Update documentation

web/templates/account/signup.html

@@ -40,6 +40,9 @@
                 ✅ <strong>Verification is mandatory.</strong> Along with the face picture on your profile page,
                 you will need to take a selfie with a hand-written note on paper to verify that you're a real
                 person.
+                <ul>
+                    <li>Members who appear underage may be asked to show ID.</li>
+                </ul>
             </li>
             <li>
                 🤳 <strong>Self pictures only.</strong> You are expected to post only pictures that you're in.

web/templates/faq.html

@@ -29,6 +29,7 @@
                 <ul>
                     <li><a href="#certification">What does <strong>certification</strong> mean, and what is a <strong>"verification selfie"</strong>?</a></li>
                     <li><a href="#need-certification">Do I <strong>need</strong> to send a "verification selfie"?</a></li>
+                    <li><a href="#secondary-id">Do I need to <strong>show you my photo ID?</strong></a> <span class="tag is-success">NEW May 26 2024</span></li>
                     <li><a href="#why-certify">Why the hard requirement to certify?</a></li>
                     <li><a href="#uncertified">What can non-certified members do?</a></li>
                 </ul>
@@ -261,6 +262,44 @@
             your profile page.
         </p>
 
+        <h3 id="secondary-id">Do I need to show you my photo ID?</h3>
+
+        <p>
+            <span class="tag is-success">NEW May 26 2024</span>
+        </p>
+
+        <p>
+            Usually, no: the majority of our members are middle-aged adults (or older) where it is clear from
+            their appearance that they are well over 18 years old.
+        </p>
+
+        <p>
+            However, if you appear that you could be under age you may be requested to share a secondary
+            form of photo identification so we can verify your birth date. This generally means you would
+            need to share a scan of a government-issued identity document (such as a passport, driver's
+            license or national ID card) which shows your <strong>face</strong> and your <strong>date of birth.</strong>
+        </p>
+
+        <p>
+            We will strongly encourage you to <strong>black out all other personal information</strong> from
+            your ID card. We <em>do not</em> need to know your name, address, ID number or anything else like
+            that: only your date of birth and photograph would be requested.
+        </p>
+
+        <p>
+            The website will also <strong>delete your photo ID as soon as possible:</strong> we do not want
+            to hold onto these at all! After an admin has verified your birth date and approved the picture,
+            the website will record that your photo ID had been reviewed and the image itself is deleted from
+            the server entirely.
+        </p>
+
+        <p>
+            The above information is communicated around the website if your account has been challenged to
+            share a secondary form of ID. Most of our members won't experience this workflow: only the members
+            who look questionably young where the admins can't in good conscience approve your certification
+            photo without verifying you are at least 18 years old.
+        </p>
+
         <h3 id="why-certify">Why the hard requirement to certify?</h3>
 
         <p>

web/templates/privacy.html

@@ -25,7 +25,7 @@
         </p>
 
         <p>
-            This page was last updated on <strong>April 29, 2024.</strong>
+            This page was last updated on <strong>May 26, 2024.</strong>
         </p>
 
         <p>
@@ -152,11 +152,12 @@
         <h1 id="third-parties">Third Parties</h1>
 
         <p>
-            <span class="tag is-success">Added: Oct 24 2023</span>
+            <span class="tag is-success">Updated: May 26 2024</span>
         </p>
 
         <p>
-            {{PrettyTitle}} does not share data with <strong>ANY</strong> third party company.
+            {{PrettyTitle}} strives to minimize any sharing of user data with third party companies, to the
+            furthest extent as is possible.
             The website and chat room (both custom applications built specifically for {{PrettyTitle}}) run on
             a single web server. There are <strong>NO</strong> third-party analytics, advertisements, or any
             data sharing agreement with any third-party company -- all user data is stored in-house on the
@@ -165,7 +166,7 @@
 
         <p>
             The features on {{PrettyTitle}} are designed in a privacy-first manner in order to avoid relying
-            on any third-party services. For example:
+            on any third-party services to the furthest extent possible. For example:
         </p>
 
         <ul>
@@ -181,6 +182,45 @@
             </li>
         </ul>
 
+        <p>
+            Here are the exhaustive list of touch points that {{PrettyTitle}} has with any third-party company:
+        </p>
+
+        <ul>
+            <li>
+                <a href="https://www.digitalocean.com/"><strong>Digital Ocean</strong></a>
+                provides the web hosting for the {{PrettyTitle}} web server. The server itself is a
+                manually operated Virtual Private Server. No user data is shared with Digital Ocean,
+                however they would be technically capable of accessing the server hard drive and
+                database if they needed to.
+            </li>
+            <li>
+                <a href="https://www.mailersend.com/"><strong>Mailersend</strong></a>
+                provides our outgoing e-mail service, for sending you the "new account verification e-mail"
+                and other transactional e-mail messages. Mailersend may see the e-mail address and content
+                of e-mails that are sent from the website, as is necessary for them to relay the message to you.
+            </li>
+            <li>
+                <a href="https://www.openstreetmap.org/"><strong>OpenStreetMap:</strong></a>
+                the "Who's Nearby?" location feature will load map tiles from OpenStreetMap to draw the
+                map widget on your Location Settings page. No user data is shared with OpenStreetMap, but
+                they might see your IP address when your web page loads the map tiles.
+            </li>
+            <li>
+                <a href="https://www.cloudflare.com/"><strong>Cloudflare:</strong></a> the new account
+                signup page uses a CAPTCHA widget provided by Cloudflare in order to combat spam and
+                fraud. No user data is shared with Cloudflare.
+            </li>
+        </ul>
+
+        <p>
+            {{PrettyTitle}} is <strong>philosophically opposed</strong> to the data sharing that is so very
+            common with most other websites on the Internet. We take our members' privacy <strong>very</strong>
+            seriously, and are committed to never adding intrusive advertisements, tracking cookies or analytics
+            which can compromise your privacy. All website features are designed to maximize your privacy and
+            minimize any use of third-party services where possible.
+        </p>
+
         <h1 id="data">Data Collection and Use</h1>
 
         <p>
@@ -416,6 +456,32 @@
         </p>
 
         <ul>
+            <li>
+                <strong>Government Issued Photo IDs</strong> <span class="tag is-success">Added May 26, 2024</span>
+                <ul>
+                    <li>
+                        In our Certification Photo workflow, users who appear under age <strong>MAY</strong>
+                        be asked to provide a secondary form of photo ID to verify their age. This will take
+                        the form of a government-issued passport or ID card that shows their photo and date
+                        of birth.
+                    </li>
+                    <li>
+                        If this happens, we will instruct you to <strong>black out all other personal information</strong>
+                        from your ID card except the photo and date of birth. We do not want to know your name,
+                        address, ID number, or any personal information about you.
+                    </li>
+                    <li>
+                        The website will <strong>delete your photo ID as soon as possible:</strong> after an admin
+                        has reviewed it and approved or rejected it, the image is deleted from the server. You may
+                        also delete it yourself before an admin looks at it.
+                    </li>
+                    <li>
+                        We <strong>do not want</strong> to store photo IDs at all, so that we aren't liable in
+                        case of a data breach or hack. Only members who appear questionably young will be prompted
+                        to share photo ID.
+                    </li>
+                </ul>
+            </li>
             <li>
                 <strong>Messages (website)</strong>
                 <ul>