From be84f66dfff4ca8ba2c715274bbe65852c03f389 Mon Sep 17 00:00:00 2001 From: wukko Date: Fri, 23 May 2025 15:57:33 +0600 Subject: [PATCH] web/about: revise text on all pages & improve readability all information is way easier to read and understand. i also added info about new features and explained some concepts in a better language. --- web/i18n/en/about.json | 5 +-- web/i18n/en/about/credits.md | 50 ++++++++++++++++++++-------- web/i18n/en/about/general.md | 41 +++++++++-------------- web/i18n/en/about/privacy.md | 64 +++++++++++++++++++++++++++++------- web/i18n/en/about/terms.md | 18 +++++----- 5 files changed, 117 insertions(+), 61 deletions(-) diff --git a/web/i18n/en/about.json b/web/i18n/en/about.json index 72b7fe40..0a794c77 100644 --- a/web/i18n/en/about.json +++ b/web/i18n/en/about.json @@ -11,9 +11,9 @@ "heading.general": "general terms", "heading.licenses": "licenses", "heading.summary": "best way to save what you love", - "heading.privacy": "leading privacy", + "heading.privacy_efficiency": "leading privacy & efficiency", "heading.community": "open community", - "heading.local": "on-device processing", + "heading.local": "local processing", "heading.saving": "saving", "heading.encryption": "encryption", "heading.plausible": "anonymous traffic analytics", @@ -22,6 +22,7 @@ "heading.abuse": "reporting abuse", "heading.motivation": "motivation", "heading.testers": "beta testers", + "heading.partners": "partners", "support.github": "check out cobalt's source code, contribute changes, or report issues", "support.discord": "chat with the community and developers about cobalt or ask for help", diff --git a/web/i18n/en/about/credits.md b/web/i18n/en/about/credits.md index 812f3394..3d23f5b4 100644 --- a/web/i18n/en/about/credits.md +++ b/web/i18n/en/about/credits.md @@ -1,5 +1,5 @@ @@ -22,27 +22,27 @@ no ads, trackers, paywalls, or other nonsense. just a convenient web app that wo sectionId="motivation" /> -cobalt was created for public benefit, to protect people from ads and malware pushed by its alternatives. -we believe that the best software is safe, open, and accessible. - -a part of our infrastructure is provided by our long-standing partner, [royalehosting.net]({partners.royalehosting})! +cobalt was created for public benefit, to protect people from ads and malware pushed by alternative downloaders. +we believe that the best software is safe, open, and accessible. all imput project follow these basic principles. -
+
-all requests to the backend are anonymous and all information about tunnels is encrypted. -we have a strict zero log policy and don't track *anything* about individual people. +all requests to the backend are anonymous and all information about potential file tunnels is encrypted. +we have a strict zero log policy and don't store or track *anything* about individual people. -when a request needs additional processing, cobalt processes files on-the-fly. -it's done by tunneling processed parts directly to the client, without ever saving anything to disk. -for example, this method is used when the source service provides video and audio channels as separate files. +if a request requires additional processing, such as remuxing or transcoding, cobalt processes media +directly on your device. this ensures best efficiency and privacy. -additionally, you can [enable forced tunneling](/settings/privacy#tunnel) to protect your privacy. -when enabled, cobalt will tunnel all downloaded files. +if your device doesn't support local processing, then server-based live processing is used instead. +in this scenario, processed media is streamed directly to client, without ever being stored on server's disk. + +you can [enable forced tunneling](/settings/privacy#tunnel) to boost privacy even further. +when enabled, cobalt will tunnel all downloaded files, not just those that require it. no one will know where you download something from, even your network provider. all they'll see is that you're using a cobalt instance.
@@ -65,14 +65,3 @@ if your friend hosts a processing instance, just ask them for a domain and [add you can check the source code and contribute [on github]({contacts.github}) at any time. we welcome all contributions and suggestions!
- -
- - -newest features, such as [remuxing](/remux), work locally on your device. -on-device processing is efficient and never sends anything over the internet. -it perfectly aligns with our future goal of moving as much processing as possible to the client. -
diff --git a/web/i18n/en/about/privacy.md b/web/i18n/en/about/privacy.md index 7291aff4..7ae2affb 100644 --- a/web/i18n/en/about/privacy.md +++ b/web/i18n/en/about/privacy.md @@ -11,9 +11,11 @@ sectionId="general" /> -cobalt's privacy policy is simple: we don't collect or store anything about you. what you do is solely your business, not ours or anyone else's. +cobalt's privacy policy is simple: we don't collect or store anything about you. +what you do is solely your business, not ours or anyone else's. -these terms are applicable only when using the official cobalt instance. in other cases, you may need to contact the hoster for accurate info. +these terms are applicable only when using the official cobalt instance. +in other cases, you may need to contact the instance hoster for accurate info.
@@ -22,7 +24,9 @@ these terms are applicable only when using the official cobalt instance. in othe sectionId="local" /> -tools that use on-device processing work offline, locally, and never send any data anywhere. they are explicitly marked as such whenever applicable. +tools that use on-device processing work offline, locally, +and never send any processed data anywhere. +they are explicitly marked as such whenever applicable.
@@ -31,9 +35,33 @@ tools that use on-device processing work offline, locally, and never send any da sectionId="saving" /> -when using saving functionality, in some cases cobalt will encrypt & temporarily store information needed for tunneling. it's stored in processing server's RAM for 90 seconds and irreversibly purged afterwards. no one has access to it, even instance owners, as long as they don't modify the official cobalt image. +when using saving functionality, cobalt may need to proxy or remux/transcode files. +if that's the case, then a temporary tunnel is created for this purpose +and minimal required information about the media is stored for 90 seconds. -processed/tunneled files are never cached anywhere. everything is tunneled live. cobalt's saving functionality is essentially a fancy proxy service. +on an unmodified & official cobalt instance, +**all tunnel data is encrypted with a key that only the end user has access to**. + +encrypted tunnel data may include: +- origin service's name. +- original URLs for media files. +- internal arguments needed to differentiate between types of processing. +- minimal file metadata (generated filename, title, author, creation year, copyright info). +- minimal information about the original request that may be used in case of an URL failure during the tunnelling process. + +this data is irreversibly purged from server's RAM after 90 seconds. +no one has access to cached tunnel data, even instance owners, +as long as cobalt's source code is not modified. + +media data from tunnels is never stored/cached anywhere. +everything is processed live, even during remuxing and transcoding. +cobalt tunnels function like an anonymous proxy. + +if your device supports local processing, +then encrypted tunnel info includes way less info, because it's returned to client instead. + +see the [related source code on github](https://github.com/imputnet/cobalt/tree/main/api/src/stream) +to learn more about how it works.
@@ -42,7 +70,10 @@ processed/tunneled files are never cached anywhere. everything is tunneled live. sectionId="encryption" /> -temporarily stored tunnel data is encrypted using the AES-256 standard. decryption keys are only included in the access link and never logged/cached/stored anywhere. only the end user has access to the link & encryption keys. keys are generated uniquely for each requested tunnel. +temporarily stored tunnel data is encrypted using the AES-256 standard. +decryption keys are only included in the access link and never logged/cached/stored anywhere. +only the end user has access to the link & encryption keys. +keys are generated uniquely for each requested tunnel.
{#if env.PLAUSIBLE_ENABLED} @@ -52,13 +83,18 @@ temporarily stored tunnel data is encrypted using the AES-256 standard. decrypti sectionId="plausible" /> -for sake of privacy, we use [plausible's anonymous traffic analytics](https://plausible.io/) to get an approximate number of active cobalt users. no identifiable information about you or your requests is ever stored. all data is anonymized and aggregated. the plausible instance we use is hosted & managed by us. +we use [plausible](https://plausible.io/) for anonymous traffic analytics, +to get an approximate number of active cobalt users. +no identifiable information about you or your requests is ever stored. +all data is anonymized and aggregated. +we self-host and manage the plausible instance that cobalt uses. plausible doesn't use cookies and is fully compliant with GDPR, CCPA, and PECR. -[learn more about plausible's dedication to privacy.](https://plausible.io/privacy-focused-web-analytics) - if you wish to opt out of anonymous analytics, you can do it in [privacy settings](/settings/privacy#analytics). +if you opt out, the plausible script will not be loaded at all. + +[learn more about plausible's dedication to privacy](https://plausible.io/privacy-focused-web-analytics). {/if} @@ -68,9 +104,15 @@ if you wish to opt out of anonymous analytics, you can do it in [privacy setting sectionId="cloudflare" /> -we use cloudflare services for ddos & bot protection. we also use cloudflare pages for deploying & hosting the static web app. all of these are required to provide the best experience for everyone. it's the most private & reliable provider that we know of. +we use cloudflare services for: +- ddos & abuse protection. +- bot protection (cloudflare turnstile). +- hosting & deploying the statically rendered web app (cloudflare pages). + +all of these are required to provide the best experience for everyone. +cloudflare is the most private & reliable provider for all mentioned solutions that we know of. cloudflare is fully compliant with GDPR and HIPAA. -[learn more about cloudflare's dedication to privacy.](https://www.cloudflare.com/trust-hub/privacy-and-data-protection/) +[learn more about cloudflare's dedication to privacy](https://www.cloudflare.com/trust-hub/privacy-and-data-protection/). diff --git a/web/i18n/en/about/terms.md b/web/i18n/en/about/terms.md index 634e7502..bef2f7dc 100644 --- a/web/i18n/en/about/terms.md +++ b/web/i18n/en/about/terms.md @@ -10,7 +10,7 @@ /> these terms are applicable only when using the official cobalt instance. -in other cases, you may need to contact the hoster for accurate info. +in other cases, you may need to contact the instance hoster for accurate info.
@@ -19,12 +19,14 @@ in other cases, you may need to contact the hoster for accurate info. sectionId="saving" /> -saving functionality simplifies downloading content from the internet and takes zero liability for what the saved content is used for. -processing servers work like advanced proxies and don't ever write any content to disk. -everything is handled in RAM and permanently purged once the tunnel is done. -we have no downloading logs and can't identify anyone. +saving functionality simplifies downloading content from the internet +and we take zero liability for what the saved content is used for. -[you can read more about how tunnels work in our privacy policy.](/about/privacy) +processing servers operate like advanced proxies and don't ever write any requested content to disk. +everything is handled in RAM and permanently purged once the tunnel is completed. +we have no downloading logs and cannot identify anyone. + +you can learn more about how tunnels work in [privacy policy](/about/privacy).
@@ -48,10 +50,10 @@ fair use and credits benefit everyone. sectionId="abuse" /> -we have no way of detecting abusive behavior automatically because cobalt is 100% anonymous. +we have no way of detecting abusive behavior automatically because cobalt is fully anonymous. however, you can report such activities to us via email and we'll do our best to comply manually: abuse[at]imput.net **this email is not intended for user support, you will not get a response if your concern is not related to abuse.** -if you're experiencing issues, contact us via any preferred method on [the support page](/about/community). +if you're experiencing issues, you can reach out for support via any preferred method on [the community page](/about/community).