Juice-shop: Privacy Policy

[bkimminich]

Add an actually decent privacy policy stating that

• the application is supposed to be fed only fake sensitive and private identifiable data
• all data is deleted upon server restart
• server logs depend on chosen deployment option
  etc.

Mostly relevant for the public demo instances on Heroku, I guess. Could use review by an actual DPO or legal expert.

---

Want to back this issue? Post a bounty on it! We accept bounties via Bountysource.

[J12934]

The thank-you.jpg file for the Privacy Policy Tier 2 is currently missing.
Did this get lost or is it still in the works?

[bkimminich]

Hehehe, that's on purpose because we are _not really_ thankful at all... 😈

[J12934]

🤣 Haha, Shit. Thats embarrassing that I didn't get the joke

[lock[bot]]

This thread has been automatically locked because it has not had recent activity after it was closed. :lock: Please open a new issue for regressions or related bugs.