BEP 8: Privacy Policy

[bryevdv]

This was already on my short-list todo, but NF is pushing projects to communicate their privacy policies. I have opened a WIP wiki page for BEP 8 here:

https://github.com/bokeh/bokeh/wiki/BEP-8:-Privacy-Policy

NF has a template for the policy itself, as well as a blurb that should go on all our sites here: https://github.com/numfocus/privacy-policy

cc @bokeh/core

(Currently just getting the issues and docs in place, I will add my actual thoughts on this soon)

[bryevdv]

Update: NF's position seems to be that a cookie consent modal dialog will really be necessary for any site that uses cookies, including basic Google Analytics. I am investigating some cookie-less analytics offerings that are (or can easily be configured) to be GDPR compliant without necessitating affirmative consent. Some are listed here:

https://www.fastcompany.com/90300072/its-time-to-ditch-google-analytics

Starting by contacting to see if any offer free/discounted hosted plans for OSS projects.

[bryevdv]

I've heard back from the three services there, all are willing to either something. Am currently looking a bit deeper in to Matomo first since they seem to be the most mature / long-lived, can import GA data, can be run self-hosted if that's ever a need, and seem to be offering a gratis plan.