|
0
|
1 <%
|
|
|
2 package nabble.view.web.w3c;
|
|
|
3
|
|
|
4 import fschmidt.util.servlet.JtpContext;
|
|
|
5 import nabble.view.lib.Cache;
|
|
|
6 import nabble.view.lib.UrlMappable;
|
|
|
7
|
|
|
8 import javax.servlet.ServletException;
|
|
|
9 import javax.servlet.http.HttpServlet;
|
|
|
10 import javax.servlet.http.HttpServletRequest;
|
|
|
11 import javax.servlet.http.HttpServletResponse;
|
|
|
12 import java.io.IOException;
|
|
|
13 import java.io.PrintWriter;
|
|
|
14 import java.util.HashMap;
|
|
|
15 import java.util.Map;
|
|
|
16 import java.util.regex.Matcher;
|
|
|
17 import java.util.regex.Pattern;
|
|
|
18
|
|
|
19 public final class PolicyHTML extends HttpServlet implements UrlMappable {
|
|
|
20
|
|
|
21 private static final Pattern URL_PATTERN = Pattern.compile("/w3c/policy.html$");
|
|
|
22
|
|
|
23 public Map<String, String[]> getParameterMapFromUrl(HttpServletRequest request,String mappedUrl) {
|
|
|
24 Matcher m = URL_PATTERN.matcher(mappedUrl);
|
|
|
25 if (!m.find())
|
|
|
26 throw new RuntimeException();
|
|
|
27 Map<String,String[]> params = new HashMap<String,String[]>();
|
|
|
28 return params;
|
|
|
29 }
|
|
|
30
|
|
|
31 public Pattern getUrlPattern() {
|
|
|
32 return URL_PATTERN;
|
|
|
33 }
|
|
|
34
|
|
|
35 protected void service(HttpServletRequest request, HttpServletResponse response)
|
|
|
36 throws ServletException, IOException {
|
|
|
37
|
|
|
38 JtpContext jtpContext = (JtpContext)getServletContext().getAttribute(JtpContext.attrName);
|
|
|
39 jtpContext.setEtag(request,response);
|
|
|
40 PrintWriter out = response.getWriter();
|
|
|
41 response.setContentType("text/html");
|
|
|
42 %>
|
|
|
43 <html>
|
|
|
44 <head>
|
|
|
45 <STYLE type="text/css">
|
|
|
46 title { color: #3333FF}
|
|
|
47 </STYLE>
|
|
|
48 <title>Privacy Statement for Nabble</title>
|
|
|
49 </head>
|
|
|
50 <body>
|
|
|
51 <h1 class="title">Privacy Policy</h1>
|
|
|
52 <!-- "About Us" section of privacy policy -->
|
|
|
53 <h2>About Us</h2>
|
|
|
54 <p>This is a privacy policy for Nabble.
|
|
|
55 Our homepage on the Web is located at <a href="https://www.nabble.com">
|
|
|
56 https://www.nabble.com</a>.
|
|
|
57 The full text of our privacy policy is available on the Web at
|
|
|
58 <a href="https://www.nabble.com/w3c/policy.html">
|
|
|
59 https://www.nabble.com/w3c/policy.html</a>
|
|
|
60 Users may go to <a href="">
|
|
|
61 </a> for information on how to opt-in or opt-out of use of their information.
|
|
|
62 <p>We invite you to contact us if you have questions about this policy.
|
|
|
63 You may contact us by email at
|
|
|
64 <a href="mailto:support@nabble.com">
|
|
|
65 support@nabble.com</a>.
|
|
|
66 <!-- "Privacy Seals" section of privacy policy -->
|
|
|
67 <h2>Dispute Resolution and Privacy Seals</h2>
|
|
|
68 <p>We have the following privacy seals and/or dispute resolution mechanisms.
|
|
|
69 If you think we have not followed our privacy policy in some way, they can help you resolve your concern.
|
|
|
70 <ul>
|
|
|
71 <li>
|
|
|
72 <b>Disputes</b>:
|
|
|
73 If any question arises regarding the user experience, ability or inability to perform actions with the site, a user is advised to contact Nabble Support.
|
|
|
74 </ul>
|
|
|
75 <!-- "Additional information" section of privacy policy -->
|
|
|
76 <h2>Additional Information</h2>
|
|
|
77 <p>
|
|
|
78 This policy is valid for 1 day from the time that it is loaded by a client.
|
|
|
79 </p>
|
|
|
80 <!-- "Data Collection" section of privacy policy -->
|
|
|
81 <h2>Data Collection</h2>
|
|
|
82 <p>P3P policies declare the data they collect in groups (also referred to as "statements").
|
|
|
83 This policy contains 2 data groups.
|
|
|
84 The data practices of each group will be explained separately.
|
|
|
85 <hr width="50%" align="center">
|
|
|
86 <h3>Group "User Information"</h3>
|
|
|
87 <p>At the user's option, we will collect the following data:
|
|
|
88 <ul>
|
|
|
89 <li>User's Name</li>
|
|
|
90 <li>Preference data</li>
|
|
|
91 <li>Home email address</li>
|
|
|
92 <li>Work email address</li>
|
|
|
93 </ul>
|
|
|
94 <p>This data will be used for the following purposes:</p>
|
|
|
95 <ul>
|
|
|
96 <li>Other purposes<p>Display the user name</p> The user must <b>opt-in</b> to this usage.</li>
|
|
|
97 </ul>
|
|
|
98 <p>This data will be used by ourselves and our agents.
|
|
|
99 <hr width="50%" align="center">
|
|
|
100 <h3>Group "Cookies"</h3>
|
|
|
101 <p>At the user's option, we will collect the following data:
|
|
|
102 <ul>
|
|
|
103 <li>HTTP cookies</li>
|
|
|
104 </ul>
|
|
|
105 <p>This data will be used for the following purposes:</p>
|
|
|
106 <ul>
|
|
|
107 <li>One-time tailoring. The user must <b>opt-in</b> to this usage.</li>
|
|
|
108 <li>Anonymous user analysis. The user must <b>opt-in</b> to this usage.</li>
|
|
|
109 <li>Anonymous user profiling and decision-making. The user must <b>opt-in</b> to this usage.</li>
|
|
|
110 </ul>
|
|
|
111 <p>This data will be used by ourselves and our agents.
|
|
|
112 <p>The following explanation is provided for why this data is collected:</p>
|
|
|
113 <blockquote>To keep users logged in and apply their preferences.</blockquote>
|
|
|
114 <!-- "Use of Cookies" section of privacy policy -->
|
|
|
115 <hr width="50%" align="center">
|
|
|
116 <h2>Cookies</h2>
|
|
|
117 <p>Cookies are a technology which can be used to provide you with tailored information from a Web site. A cookie is an element of data that a Web site can send to your browser, which may then store it on your system. You can set your browser to notify you when you receive a cookie, giving you the chance to decide whether to accept it.
|
|
|
118 <p>Our site makes use of cookies.
|
|
|
119 Cookies are used for the following purposes:
|
|
|
120 <ul>
|
|
|
121 <li>User targeting
|
|
|
122 <li>Pseudononymous analysis
|
|
|
123 <li>Pseudonym-based decision-making
|
|
|
124 </ul>
|
|
|
125 <!-- "Compact Policy Explanation" section of privacy policy -->
|
|
|
126 <hr width="50%" align="center">
|
|
|
127 <h2>Compact Policy Summary</h2>
|
|
|
128 <p>The compact policy which corresponds to this policy is:
|
|
|
129 <pre>
|
|
|
130 CP="IDC DSP TAIi PSAi PSDi OTPi OUR IND PHY ONL UNI NAV DEM PRE LOC"
|
|
|
131 </pre>
|
|
|
132 <p>The following table explains the meaning of each field in the compact policy.
|
|
|
133 <center><table width="80%" border="1" cols="2">
|
|
|
134 <tr><td align="center" valign="top" width="20%"><b>Field</b></td><td align="center" valign="top" width="80%"><b>Meaning</b></td></tr>
|
|
|
135 <tr><td align="left" valign="top" width="20%"><tt>CP=</tt></td>
|
|
|
136 <td align="left" valign="top" width="80%">This is the compact policy header; it indicates that what follows is a P3P compact policy.</td></tr>
|
|
|
137 <tr><td align="left" valign="top" width="20%"><tt>IDC</tt></td>
|
|
|
138 <td align="left" valign="top" width="80%">
|
|
|
139 Access is available to contact information.
|
|
|
140 </td></tr>
|
|
|
141 <tr><td align="left" valign="top" width="20%"><tt>DSP</tt></td>
|
|
|
142 <td align="left" valign="top" width="80%">
|
|
|
143 The policy contains at least one dispute-resolution mechanism.
|
|
|
144 </td></tr>
|
|
|
145 <tr><td align="left" valign="top" width="20%"><tt>TAIi</tt></td>
|
|
|
146 <td align="left" valign="top" width="80%">
|
|
|
147 The data is used for tailoring the site, if the user selects it.
|
|
|
148 </td></tr>
|
|
|
149 <tr><td align="left" valign="top" width="20%"><tt>PSAi</tt></td>
|
|
|
150 <td align="left" valign="top" width="80%">
|
|
|
151 The data is used for pseudononymous analysis, if the user selects it.
|
|
|
152 </td></tr>
|
|
|
153 <tr><td align="left" valign="top" width="20%"><tt>PSDi</tt></td>
|
|
|
154 <td align="left" valign="top" width="80%">
|
|
|
155 The data is used for pseudononymous decision-making, if the user selects it.
|
|
|
156 </td></tr>
|
|
|
157 <tr><td align="left" valign="top" width="20%"><tt>OTPi</tt></td>
|
|
|
158 <td align="left" valign="top" width="80%">
|
|
|
159 The data is used for other purposes, if the user selects it.
|
|
|
160 </td></tr>
|
|
|
161 <tr><td align="left" valign="top" width="20%"><tt>OUR</tt></td>
|
|
|
162 <td align="left" valign="top" width="80%">
|
|
|
163 The data is given to ourselves and our agents.
|
|
|
164 </td></tr>
|
|
|
165 <tr><td align="left" valign="top" width="20%"><tt>IND</tt></td>
|
|
|
166 <td align="left" valign="top" width="80%">
|
|
|
167 The data will be kept indefinitely.
|
|
|
168 </td></tr>
|
|
|
169 <tr><td align="left" valign="top" width="20%"><tt>PHY</tt></td>
|
|
|
170 <td align="left" valign="top" width="80%">
|
|
|
171 Physical contact information is collected.
|
|
|
172 </td></tr>
|
|
|
173 <tr><td align="left" valign="top" width="20%"><tt>ONL</tt></td>
|
|
|
174 <td align="left" valign="top" width="80%">
|
|
|
175 Online contact information is collected.
|
|
|
176 </td></tr>
|
|
|
177 <tr><td align="left" valign="top" width="20%"><tt>UNI</tt></td>
|
|
|
178 <td align="left" valign="top" width="80%">
|
|
|
179 Unique identifiers are collected.
|
|
|
180 </td></tr>
|
|
|
181 <tr><td align="left" valign="top" width="20%"><tt>NAV</tt></td>
|
|
|
182 <td align="left" valign="top" width="80%">
|
|
|
183 Navigation and clickstream data is collected.
|
|
|
184 </td></tr>
|
|
|
185 <tr><td align="left" valign="top" width="20%"><tt>DEM</tt></td>
|
|
|
186 <td align="left" valign="top" width="80%">
|
|
|
187 Demographic and socioeconomic data is collected.
|
|
|
188 </td></tr>
|
|
|
189 <tr><td align="left" valign="top" width="20%"><tt>PRE</tt></td>
|
|
|
190 <td align="left" valign="top" width="80%">
|
|
|
191 Preference information is collected.
|
|
|
192 </td></tr>
|
|
|
193 <tr><td align="left" valign="top" width="20%"><tt>LOC</tt></td>
|
|
|
194 <td align="left" valign="top" width="80%">
|
|
|
195 Current location information is collected.
|
|
|
196 </td></tr>
|
|
|
197 </table></center>
|
|
|
198 <p>The compact policy is sent by the Web server along with the cookies it describes.
|
|
|
199 For more information, see the P3P deployment guide at <a href="http://www.w3.org/TR/p3pdeployment">http://www.w3.org/TR/p3pdeployment</a>.
|
|
|
200 <!-- "Policy Evaluation" section of privacy policy -->
|
|
|
201 <hr width="50%" align="center">
|
|
|
202 <h2>Policy Evaluation</h2>
|
|
|
203 <p>Microsoft Internet Explorer 6 will evaluate this policy's compact policy whenever it is used with a cookie.
|
|
|
204 The actions IE will take depend on what privacy level the user has selected in their browser (Low, Medium, Medium High, or High; the default is Medium.
|
|
|
205 In addition, IE will examine whether the cookie's policy is considered satisfactory or unsatisfactory, whether the cookie is a session cookie or a persistent cookie, and whether the cookie is used in a first-party or third-party context.
|
|
|
206 This section will attempt to evaluate this policy's compact policy against Microsoft's stated behavior for IE6.
|
|
|
207 <p><b>Note:</b> this evaluation is currently experimental and should not be considered a substitute for testing with a real Web browser.
|
|
|
208 <p><b>Satisfactory policy</b>: this compact policy is considered <em>satisfactory</em> according to the rules defined by Internet Explorer 6.
|
|
|
209 IE6 will accept cookies accompanied by this policy under the High, Medium High, Medium, Low, and Accept All Cookies settings.
|
|
|
210 </body></html>
|
|
|
211 <%
|
|
|
212 }
|
|
|
213 }
|
|
|
214 %> |
