure storage) so the app can silently re-login when the session expires (ADR-0001). 2. **Network:** the app talks over the network to the **user’s own tt-rss** base URL to fetch content and send mark/star actions — not to a central app backend. ### README Keeps the short privacy blurb + link already locked by [Contributor and user docs bar](https://git.anachronis.dev/TheAnachronism/tt-rss-viewer/issues/51) (substance unchanged; avoid “friend” wording there too). ### Not must for beta - Formal privacy-policy document - In-app first-run / pre-Sign-in disclosure gate - Required mention of third-party media hosts (ytimg / vumbnail / open-original) - Required “no analytics / telemetry” claim - Uninstall / data-wipe framed as a privacy must (alpha→beta reinstall stays an install note elsewhere) ### Why Sideload testers need informed consent about stored credentials and where network traffic goes — not a legal privacy policy or in-app consent theater. Broader media/third-party detail is optional color, not a readiness gate.

TheAnachronism closed this issue

2026-08-04 19:19:46 +00:00

TheAnachronism referenced this issue

2026-08-04 19:19:46 +00:00

1.0 beta release readiness #41

TheAnachronism referenced this issue

2026-08-04 19:23:53 +00:00

Friend install and update docs #56