From fe3559a4b19e2860c5b5ab17c9949839c69d181b Mon Sep 17 00:00:00 2001 From: leubeem Date: Wed, 17 Jun 2026 12:15:00 +0200 Subject: [PATCH] docs(privacy): disclose OpenAI audio flow, Hotjar, and cookies (COMP-01) The privacy notice misstated the OpenAI data flow ("only pseudonymised text") and omitted Hotjar, cookies, and product-usage tracking. - Section 5: state that push-to-talk audio is sent to OpenAI for Whisper speech-to-text (not just text for TTS), list processors explicitly (OpenAI/US via SCCs, radio decision backend, Hotjar, email), and note the self-hosted speech-server alternative. - New section 6 (Analytics): disclose Hotjar, what it captures, consent basis, and opt-out. - New section 7 (Cookies & local storage): the httpOnly os_refresh_token session cookie, os_access_token in local storage, and Hotjar cookies. - Section 2 note now says PTT audio is transmitted to OpenAI; bump the date. Co-Authored-By: Claude Opus 4.8 --- app/pages/datenschutz.vue | 38 +++++++++++++++++++++++++++++++++----- 1 file changed, 33 insertions(+), 5 deletions(-) diff --git a/app/pages/datenschutz.vue b/app/pages/datenschutz.vue index 71689e8..3e66453 100644 --- a/app/pages/datenschutz.vue +++ b/app/pages/datenschutz.vue @@ -29,7 +29,7 @@
  • Communications: All radio inputs (typed or push-to-talk transcripts, normalized text, metadata such as module, lesson ID, signal strength, decision context).
  • Technical logs: Device details (browser, OS), timestamps, request IDs, error logs.
    • -

    Note: Raw audio from push-to-talk is processed temporarily only. Transcripts and context data are stored to improve quality.

    +

    Note: Raw audio from push-to-talk is transmitted to OpenAI for speech-to-text transcription (see section 5) and is not stored by us beyond temporary processing. The resulting transcripts and context data are stored to improve quality.

    @@ -55,7 +55,16 @@

    5. Sharing & processors

    - OpenSquawk runs on European cloud infrastructure (currently Hetzner Cloud, Germany). Communication data resides in our MongoDB database. External AI providers (e.g. OpenAI) receive only pseudonymised text to power TTS/LLM features. Appropriate processing agreements are in place. Transfers to third countries rely on EU Standard Contractual Clauses where necessary. + OpenSquawk runs on European cloud infrastructure (currently Hetzner Cloud, Germany). Communication data resides in our MongoDB database. We use the following processors: +

    +
      +
    • OpenAI (OpenAI, L.L.C., USA): To power the live radio features your spoken push-to-talk audio is sent to OpenAI for speech-to-text transcription (Whisper), and controller text is sent to OpenAI for text-to-speech synthesis and language features. Where you enable the optional self-hosted speech server (Speaches/Piper), speech is processed on that infrastructure instead of OpenAI.
      • +
    • Radio decision backend: Pilot transcripts are processed by our radio backend to determine the next ATC response and session state.
      • +
    • Hotjar (Hotjar Ltd, Malta): Product-usage and session analytics (see section 6).
      • +
    • Email delivery: Transactional/SMTP provider for notifications and the emails you opt into.
      • +
    +

    + Appropriate data processing agreements are in place. Transfers to third countries (e.g. the USA for OpenAI) rely on EU Standard Contractual Clauses where necessary.

    Note: Form submissions (waitlist, feature updates, roadmap suggestions) trigger an internal notification email to info@opensquawk.de via our SMTP or transactional provider. We only forward the details you submit so we can respond quickly. @@ -63,7 +72,26 @@

    -

    6. Your rights

    +

    6. Analytics (Hotjar)

    +

    + We use Hotjar (Hotjar Ltd, Malta) to understand how the interface is used so we can improve it. Hotjar may capture product-usage events and session insights — such as clicks, navigation, scrolling, device/browser attributes and interactions with page elements — and sets its own cookies to recognise returning sessions. We do not use Hotjar to identify you personally, and we ask it to suppress sensitive input. +

    +

    + This analytics processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time with future effect. You can also opt out directly via Hotjar's Do Not Track mechanism. +

    +
    + +
    +

    7. Cookies & local storage

    +
      +
    • Strictly necessary (sign-in): an httpOnly session cookie (os_refresh_token) keeps you signed in, and a short-lived access token is stored in your browser's local storage (os_access_token). These are set only when you log in and are required for the service to function.
      • +
    • Analytics: Hotjar sets cookies to recognise returning sessions; these are used only with your consent (see section 6).
      • +
    +

    We do not use advertising or cross-site tracking cookies.

    +
    + +
    +

    8. Your rights

    • Access, rectification, erasure and restriction (Art. 15–18 GDPR).
    • Data portability (Art. 20 GDPR).
      • @@ -74,7 +102,7 @@
    -

    7. Contact

    +

    9. Contact

    To exercise your rights please email info@opensquawk.de. Provide the email address registered with OpenSquawk and, if applicable, additional identifiers (e.g. VATSIM ID) so we can verify your request.

    @@ -84,7 +112,7 @@