diff --git a/CHANGELOG.md b/CHANGELOG.md index 0bc5025..bdb762c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Minor + +- Added footer with links to legal pages (License, Privacy Policy, Terms of Service) +- Added licensing notice page explaining GPLv3 licensing for generated projects +- Added privacy policy page detailing data collection and usage +- Added terms of service page with usage terms and disclaimers + ## [0.2.0] - 2025-12-10 ### Minor diff --git a/components/Footer.tsx b/components/Footer.tsx new file mode 100644 index 0000000..174a318 --- /dev/null +++ b/components/Footer.tsx @@ -0,0 +1,21 @@ +export default function Footer() { + return ( + + ) +} diff --git a/pages/+Layout.tsx b/pages/+Layout.tsx index d89c7e9..c1b50ad 100644 --- a/pages/+Layout.tsx +++ b/pages/+Layout.tsx @@ -1,3 +1,4 @@ +import Footer from "@/components/Footer" import Navbar from "@/components/Navbar" import { ConvexAuthProvider } from "@convex-dev/auth/react" import { ConvexReactClient } from "convex/react" @@ -18,8 +19,11 @@ function ConditionalNavbar() { export default function Layout({ children }: { children: React.ReactNode }) { return ( - - {children} +
+ +
{children}
+
) } diff --git a/pages/license/+Layout.tsx b/pages/license/+Layout.tsx new file mode 100644 index 0000000..686e669 --- /dev/null +++ b/pages/license/+Layout.tsx @@ -0,0 +1,7 @@ +export default function Layout({ children }: { children: React.ReactNode }) { + return ( +
+
{children}
+
+ ) +} diff --git a/pages/license/+Page.mdx b/pages/license/+Page.mdx new file mode 100644 index 0000000..e45a83d --- /dev/null +++ b/pages/license/+Page.mdx @@ -0,0 +1,36 @@ +# MeshForge Licensing Notice + +## 1. Generated Projects (the zip files you download) + +Every project you download from MeshForge is a modified version of one or more upstream open-source code bases. The primary codebase is licensed under the GNU General Public License version 3 (GPLv3). + +Because the GPLv3 is "viral", the entire combined work you receive — including the original GPLv3 code plus all patches, plugins, themes, or extensions added by MeshForge or selected by you — is licensed **exclusively** under the GNU GPLv3. + +- You may use, modify, and redistribute the downloaded project **only** under the terms of the GPLv3 ([full text](https://www.gnu.org/licenses/gpl-3.0.html)). +- No additional permissions or dual-licensing terms are granted for the combined work. +- All original copyright and license notices are preserved inside the zip. + +## 2. Plugins, patches, and extensions from the MeshForge registry + +Many optional components available in our registry are originally licensed under MIT, Apache 2.0, BSD, ISC, or other licenses that are explicitly compatible with GPLv3. + +We make every reasonable effort to ensure that only GPLv3-compatible components are offered in the registry. However, the final responsibility for verifying that every selected component is compatible with GPLv3 lies with you, the user. + +Users who receive the combined project are always free to extract individual components that were originally under a GPLv3-compatible permissive license (MIT, Apache 2.0, BSD, etc.) and reuse those components under their original permissive license terms, provided they comply with those original licenses. + +## 3. MeshForge website and generation tool + +The MeshForge website and the software that downloads upstream code, applies customisations, combines selected plugins, and produces the final zip file are separate works that do not incorporate any GPLv3-covered code. + +MeshForge.org is owned and operated by MeshEnvy NCC, a Nevada 501(c)(3) Nonprofit Corporation. + +Copyright © 2025 MeshForge.org +Licensed under the MIT License ([full text](https://opensource.org/licenses/MIT)) + +## Summary + +- Downloaded projects (the complete zip) → GPLv3 only +- Individual compatible components inside the zip → may still be reused under their original permissive license if extracted +- MeshForge tool and website → MIT License + +Questions or concerns? → [legal@meshforge.org](mailto:legal@meshforge.org) diff --git a/pages/privacy/+Layout.tsx b/pages/privacy/+Layout.tsx new file mode 100644 index 0000000..68e08c0 --- /dev/null +++ b/pages/privacy/+Layout.tsx @@ -0,0 +1,8 @@ +export default function Layout({ children }: { children: React.ReactNode }) { + return ( +
+
{children}
+
+ ) +} + diff --git a/pages/privacy/+Page.mdx b/pages/privacy/+Page.mdx new file mode 100644 index 0000000..964f798 --- /dev/null +++ b/pages/privacy/+Page.mdx @@ -0,0 +1,108 @@ +# Privacy Policy + +**Last Updated: December 2025** + +MeshForge.org is owned and operated by MeshEnvy NCC, a Nevada 501(c)(3) Nonprofit Corporation. + +MeshForge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website and services. + +## Information We Collect + +### Account Information + +When you sign in using GitHub OAuth, we collect: + +- Your GitHub username and user ID +- Your GitHub profile information (name, email if publicly available) +- Authentication tokens provided by GitHub + +### Build and Configuration Data + +When you create firmware builds, we collect and store: + +- Build configurations (selected modules, plugins, target hardware) +- Build status and completion information +- Build artifacts (firmware binaries and source code archives) +- Build history and timestamps + +### Usage Data + +We automatically collect certain information when you use our service: + +- Build requests and download activity +- Plugin usage statistics +- Timestamps of actions +- IP addresses (for security and abuse prevention) + +### Public Profiles + +If you choose to make a build profile public, the following information may be visible to other users: + +- Profile name and description +- Build configuration +- Flash/download counts + +## How We Use Your Information + +We use the information we collect to: + +- Provide and maintain our firmware building service +- Process your build requests and deliver firmware binaries +- Store your build configurations for future use +- Generate download statistics and usage analytics +- Prevent abuse and ensure service security +- Improve our service and user experience + +## Data Storage and Security + +- Your data is stored securely using Convex cloud infrastructure +- Build artifacts are stored in cloud storage (R2/S3) with secure access controls +- We implement industry-standard security measures to protect your data +- Authentication is handled securely through GitHub OAuth + +## Data Retention + +- Build configurations and profiles are retained until you delete them +- Build artifacts may be retained for a reasonable period to ensure availability +- We may retain certain data for legal compliance and abuse prevention + +## Your Rights + +You have the right to: + +- Access your personal data +- Delete your account and associated data +- Make your profiles private or public +- Request a copy of your data + +To exercise these rights, contact us at [legal@meshforge.org](mailto:legal@meshforge.org). + +## Third-Party Services + +We use the following third-party services: + +- **Convex**: Backend database and authentication services +- **GitHub**: OAuth authentication provider +- **Cloud Storage Providers**: For storing build artifacts + +These services have their own privacy policies. We recommend reviewing them. + +## Cookies and Tracking + +We use minimal cookies and tracking technologies: + +- Authentication session cookies (required for service functionality) +- No third-party advertising or marketing cookies +- No cross-site tracking + +## Children's Privacy + +Our service is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. + +## Changes to This Policy + +We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. + +## Contact Us + +If you have questions about this Privacy Policy, please contact us at [legal@meshforge.org](mailto:legal@meshforge.org). diff --git a/pages/terms/+Layout.tsx b/pages/terms/+Layout.tsx new file mode 100644 index 0000000..68e08c0 --- /dev/null +++ b/pages/terms/+Layout.tsx @@ -0,0 +1,8 @@ +export default function Layout({ children }: { children: React.ReactNode }) { + return ( +
+
{children}
+
+ ) +} + diff --git a/pages/terms/+Page.mdx b/pages/terms/+Page.mdx new file mode 100644 index 0000000..0d83f07 --- /dev/null +++ b/pages/terms/+Page.mdx @@ -0,0 +1,123 @@ +# Terms of Service + +**Last Updated: January 2025** + +MeshForge.org is owned and operated by MeshEnvy NCC, a Nevada 501(c)(3) Nonprofit Corporation. + +Please read these Terms of Service ("Terms") carefully before using MeshForge ("the Service") operated by MeshForge.org ("we", "us", or "our"). + +## Acceptance of Terms + +By accessing or using MeshForge, you agree to be bound by these Terms. If you disagree with any part of these terms, you may not access the Service. + +## Description of Service + +MeshForge is a cloud-based firmware builder that allows you to: + +- Create custom Meshtastic firmware builds +- Select modules and plugins for inclusion +- Download firmware binaries and source code +- Share build configurations with others + +## User Accounts + +### Account Requirements + +- You must be at least 13 years old to use this Service +- You must provide accurate and complete information when creating an account +- You are responsible for maintaining the security of your account +- You are responsible for all activities that occur under your account + +### GitHub Authentication + +- MeshForge uses GitHub OAuth for authentication +- By signing in, you authorize us to access your GitHub account information +- You must comply with GitHub's Terms of Service + +## Acceptable Use + +You agree not to: + +- Use the Service for any illegal purpose or in violation of any laws +- Attempt to gain unauthorized access to the Service or related systems +- Interfere with or disrupt the Service or servers +- Use the Service to build firmware that violates third-party rights +- Abuse, harass, or harm other users +- Upload malicious code or attempt to exploit vulnerabilities +- Use automated systems to access the Service without permission + +## Build Limitations + +- Builds are subject to resource limitations and may be rate-limited +- We reserve the right to reject or cancel builds that violate these Terms +- Build artifacts may be removed after a reasonable retention period +- We are not responsible for firmware that fails to compile or function + +## Intellectual Property + +### Your Content + +- You retain ownership of build configurations you create +- You grant us a license to store, process, and serve your builds +- Public profiles may be visible to other users + +### MeshForge Content + +- The MeshForge website and tooling are licensed under the MIT License +- Generated firmware projects are licensed under GPLv3 (see [License](/license)) +- Third-party plugins retain their original licenses + +### Third-Party Code + +- Generated firmware includes upstream Meshtastic code (GPLv3) +- Plugins may have their own licenses +- You are responsible for complying with all applicable licenses + +## Disclaimers + +### Service Availability + +- The Service is provided "as is" and "as available" +- We do not guarantee uninterrupted or error-free operation +- We reserve the right to modify or discontinue the Service at any time + +### Firmware Disclaimer + +- **USE AT YOUR OWN RISK**: Firmware built through MeshForge may not function correctly +- We are not responsible for damage to hardware or data loss +- We do not guarantee compatibility with any specific hardware +- Always test firmware in a safe environment before deployment + +### No Warranty + +THE SERVICE IS PROVIDED WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. + +## Limitation of Liability + +TO THE MAXIMUM EXTENT PERMITTED BY LAW, MESHFORGE.ORG AND MESHENVY NCC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES. + +## Indemnification + +You agree to indemnify and hold harmless MeshForge.org and MeshEnvy NCC from any claims, damages, losses, liabilities, and expenses (including legal fees) arising out of your use of the Service or violation of these Terms. + +## Termination + +We may terminate or suspend your account immediately, without prior notice, for conduct that we believe violates these Terms or is harmful to other users, us, or third parties. + +You may terminate your account at any time by contacting us or deleting your account through the Service. + +## Changes to Terms + +We reserve the right to modify these Terms at any time. We will notify users of material changes by posting the updated Terms on this page. Your continued use of the Service after changes constitutes acceptance of the new Terms. + +## Governing Law + +These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which MeshForge.org operates, without regard to its conflict of law provisions. + +## Severability + +If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall remain in full force and effect. + +## Contact Information + +If you have questions about these Terms, please contact us at [legal@meshforge.org](mailto:legal@meshforge.org).