Files
bridgeswarm-website/legal/privacy.html
T
2026-07-27 01:11:49 -04:00

360 lines
18 KiB
HTML
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
<!DOCTYPE html>
<html lang="en" data-theme="dark">
<head>
<!-- Theme: FOUC-safe bootstrap (localStorage bridgeswarm.site.theme) -->
<script>
(function () {
try {
var t = localStorage.getItem('bridgeswarm.site.theme');
if (t !== 'light' && t !== 'dark') t = 'dark';
document.documentElement.setAttribute('data-theme', t);
var meta = document.querySelector('meta[name="theme-color"]');
if (meta) meta.setAttribute('content', t === 'light' ? '#f4f5f7' : '#0c0c10');
} catch (e) {
document.documentElement.setAttribute('data-theme', 'dark');
}
})();
</script>
<meta charset="UTF-8" />
<meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
<title>Privacy Policy · BridgeSwarm Legal</title>
<meta name="description" content="Privacy Policy for BridgeSwarm and HoneyPeer, LLC: local-first storage under ~/.bridgeswarm, no telemetry in the extension or host, and website cookie use." />
<meta name="keywords" content="BridgeSwarm Privacy Policy, cookies, HoneyPeer, local-first" />
<meta name="author" content="HoneyPeer, LLC" />
<meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />
<meta name="googlebot" content="index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1" />
<meta name="theme-color" content="#2dd4bf" />
<meta name="color-scheme" content="dark light" />
<meta name="application-name" content="BridgeSwarm" />
<meta name="apple-mobile-web-app-title" content="BridgeSwarm" />
<meta name="apple-mobile-web-app-capable" content="yes" />
<meta name="mobile-web-app-capable" content="yes" />
<meta name="msapplication-TileColor" content="#2dd4bf" />
<meta name="msapplication-config" content="/assets/favicons/browserconfig.xml" />
<meta name="format-detection" content="telephone=no" />
<link rel="canonical" href="https://bridgeswarm.dev/legal/privacy" />
<link rel="alternate" hreflang="en" href="https://bridgeswarm.dev/legal/privacy" />
<link rel="alternate" hreflang="x-default" href="https://bridgeswarm.dev/legal/privacy" />
<!-- Open Graph -->
<meta property="og:type" content="article" />
<meta property="og:site_name" content="BridgeSwarm" />
<meta property="og:locale" content="en_US" />
<meta property="og:url" content="https://bridgeswarm.dev/legal/privacy" />
<meta property="og:title" content="Privacy Policy · BridgeSwarm Legal" />
<meta property="og:description" content="Privacy Policy for BridgeSwarm and HoneyPeer, LLC: local-first storage under ~/.bridgeswarm, no telemetry in the extension or host, and website cookie use." />
<meta property="og:image" content="https://bridgeswarm.dev/assets/brand/og-image.png" />
<meta property="og:image:secure_url" content="https://bridgeswarm.dev/assets/brand/og-image.png" />
<meta property="og:image:type" content="image/png" />
<meta property="og:image:width" content="1200" />
<meta property="og:image:height" content="630" />
<meta property="og:image:alt" content="BridgeSwarm: Hyperswarm P2P for the browser" />
<!-- Twitter / X -->
<meta name="twitter:card" content="summary_large_image" />
<meta name="twitter:title" content="Privacy Policy · BridgeSwarm Legal" />
<meta name="twitter:description" content="Privacy Policy for BridgeSwarm and HoneyPeer, LLC: local-first storage under ~/.bridgeswarm, no telemetry in the extension or host, and website cookie use." />
<meta name="twitter:image" content="https://bridgeswarm.dev/assets/brand/twitter-card.png" />
<meta name="twitter:image:alt" content="BridgeSwarm: Hyperswarm P2P for the browser" />
<!-- Icons & PWA -->
<link rel="icon" href="/assets/favicons/favicon.ico" sizes="any" />
<link rel="icon" type="image/png" sizes="32x32" href="/assets/favicons/favicon-32x32.png" />
<link rel="icon" type="image/png" sizes="16x16" href="/assets/favicons/favicon-16x16.png" />
<link rel="icon" type="image/png" sizes="48x48" href="/assets/favicons/favicon-48x48.png" />
<link rel="apple-touch-icon" sizes="180x180" href="/assets/favicons/apple-touch-icon.png" />
<link rel="manifest" href="/assets/favicons/site.webmanifest" />
<link rel="mask-icon" href="/assets/logo/bridgeswarm-wordmark.svg" color="#2dd4bf" />
<!-- Article -->
<meta property="article:section" content="Legal" />
<meta property="article:author" content="HoneyPeer, LLC" />
<meta property="article:publisher" content="HoneyPeer, LLC" />
<script type="application/ld+json">
{
"@context": "https://schema.org",
"@type": "WebPage",
"name": "Privacy Policy \u00b7 BridgeSwarm Legal",
"description": "Privacy Policy for BridgeSwarm and HoneyPeer, LLC: local-first storage under ~/.bridgeswarm, no telemetry in the extension or host, and website cookie use.",
"url": "https://bridgeswarm.dev/legal/privacy",
"isPartOf": {
"@type": "WebSite",
"name": "BridgeSwarm",
"url": "https://bridgeswarm.dev"
},
"publisher": {
"@type": "Organization",
"name": "HoneyPeer, LLC",
"url": "https://bridgeswarm.dev"
},
"inLanguage": "en-US",
"primaryImageOfPage": {
"@type": "ImageObject",
"url": "https://bridgeswarm.dev/assets/brand/og-image.png",
"width": 1200,
"height": 630
}
}
</script>
<link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
<link href="https://fonts.googleapis.com/css2?family=Syne:wght@600;700;800&family=DM+Sans:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500&family=IBM+Plex+Mono:wght@400;500;600&display=swap" rel="stylesheet" />
<link rel="stylesheet" href="/src/styles/global.css" />
<link rel="stylesheet" href="/src/styles/theme-light.css" />
<link rel="stylesheet" href="/src/styles/docs.css" />
<link rel="stylesheet" href="/src/styles/legal.css" />
</head>
<body>
<div class="bg-mesh" aria-hidden="true"></div>
<div data-nav data-prefix="../"></div>
<div class="docs-layout legal-layout">
<aside class="docs-sidebar" data-legal-nav></aside>
<button type="button" class="docs-sidebar-toggle" aria-label="Legal menu"></button>
<article class="docs-main legal-main">
<p class="legal-kicker">Legal</p>
<h1>Privacy Policy</h1>
<p class="docs-lead">
This Privacy Policy explains how <strong>HoneyPeer, LLC</strong> (“HoneyPeer,” “we,” “us”) handles
information in connection with the BridgeSwarm website (the “<strong>Site</strong>”) and how the
BridgeSwarm browser extension and native messaging host (the “<strong>Software</strong>”) handle data
on your own device.
</p>
<p class="legal-updated">Last updated: <strong>July 27, 2026</strong></p>
<div class="callout success">
<div class="callout-icon"></div>
<div class="callout-body">
<strong>Local-first by design.</strong>
BridgeSwarm runs entirely on your machine. The extension and native messaging host do not send
analytics, telemetry, or usage data to HoneyPeer. Your application data lives in local storage
under your control and is exchanged only with the peers you choose to connect to.
</div>
</div>
<nav class="toc">
<strong>On this page</strong>
<ol>
<li><a href="#scope">Scope</a></li>
<li><a href="#controller">Controller</a></li>
<li><a href="#collect">Information we collect (the Site)</a></li>
<li><a href="#local">The BridgeSwarm Software is local-first</a></li>
<li><a href="#storage">Where your data lives</a></li>
<li><a href="#network">Peer-to-peer network activity</a></li>
<li><a href="#use">How we use Site information</a></li>
<li><a href="#share">Sharing</a></li>
<li id="cookies"><a href="#cookies-section">Cookies &amp; similar technologies</a></li>
<li><a href="#retention">Retention</a></li>
<li><a href="#security">Security</a></li>
<li><a href="#rights">Your rights</a></li>
<li><a href="#children">Children</a></li>
<li><a href="#intl">International transfers</a></li>
<li><a href="#changes">Changes</a></li>
<li><a href="#contact">Contact</a></li>
</ol>
</nav>
<h2 id="scope">1. Scope</h2>
<p>
This Policy covers the Site (bridgeswarm.dev and related subdomains) and communications with
HoneyPeer about BridgeSwarm. It also describes, for transparency, how the Software itself is
architected with respect to data — but the Software runs on <strong>your</strong> device, so most of
the data it creates or handles is never sent to us at all.
</p>
<h2 id="controller">2. Data controller</h2>
<p>
HoneyPeer, LLC<br />
DeKalb County, Georgia, United States<br />
Contact: <a href="mailto:[email protected]">[email protected]</a>
</p>
<h2 id="collect">3. Information we collect (the Site)</h2>
<h3>3.1 Information you provide</h3>
<ul>
<li>Contact details if you email us (name, email address, message content);</li>
<li>Security vulnerability reports or legal notices you send;</li>
<li>Any other information you voluntarily submit via forms or email.</li>
</ul>
<h3>3.2 Information collected automatically</h3>
<ul>
<li>Standard server logs (IP address, user agent, request path, timestamps, referrer) generated by serving the Site;</li>
<li>Approximate location derived from IP (city/region level at most, if used by our hosting providers logs);</li>
<li>Diagnostic data only if a future feature explicitly asks for opt-in telemetry and discloses it at collection time.</li>
</ul>
<h3>3.3 We do not sell personal data</h3>
<p>HoneyPeer does not sell your personal information.</p>
<h2 id="local">4. The BridgeSwarm Software is local-first</h2>
<p>
The BridgeSwarm extension (Manifest V3) and its companion native messaging host run entirely on your
computer. As designed and as of this writing:
</p>
<ul>
<li>the extension and host do <strong>not</strong> phone home to HoneyPeer with analytics, crash reports, or usage telemetry;</li>
<li>the native host communicates only with the browser extension over the standard native-messaging
stdio channel, and with peers you explicitly connect to over the Hyperswarm network;</li>
<li>settings such as default app name, max peers, timeouts, and the optional local examples server
toggle are stored in your browsers extension storage (<code>bridgeSwarmSettings</code>), not on HoneyPeer servers.</li>
</ul>
<p>
If a future version of the Software ever introduces optional telemetry or a HoneyPeer-hosted online
service, it will be off by default, clearly disclosed, and this Policy will be updated accordingly
before that feature ships.
</p>
<h2 id="storage">5. Where your data lives</h2>
<p>
BridgeSwarms data APIs (Hypercore, Hyperbee, Hyperdrive, Autobase, Hyperdb via a local Corestore)
persist to disk on your machine, under a storage directory you or the installer control:
</p>
<ul>
<li>the official installer places the native host binary and its default working directory under
<code>~/.bridgeswarm/</code> on macOS/Linux (or <code>%LOCALAPPDATA%\bridgeswarm\</code> on Windows);</li>
<li>the storage location for Hyper* data structures can be overridden with the
<code>BRIDGE_SWARM_STORAGE</code> environment variable when running the host from source;</li>
<li>optional capability packs (for example media processing jobs) write only within a sandboxed
<code>cap-jobs</code> subdirectory of that same storage root — never to arbitrary paths on your filesystem.</li>
</ul>
<p>
None of this data is uploaded to HoneyPeer. It stays on your device unless your own application code
replicates it to peers you have chosen to connect with.
</p>
<h2 id="network">6. Peer-to-peer network activity</h2>
<p>
When you join a topic, BridgeSwarm uses the public Hyperswarm distributed hash table to discover
peers and negotiate direct, Noise-encrypted connections. This discovery process is inherently visible
to the DHT and to peers you connect with (for example, your public key and the topics you announce).
HoneyPeer is not a party to, and does not log or relay, the content of your peer connections.
</p>
<h2 id="use">7. How we use Site information</h2>
<ul>
<li>Operate, secure, and improve the Site and release/installer pages;</li>
<li>Respond to support, legal, and security requests;</li>
<li>Prevent abuse, fraud, and violations of our <a href="/legal/aup">Acceptable Use Policy</a>;</li>
<li>Comply with law and enforce our agreements;</li>
<li>Communicate about BridgeSwarm if you contact us or subscribe to updates (where offered).</li>
</ul>
<h2 id="share">8. Sharing</h2>
<p>We may share information with:</p>
<ul>
<li><strong>Service providers</strong> who host the Site, DNS, CDN, or email under contractual confidentiality obligations;</li>
<li><strong>Professional advisors</strong> (legal, accounting) as needed;</li>
<li><strong>Authorities</strong> when required by law or to protect rights, safety, and security;</li>
<li><strong>Business transfers</strong> in connection with a merger, acquisition, or asset sale, subject to appropriate protections.</li>
</ul>
<h2 id="cookies-section">9. Cookies and similar technologies</h2>
<p>
Cookies are small text files stored on your device. Similar technologies include local storage,
session storage, and pixels. We use “cookies” to refer to these technologies collectively.
</p>
<h3>9.1 How the Site uses cookies today</h3>
<div class="table-wrap">
<table>
<thead>
<tr><th>Category</th><th>Purpose</th><th>Examples</th></tr>
</thead>
<tbody>
<tr>
<td><strong>Essential / functional</strong></td>
<td>Remember your theme preference and, where applicable, dismissed banners</td>
<td><code>localStorage</code> key <code>bridgeswarm.site.theme</code></td>
</tr>
<tr>
<td><strong>Analytics</strong> (not currently enabled)</td>
<td>Understand aggregate traffic and improve documentation</td>
<td>None active as of the Last updated date above</td>
</tr>
</tbody>
</table>
</div>
<p>
As of the Last updated date, the Site does not set third-party advertising or analytics cookies.
It uses browser <code>localStorage</code> only for interface preferences (such as light/dark theme),
which does not identify you personally. If we enable non-essential analytics cookies in the future,
we will update this Policy and, where required, provide consent controls.
</p>
<h3>9.2 Your choices</h3>
<ul>
<li>Browser settings can block or delete cookies and local storage; theme preference will simply reset to default if cleared.</li>
<li>Where consent is required for non-essential cookies, we will request it before setting them.</li>
</ul>
<h3>9.3 Third parties</h3>
<p>
Embedded third-party content (fonts, linked source repository) may set their own cookies under their
policies. We do not control third-party cookies on external sites you navigate to.
</p>
<h2 id="retention">10. Retention</h2>
<p>
We retain personal information only as long as needed for the purposes above, including legal,
security, and accounting requirements. Server logs are typically rotated on a limited schedule
determined by our hosting configuration.
</p>
<h2 id="security">11. Security</h2>
<p>
We implement reasonable administrative and technical measures appropriate to the nature of the Site.
No method of transmission or storage is perfectly secure. Report suspected Site or product
vulnerabilities to <a href="mailto:[email protected]">[email protected]</a> (see
<a href="/legal/security">Security Policy</a>).
</p>
<h2 id="rights">12. Your rights</h2>
<p>
Depending on your location, you may have rights to access, correct, delete, or restrict processing of
personal data, or to object to certain processing. To exercise rights, contact
<a href="mailto:[email protected]">[email protected]</a>.
We may need to verify your request. You may also lodge a complaint with a supervisory authority where applicable.
</p>
<p>
Residents of certain U.S. states may have additional rights under state privacy laws; contact us to
exercise them. We do not use sensitive personal information for “sale” or “sharing” as those terms
are defined under the CCPA/CPRA.
</p>
<h2 id="children">13. Children</h2>
<p>
The Site and Software are directed to developers and technical users, not children under 16 (or the
age of digital consent in your jurisdiction). We do not knowingly collect personal information from children.
</p>
<h2 id="intl">14. International transfers</h2>
<p>
HoneyPeer is based in the United States. If you access the Site from outside the U.S., your
information may be processed in the U.S. or other countries where our providers operate.
</p>
<h2 id="changes">15. Changes</h2>
<p>
We may update this Policy by posting a new version with a revised “Last updated” date.
Material changes — especially any change that adds telemetry to the Software — will be indicated
prominently on this page.
</p>
<h2 id="contact">16. Contact</h2>
<p>
HoneyPeer, LLC · DeKalb County, Georgia, USA<br />
<a href="mailto:[email protected]">[email protected]</a>
</p>
<div class="docs-pager">
<a href="/legal/aup"><span>Previous</span><strong>← Acceptable Use</strong></a>
<a class="next" href="/legal/license"><span>Next</span><strong>Open Source Notices →</strong></a>
</div>
</article>
</div>
<div data-footer data-prefix="../"></div>
<script type="module" src="/src/js/site.js"></script>
</body>
</html>