From bb011ecb6c298562972d6bc807ba5ae845e1343a Mon Sep 17 00:00:00 2001 From: Rhuan Barreto Date: Sat, 2 May 2026 15:52:40 +0200 Subject: [PATCH 1/4] docs: add privacy policy page and fix telemetry data regions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add a Privacy Policy summary page to the CLI docs (EN + PT-BR) that links to the canonical policy at archgate.dev/privacy-policy. The page covers CLI telemetry, the Plugins Service account data, opt-out instructions, and docs site analytics. Also corrects the data hosting regions on the Telemetry page from US to EU for both PostHog and Sentry. Changes: - New: docs/reference/privacy-policy (EN + PT-BR) - Updated: docs/reference/telemetry — PostHog and Sentry regions → EU - Updated: docs/astro.config.mjs — add Privacy Policy to sidebar Signed-off-by: Rhuan Barreto --- docs/astro.config.mjs | 1 + .../docs/pt-br/reference/privacy-policy.mdx | 36 +++++++++++++++++++ .../docs/pt-br/reference/telemetry.mdx | 4 +-- .../content/docs/reference/privacy-policy.mdx | 36 +++++++++++++++++++ docs/src/content/docs/reference/telemetry.mdx | 4 +-- 5 files changed, 77 insertions(+), 4 deletions(-) create mode 100644 docs/src/content/docs/pt-br/reference/privacy-policy.mdx create mode 100644 docs/src/content/docs/reference/privacy-policy.mdx diff --git a/docs/astro.config.mjs b/docs/astro.config.mjs index 64d42e5d..ea629b82 100644 --- a/docs/astro.config.mjs +++ b/docs/astro.config.mjs @@ -254,6 +254,7 @@ export default defineConfig({ { label: "Rule API", slug: "reference/rule-api" }, { label: "ADR Schema", slug: "reference/adr-schema" }, { label: "Telemetry", slug: "reference/telemetry" }, + { label: "Privacy Policy", slug: "reference/privacy-policy" }, ], }, { diff --git a/docs/src/content/docs/pt-br/reference/privacy-policy.mdx b/docs/src/content/docs/pt-br/reference/privacy-policy.mdx new file mode 100644 index 00000000..8c559804 --- /dev/null +++ b/docs/src/content/docs/pt-br/reference/privacy-policy.mdx @@ -0,0 +1,36 @@ +--- +title: Política de Privacidade +description: Como o Archgate trata seus dados, o que coletamos e seus direitos. +--- + +Para a Política de Privacidade completa do Archgate, acesse: + +**[archgate.dev/privacy-policy](https://archgate.dev/privacy-policy)** + +As seções abaixo resumem os pontos mais relevantes para usuários da CLI. A política canônica no site é a versão juridicamente vinculante. + +## Resumo para usuários da CLI + +### O que a CLI coleta + +O Archgate coleta **análises de uso anônimas** (via PostHog) e **relatórios de falha** (via Sentry) para melhorar a ferramenta. Nenhuma informação pessoal, código-fonte, conteúdo de arquivo ou prompts de IA são coletados pela CLI em si. Consulte a página de [Telemetria](/pt-br/reference/telemetry/) para um detalhamento completo de cada ponto de dados. + +### Serviço de Plugins do Archgate + +Quando você se cadastra via `archgate login`, o **Serviço de Plugins** (`plugins.archgate.dev`) coleta informações pessoais: seu **endereço de email**, **nome de usuário GitHub**, **escolha do editor** e uma **descrição do caso de uso**. Esses dados são usados para provisionar sua conta e enviar um email de boas-vindas. Os tokens de autenticação são armazenados como hashes SHA-256 em nossos servidores; na sua máquina, as credenciais são mantidas no gerenciador de credenciais do seu sistema operacional (nunca como arquivos de texto simples). Consulte a [política de privacidade completa](https://archgate.dev/privacy-policy) para detalhes completos. + +### Como desativar + +```bash +# Variável de ambiente (imediato, por sessão ou no perfil do shell) +export ARCHGATE_TELEMETRY=0 + +# Ou persistentemente via CLI +archgate telemetry disable +``` + +Nota: a desativação da telemetria desabilita as análises da CLI e os relatórios de falha. Ela não afeta os dados de conta do Serviço de Plugins, que são necessários para acesso aos plugins. Para excluir os dados da sua conta, entre em contato com [privacy@archgate.dev](mailto:privacy@archgate.dev). + +### O que o site de documentação coleta + +Este site de documentação (`cli.archgate.dev`) usa [Cloudflare Web Analytics](https://www.cloudflare.com/web-analytics/), um serviço de análise que prioriza a privacidade. O Cloudflare Web Analytics não usa cookies, não rastreia visitantes individuais e não coleta informações pessoais. Ele fornece apenas métricas agregadas de visualização de página e desempenho. diff --git a/docs/src/content/docs/pt-br/reference/telemetry.mdx b/docs/src/content/docs/pt-br/reference/telemetry.mdx index e7c5f2bf..8809e99f 100644 --- a/docs/src/content/docs/pt-br/reference/telemetry.mdx +++ b/docs/src/content/docs/pt-br/reference/telemetry.mdx @@ -114,8 +114,8 @@ A variável de ambiente tem prioridade sobre a configuração da CLI. Se `ARCHGA ## Onde os dados são armazenados -- **Análise**: PostHog Cloud (região dos EUA). Dados retidos conforme a política de retenção padrão do PostHog. -- **Rastreamento de erros**: Sentry Cloud (região dos EUA). Eventos de erro retidos por 90 dias. +- **Análise**: PostHog Cloud (região da UE). Dados retidos conforme a política de retenção padrão do PostHog. +- **Rastreamento de erros**: Sentry Cloud (região da UE). Eventos de erro retidos por 90 dias. - **Configuração local**: `~/.archgate/config.json` armazena sua preferência de telemetria e o ID de instalação anônimo. ## Código aberto diff --git a/docs/src/content/docs/reference/privacy-policy.mdx b/docs/src/content/docs/reference/privacy-policy.mdx new file mode 100644 index 00000000..dafee47a --- /dev/null +++ b/docs/src/content/docs/reference/privacy-policy.mdx @@ -0,0 +1,36 @@ +--- +title: Privacy Policy +description: How Archgate handles your data, what we collect, and your rights. +--- + +For the full Archgate Privacy Policy, please visit: + +**[archgate.dev/privacy-policy](https://archgate.dev/privacy-policy)** + +The sections below summarize the most relevant points for CLI users. The canonical policy on the website is the legally binding version. + +## Summary for CLI users + +### What the CLI collects + +Archgate collects **anonymous usage analytics** (via PostHog) and **crash reports** (via Sentry) to improve the tool. No personal information, source code, file content, or AI prompts are ever collected by the CLI itself. See the [Telemetry](/reference/telemetry/) page for a detailed breakdown of every data point. + +### Archgate Plugins Service + +When you sign up via `archgate login`, the **Plugins Service** (`plugins.archgate.dev`) collects personal information: your **email address**, **GitHub username**, **editor choice**, and a **use case description**. This data is used to provision your account and send a welcome email. Authentication tokens are stored as SHA-256 hashes on our servers; on your machine, credentials are kept in your OS credential manager (never as plain-text files). See the [full privacy policy](https://archgate.dev/privacy-policy) for complete details. + +### How to opt out + +```bash +# Environment variable (immediate, per-session or in shell profile) +export ARCHGATE_TELEMETRY=0 + +# Or persistently via the CLI +archgate telemetry disable +``` + +Note: telemetry opt-out disables CLI analytics and crash reporting. It does not affect the Plugins Service account data, which is required for plugin access. To delete your account data, contact [privacy@archgate.dev](mailto:privacy@archgate.dev). + +### What the docs site collects + +This documentation site (`cli.archgate.dev`) uses [Cloudflare Web Analytics](https://www.cloudflare.com/web-analytics/), a privacy-first analytics service. Cloudflare Web Analytics does not use cookies, does not track individual visitors, and does not collect personal information. It provides aggregate page-view and performance metrics only. diff --git a/docs/src/content/docs/reference/telemetry.mdx b/docs/src/content/docs/reference/telemetry.mdx index a134c6e9..2396ca8d 100644 --- a/docs/src/content/docs/reference/telemetry.mdx +++ b/docs/src/content/docs/reference/telemetry.mdx @@ -114,8 +114,8 @@ The environment variable takes precedence over the CLI setting. If `ARCHGATE_TEL ## Where data is stored -- **Analytics**: PostHog Cloud (US region). Data retained per PostHog's standard retention policy. -- **Error tracking**: Sentry Cloud (US region). Error events retained for 90 days. +- **Analytics**: PostHog Cloud (EU region). Data retained per PostHog's standard retention policy. +- **Error tracking**: Sentry Cloud (EU region). Error events retained for 90 days. - **Local config**: `~/.archgate/config.json` stores your telemetry preference and anonymous install ID. ## Open source From 63bde649db1de2eabb581749dd3c8d59bccf9b37 Mon Sep 17 00:00:00 2001 From: rhuanbarreto <283004+rhuanbarreto@users.noreply.github.com> Date: Sat, 2 May 2026 13:58:54 +0000 Subject: [PATCH 2/4] docs: regenerate llms-full.txt Signed-off-by: Rhuan Barreto --- docs/public/llms-full.txt | 42 +++++++++++++++++++++++++++++++++++++-- 1 file changed, 40 insertions(+), 2 deletions(-) diff --git a/docs/public/llms-full.txt b/docs/public/llms-full.txt index 6ae258d3..f4b0112e 100644 --- a/docs/public/llms-full.txt +++ b/docs/public/llms-full.txt @@ -3991,6 +3991,44 @@ Archgate upgraded to 0.4.0 successfully. --- +## Reference: Privacy Policy + +Source: https://cli.archgate.dev/reference/privacy-policy/ + +For the full Archgate Privacy Policy, please visit: + +**[archgate.dev/privacy-policy](https://archgate.dev/privacy-policy)** + +The sections below summarize the most relevant points for CLI users. The canonical policy on the website is the legally binding version. + +## Summary for CLI users + +### What the CLI collects + +Archgate collects **anonymous usage analytics** (via PostHog) and **crash reports** (via Sentry) to improve the tool. No personal information, source code, file content, or AI prompts are ever collected by the CLI itself. See the [Telemetry](/reference/telemetry/) page for a detailed breakdown of every data point. + +### Archgate Plugins Service + +When you sign up via `archgate login`, the **Plugins Service** (`plugins.archgate.dev`) collects personal information: your **email address**, **GitHub username**, **editor choice**, and a **use case description**. This data is used to provision your account and send a welcome email. Authentication tokens are stored as SHA-256 hashes on our servers; on your machine, credentials are kept in your OS credential manager (never as plain-text files). See the [full privacy policy](https://archgate.dev/privacy-policy) for complete details. + +### How to opt out + +```bash +# Environment variable (immediate, per-session or in shell profile) +export ARCHGATE_TELEMETRY=0 + +# Or persistently via the CLI +archgate telemetry disable +``` + +Note: telemetry opt-out disables CLI analytics and crash reporting. It does not affect the Plugins Service account data, which is required for plugin access. To delete your account data, contact [privacy@archgate.dev](mailto:privacy@archgate.dev). + +### What the docs site collects + +This documentation site (`cli.archgate.dev`) uses [Cloudflare Web Analytics](https://www.cloudflare.com/web-analytics/), a privacy-first analytics service. Cloudflare Web Analytics does not use cookies, does not track individual visitors, and does not collect personal information. It provides aggregate page-view and performance metrics only. + +--- + ## Reference: Rule API Source: https://cli.archgate.dev/reference/rule-api/ @@ -4418,8 +4456,8 @@ The environment variable takes precedence over the CLI setting. If `ARCHGATE_TEL ## Where data is stored -- **Analytics**: PostHog Cloud (US region). Data retained per PostHog's standard retention policy. -- **Error tracking**: Sentry Cloud (US region). Error events retained for 90 days. +- **Analytics**: PostHog Cloud (EU region). Data retained per PostHog's standard retention policy. +- **Error tracking**: Sentry Cloud (EU region). Error events retained for 90 days. - **Local config**: `~/.archgate/config.json` stores your telemetry preference and anonymous install ID. ## Open source From 821f2f0683e2fca0bf549bab6d66a69b5f424e77 Mon Sep 17 00:00:00 2001 From: Rhuan Barreto Date: Sat, 2 May 2026 19:06:49 +0200 Subject: [PATCH 3/4] fix: remove locale prefix from internal link in PT-BR privacy policy MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Starlight resolves locale routes automatically — links must not include the /pt-br/ prefix. Fixes GEN-002/no-locale-prefix-in-links. Signed-off-by: Rhuan Barreto --- docs/src/content/docs/pt-br/reference/privacy-policy.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/src/content/docs/pt-br/reference/privacy-policy.mdx b/docs/src/content/docs/pt-br/reference/privacy-policy.mdx index 8c559804..5dfaae00 100644 --- a/docs/src/content/docs/pt-br/reference/privacy-policy.mdx +++ b/docs/src/content/docs/pt-br/reference/privacy-policy.mdx @@ -13,7 +13,7 @@ As seções abaixo resumem os pontos mais relevantes para usuários da CLI. A po ### O que a CLI coleta -O Archgate coleta **análises de uso anônimas** (via PostHog) e **relatórios de falha** (via Sentry) para melhorar a ferramenta. Nenhuma informação pessoal, código-fonte, conteúdo de arquivo ou prompts de IA são coletados pela CLI em si. Consulte a página de [Telemetria](/pt-br/reference/telemetry/) para um detalhamento completo de cada ponto de dados. +O Archgate coleta **análises de uso anônimas** (via PostHog) e **relatórios de falha** (via Sentry) para melhorar a ferramenta. Nenhuma informação pessoal, código-fonte, conteúdo de arquivo ou prompts de IA são coletados pela CLI em si. Consulte a página de [Telemetria](/reference/telemetry/) para um detalhamento completo de cada ponto de dados. ### Serviço de Plugins do Archgate From 25a736fbb5cdbc7da91713d8f10965eae6db313a Mon Sep 17 00:00:00 2001 From: Rhuan Barreto Date: Sat, 2 May 2026 19:08:14 +0200 Subject: [PATCH 4/4] fix(ci): add DCO sign-off to automated commit workflows Both update-llms.yaml and update-lock.yaml use git-auto-commit-action to push commits to PR branches. These commits were missing the Signed-off-by trailer required by the DCO check, causing PR failures. Add commit_options: "--signoff" to both workflows. Signed-off-by: Rhuan Barreto --- .github/workflows/update-llms.yaml | 1 + .github/workflows/update-lock.yaml | 4 ++++ 2 files changed, 5 insertions(+) diff --git a/.github/workflows/update-llms.yaml b/.github/workflows/update-llms.yaml index 445fea48..d4053c3e 100644 --- a/.github/workflows/update-llms.yaml +++ b/.github/workflows/update-llms.yaml @@ -47,4 +47,5 @@ jobs: uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7 with: commit_message: "docs: regenerate llms-full.txt" + commit_options: "--signoff" file_pattern: docs/public/llms-full.txt diff --git a/.github/workflows/update-lock.yaml b/.github/workflows/update-lock.yaml index 615d02c4..e952498f 100644 --- a/.github/workflows/update-lock.yaml +++ b/.github/workflows/update-lock.yaml @@ -42,3 +42,7 @@ jobs: run: bun install --lockfile-only - name: Commit changes uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7 + with: + commit_message: "chore: update bun.lock" + commit_options: "--signoff" + file_pattern: bun.lock