Skip to content

PILOT-25: Legal page bundle — Privacy, Cookies, ToS, AUP #6

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
TeoSlayer merged 1 commit into from
May 29, 2026
Merged

PILOT-25: Legal page bundle — Privacy, Cookies, ToS, AUP #6

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 13 additions & 3 deletions src/components/Footer.astro
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,13 @@
<a href="/blog/">Blog</a>
<a href="mailto:founders@pilotprotocol.network">Contact</a>
</div>
<div>
<h4>Legal</h4>
<a href="/privacy">Privacy Policy</a>
<a href="/cookies">Cookie Policy</a>
<a href="/terms">Terms of Service</a>
<a href="/aup">Acceptable Use</a>
</div>
</div>

<a class="foot-plain-band" href="/plain/" aria-label="Plain-text variant for AI agents">
Expand Down Expand Up @@ -92,7 +99,7 @@

.foot-grid {
display: grid;
grid-template-columns: 2fr 1fr 1fr 1fr;
grid-template-columns: 2fr 1fr 1fr 1fr 1fr;
gap: 48px;
margin-bottom: 64px;
}
Expand Down Expand Up @@ -190,8 +197,11 @@
}
.foot-plain:hover { color: var(--accent); }

@media (max-width: 900px) {
.foot-grid { grid-template-columns: 1fr 1fr; gap: 32px; }
@media (max-width: 1080px) {
.foot-grid { grid-template-columns: 1fr 1fr 1fr; gap: 32px; }
}
@media (max-width: 700px) {
.foot-grid { grid-template-columns: 1fr 1fr; gap: 24px; }
}
@media (max-width: 480px) {
.foot-grid { grid-template-columns: 1fr 1fr; gap: 24px; }
Expand Down
119 changes: 119 additions & 0 deletions src/pages/aup.astro
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,119 @@
---
import BaseHead from '../components/BaseHead.astro';
import Nav from '../components/Nav.astro';
import Footer from '../components/Footer.astro';
import '../styles/system.css';

const title = "Acceptable Use Policy — Pilot Protocol";
const description = "Rules governing acceptable use of the Pilot Protocol rendezvous service and Pilot-operated specialist agents. Prohibited conduct, rate limits, and enforcement.";
const canonicalUrl = "https://pilotprotocol.network/aup";
---
<!DOCTYPE html>
<html lang="en">
<head>
<BaseHead title={title} description={description} canonicalUrl={canonicalUrl} />
</head>
<body>

<Nav />

<main class="prose" style="padding: 96px 32px 80px; max-width: 760px; margin: 0 auto;">
<p class="breadcrumb"><a href="/">Home</a> <span class="sep">/</span> Acceptable Use Policy</p>

<h1>Acceptable Use <em>Policy</em></h1>
<p class="article-meta" style="display:flex;gap:14px;font-family:var(--mono);font-size:10px;letter-spacing:.12em;text-transform:uppercase;color:var(--ink-dim);padding:14px 0;border-top:1px solid var(--line);border-bottom:1px solid var(--line);margin:0 0 36px;">
Effective: May 28, 2026 · Last updated: May 28, 2026
</p>

<p>This Acceptable Use Policy ("AUP") defines acceptable and prohibited uses of the Pilot Protocol rendezvous service, Pilot-operated specialist agents, and the pilotprotocol.network website (together, the "Services"). By using the Services, you agree to comply with this AUP. Capitalized terms not defined here have the meanings given in our <a href="/terms">Terms of Service</a>.</p>

<p><strong>Violations may result in immediate suspension of access.</strong> We reserve the right to enforce this policy at our sole discretion.</p>

<h2>1. Prohibited Uses</h2>
<p>You may not use the Services for any of the following:</p>

<h3>Illegal or Harmful Activity</h3>
<ul>
<li>Violating any applicable law, regulation, or court order in your jurisdiction or ours.</li>
<li>Distributing, facilitating, or promoting child sexual abuse material (CSAM). <strong>Any CSAM-related activity will be reported to law enforcement immediately — zero tolerance.</strong></li>
<li>Distributing malware, ransomware, viruses, worms, or any malicious software through the rendezvous service or Pilot-operated agents.</li>
<li>Operating botnets, command-and-control infrastructure, or coordinating denial-of-service attacks.</li>
<li>Promoting or facilitating human trafficking, terrorism, or violent extremism.</li>
</ul>

<h3>Abuse of Infrastructure</h3>
<ul>
<li>Sending spam, unsolicited bulk messages, or any form of abusive messaging through Pilot-operated specialist agents.</li>
<li>Exceeding rate limits (see Section 2).</li>
<li>Scraping, crawling, or systematically extracting data from pilotprotocol.network or the rendezvous API in a manner that degrades service for other users.</li>
<li>Attempting to circumvent any access controls, authentication measures, or rate limiting.</li>
<li>Using the Services to probe, scan, or test the vulnerability of systems you do not own or have permission to test.</li>
</ul>

<h3>Impersonation &amp; Deception</h3>
<ul>
<li>Impersonating Pilot Protocol, Vulture Labs, or any of their personnel.</li>
<li>Spoofing agent hostnames or tags to impersonate another user's agent.</li>
<li>Registering agents with hostnames that are deliberately misleading or deceptive.</li>
<li>Using the Services for phishing, social engineering, or fraud.</li>
</ul>

<h3>Sanctions &amp; Export Controls</h3>
<ul>
<li>Using the Services if you are located in, under the control of, or a national of any country subject to comprehensive sanctions by the United States, United Kingdom, European Union, or United Nations (including but not limited to Iran, North Korea, Syria, Cuba, and the Crimea, Donetsk, and Luhansk regions of Ukraine).</li>
<li>Using the Services for any purpose prohibited by export control laws, including the transfer of regulated technology or encryption software to sanctioned destinations.</li>
</ul>

<h2>2. Rate Limits</h2>
<p>To protect the stability of the rendezvous service for all users, the following rate limits apply:</p>
<ul>
<li><strong>Agent registration</strong> — Maximum of 100 registrations per IP address per hour.</li>
<li><strong>Discovery lookups</strong> — Maximum of 1,000 queries per agent per hour.</li>
<li><strong>Handshake requests</strong> — Maximum of 300 handshake initiations per agent per hour.</li>
</ul>
<p>If you have a legitimate need to exceed these limits, please contact <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a>. Enterprise tier customers receive negotiated rate limits under their service agreement.</p>
<p>Exact threshold values are not published beyond what is listed here; they are subject to change as the network scales. We reserve the right to dynamically adjust limits to protect service availability.</p>

<h2>3. Enforcement</h2>
<p>We may enforce this AUP through any of the following measures, at our sole discretion:</p>
<ul>
<li><strong>Warning</strong> — Notice to the affected user explaining the violation and required corrective action.</li>
<li><strong>Temporary suspension</strong> — Immediate suspension of rendezvous service access for a defined period.</li>
<li><strong>Permanent termination</strong> — Permanent removal of agent registration and blocking of the associated Ed25519 key and/or IP address.</li>
<li><strong>Traffic throttling</strong> — Reduction in rate limits for the affected agent or IP range.</li>
</ul>
<p>For severe violations — including CSAM, malware distribution, active attacks on infrastructure, or violations that create legal exposure for Pilot Protocol — we may suspend access <strong>without prior notice</strong>. For other violations, we will generally provide notice and an opportunity to remedy before taking action, but we are not obligated to do so.</p>

<h2>4. Reporting Violations</h2>
<p>If you become aware of any violation of this AUP, please report it immediately:</p>
<ul>
<li>Email: <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a></li>
<li>Subject line: "AUP Violation Report"</li>
</ul>
<p>Please include as much detail as possible: the nature of the violation, the affected hostnames, tags, or IP addresses, timestamps, and any supporting evidence. We treat all reports confidentially and will acknowledge receipt within 2 business days.</p>

<h2>5. Appeals</h2>
<p>If your access has been suspended or terminated under this AUP, you may appeal the decision:</p>
<ul>
<li>Send an appeal to <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a> with the subject "AUP Appeal Request".</li>
<li>Include your agent hostname, Ed25519 public key fingerprint, and a clear explanation of why you believe the enforcement action was in error.</li>
<li>Appeals are reviewed by the Pilot Protocol founders. We aim to respond within <strong>5 business days</strong>.</li>
<li>The founders' decision on appeal is final. There is no further internal review.</li>
</ul>

<h2>6. Changes to This Policy</h2>
<p>We will post changes to this page and update the "Last updated" date. Material changes will be communicated through the website or, where feasible, through daemon notification. Continued use after the effective date constitutes acceptance of the revised AUP.</p>

<h2>7. Contact</h2>
<p>Questions about this Acceptable Use Policy or to report a violation?</p>
<p>Email: <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a></p>

<p style="margin-top:48px;padding-top:24px;border-top:1px solid var(--line);font-size:14px;color:var(--ink-dim);">
<em>This policy is provided for transparency and operational clarity. It does not constitute legal advice. If you are a legal professional reviewing this document, please direct feedback to <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a>.</em>
</p>
</main>

<Footer />

</body>
</html>
115 changes: 115 additions & 0 deletions src/pages/cookies.astro
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,115 @@
---
import BaseHead from '../components/BaseHead.astro';
import Nav from '../components/Nav.astro';
import Footer from '../components/Footer.astro';
import '../styles/system.css';

const title = "Cookie Policy — Pilot Protocol";
const description = "How Pilot Protocol uses cookies and similar technologies. Transparent inventory of all cookies, localStorage entries, and analytics tools.";
const canonicalUrl = "https://pilotprotocol.network/cookies";
---
<!DOCTYPE html>
<html lang="en">
<head>
<BaseHead title={title} description={description} canonicalUrl={canonicalUrl} />
</head>
<body>

<Nav />

<main class="prose" style="padding: 96px 32px 80px; max-width: 760px; margin: 0 auto;">
<p class="breadcrumb"><a href="/">Home</a> <span class="sep">/</span> Cookie Policy</p>

<h1>Cookie <em>Policy</em></h1>
<p class="article-meta" style="display:flex;gap:14px;font-family:var(--mono);font-size:10px;letter-spacing:.12em;text-transform:uppercase;color:var(--ink-dim);padding:14px 0;border-top:1px solid var(--line);border-bottom:1px solid var(--line);margin:0 0 36px;">
Effective: May 28, 2026 · Last updated: May 28, 2026
</p>

<p>This Cookie Policy explains what cookies and similar technologies Pilot Protocol ("we", "us") uses on <strong>pilotprotocol.network</strong>, why we use them, and how you can control them. It supplements our <a href="/privacy">Privacy Policy</a>.</p>

<h2>What Are Cookies?</h2>
<p>Cookies are small text files placed on your device by websites you visit. They are widely used to make websites work, improve efficiency, and provide information to the site owners. "Similar technologies" includes <code>localStorage</code>, session storage, and browser-level storage APIs that serve a similar purpose.</p>

<h2>Cookie Inventory</h2>
<p>Here is every cookie and browser-storage entry used on pilotprotocol.network, what it does, how long it lasts, and who sets it:</p>

<table>
<thead>
<tr>
<th>Name</th>
<th>Provider</th>
<th>Purpose</th>
<th>Duration</th>
<th>Category</th>
</tr>
</thead>
<tbody>
<tr>
<td><code>__cf_bm</code></td>
<td>Cloudflare</td>
<td>Bot management. Distinguishes human visitors from automated bots to protect the site from malicious traffic. Does not track users across sites.</td>
<td>30 minutes</td>
<td>Strictly necessary</td>
</tr>
<tr>
<td><code>pilot_consent</code></td>
<td>Pilot Protocol (localStorage)</td>
<td>Stores your cookie consent preference (<code>accepted</code> or <code>rejected</code>). No personal data, no tracking.</td>
<td>Persistent (until cleared)</td>
<td>Strictly necessary</td>
</tr>
<tr>
<td><code>_ga</code></td>
<td>Google Analytics</td>
<td>Distinguishes unique users for analytics. Set only after you accept cookies. Contains a randomly generated client identifier.</td>
<td>2 years</td>
<td>Analytics</td>
</tr>
<tr>
<td><code>_ga_EEWEKT0GW5</code></td>
<td>Google Analytics</td>
<td>Session-level analytics for our GA4 property. Set only after cookie consent. Tracks page views and session state.</td>
<td>2 years</td>
<td>Analytics</td>
</tr>
</tbody>
</table>

<h2>Cookieless Analytics</h2>
<p>In addition to the cookies above, we use <strong>Cloudflare Web Analytics</strong>, which is entirely cookieless. It does not use cookies, localStorage, fingerprinting, or any form of persistent tracking. It provides only aggregated page-view counts and performance metrics. No personal data is collected.</p>

<h2>Consent Model</h2>
<p>When you first visit pilotprotocol.network, a consent banner appears offering two options:</p>
<ul>
<li><strong>Accept</strong> — Enables Google Analytics 4 cookies (<code>_ga</code>, <code>_ga_EEWEKT0GW5</code>). Your preference is stored in the <code>pilot_consent</code> localStorage entry.</li>
<li><strong>Reject</strong> — No analytics cookies are set. The strictly necessary <code>__cf_bm</code> cookie (Cloudflare bot management) still operates. Your preference is stored in <code>pilot_consent</code>.</li>
</ul>
<p>The banner does not use a "nag wall" — you can browse the site without interacting with it. If you do not make a choice, no analytics cookies are set (implied rejection).</p>

<h2>How to Change Your Preference</h2>
<p>You can change your consent at any time:</p>
<ol>
<li><strong>Cookie preferences link</strong> — At the bottom of every page in the footer, click "Cookie Preferences" to reopen the consent banner.</li>
<li><strong>Clear localStorage</strong> — Removing <code>pilot_consent</code> from your browser's localStorage will reset your preference, and the banner will reappear on your next visit.</li>
<li><strong>Browser settings</strong> — Most browsers allow you to block or delete cookies globally. See your browser's help documentation for instructions.</li>
</ol>

<h2>Third-Party Tools We've Disabled</h2>
<p>For transparency: our site includes a PostHog integration in the codebase, but it is <strong>currently disabled</strong>. No PostHog cookies, events, or analytics are active. If we enable PostHog in the future, we will update this policy, add it to the cookie inventory, and require fresh consent.</p>

<h2>Changes to This Policy</h2>
<p>We will post changes to this page and update the "Last updated" date. If we add new cookies or substantially change how we use existing ones, we will re-prompt for consent where required by law.</p>

<h2>Contact</h2>
<p>Questions about cookies or our use of analytics?</p>
<p>Email: <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a></p>

<p style="margin-top:48px;padding-top:24px;border-top:1px solid var(--line);font-size:14px;color:var(--ink-dim);">
<em>This policy was drafted for transparency. If you are a legal professional reviewing this document, please direct feedback to <a href="mailto:founders@pilotprotocol.network">founders@pilotprotocol.network</a>.</em>
</p>
</main>

<Footer />

</body>
</html>
Loading
Loading