08bbd74532
Static landing page for goblin.st (index, privacy, terms) with Geist fonts and brand assets. Matches the currently-deployed /opt/goblin/www. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
108 lines
4.3 KiB
HTML
108 lines
4.3 KiB
HTML
<!DOCTYPE html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8">
|
|
<meta name="viewport" content="width=device-width, initial-scale=1">
|
|
<title>Privacy — Goblin</title>
|
|
<meta name="robots" content="noindex">
|
|
<link rel="icon" type="image/png" href="assets/goblin-icon.png">
|
|
<link rel="stylesheet" href="styles.css">
|
|
</head>
|
|
<body>
|
|
|
|
<div class="wrap">
|
|
<header class="site">
|
|
<a class="brand" href="/">
|
|
<span class="mark" aria-hidden="true"></span>
|
|
<span class="word">Goblin</span>
|
|
</a>
|
|
<nav class="site" aria-label="Site">
|
|
<a href="/#downloads">Downloads</a>
|
|
<a class="gh" href="https://github.com/2ro/goblin" rel="noopener">GitHub</a>
|
|
</nav>
|
|
</header>
|
|
|
|
<main class="legal">
|
|
<h1>Privacy</h1>
|
|
<p class="updated">Last updated · June 12, 2026</p>
|
|
|
|
<div class="callout">
|
|
<strong>The short version:</strong> privacy is the product. The wallet
|
|
keeps everything on your device, this website sets no cookies and runs
|
|
no analytics, and the identity service stores only what it publishes:
|
|
the name→key mapping you asked it to publish.
|
|
</div>
|
|
|
|
<h2>1. The wallet</h2>
|
|
<ul>
|
|
<li>Your seed, keys, contacts, payment history, and settings are stored
|
|
<strong>only on your device</strong>. They are never uploaded.</li>
|
|
<li>Wallet network traffic — relay connections, name lookups, exchange
|
|
rates — is routed through the Nym mixnet. The services you reach see
|
|
mixnet exit traffic, not your IP address, and the mixnet's 5-hop design
|
|
hides who is talking to whom at the network layer.</li>
|
|
<li>Payments travel as end-to-end encrypted nostr events. Relays see
|
|
ciphertext and the recipient's ephemeral routing key — not the amount,
|
|
the sender, or the message.</li>
|
|
<li>The wallet contains no telemetry, analytics, or crash reporting.</li>
|
|
</ul>
|
|
|
|
<h2>2. This website</h2>
|
|
<ul>
|
|
<li>Static pages, served by us. No cookies, no analytics, no trackers,
|
|
no third-party embeds — fonts and images are served from this domain.</li>
|
|
<li>Our web server keeps standard, short-lived access logs (IP address,
|
|
request path, user agent) for security and abuse prevention.</li>
|
|
</ul>
|
|
|
|
<h2>3. The identity service (goblin.st)</h2>
|
|
<ul>
|
|
<li>If you claim a handle, we store the data the service exists to
|
|
publish: <strong>your chosen name, your nostr public key</strong>, and —
|
|
if you upload one — your avatar image. This mapping is public by
|
|
design (that's what <a href="https://nips.nostr.com/5" rel="noopener">NIP-05</a> is).</li>
|
|
<li>Registration and release requests are authenticated by signature
|
|
(<a href="https://nips.nostr.com/98" rel="noopener">NIP-98</a>); we never see a private key.</li>
|
|
<li>Rate-limiting uses connection IP addresses transiently. Since the
|
|
wallet talks to goblin.st over the Nym mixnet, we typically see mixnet
|
|
exit addresses, not yours.</li>
|
|
<li>Release your name and it leaves public resolution immediately and
|
|
becomes available for anyone to register.</li>
|
|
</ul>
|
|
|
|
<h2>4. The relay</h2>
|
|
<p>The project's public nostr relay stores the encrypted events it
|
|
relays (that's its job) within its retention and size limits. Event
|
|
contents are ciphertext we cannot read.</p>
|
|
|
|
<h2>5. What we don't do</h2>
|
|
<ul>
|
|
<li>No selling, sharing, or monetizing of any data.</li>
|
|
<li>No advertising, profiling, or cross-site tracking.</li>
|
|
<li>No accounts, emails, or phone numbers — there is nothing to leak.</li>
|
|
</ul>
|
|
|
|
<h2>6. Your choices</h2>
|
|
<p>Use the wallet without a handle and the identity service learns
|
|
nothing about you. Rotate your payment key at any time to unlink your
|
|
history. Run your own node, relay, or name service — the software lets
|
|
you point at them.</p>
|
|
|
|
<h2>7. Contact</h2>
|
|
<p>Privacy questions: open an issue on
|
|
<a href="https://github.com/2ro/goblin" rel="noopener">GitHub</a>.</p>
|
|
</main>
|
|
</div>
|
|
|
|
<footer class="site">
|
|
<div class="wrap">
|
|
<div class="foot-bottom">
|
|
<span>© 2026 the Goblin project</span>
|
|
<span><a href="terms.html" style="color:inherit">Terms</a> · <a href="privacy.html" style="color:inherit">Privacy</a></span>
|
|
</div>
|
|
</div>
|
|
</footer>
|
|
|
|
</body>
|
|
</html>
|