Merge issue-125-legal: add legal footer and preferences (#125)

# Conflicts:
#	core/accessibility_registry.py

Author: alexeygrigorev

_docs/adoption/course-platform/integration-patched-files.tsv

@@ -111,7 +111,7 @@ scripts/load_rds_export.py	23700	f08edf55c064f061646a2f1e5a03693356c3b044db2bfd7
 scripts/score_project_dev.py	5535	28b9c8b7e02b5d5a2fe680ec1bd8e368bb36b1b54f2616550f85c6112a351131	Run copied project scoring against the unified local SQLite settings without reading database credentials or directing privileged SQL writes.
 course_platform_templates/account/logout.html	1406	6faa3b82a9ebc9346d99dafbdcc465b9d34dc3507634ca0c9738eb3b0f9b5c88	Use the unified DataTalks.Club name in the copied sign-out page title without changing logout behavior.
 course_platform_templates/accounts/account_settings.html	14795	396d3c64c726efd62bddd9d9b241cfb0c497345507033e1889ced7178e8b61bb	Use the unified DataTalks.Club title and shared accessible label, help, error, status, and toggle relationships without changing account-settings behavior.
-course_platform_templates/base.html	18818	fb5337edbc27ff8b5fc447371216a921157aff88625d35675038db03b58dc744	Use the unified canonical policy and accessible shared shell with skip-target focus, current navigation, resilient account links, public-safe announcements, local interaction helpers, and preserved local Tailwind and Font Awesome assets.
+course_platform_templates/base.html	17636	c0a7519654e82b13057c52f152e928f7cb7646cab3f0ad76e7525051a6ce6497	Use the unified canonical policy and accessible shared shell with skip-target focus, current navigation, resilient account links, public-safe announcements, the issue #125 single-source legal footer and analytics preferences, local interaction helpers, and preserved local Tailwind and Font Awesome assets.
 course_platform_templates/socialaccount/authentication_error.html	1240	4a70aaf5e51dbb57eeef156d37fa56144bc60fd55f2f4af8ba4f2abe93870d49	Use the unified DataTalks.Club name in the copied authentication-error title without changing recovery behavior.
 course_platform_templates/socialaccount/connections.html	3818	a1e0756bfe763150fddefc5018949eb90f7d90e7f5bd9b9eab890e6ae00c62f5	Use the unified DataTalks.Club name in the copied account-connections title without changing connection behavior.
 course_platform_templates/socialaccount/login_cancelled.html	1210	607d2d1d5c5c43aa69632030e144817416732482e04ecb0ac54fdd252de8fd71	Use the unified DataTalks.Club name in the copied cancelled-login title without changing recovery behavior.

_docs/adoption/course-platform/integration-patches.md

@@ -35,7 +35,10 @@ overlays:
   `_docs/provenance/course-platform-vendor-assets.json`; the Tailwind configuration remains before
   the runtime script and the browser no longer requires either production CDN. Issue #114 adds the
   escaped public-safe announcement after the shared header and before main content without changing
-  copied account, navigation, preference, or session behavior;
+  copied account, navigation, preference, or session behavior. Issue #125 replaces only the copied
+  footer markup with the target-owned shared legal-footer partial used by both target shells and
+  loads its provider-free analytics-preferences behavior; course, account, navigation, preference,
+  and session behavior remains unchanged;
 - `courses/templates/projects/project.html`: issue #75 replaces the external commit-ID screenshot
   with concise accessible text explaining where to copy the first seven commit characters. Project
   submission fields, validation, persistence, and operator controls remain unchanged;

_docs/legal/data-flow-inventory.md

@@ -0,0 +1,67 @@
+# Legal and analytics data-flow inventory
+
+Issue: `#125`  
+Candidate base: `8c0239254ab690918e6930c2368614dcfc709cf5`  
+Inventory date: 11 August 2026
+
+This inventory bounds the source-reviewed legal pages and analytics preferences. The architecture
+and privacy authority remains `_docs/specs/07-security-privacy-operations.md`; the other cited specs
+define the product flows summarized here. This document does not authorize a new processor,
+production setting, message purpose, data import, or external mutation.
+
+## Current website flows
+
+| Surface | Data and purpose | Current boundary | Authority |
+|---|---|---|---|
+| Public content | GitHub-authored articles, podcasts, books, docs, FAQ, wiki, courses, events, and public editorial people | Validated versioned read models; public requests perform no GitHub fetch or render | Specs 01, 02, and 03 |
+| Account and private member profile | Email identity, sign-in links, session/security state, preferences, and member-entered onboarding fields | One account-owned private profile, never inferred to or from a public editorial person | Specs 01 and 07 |
+| Slack onboarding | Profile completion, eligibility, grant/delivery state, and reveal of the approved shared join URL | No Slack invitation API, public directory, or membership synchronization | Specs 01, 06, and 07 |
+| Course and cohort participation | Registration/enrollment, confirmed minimal profile snapshot, target, comment, privacy evidence, separate optional marketing consent, work, reviews, scores, complaints, leaderboard, and certificates | Course-owned records and shared application services; profile edits affect future snapshots | Specs 01, 04, and 07 |
+| Event registration | Event, identity/contact fields requested by the flow, privacy evidence, separate optional marketing consent, verification/management state, and attendance/status | Accountless or account-associated event services with protected hashed tokens | Specs 01, 05, and 07 |
+| Transactional email | Versioned website intent and redacted delivery/reconciliation status | Relay is the only website delivery boundary; provider infrastructure stays downstream | Specs 05, 07, and issue #124 |
+| Country suggestion | CloudFront country signal on explicit zero-cache onboarding/profile consumers | Editable suggestion only; raw header is not separately retained, logged, or used as a public cache key | Specs 01, 07, and 08 |
+| Security and operations | Bounded request/correlation IDs, safe route/status metadata, audit events, durable job state, and redacted diagnostics | No secrets, credentials, complete query, cookies, raw IP, profile values, registration answers, or message bodies in logs/metrics | Specs 07 and 08 |
+
+## Cookie and optional analytics boundary
+
+- Django session and CSRF cookies are necessary security/application cookies.
+- `dtc_analytics_consent` is a necessary preference cookie. Version 1 stores only `allow` or
+  `deny`, lasts 180 days, uses `Path=/`, `SameSite=Lax`, and adds `Secure` on HTTPS.
+- This candidate adds no analytics provider loader, measurement ID, endpoint, event taxonomy,
+  account join key, attribution store, tracking pixel, tag-manager editor, or behavioral profile.
+- Before a choice and after rejection or withdrawal, no optional analytics script, endpoint,
+  event, or cookie exists. Rejection/withdrawal also expires recognized optional first-party
+  analytics cookie prefixes without deleting the necessary preference cookie.
+- Allowing records the preference only. It cannot send data because the repository contains no
+  enabled provider path. A later provider/configuration change requires its own groomed scope,
+  typed Studio/admin API parity, CSP reconciliation, privacy review, and production authorization.
+- Local, CI, development, and preview environments therefore remain incapable of sending
+  production analytics under this candidate. The existing executable source guard remains intact.
+
+## Provisional retention represented in the policy
+
+- unverified registration records: 14 days;
+- event registration personal data: 90 days after the event;
+- educational records: while active, then the published deletion/anonymization schedule;
+- website Relay intent and redacted delivery metadata: 180 days;
+- security audit evidence: one year; and
+- development logs: 30 days.
+
+The educational-record schedule and any production exception remain subject to owner/privacy
+review, as required by specification 07 and open decision 12.
+
+## Explicit human acceptance gate
+
+The authoritative repository does not contain confirmed DataTalks.Club operator identity, public
+address, authorized representative, legal/privacy contact, VAT or tax identifiers, final minors
+policy, or current German statutory/dispute-resolution wording. The candidate deliberately does not
+infer those values or copy them from AI Shipping Labs. An authorized owner/legal reviewer must:
+
+1. supply and approve the exact Impressum identity, address, representative, contact, and tax data;
+2. approve current statutory and dispute-resolution wording;
+3. approve the Terms governing-law/contact wording and the Privacy controller/contact, transfer,
+   retention, rights, and minors wording; and
+4. confirm the displayed last-updated date before production legal acceptance.
+
+Until that review is recorded, `/impressum` remains visibly marked as requiring verification and
+issue #125 cannot receive production acceptance.

content/legal_views.py

@@ -0,0 +1,60 @@
+"""Source-reviewed public legal pages for DataTalks.Club."""
+
+from __future__ import annotations
+
+from django.conf import settings
+from django.http import HttpRequest, HttpResponse
+from django.shortcuts import render
+from django.views.decorators.http import require_safe
+
+LEGAL_PAGE_CONTEXT = {
+    "terms": {
+        "title": "Terms of Service",
+        "description": (
+            "Terms for using the free DataTalks.Club community, website, events, and courses."
+        ),
+        "path": "/terms",
+    },
+    "privacy": {
+        "title": "Privacy Policy",
+        "description": (
+            "How DataTalks.Club handles account, community, course, event, and website data."
+        ),
+        "path": "/privacy",
+    },
+    "impressum": {
+        "title": "Impressum",
+        "description": "Legal notice and operator information for DataTalks.Club.",
+        "path": "/impressum",
+    },
+}
+
+
+def _legal_page(request: HttpRequest, *, page: str) -> HttpResponse:
+    definition = LEGAL_PAGE_CONTEXT[page]
+    path = definition["path"]
+    return render(
+        request,
+        f"public/legal/{page}.html",
+        {
+            "canonical_url": f"https://datatalks.club{path}",
+            "seo_title": f"{definition['title']} · DataTalks.Club",
+            "seo_description": definition["description"],
+            "legal_robots": "noindex,nofollow" if settings.NOINDEX else "index,follow",
+        },
+    )
+
+
+@require_safe
+def terms(request: HttpRequest) -> HttpResponse:
+    return _legal_page(request, page="terms")
+
+
+@require_safe
+def privacy(request: HttpRequest) -> HttpResponse:
+    return _legal_page(request, page="privacy")
+
+
+@require_safe
+def impressum(request: HttpRequest) -> HttpResponse:
+    return _legal_page(request, page="impressum")

content/public_urls.py

@@ -1,8 +1,18 @@
 from django.urls import path
 
-from . import public_views
+from . import legal_views, public_views
 
 urlpatterns = [
+    path("terms", legal_views.terms, name="terms"),
+    path("terms/", public_views.permanent_public_redirect, {"target": "/terms"}),
+    path("privacy", legal_views.privacy, name="privacy"),
+    path("privacy/", public_views.permanent_public_redirect, {"target": "/privacy"}),
+    path("impressum", legal_views.impressum, name="impressum"),
+    path(
+        "impressum/",
+        public_views.permanent_public_redirect,
+        {"target": "/impressum"},
+    ),
     path("blog", public_views.collection_hub, {"collection": "articles"}, name="articles"),
     path("articles.html", public_views.permanent_public_redirect, {"target": "/blog"}),
     path("blog/", public_views.permanent_public_redirect, {"target": "/blog"}),

content/public_views.py

@@ -625,7 +625,13 @@ def media(request: HttpRequest, media_path: str) -> FileResponse:
 def _section_records(section: str) -> tuple[tuple[str, str], ...]:
     projection = public_projection()
     static_sections = {
-        "main": (("/", ""), ("/slack.html", "")),
+        "main": (
+            ("/", ""),
+            ("/terms", ""),
+            ("/privacy", ""),
+            ("/impressum", ""),
+            ("/slack.html", ""),
+        ),
         "docs": (
             ("/docs/", ""),
             ("/docs/courses/ai-dev-tools-zoomcamp/getting-started/", ""),