Files
felhom.eu/documentation/legal
admin 30b932bb10
gates / gates (push) Successful in 5m34s
website: publish the closed-test legal set (R-813 narrowed)
Two new Hungarian pages, live on push: /adatkezeles (privacy notice) and
/feltetelek (what the free closed test is, and is not). Operator rulings of
2026-10-09: no company exists yet, so the operator is named as a PRIVATE
PERSON with no postal address and no phone; publish before the lawyer has
seen it, because the site was collecting data with no notice at all; the full
ASZF, the impresszum and the review wait for the company (R-802, R-809).

- All 18 pages carry the operator, info@felhom.eu and both links in the
  footer. Counted, not assumed: 18 pages found = 18 with both links = 18
  structurally valid. English footers say the legal texts are Hungarian.
- The contact form stopped claiming something untrue. The old consent said
  "az adatokat harmadik felnek nem adjuk ki" while Resend, Cloudflare and
  Google carry the message. Both languages replaced; the link opens in a new
  tab so a filled form is not lost.
- site_gates.py NO_TWIN gains the two pages ON PURPOSE, with the reason in a
  comment: an unreviewed English legal text would be worse than an honest
  pointer from the English footer.
- documentation/legal/{adatkezelesi-tajekoztato,feltetelek}-1.0.md are the
  text of record, DERIVED from the published HTML so they cannot drift. The
  drafts are kept and marked superseded for the closed test.

FOUR LOAD-BEARING CLAIMS WERE MEASURED, not copied from a vendor or a README:

  cookies      zero, and no local storage - checked in the browser WITH A
               POSITIVE CONTROL (a probe cookie WAS visible to the same
               method) after the tracker fired; no Set-Cookie on any response
  beacon       the exact Umami payload: site id, screen, language, title,
               url, referrer - no visitor identifier
  Cloudflare   DNS only: the public A record 37.191.56.193 is not a
               Cloudflare address, so site traffic cannot be proxied
  fsn1         Falkenstein, Germany (Hetzner's own location list)

Also measured: felhom-ep0-copy-gc.timer is installed and RAN SUCCESSFULLY
(2026-10-09 08:00, exit 0), so "deleted within 30 days" is true today where
on 2026-10-08 it was written but not switched on.

Three retentions are stated as having NO deadline, deliberately and with the
operator's word: website statistics, web server logs and contact messages
have no automatic deletion, and the pages say so instead of promising a date
nothing enforces. Every other period is enforced by configuration and cited.

No placeholder survived onto either page (0 of "[[", control: the draft still
has 36). The impresszum and the full ASZF are NOT published.

R-813 -> NARROWED. R-915 unblocked: the operator enters the two URLs in the
Meta app's Basic settings; the Live switch stays a separate decision.
R-917 and R-920 -> DEFERRED on the operator's (c): park, publish as posts
once posting starts.
2026-10-09 12:11:37 +02:00
..

Legal texts — the closed-test set IS published; the rest are drafts. NOT legal advice.

Status, 2026-10-09: the closed-test set is LIVE. On the operator's ruling of 2026-10-09 — no company exists yet; publish a closed-test set now; the full ÁSZF, the impresszum and the lawyer's review wait for the company and the first paying customer — two pages went onto the website:

Published Live at Source of record
Privacy notice https://felhom.eu/adatkezeles adatkezelesi-tajekoztato-1.0.md
Closed-test terms https://felhom.eu/feltetelek feltetelek-1.0.md

The two …-1.0.md files are derived from the published HTML so the record cannot drift from the page. Every page of the website now links both in its footer, and the contact form's consent text was replaced with the honest one.

Still not published and still pending the lawyer (R-802): the full ÁSZF, the impresszum (it needs company data that does not exist) and any English translation of the legal texts.

Not legal advice. These texts were written by an AI assistant from the system's own documents. A lawyer decides what is legally required, what legal basis applies, and what the final text says. They were published before that review, deliberately, on the operator's ruling above.

Status of the drafts: first drafts, written 2026-10-08 by Claude Code on the operator's request (Part E of that night's brief). Pending lawyer review.

These files are working drafts for register rows R-813 (the website collects personal data but publishes no privacy notice, no terms and no imprint — owner: operator) and R-802 (the lawyer's review before the first paying customer — owner: operator). The wider set of business papers (customer contract, data-processing agreement, billing) is the intention R-809 in documentation/backlog/ROADMAP.md.

File What it is
adatkezelesi-tajekoztato-1.0.md PUBLISHED — the privacy notice as it stands on the website
feltetelek-1.0.md PUBLISHED — the closed-test terms as they stand on the website
DRAFT-aszf.md Általános Szerződési Feltételek — a structured skeleton; business terms are placeholders
DRAFT-adatkezelesi-tajekoztato.md Adatkezelési tájékoztató — built from the architecture documents and the code, each line cited
DRAFT-impresszum.md Impresszum — placeholders only
DRAFT-kapcsolat-hozzajarulas.md A proposed replacement for the contact form's consent text, and the link it should carry

Rules for these drafts

  • Not legal advice. Written by an AI assistant from the system's own documents. A lawyer decides what is legally required, what legal basis applies, and what the final text says.
  • Every fact the operator must supply is a visible placeholder like [[CÉGNÉV]]. Nothing is invented. [[ELLENŐRIZNI]] marks a fact the code and the documents do not state.
  • The privacy notice is true to the system, not to a template. Each line carries an HTML comment <!-- source: path:line -->. If the system changes (a new processor, a new retention), the notice must change with it.
  • Nothing is published until the operator says so. Publishing means a website change (website/ is served from main by git-sync), a link from every page footer, and the contact form's consent text replaced. All three were done on 2026-10-09 for the closed-test set only, on the operator's word. The ÁSZF and the impresszum are still unpublished, and the rule still holds for them.
  • Each draft ends with the list of points the lawyer must check and every point where the draft had to guess.