From 83317e8e0fc8d81f94fb89e935537a98d3ebd66a Mon Sep 17 00:00:00 2001 From: Patrick Britton Date: Tue, 17 Feb 2026 00:17:16 -0600 Subject: [PATCH] legal: update Terms of Service and Privacy Policy for AGPL-3.0 - Add Section 13 (Open Source Licensing) to Terms of Service - Add Section 13 (Open Source Transparency) to Privacy Policy - Link to GitLab repo and AGPL-3.0 license text - Sync all website versions: .md, .astro, .html, html_landing - Update last updated dates to February 17, 2026 - Fix entity name from 'Sojorn Inc.' to 'MPLS LLC' in HTML terms - Expand HTML pages to match full canonical .md content --- PRIVACY.md | 2 +- TERMS.md | 15 ++++++- html_landing/privacy.html | 65 ++++++++++++++++++--------- html_landing/terms.html | 92 ++++++++++++++++++++++++++++++++------- test_admin_login.sh | 23 ---------- website/privacy.astro | 9 +++- website/privacy.html | 65 ++++++++++++++++++--------- website/terms.astro | 13 +++++- website/terms.html | 92 ++++++++++++++++++++++++++++++++------- 9 files changed, 275 insertions(+), 101 deletions(-) delete mode 100644 test_admin_login.sh diff --git a/PRIVACY.md b/PRIVACY.md index 1d62f87..645f65a 100644 --- a/PRIVACY.md +++ b/PRIVACY.md @@ -1,7 +1,7 @@ # Sojorn — Privacy & Data Sovereignty **Effective Date:** February 12, 2026 -**Last Updated:** February 12, 2026 +**Last Updated:** February 17, 2026 **Operator:** MPLS LLC --- diff --git a/TERMS.md b/TERMS.md index 9fdbd1f..dc9d4cd 100644 --- a/TERMS.md +++ b/TERMS.md @@ -1,7 +1,7 @@ # Sojorn — Terms of Service **Effective Date:** February 12, 2026 -**Last Updated:** February 12, 2026 +**Last Updated:** February 17, 2026 **Operator:** MPLS LLC --- @@ -92,7 +92,18 @@ These Terms are governed by the laws of the State of Minnesota, United States. We will notify registered users via email and in-app notification of any material changes to these Terms at least 30 days before they take effect. -## 13. Contact +## 13. Open Source Licensing + +Sojorn's source code is published under the [GNU Affero General Public License v3.0](https://www.gnu.org/licenses/agpl-3.0.html) (AGPL-3.0). This means: + +- The complete source code for Sojorn is publicly available. +- Anyone may inspect, modify, and redistribute the code under the terms of the AGPL-3.0. +- Any modified version of Sojorn that is made available over a network must also make its complete source code available under the same license. +- This license ensures that all improvements to Sojorn — including those running on third-party servers — remain open and available to the community. + +Our source code repository is hosted at [gitlab.com/patrickbritton3/sojorn](https://gitlab.com/patrickbritton3/sojorn). + +## 14. Contact For questions about these Terms: [legal@mp.ls](mailto:legal@mp.ls) diff --git a/html_landing/privacy.html b/html_landing/privacy.html index b05f504..11263c1 100644 --- a/html_landing/privacy.html +++ b/html_landing/privacy.html @@ -44,37 +44,62 @@

Privacy & Data Sovereignty

-

Last Updated: January 26, 2026

+

Last Updated: February 17, 2026

Profiting from surveillance is strictly against our principles. We reject the - "attention economy" model.

+ "attention economy" model entirely.

1. Data Sovereignty

-

We do not sell your data. We do not index your content on search engines. Sojorn is a - private community designed to protect your posts and identity from the extractivist economy.

+

We do not sell your data. We do not license your data. We do not provide your data to + third-party analytics, advertising, or data brokerage firms. Your content is not indexed on public + search engines. Sojorn is a private community designed to protect your posts and identity from the + extractivist economy.

-

2. Collection Limit

-

We collect only what is necessary to function: your email (for authentication and critical - updates) and the content you explicitly create. We do not use third-party tracking pixels that follow - you across the web.

+

2. What We Collect

+

We collect only what is technically necessary to operate the Service: your email address + (authentication), birth month & year (age verification), display name & handle (profile + identity), content you create (displayed to your chosen audience), approximate location for Beacons + only (ephemeral), and device push tokens (notifications). We do not collect precise GPS + location outside of Beacons, contact lists, browsing history, biometric data, or financial + information.

-

3. Zero-Knowledge Encryption

-

Private messages are end-to-end encrypted (E2EE) using keys generated on your device. We - have no way to decrypt or read your private conversations.

+

3. Third-Party Services

+

We use Firebase (authentication, push notifications), Cloudflare R2 (media storage), + SendPulse (newsletter delivery, opt-in only), and OpenAI / Google Vision (content moderation on public + posts only). We do not use third-party tracking pixels, cross-site cookies, behavioral + analytics, or advertising SDKs.

-

4. Newsletter & Third Parties

-

Our newsletter is managed via **SendPulse**. When you subscribe, your email is stored - securely on their servers solely for the purpose of delivering our communications. We do not - cross-reference this list for ad targeting.

+

4. Zero-Knowledge Encryption

+

Private messages and encrypted capsule content are protected by end-to-end encryption (E2EE) + using keys generated on your device. We cannot decrypt your private content.

-

4. Your Right to Vanish

-

You have the absolute right to delete your account and all associated data at any time. When - you leave, you leave. We do not retain hidden profiles.

+

5. Your Right to Vanish

+

You have the absolute right to delete your account and all associated data at any time. We + perform hard deletes — database records, media files, and encryption key backups are + permanently removed. We do not retain shadow copies, hidden archives, or behavioral profiles. When you + leave, you leave.

-

5. Contact

+

6. Anti-Extraction Commitment

+

MPLS LLC will never use your content to train AI models, sell or share your content with + data brokers or advertisers, build advertising or behavioral profiles from your activity, or provide + "data partnerships" derived from your content.

+ +

7. Open Source Transparency

+

Our source code is published under the + GNU Affero + General Public License v3.0 (AGPL-3.0). We share our code so that users, security researchers, + and the public can verify that we honor every commitment in this document. This license ensures that all + modifications — including those running on network servers — remain open and available to the community. + Our source code repository is hosted at + gitlab.com/patrickbritton3/sojorn. +

+ +

8. Contact

For privacy concerns: privacy@sojorn.net.

+ class="text-egyptianBlue underline">privacy@sojorn.net.
+ For legal inquiries: legal@mp.ls.

diff --git a/html_landing/terms.html b/html_landing/terms.html index d9ec8f2..5a155b1 100644 --- a/html_landing/terms.html +++ b/html_landing/terms.html @@ -44,34 +44,94 @@

Terms of Service

-

Last Updated: January 26, 2026

+

Last Updated: February 17, 2026

1. The Agreement

-

By accessing our website or services, you acknowledge that you are entering a space - dedicated to respect, safety, and progressive action. We prioritize the safety of our community above - all else.

+

By accessing Sojorn ("the Service"), you acknowledge that you are entering a space + dedicated to respect, safety, and progressive action. These Terms of Service constitute a binding + agreement between you and MPLS LLC. We prioritize the safety of our community above all else.

2. Zero Tolerance Policy

We do not tolerate intolerance. Hate speech, racism, sexism, homophobia, transphobia, ableism, and fascist ideologies are strictly prohibited. Violations will result in immediate and - permanent bans.

+ permanent account suspension.

3. No Misinformation

-

We reject the spread of verifiable falsehoods, conspiracy theories, and disinformation - campaigns. Posting content designed to deceive or manipulate will result in account termination.

+

We reject the spread of verifiable falsehoods, conspiracy theories, and coordinated + disinformation campaigns. Posting content designed to deceive or manipulate will result in account + termination.

-

4. Content Ownership

-

You own the content you create. You grant us a license to display it within the private - Sojorn network, but we claim no ownership over your intellectual property and will never sell it to - third parties.

+

4. Content Ownership and Sanctuary

+

This section replaces the broad content licenses found in conventional social media Terms of + Service. We believe your work belongs to you — always.

+

4.1 Ownership

+

You retain 100% copyright and all intellectual property rights to every + piece of content you create on Sojorn. We claim no ownership over your words, images, audio, video, or + any other creative work.

+

4.2 Limited Technical License

+

By posting content, you grant MPLS LLC a non-exclusive, royalty-free, worldwide + license solely for the technical purpose of hosting, displaying, and transmitting your + content to the audience you designate within Sojorn.

+

4.3 Immediate Revocation

+

This technical license expires immediately and irrevocably upon deletion of + the content by you. We do not retain shadow copies, hidden archives, or "soft-deleted" records.

+

4.4 Anti-Extraction Covenant

+

MPLS LLC will never use your content to train AI models, sell your content + to third parties, mine your content for advertising profiles, or index your content on public search + engines without your explicit opt-in.

+

4.5 Right to Livelihood

+

If MPLS LLC ever wishes to use your content for promotional purposes, we must contact you + directly, offer financial compensation, and receive your explicit written consent. No blanket consent is + granted by agreeing to these Terms.

-

5. Liability

-

Sojorn Inc. provides this service "as is." We are not liable for interactions that occur - between users, though we commit to active moderation to maintain community safety.

+

5. Your Right to Vanish

+

You have the absolute right to delete your account and all associated data at any time. When + you leave, you leave. We perform hard deletes — your profile, posts, comments, media files, and metadata + are permanently removed from our systems.

-

6. Governing Law

-

These terms are governed by the laws of the United States.

+

6. End-to-End Encryption

+

Private messages and encrypted capsule content are protected by end-to-end encryption (E2EE) + using keys generated on your device. MPLS LLC has no ability to decrypt, read, or access this + content.

+ +

7. AI Moderation Transparency

+

We use artificial intelligence to assist with content moderation. This AI moderation operates + only on public content, does not analyze private encrypted messages, is subject to human review, and + provides a full audit trail. You may appeal any AI moderation decision through our in-app appeal + process.

+ +

8. Community Safety Beacons

+

Sojorn includes a community safety feature ("Beacons") that allows users to report + real-world safety incidents with location data. Location data is not stored permanently and is not sold + to third parties.

+ +

9. Age Requirement

+

You must be at least 16 years of age to use Sojorn.

+ +

10. Liability

+

MPLS LLC provides this Service "as is." We are not liable for interactions that occur between + users, though we commit to active moderation to maintain community safety.

+ +

11. Governing Law

+

These Terms are governed by the laws of the State of Minnesota, United States.

+ +

12. Changes to These Terms

+

We will notify registered users via email and in-app notification of any material changes to + these Terms at least 30 days before they take effect.

+ +

13. Open Source Licensing

+

Sojorn's source code is published under the + GNU Affero + General Public License v3.0 (AGPL-3.0). The complete source code is publicly available. Anyone + may inspect, modify, and redistribute the code. Any modified version made available over a network must + also share its source code under the same license. Our source code repository is hosted at + gitlab.com/patrickbritton3/sojorn. +

+ +

14. Contact

+

For questions about these Terms: + legal@mp.ls.

diff --git a/test_admin_login.sh b/test_admin_login.sh deleted file mode 100644 index 71c83b1..0000000 --- a/test_admin_login.sh +++ /dev/null @@ -1,23 +0,0 @@ -#!/bin/bash - -# Test admin login with patrick@mp.ls (primary admin) -echo "Testing admin login with patrick@mp.ls..." - -curl -X POST http://localhost:8080/api/v1/admin/login \ - -H "Content-Type: application/json" \ - -d '{ - "email": "patrick@mp.ls", - "password": "password123", - "turnstile_token": "BYPASS_DEV_MODE" - }' | jq . - -echo "" -echo "Testing admin login with admin@mp.ls..." - -curl -X POST http://localhost:8080/api/v1/admin/login \ - -H "Content-Type: application/json" \ - -d '{ - "email": "admin@mp.ls", - "password": "password123", - "turnstile_token": "BYPASS_DEV_MODE" - }' | jq . diff --git a/website/privacy.astro b/website/privacy.astro index c8bb714..7366b5f 100644 --- a/website/privacy.astro +++ b/website/privacy.astro @@ -173,11 +173,16 @@ import Layout from '../layouts/Layout.astro';

While MPLS LLC is a U.S. company, our EU hosting ensures that European users benefit from GDPR-level protections regardless of their location.

-

13. Changes to This Policy

+

13. Open Source Transparency

+

Our source code is published under the GNU Affero General Public License v3.0 (AGPL-3.0). We share our code so that users, security researchers, and the public can verify that we honor every commitment in this document.

+

This license ensures that all modifications — including those running on network servers — remain open and available to the community. Our source code repository is hosted at gitlab.com/patrickbritton3/sojorn.

+
+
+

14. Changes to This Policy

We will notify registered users via email and in-app notification of any material changes to this Privacy Policy at least 30 days before they take effect.

-

14. Contact

+

15. Contact

For privacy concerns: privacy@sojorn.net

For legal inquiries: legal@mp.ls

diff --git a/website/privacy.html b/website/privacy.html index b05f504..11263c1 100644 --- a/website/privacy.html +++ b/website/privacy.html @@ -44,37 +44,62 @@

Privacy & Data Sovereignty

-

Last Updated: January 26, 2026

+

Last Updated: February 17, 2026

Profiting from surveillance is strictly against our principles. We reject the - "attention economy" model.

+ "attention economy" model entirely.

1. Data Sovereignty

-

We do not sell your data. We do not index your content on search engines. Sojorn is a - private community designed to protect your posts and identity from the extractivist economy.

+

We do not sell your data. We do not license your data. We do not provide your data to + third-party analytics, advertising, or data brokerage firms. Your content is not indexed on public + search engines. Sojorn is a private community designed to protect your posts and identity from the + extractivist economy.

-

2. Collection Limit

-

We collect only what is necessary to function: your email (for authentication and critical - updates) and the content you explicitly create. We do not use third-party tracking pixels that follow - you across the web.

+

2. What We Collect

+

We collect only what is technically necessary to operate the Service: your email address + (authentication), birth month & year (age verification), display name & handle (profile + identity), content you create (displayed to your chosen audience), approximate location for Beacons + only (ephemeral), and device push tokens (notifications). We do not collect precise GPS + location outside of Beacons, contact lists, browsing history, biometric data, or financial + information.

-

3. Zero-Knowledge Encryption

-

Private messages are end-to-end encrypted (E2EE) using keys generated on your device. We - have no way to decrypt or read your private conversations.

+

3. Third-Party Services

+

We use Firebase (authentication, push notifications), Cloudflare R2 (media storage), + SendPulse (newsletter delivery, opt-in only), and OpenAI / Google Vision (content moderation on public + posts only). We do not use third-party tracking pixels, cross-site cookies, behavioral + analytics, or advertising SDKs.

-

4. Newsletter & Third Parties

-

Our newsletter is managed via **SendPulse**. When you subscribe, your email is stored - securely on their servers solely for the purpose of delivering our communications. We do not - cross-reference this list for ad targeting.

+

4. Zero-Knowledge Encryption

+

Private messages and encrypted capsule content are protected by end-to-end encryption (E2EE) + using keys generated on your device. We cannot decrypt your private content.

-

4. Your Right to Vanish

-

You have the absolute right to delete your account and all associated data at any time. When - you leave, you leave. We do not retain hidden profiles.

+

5. Your Right to Vanish

+

You have the absolute right to delete your account and all associated data at any time. We + perform hard deletes — database records, media files, and encryption key backups are + permanently removed. We do not retain shadow copies, hidden archives, or behavioral profiles. When you + leave, you leave.

-

5. Contact

+

6. Anti-Extraction Commitment

+

MPLS LLC will never use your content to train AI models, sell or share your content with + data brokers or advertisers, build advertising or behavioral profiles from your activity, or provide + "data partnerships" derived from your content.

+ +

7. Open Source Transparency

+

Our source code is published under the + GNU Affero + General Public License v3.0 (AGPL-3.0). We share our code so that users, security researchers, + and the public can verify that we honor every commitment in this document. This license ensures that all + modifications — including those running on network servers — remain open and available to the community. + Our source code repository is hosted at + gitlab.com/patrickbritton3/sojorn. +

+ +

8. Contact

For privacy concerns: privacy@sojorn.net.

+ class="text-egyptianBlue underline">privacy@sojorn.net.
+ For legal inquiries: legal@mp.ls.

diff --git a/website/terms.astro b/website/terms.astro index 3a2f763..05d6b02 100644 --- a/website/terms.astro +++ b/website/terms.astro @@ -83,7 +83,18 @@ import Layout from '../layouts/Layout.astro';

We will notify registered users via email and in-app notification of any material changes to these Terms at least 30 days before they take effect.

-

13. Contact

+

13. Open Source Licensing

+

Sojorn's source code is published under the GNU Affero General Public License v3.0 (AGPL-3.0). This means:

+ +

Our source code repository is hosted at gitlab.com/patrickbritton3/sojorn.

+
+
+

14. Contact

For questions about these Terms: legal@mp.ls

diff --git a/website/terms.html b/website/terms.html index d9ec8f2..5a155b1 100644 --- a/website/terms.html +++ b/website/terms.html @@ -44,34 +44,94 @@

Terms of Service

-

Last Updated: January 26, 2026

+

Last Updated: February 17, 2026

1. The Agreement

-

By accessing our website or services, you acknowledge that you are entering a space - dedicated to respect, safety, and progressive action. We prioritize the safety of our community above - all else.

+

By accessing Sojorn ("the Service"), you acknowledge that you are entering a space + dedicated to respect, safety, and progressive action. These Terms of Service constitute a binding + agreement between you and MPLS LLC. We prioritize the safety of our community above all else.

2. Zero Tolerance Policy

We do not tolerate intolerance. Hate speech, racism, sexism, homophobia, transphobia, ableism, and fascist ideologies are strictly prohibited. Violations will result in immediate and - permanent bans.

+ permanent account suspension.

3. No Misinformation

-

We reject the spread of verifiable falsehoods, conspiracy theories, and disinformation - campaigns. Posting content designed to deceive or manipulate will result in account termination.

+

We reject the spread of verifiable falsehoods, conspiracy theories, and coordinated + disinformation campaigns. Posting content designed to deceive or manipulate will result in account + termination.

-

4. Content Ownership

-

You own the content you create. You grant us a license to display it within the private - Sojorn network, but we claim no ownership over your intellectual property and will never sell it to - third parties.

+

4. Content Ownership and Sanctuary

+

This section replaces the broad content licenses found in conventional social media Terms of + Service. We believe your work belongs to you — always.

+

4.1 Ownership

+

You retain 100% copyright and all intellectual property rights to every + piece of content you create on Sojorn. We claim no ownership over your words, images, audio, video, or + any other creative work.

+

4.2 Limited Technical License

+

By posting content, you grant MPLS LLC a non-exclusive, royalty-free, worldwide + license solely for the technical purpose of hosting, displaying, and transmitting your + content to the audience you designate within Sojorn.

+

4.3 Immediate Revocation

+

This technical license expires immediately and irrevocably upon deletion of + the content by you. We do not retain shadow copies, hidden archives, or "soft-deleted" records.

+

4.4 Anti-Extraction Covenant

+

MPLS LLC will never use your content to train AI models, sell your content + to third parties, mine your content for advertising profiles, or index your content on public search + engines without your explicit opt-in.

+

4.5 Right to Livelihood

+

If MPLS LLC ever wishes to use your content for promotional purposes, we must contact you + directly, offer financial compensation, and receive your explicit written consent. No blanket consent is + granted by agreeing to these Terms.

-

5. Liability

-

Sojorn Inc. provides this service "as is." We are not liable for interactions that occur - between users, though we commit to active moderation to maintain community safety.

+

5. Your Right to Vanish

+

You have the absolute right to delete your account and all associated data at any time. When + you leave, you leave. We perform hard deletes — your profile, posts, comments, media files, and metadata + are permanently removed from our systems.

-

6. Governing Law

-

These terms are governed by the laws of the United States.

+

6. End-to-End Encryption

+

Private messages and encrypted capsule content are protected by end-to-end encryption (E2EE) + using keys generated on your device. MPLS LLC has no ability to decrypt, read, or access this + content.

+ +

7. AI Moderation Transparency

+

We use artificial intelligence to assist with content moderation. This AI moderation operates + only on public content, does not analyze private encrypted messages, is subject to human review, and + provides a full audit trail. You may appeal any AI moderation decision through our in-app appeal + process.

+ +

8. Community Safety Beacons

+

Sojorn includes a community safety feature ("Beacons") that allows users to report + real-world safety incidents with location data. Location data is not stored permanently and is not sold + to third parties.

+ +

9. Age Requirement

+

You must be at least 16 years of age to use Sojorn.

+ +

10. Liability

+

MPLS LLC provides this Service "as is." We are not liable for interactions that occur between + users, though we commit to active moderation to maintain community safety.

+ +

11. Governing Law

+

These Terms are governed by the laws of the State of Minnesota, United States.

+ +

12. Changes to These Terms

+

We will notify registered users via email and in-app notification of any material changes to + these Terms at least 30 days before they take effect.

+ +

13. Open Source Licensing

+

Sojorn's source code is published under the + GNU Affero + General Public License v3.0 (AGPL-3.0). The complete source code is publicly available. Anyone + may inspect, modify, and redistribute the code. Any modified version made available over a network must + also share its source code under the same license. Our source code repository is hosted at + gitlab.com/patrickbritton3/sojorn. +

+ +

14. Contact

+

For questions about these Terms: + legal@mp.ls.