Re: Potential Launch of Boost Website: Request for Final Feedback

From: Phil Endecott (spam_from_boost_dev_at_[hidden])
Date: 2024-02-15 16:00:21

Vinnie Falco wrote:

> The site records whatever you give it, plus what is publicly available. If
> you enter your name we record that. 
> When you sign up, an account is created which remembers settings. If you
> then, for example, submit a News item, then when a moderator approves the
> posting your screen name will appear along with your avatar as the author
> of the news item. And when someone clicks the name or avatar they will see
> your User Profile page. There will eventually be controls to let you decide
> what appears on that page. Right now I think there's nothing there except
> the avatar. But there will be things like, whether or not you are an
> author, how many reviews you've participated in, and so on.

> Yes well there are a lot of ideas! The over-arching theme is to aggregate
> all of the publicly available information about you which is relevant to
> participation in Boost. How many GitHub issues you create, how many commits
> to boostorg repos do you make, how many reviews do you write or manage, and
> so on.

Hi Vinnie,

Earlier you said something approximately "I don't know what our privacy
policy is" - but actually you do; you have described it quite well when
the question is asked in a different way, for example in the extracts
I've quoted above. Your privacy policy is just a statement of what
information you're going to collect and what you're going to do with it.
You should also be clear that you're not going to collect anything from
site visitors who don't log in, and you should say something about how
registered users can have their info deleted (e.g. a "delete account"
button).

Andrey Semashev wrote:
> I think, Boost website should be owned by Boost Foundation

The important question IMO is who is the "data controller" in the legal
sense. I.e., to put it crudely, if someone wants to sue are they going to
sue the Boost Foundation or C++ Alliance? I'd say we want C++ Alliance
to be the Data Controller and take the legal responsibility for the site
they've created; if not, there would need to be some sort of arrangement
where the Foundation approves what C++ Alliance does.

I guess that the boost.org domain is registered by the Foundation.
(I can't tell for sure as the whois records are "redacted for privacy";
is that deliberate?). So I guess there is some sort of (informal?)
agreement that allows C++ Alliance to point the DNS records at the
new site, while in principle the Foundation retain ultimate control.
If that's true, I would hope that a statement on the site saying "this
website is operated by C++ Alliance, send all your legal correspondence
to us" would be sufficient to establish them as Data Controller. But
maybe it isn't - I am not a lawyer!

Regards, Phil.