Update privacy policy for DPF renewal and privacy-law coverage - #8137
Merged
Conversation
…verage DPF (Notice Principle) fixes: - Correct onward-transfer liability statement (Prisma remains liable unless not responsible for the event giving rise to the damage) - Link to dataprivacyframework.gov and name certified entity (Prisma Data, Inc. — verify against DPF List entry) - Name the independent recourse mechanism (EU DPA panel / ICO / FDPIC), state it is free of charge, and surface binding arbitration - General FTC jurisdiction statement (previously buried in HR section) - Disclose lawful requests by public authorities (national security / law enforcement) - Explicit DPF access/correction/deletion rights and opt-out choice Broader legal updates: - New "Your Privacy Rights" section: GDPR/UK GDPR rights incl. portability, restriction, objection, supervisory-authority complaint; US state rights incl. targeted-advertising/sharing opt-out, non-discrimination, and appeal; Global Privacy Control honored - New Data Retention and Children's Privacy sections - Cookie consent + GPC language in navigational-information section - Restrict "no opt-out" claim to transactional messages; marketing (incl. feature announcements) is opt-out-able - Automated-processing clarification; controller identity in §1 - Bump privacyLastUpdated to August 7, 2026 Needs legal review before merge. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Contributor
WalkthroughThe privacy policy updates its revision date and covered websites. It adds controller details, processing disclosures, cookie and opt-out requirements, DPF provisions, HR-data terms, expanded privacy rights, retention, children’s privacy, and revised section numbering. ChangesPrivacy Policy
Estimated code review effort: 3 (Moderate) | ~20 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
|
The latest updates on your projects. Learn more about Argos notifications ↗︎
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@apps/site/src/data/privacy.tsx`:
- Around line 105-110: Implement Global Privacy Control handling before
retaining the GPC statement in the privacy policy: locate the existing CookieYes
consent gating for PostHog and Google Tag Manager and incorporate the browser’s
GPC opt-out signal so targeted advertising and non-essential tracking remain
disabled when GPC is enabled. If this cannot be implemented in the current flow,
remove the GPC claim from the privacy policy text instead.
- Around line 16-18: Revise the privacy policy content in the relevant JSX
sections, including the introductory controller language and the ranges around
lines 141-150, 160-195, and 205-213, to remove inactive DPF participation claims
and any DPF-selected recourse references. Preserve the remaining legally
approved privacy disclosures and ensure no unsupported DPF commitments remain.
🪄 Autofix
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository UI
Review profile: CHILL
Plan: Pro Plus
Run ID: 39463188-6131-4383-9ee6-394056f61ddd
📒 Files selected for processing (1)
apps/site/src/data/privacy.tsx
nurul3101
approved these changes
Aug 10, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates the privacy policy for the Data Privacy Framework renewal (onward-transfer liability, DPF program link, named recourse mechanism, FTC statement, lawful-request disclosure) and broader coverage: new Your Privacy Rights, Data Retention, and Children's Privacy sections, GPC/cookie-consent language, and GDPR legal bases. Bumps the last-updated date.
🤖 Generated with Claude Code
Summary by CodeRabbit