search

Schotsl / Uwuifier-next

This repository contains the Uwuifier demonstration website, It's written using Vue 3 in TypeScript and makes use of Plausible Analytics to track traffic while maintaining users privacy. It automatically deployes to Firebase by using GitHub Actions.
https://uwuifier.com
MIT License
2 stars 0 forks source link

No privacy policy on web? #11

Closed thetayloredman closed 3 years ago

thetayloredman commented 3 years ago

The website doesn't have a publicly-visible privacy policy, and I can see you are using Google Analytics. This is illigal to collect user data without a proper privacy policy.

Evidence of Google Analytics: Evidence

Edit: Embedded image instead of URL

Schotsl commented 3 years ago

I'll be adding it later this week! Just out of curiosity: how / why did you find out about this flaw? ;)

thetayloredman commented 3 years ago

Heh, so kinda a long story, but here we goooooooooo

  1. My friend was asking for support with TS being weird, in this case they were getting errors (something like cannot use import statement outside a module) and they mentioned this.
  2. I took a look, found it funny as frick, and started to test around with it.
  3. I found the website, and was trying to peek at the view-source:// and direct inspect element tools. Reason I looked here was because I saw the live demo, and was looking to see how it was being done.
  4. I found the main JS file obfuscated
  5. I began a deeper investigation, seeing the gtag() calls. I've used google analytics (and had this exact flaw once) and I knew that gtag() was the Google Global Site Tag and decided to report that to you! I don't personally care, but I wanted you to know.

Also, really great package you have here. I've already actually made another library on top of this, thetayloredman/uwuify and all it really adds is a few changes to the faces (because the unicode ones, specifically "(・`ω´・)" were annoying) and am currently adding a LOT more actions.

Also, here's an actual use case I have :3 ![Use case](https://badboyhalocat.tk/i/25.png) ironic it put "*runs away*" at the end.. did you actually intend that?

Also do you have a discord by any chance? I'd like to contact you in a way preferably other then a GitHub issue/email

Schotsl commented 3 years ago

I'm currently rewriting the site so I'm working on the issue, I'll also be moving the issue to another repository since the uwuifier-client has its own repository, when you're adding actions or fix faces with unicode issues I'd be more than happy to merge it into the master branch! You can add me on Discord

thetayloredman commented 3 years ago

Alright, I added you, BadBoyHaloCat#1826

Schotsl commented 3 years ago

Fixed this by adding Plausible Analytics and removing Google Analytics since I really didn't want an annoying pop-up for a simple / fun site! :)