add privacy policy

.vitepress/config.ts

@@ -113,6 +113,7 @@ const nav: ThemeConfig['nav'] = [
         link: '/about/community-guide'
       },
       { text: 'Code of Conduct', link: '/about/coc' },
+      { text: 'Privacy Policy', link: '/about/privacy' },
       {
         text: 'The Documentary',
         link: 'https://www.youtube.com/watch?v=OrxmtDw4pVI'

src/about/privacy.md

@@ -0,0 +1,40 @@
+# Vue.js Privacy Policy
+
+> Effective Date: April 26, 2024
+
+This Privacy Policy describes the Vue.js organization ("Vue", "we", "us" or "our") practices for handling your information in connection with this website (https://vuejs.org) and our open source-related websites ("Websites") and any content, related documentation, information and services (e.g. tutorials, tools to support the developer workflow, access to resources, etc.) made available to you on this website (collectively, the "Services"). This Privacy Policy describes the personal information we process to support our Services.
+
+For clarity, this Privacy Policy only applies to the Websites and does not apply to any:
+
+1. Use of open source code, documentation or specifications made available on GitHub (https://github.com/), which are governed by the terms of the applicable open source license;
+
+2. Pull requests, issues and any other interactions or features related to participation in open source projects on GitHub, which are governed by GitHub's terms and conditions; or
+
+3. Usage statistics of our published packages on NPM (https://npmjs.com/), which are governed by NPM's terms and conditions; or
+
+4. Usage statistics of our published browser extensions, which are collected by the browser vendors and governed by their respective terms and conditions.
+
+## What Kinds of Information Do We Collect?
+
+We do not collect or store any type of personal data, but may collect anonymized data via 3rd party services integrated in our websites:
+
+- **Visitor data to our websites.** Our website analytics is powered by [Fathom Analytics](https://usefathom.com/), which doesn't use cookies and complies with the GDPR, ePrivacy (including PECR), COPPA and CCPA. Using this privacy-friendly website analytics software, your IP address is only briefly processed, and we (running this website) have no way of identifying you. As per the CCPA, your personal information is de-identified. You can read more about this on Fathom Analytics' website.
+
+  - Fathom Analytics' Privacy Policy: https://usefathom.com/legal/privacy
+
+- **Usage data of the search functionality.** Our search functionality is powered by [Algolia DocSearch](https://docsearch.algolia.com/), which does not perform any type of user tracking or fingerprinting, and does not use cookies. Algolia services are GPDR compliant, CCPA compliant, and TRUSTe Certified.
+
+  - Algolia's privacy policy: https://www.algolia.com/policies/privacy/
+  - Algolia's security and privacy compliance: https://www.algolia.com/distributed-secure/security-compliance/
+
+## How Do We Use Information?
+
+The sole purpose of collecting the aforementioned data is to understand our website traffic and usage in the most privacy-friendly way possible so that we can continually improve our website and documentation quality. The lawful basis as per the GDPR is "Article 6(1)(f); where our legitimate interests are to improve our website and business continually." As per the explanation, no personal data is stored over time.
+
+## Data Retention
+
+All data collected are stored on aforementioned 3rd party services and are subject to the services' respective data retention policies.
+
+## Questions
+
+If you have any questions about this Privacy Policy or our practices, please contact us via email at hello@vuejs.org.