Files
felhom.eu/documentation/legal/README.md
T
admin 30b932bb10
gates / gates (push) Successful in 5m34s
website: publish the closed-test legal set (R-813 narrowed)
Two new Hungarian pages, live on push: /adatkezeles (privacy notice) and
/feltetelek (what the free closed test is, and is not). Operator rulings of
2026-10-09: no company exists yet, so the operator is named as a PRIVATE
PERSON with no postal address and no phone; publish before the lawyer has
seen it, because the site was collecting data with no notice at all; the full
ASZF, the impresszum and the review wait for the company (R-802, R-809).

- All 18 pages carry the operator, info@felhom.eu and both links in the
  footer. Counted, not assumed: 18 pages found = 18 with both links = 18
  structurally valid. English footers say the legal texts are Hungarian.
- The contact form stopped claiming something untrue. The old consent said
  "az adatokat harmadik felnek nem adjuk ki" while Resend, Cloudflare and
  Google carry the message. Both languages replaced; the link opens in a new
  tab so a filled form is not lost.
- site_gates.py NO_TWIN gains the two pages ON PURPOSE, with the reason in a
  comment: an unreviewed English legal text would be worse than an honest
  pointer from the English footer.
- documentation/legal/{adatkezelesi-tajekoztato,feltetelek}-1.0.md are the
  text of record, DERIVED from the published HTML so they cannot drift. The
  drafts are kept and marked superseded for the closed test.

FOUR LOAD-BEARING CLAIMS WERE MEASURED, not copied from a vendor or a README:

  cookies      zero, and no local storage - checked in the browser WITH A
               POSITIVE CONTROL (a probe cookie WAS visible to the same
               method) after the tracker fired; no Set-Cookie on any response
  beacon       the exact Umami payload: site id, screen, language, title,
               url, referrer - no visitor identifier
  Cloudflare   DNS only: the public A record 37.191.56.193 is not a
               Cloudflare address, so site traffic cannot be proxied
  fsn1         Falkenstein, Germany (Hetzner's own location list)

Also measured: felhom-ep0-copy-gc.timer is installed and RAN SUCCESSFULLY
(2026-10-09 08:00, exit 0), so "deleted within 30 days" is true today where
on 2026-10-08 it was written but not switched on.

Three retentions are stated as having NO deadline, deliberately and with the
operator's word: website statistics, web server logs and contact messages
have no automatic deletion, and the pages say so instead of promising a date
nothing enforces. Every other period is enforced by configuration and cited.

No placeholder survived onto either page (0 of "[[", control: the draft still
has 36). The impresszum and the full ASZF are NOT published.

R-813 -> NARROWED. R-915 unblocked: the operator enters the two URLs in the
Meta app's Basic settings; the Live switch stays a separate decision.
R-917 and R-920 -> DEFERRED on the operator's (c): park, publish as posts
once posting starts.
2026-10-09 12:11:37 +02:00

56 lines
3.6 KiB
Markdown

# Legal texts — the closed-test set IS published; the rest are drafts. NOT legal advice.
**Status, 2026-10-09: the closed-test set is LIVE.** On the operator's ruling of 2026-10-09 — *no
company exists yet; publish a closed-test set now; the full ÁSZF, the impresszum and the lawyer's
review wait for the company and the first paying customer* — two pages went onto the website:
| Published | Live at | Source of record |
|---|---|---|
| Privacy notice | <https://felhom.eu/adatkezeles> | `adatkezelesi-tajekoztato-1.0.md` |
| Closed-test terms | <https://felhom.eu/feltetelek> | `feltetelek-1.0.md` |
The two `…-1.0.md` files are **derived from the published HTML** so the record cannot drift from the
page. Every page of the website now links both in its footer, and the contact form's consent text was
replaced with the honest one.
**Still not published and still pending the lawyer (R-802):** the full ÁSZF, the impresszum (it needs
company data that does not exist) and any English translation of the legal texts.
**Not legal advice.** These texts were written by an AI assistant from the system's own documents.
A lawyer decides what is legally required, what legal basis applies, and what the final text says.
They were published **before** that review, deliberately, on the operator's ruling above.
**Status of the drafts: first drafts, written 2026-10-08 by Claude Code on the operator's request
(Part E of that night's brief). Pending lawyer review.**
These files are working drafts for register rows **R-813** (the website collects personal data but
publishes no privacy notice, no terms and no imprint — owner: operator) and **R-802** (the lawyer's
review before the first paying customer — owner: operator). The wider set of business papers
(customer contract, data-processing agreement, billing) is the intention **R-809** in
`documentation/backlog/ROADMAP.md`.
| File | What it is |
|---|---|
| `adatkezelesi-tajekoztato-1.0.md` | **PUBLISHED** — the privacy notice as it stands on the website |
| `feltetelek-1.0.md` | **PUBLISHED** — the closed-test terms as they stand on the website |
| `DRAFT-aszf.md` | Általános Szerződési Feltételek — a structured skeleton; business terms are placeholders |
| `DRAFT-adatkezelesi-tajekoztato.md` | Adatkezelési tájékoztató — built from the architecture documents and the code, each line cited |
| `DRAFT-impresszum.md` | Impresszum — placeholders only |
| `DRAFT-kapcsolat-hozzajarulas.md` | A proposed replacement for the contact form's consent text, and the link it should carry |
## Rules for these drafts
- **Not legal advice.** Written by an AI assistant from the system's own documents. A lawyer decides
what is legally required, what legal basis applies, and what the final text says.
- **Every fact the operator must supply is a visible placeholder** like `[[CÉGNÉV]]`. Nothing is
invented. `[[ELLENŐRIZNI]]` marks a fact the code and the documents do not state.
- **The privacy notice is true to the system, not to a template.** Each line carries an HTML comment
`<!-- source: path:line -->`. If the system changes (a new processor, a new retention), the notice
must change with it.
- **Nothing is published until the operator says so.** Publishing means a website change (`website/`
is served from `main` by git-sync), a link from every page footer, and the contact form's consent
text replaced. All three were done on 2026-10-09 **for the closed-test set only**, on the operator's
word. The ÁSZF and the impresszum are still unpublished, and the rule still holds for them.
- Each draft ends with the list of points the lawyer must check and every point where the draft had
to guess.