From ac644b614053d6a4a2f94233a18d406404bc6e2f Mon Sep 17 00:00:00 2001
From: theMackabu <theMackabu@gmail.com>
Date: Sat, 25 Apr 2026 18:17:30 -0700
Subject: [PATCH] add privacy policy page for js.report

---
 docs/reports/public/assets/report.css |  4 ++
 docs/reports/src/routes.ts            |  3 +-
 docs/reports/src/view.tsx             | 56 ++++++++++++++++++++++++++-
 3 files changed, 61 insertions(+), 2 deletions(-)

diff --git a/docs/reports/public/assets/report.css b/docs/reports/public/assets/report.css
index ca5d523..6eb9c16 100644
--- a/docs/reports/public/assets/report.css
+++ b/docs/reports/public/assets/report.css
@@ -73,6 +73,10 @@ code {
   margin: 0;
 }
 
+.policy p {
+  overflow: visible;
+}
+
 .label {
   color: #777;
 }
diff --git a/docs/reports/src/routes.ts b/docs/reports/src/routes.ts
index 0670601..de5ac14 100644
--- a/docs/reports/src/routes.ts
+++ b/docs/reports/src/routes.ts
@@ -3,7 +3,7 @@ import { renderOgPng } from './og';
 import type { Bindings } from './env';
 import { drizzle } from 'drizzle-orm/d1';
 import { CrashReportSchema } from './schema';
-import { renderBlank, renderReport } from './view';
+import { renderBlank, renderPrivacy, renderReport } from './view';
 import { createReport, getRawReport, getReport } from './reports';
 
 import {
@@ -17,6 +17,7 @@ import {
 const app = new Hono<{ Bindings: Bindings }>();
 
 app.get('/', c => c.html(renderBlank(), 404));
+app.get('/privacy', c => c.html(renderPrivacy()));
 
 app.get('/og/:image', async c => {
   const db = drizzle(c.env.DB);
diff --git a/docs/reports/src/view.tsx b/docs/reports/src/view.tsx
index 1449993..450b184 100644
--- a/docs/reports/src/view.tsx
+++ b/docs/reports/src/view.tsx
@@ -62,6 +62,8 @@ const ReportFooter = () => (
     <a href="https://github.com/theMackabu/ant">Ant</a>
     <ins> · </ins>
     <a href="https://github.com/theMackabu/ant/issues/new">Report this on GitHub</a>
+    <ins> · </ins>
+    <a href="/privacy">Privacy</a>
   </p>
 );
 
@@ -81,6 +83,54 @@ const BlankPage = () => (
     <p style="margin-top: -10px">If you were given a report link, check the URL and try again.</p>
     <p class="footer">
       <a href="https://github.com/theMackabu/ant">Ant on GitHub</a>
+      <ins> · </ins>
+      <a href="/privacy">Privacy</a>
+    </p>
+  </Shell>
+);
+
+const PrivacyPage = () => (
+  <Shell
+    title="Privacy | js.report"
+    meta={{
+      url: 'https://js.report/privacy',
+      title: 'Privacy | js.report',
+      description: 'What js.report stores for Ant crash reports.',
+    }}
+  >
+    <Logo />
+    <p>
+      <b>Privacy.</b> <ins>Crash report storage policy.</ins>
+    </p>
+    <div class="policy">
+      <p>js.report does not store IP addresses in its database.</p>
+      <p>
+        The database stores the crash report JSON submitted by Ant, plus server metadata needed to
+        render, deduplicate, and expire reports.
+      </p>
+      <p>
+        <span class="label">Submitted report fields:</span>
+        <br />
+        <code>schema</code>, <code>runtime</code>, <code>version</code>, <code>target</code>,{' '}
+        <code>os</code>, <code>arch</code>, <code>kind</code>, <code>code</code>,{' '}
+        <code>reason</code>, <code>addr</code>, <code>elapsedMs</code>, <code>peakRss</code>,{' '}
+        <code>frames</code>
+      </p>
+      <p>
+        <span class="label">Stored server fields:</span>
+        <br />
+        <code>id</code>, <code>trace</code>, <code>firstSeenAt</code>, <code>lastSeenAt</code>,{' '}
+        <code>hitCount</code>, <code>expiresAt</code>, and per-frame hashes used for deduplication.
+      </p>
+      <p>
+        Crash report links are public to anyone with the URL. Raw JSON is available by adding{' '}
+        <code>.json</code> to a report URL.
+      </p>
+    </div>
+    <p class="footer">
+      <a href="/">js.report</a>
+      <ins> · </ins>
+      <a href="https://github.com/theMackabu/ant">Ant on GitHub</a>
     </p>
   </Shell>
 );
@@ -98,7 +148,7 @@ const ReportPage = ({
 
   return (
     <Shell
-      title={`Ant crash report | ${detail}`}
+      title={`${detail} | js.report`}
       meta={{
         url,
         title: `${report.reason}. ${detail} at ${report.addr}`,
@@ -158,6 +208,10 @@ export function renderBlank(): string {
   return `<!doctype html>${(<BlankPage />)}`;
 }
 
+export function renderPrivacy(): string {
+  return `<!doctype html>${(<PrivacyPage />)}`;
+}
+
 export function renderReport(report: CrashReport, url: string, imageUrl: string): string {
   return `<!doctype html>${(<ReportPage report={report} url={url} imageUrl={imageUrl} />)}`;
 }
-- 
2.51.2