From 3d95a65f5338402fd0394f0a5808c22c53e87851 Mon Sep 17 00:00:00 2001
From: Jason McBrayer <jmcbray@carcosa.net>
Date: Sun, 27 May 2018 13:43:20 -0400
Subject: [PATCH] Fill in about and privacy pages

---
 brutaldon/templates/about.html   | 38 ++++++++++++++++++++++++++++
 brutaldon/templates/base.html    | 17 +++++++++++++
 brutaldon/templates/privacy.html | 43 ++++++++++++++++++++++++++++++++
 brutaldon/views.py               |  4 +--
 4 files changed, 100 insertions(+), 2 deletions(-)
 create mode 100644 brutaldon/templates/about.html
 create mode 100644 brutaldon/templates/privacy.html

diff --git a/brutaldon/templates/about.html b/brutaldon/templates/about.html
new file mode 100644
index 0000000..8278180
--- /dev/null
+++ b/brutaldon/templates/about.html
@@ -0,0 +1,38 @@
+{% extends "base.html" %}
+{% load static %}
+
+{% block content %}
+
+    <div class="container">
+        <img src="{% static "/images/brutaldon.png" %}"
+    </div>
+
+    <h1 class="title">Brutaldon</h1>
+    <h2 class="subtitle">a brutalist web interface for Mastodon</h2>
+    <section class="section">
+
+        <p>
+            Brutaldon is a client for <a href="https://joinmastodon.org/">Mastodon</a>. You can use it to log in to any Mastodon instance from any browser, including text browsers such as lynx.
+        </p>
+        <p>
+            You do not need a separate brutaldon account to use it. Brutaldon will authenticate you to your instance.
+        </p>
+    </section>
+
+    <section class="section">
+        <div class="level">
+            <div class="level-left">
+                <a class="level-item button is-primary" href="{% url "login" %}">
+                    Log in
+                </a>
+            </div>
+            <div class="level-right">
+                <a class="level-item" href="{% url "home" %}">
+                    Or continue to your home timeline.
+                </a>
+            </div>
+        </div>
+
+    </section>
+
+{% endblock %}
diff --git a/brutaldon/templates/base.html b/brutaldon/templates/base.html
index e0f2a53..b74fba1 100644
--- a/brutaldon/templates/base.html
+++ b/brutaldon/templates/base.html
@@ -56,6 +56,23 @@
     </div>
   </section>
   {% if not fullbrutalism %}
+
+  <footer class="footer">
+      <div class="level">
+          <div class="level-left">
+              <a class="level-item is-size-7" href="{% url "about" %}">
+                  About
+              </a>
+          </div>
+          <div class="level-right">
+              <a class="level-item is-size-7" href="{% url "privacy" %}">
+                  Privacy
+              </a>
+          </div>
+      </div>
+  </footer>
+
+
       <script type="application/javascript">
 document.addEventListener('DOMContentLoaded', function () {
     // Remove is-active from navbar menu
diff --git a/brutaldon/templates/privacy.html b/brutaldon/templates/privacy.html
new file mode 100644
index 0000000..d21b13e
--- /dev/null
+++ b/brutaldon/templates/privacy.html
@@ -0,0 +1,43 @@
+{% extends "base.html" %}
+{% load static %}
+
+{% block content %}
+<h1 class="title">Privacy statement</h1>
+<h2 class="subtitle">A shameful attempt at ass-covering</h2>
+
+<section class="section">
+    <h2 class="subtitle">Summary</h2>
+    <p>
+        Brutaldon tries to collect as little information about you as possible. The information that it collects in order to log you in to your instance and to implement client features is stored as transiently as possible.
+    </p>
+</section>
+<section class="section">
+    <h2 class="subtitle">
+        Information that is stored until a database wipe
+    </h2>
+    <p>
+        If you use the old login form (instance, email, password), which is only recommended if you running your own copy of brutaldon behind a firewall, the email you use to sign in will be stored along with an access token and the name of the instance you connected to. Your password will never be stored. We will never share your email with anyone for any reason, unless legally forced to do so. We will never send you email except in the case of an unforseen emergency requiring us to.
+    </p>
+    <p>
+        If you use the normal login form, your email will not be stored, only your instance name and access token.
+    </p>
+    <p>
+        You can always revoke an access token through the web interface of your instance.
+    </p>
+    <h2 class="subtitle">
+        Information that is stored only during your session
+    </h2>
+    <p>
+        Data stored in your session is deleted when you log out, or periodically by the server.
+    </p>
+    <p></p>
+    <p>
+        Data stored in the session includes:
+    </p>
+    <ul>
+        <li> A reference to your information in the database.</li>
+        <li> All of your <em>public</em> Mastodon profile information. This is needed for some client functionality.</li>
+        <li> A couple of Mastodon settings: your default post privacy, and whether your media default to sensitive.</li>
+    </ul>
+</section>
+{% endblock %}
diff --git a/brutaldon/views.py b/brutaldon/views.py
index c80de65..bde8324 100644
--- a/brutaldon/views.py
+++ b/brutaldon/views.py
@@ -400,8 +400,8 @@ def delete(request, id):
                        "fullbrutalism": fullbrutalism_p(request)})
 
 def about(request):
-    return render(request, 'main/about.html',
+    return render(request, 'about.html',
                       {"fullbrutalism": fullbrutalism_p(request)})
 def privacy(request):
-    return render(request, 'main/privacy.html',
+    return render(request, 'privacy.html',
                       {"fullbrutalism": fullbrutalism_p(request)})