feat(website): self-host fonts + clarify privacy on real-email storage (PILOT-175)#18
Merged
Conversation
…e (PILOT-175) PILOT-175: replace Google Fonts CDN with self-hosted /fonts/* bundle so the browser never contacts fonts.googleapis.com / fonts.gstatic.com, closing the GDPR exposure of leaking visitor IPs to Google on every page load. The bundle covers the same three families (Inter Tight, JetBrains Mono, Instrument Serif) with identical subsets and unicode-range gating — total payload ~380 KB, served from the same origin so HTTP/2 multiplexes them with the rest of the page. Privacy: update the daemon data-collection section to acknowledge that real email addresses are stored when supplied via the -email flag (today the daemon registers that email with the rendezvous so key-recovery flows can verify ownership). The prior copy claimed 'no email addresses' which was true for the synthetic-id default but not once an operator passes -email.
|
🚀 Preview deployed to Cloudflare Pages
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Two coupled changes:
PILOT-175 — self-host fonts
public/fonts/fonts.css+ 17 woff2 files (~380 KB total) covering the same three Google Font families (Inter Tight, JetBrains Mono, Instrument Serif) at the same weights and unicode-range subsets./fonts/fonts.cssinstead.Privacy clarification — real email storage
-emailto the daemon registers a real email used for key-recovery.