Drvanon
commented
5 years ago I would recommend have to: a tldr-version and a 'normal' one. I think that show users that we value their privacy it should be clear for them how we plan on doing that, and not obfuscate that using legal terms and a 'wall of text'.
marickmanrho
The privacy policy should be accessible without login and explicitly available when signing up.
wiki description of 'privacy policy': A privacy policy is a statement or a legal document (in privacy law) that discloses some or all of the ways a party gathers, uses, discloses, and manages a customer or client's data. It fulfills a legal requirement to protect a customer or client's privacy. Personal information can be anything that can be used to identify an individual, not limited to the person's name, address, date of birth, marital status, contact information, ID issue, and expiry date, financial records, credit information, medical history, where one travels, and intentions to acquire goods and services. In the case of a business it is often a statement that declares a party's policy on how it collects, stores, and releases personal information it collects. It informs the client what specific information is collected, and whether it is kept confidential, shared with partners, or sold to other firms or enterprises. Privacy policies typically represent a broader, more generalized treatment, as opposed to data use statements, which tend to be more detailed and specific.