add GDPR Banner

This commit is contained in:
achraf
2026-06-07 17:43:45 +02:00
parent 25b9f36686
commit 365b98c7dd
6 changed files with 206 additions and 74 deletions

View File

@@ -62,12 +62,17 @@ Environment:
- `VITE_ANALYTICS_RETENTION_MONTHS`: disclosed analytics retention period. Configure Umami/database deletion to match it.
- `PLIMI_PORT`: host port used by Docker Compose, default `8080`.
Analytics is self-hosted and enabled by default for audience measurement. The
tracker excludes URL search parameters and hashes, honors Do Not Track, and can
be disabled locally through the privacy controls.
Analytics is self-hosted and disabled until the visitor explicitly consents.
The tracker excludes URL search parameters and hashes, honors Do Not Track, and
can be disabled locally through the privacy controls.
The privacy page is available at `/privacy`; deployers must replace all example
controller and hosting values before publishing.
The bundled Nginx configuration disables routine access logging. If a reverse
proxy, CDN, hosting platform, or firewall logs visitor IP addresses or request
metadata, document that processing and enforce an appropriate retention period
in that service.
The Docker image is environment-independent. At container startup, its entrypoint
generates `/config.js` from `.env`, so the same image can be promoted between
environments without rebuilding. The file is ignored by Git and excluded from