Update privacy.html

- Add section on abuse
- Add view count stuff with an opt-out

Author: GarboMuffin

static/privacy.html

@@ -33,15 +33,60 @@ <h1>TurboWarp Privacy Policy</h1>
 
         <main>
             <!-- UPDATE THIS WHEN MAKING CONTENT CHANGES -->
-            <p><i>Updated May 24, 2024</i></p>
+            <p><i>Updated September 27, 2025</i></p>
 
-            <p><b>The TurboWarp project respects your privacy.</b> Every website says this, but we mean it: We aren't interested in your data. In the interest of full transparency, this document lists every place where your data might be collected or shared:</p>
+            <p>The TurboWarp project respects your privacy. We're an open source project ran by volunteers. For transparency, this page lists all the places in TurboWarp where we or a third-party receive your data and how your data is handled.</p>
+
+            <h2>Abuse</h2>
+            <p>When a service is being abused, we may take measures to collect information to protect the service. For example, we could log IP addresses making excessive amounts of requests. We strive to do this carefully so that no one is caught in the crossfire. Data is kept only as long as needed to stop the abuse.</p>
+
+            <h2>turbowarp.org</h2>
+            <p>A randomly generated username may be saved in your browser. You can replace this with a custom username. Randomly generated usernames are anonymized by removing the random numbers before being sent to any cloud variable server.</p>
+            <p>When you start a project that is loaded from Scratch, this may be logged so that a view counter can be incremented over time. Views are anonymous and can not be tied back to any user. You can prevent your views from being counted by unchecking the box below. This checkbox will not affect your ability to see view counts.</p>
+            <p>
+                <label>
+                    <input type="checkbox" class="windchimes-optout">
+                    Allow counting my views
+                </label>
+            </p>
+            <script>
+                (function() {
+                    const isOptedOut = () => {
+                        try {
+                            const local = localStorage.getItem('tw:windchime_opt_out');
+                            if (local !== null) {
+                                return local === 'true';
+                            }
+                        } catch (e) {
+                            // ignore
+                        }
+                        // These headers are really intended to be about third-parties so we don't need to follow them,
+                        // but if someone has these set, it's good to assume that they would opt out if given the choice.
+                        // So we'll just respect that preemptively.
+                        return navigator.globalPrivacyControl === 'true' || navigator.doNotTrack === '1';
+                    };
+                    const setOptedOut = optedOut => {
+                        try {
+                            localStorage.setItem('tw:windchime_opt_out', optedOut);
+                        } catch (e) {
+                            // ignore
+                        }
+                    };
+                    const checkbox = document.querySelector('.windchimes-optout');
+                    checkbox.checked = isOptedOut();
+                    checkbox.addEventListener('change', (e) => {
+                        setOptedOut(e.target.checked);
+                    });
+                })();
+            </script>
 
             <h2>Loading projects</h2>
             <p>When you load a project from another website, you are subject to the privacy practices of that website. For example, when loading projects from Scratch, you are subject to the <a href="https://scratch.mit.edu/privacy_policy">Scratch privacy policy</a>. When loading projects from Scratch specifically, the project ID will also be shared with TurboWarp as part of Scratch's API does not allow direct access. We may briefly log the project ID for caching.</p>
 
-            <h2>Running projects</h2>
-            <p>When connecting to our cloud variable servers, the project ID and username may be logged for 14 days. Data in cloud variables is sent to anyone else connected at the same time. Custom cloud variable servers are outside of our control.</p>
+            <h2>Cloud variables</h2>
+            <p>When connecting to our cloud variable servers, the project ID and username may be logged for 14 days. Data in cloud variables is public and sent to anyone else connected at the same time. Custom cloud variable servers are outside of our control.</p>
+
+            <h2>Extensions</h2>
             <p>Some extensions must communicate with external APIs to function. For example, the translate and text-to-speech extensions rely on the Scratch API, which is covered by the <a href="https://scratch.mit.edu/privacy_policy">Scratch privacy policy</a>. To improve performance, some extensions access TurboWarp's APIs instead where both the request (for example, the text being translated) and the result after forwarding to Scratch (for example, the translated version of the text) may be cached.</p>
             <p>Most extensions on the <a href="https://extensions.turbowarp.org/">official extension gallery</a> will ask for permission when the project attempts to use the extension to access an untrusted website, however we cannot guarantee this is 100% reliable.</p>
             <p>When loading a custom extension from a place other than the official gallery such as a URL or file on your computer, the editor will ask for permission to load the extension. If you approve this dialog, the extension can bypass the permission dialogs that official extensions show.</p>
@@ -52,9 +97,6 @@ <h2>Settings</h2>
             <h2>Aggregated data</h2>
             <p>We may log anonymous aggregated data such as how many people use a certain site per day.</p>
 
-            <h2>turbowarp.org</h2>
-            <p>A randomly generated username may be saved in your browser. You can replace this with a custom username. Randomly generated usernames are anonymized (the random part is removed) before being sent to any cloud variable server.</p>
-
             <h2>TurboWarp Desktop</h2>
             <p><a href="https://desktop.turbowarp.org/">TurboWarp Desktop</a> may make requests to check for updates. This can be disabled by pressing "Settings" then "Desktop Settings".</p>
             <p><a href="https://desktop.turbowarp.org/">TurboWarp Desktop</a> has a disabled-by-default option to enable "Rich Presence" which shares the name of the project you have open and how long it has been open with chat apps running on your computer, which may be displayed on your public profile. This can be disabled by pressing "Settings" then "Desktop Settings".</p>