new terms of service

[zven]

With the new version of the openSenseMap, we want to introduce new terms of service (e.g. including a more explicit mentioning of the applied license for the sensor data). We should handle this change in some way on UI side (in addition to just sending out an information email to our users).

Some first ideas:

• We should explictly mention and link the terms of service (and privacy policy) for new users upon registration.

Open questions:

• How do we handle our existing users?
• Shall they simply be informed upon login via a info box / popup?
• Shall we give them the option to delete their account if they are not happy with the new terms of service? Is their sensor data then also deleted? If that is the case, inform them that their sensordata will be retained X years in the archive.
• Should we, by default, de-activate all the accounts that have not yet agreed to the terms of service? What would that imply? Would their data / senseboxes be "hidden" somehow?

[scheidtdav]

Regarding your idea:
Do you mean in the email users will receiver or somewhere during signup?
I think we should definitely link both privacy policy and terms on the signup page and make people agree to it (e.g. using a checkbox).
The email would just be a plus.

Additionally I think there should be a permanent link to both documents from the landing page.

Open questions:
If we do nothing, the existing license and privacy policy apply (so there is no need to deactivate anyones account). I think if we have changes, we should prompt users.
Via mail should probably also be possible, because a lot of users might not even use the map but only use the api.

I don't think you will need a "if you don't want that, delete your account" button. You can always agree and delete afterwards right away.
Data is retained after a user deletes their account.

[zven]

Regarding the email: As soon as we roll out the new openSenseMap, we want to send out an email to our users to inform them that the whole infrastructure has changed. I would mention the new terms of service in that email.

Signup process: I agree that new users would need to agree to the terms of service during the signup process and that we should link to the terms of service and privacy policy pages there as well.

[scheidtdav]

I have created #747, please check if that is sufficient?

Another discussion point: API usage without agreement? Should this be allowed? Are we thinking about a grace period?
Would that be an extension to #747?