Running hunt for others: privacy notice, terms and the footer
Every page ends with a footer saying who made hunt, and linking to the docs
and its source (HUNT_SOURCE_URL, if you've changed hunt: the AGPL asks a
service people use over a network to offer them its source).
Running hunt for other people, you're responsible for their data, and the law (in the UK and EU, at least) asks for a privacy notice, terms and your company's details. Those are your website's to publish; hunt links to them, and has people agree to the terms:
| Setting | |
|---|---|
HUNT_SITE_URL | your website (e.g. https://careerhunt.app), with /privacy/, /terms/, /data-deletion/ and /docs/ (and their Arabic versions under /ar/): setting it says hunt is run for others |
HUNT_OPERATOR | who runs it, by name (e.g. Arabesque Labs Ltd), for the account page and Take-home pay's disclaimer |
Then:
- The footer links to the website's docs, privacy notice, terms and
cookies (
/privacy/#cookies). - Asking for an account needs agreeing to the terms, linked. Which
version (
UPDATEDinsrc/site.rs: the date on the website's terms), and when, is kept with the account, and shown to admins (agreed_terms). - Deleting an account (Settings → Your account) links to the website's data deletion page, and Take-home pay to its terms.
- The pages hunt once served (
/privacy,/terms,/data-deletion,/docs,/ar/…) lead to the website's, so links to them from elsewhere (Facebook's sign-in asks for the privacy notice and the data deletion page by address) keep working.
Arabesque Labs' own legal pages, in English and Arabic, are careerhunt.app's,
in its repository: have yours checked for your service before relying on
them. Earlier versions of hunt served them itself, with HUNT_LEGAL_*:
hunt now refuses to start with HUNT_LEGAL_COMPANY but no HUNT_SITE_URL,
rather than drop them unnoticed.