Doormat Privacy Policy

the no-log, no-track privacy policy for websites

How to Use

It’s up to you to read through the policy and make sure it works for your website and your needs. Nobody provides any kind of guarantee. Using Doormat certainly doesn’t make any of the lawyers or other people who’ve contributed professionally responsible to you.

Privacy Page

To use the Doormat privacy policy for your website, create a privacy page with content based on this template, and link to it from the bottom of every page of your site. Make sure to replace all the {placeholders}.

This policy was last updated on {e.g. January 1, 2020}.

This website follows the Doormat Privacy Policy at https://doormatprivacy.com/1.0.1.

For questions or comments about privacy, you can contact us {e.g. via e-mail at privacy@example.com}.

{Optional:}This website uses the following service providers: {e.g. "Amazon Web Services for server hosting, Fastly for content distribution"}.

The first paragraph uses a legal technique called incorporation by reference.

Server Configuration

You will need to configure your server not to log information about visitors to your website. For example, using NGINX, your configuration file might look like:

# /etc/nginx/sites-available/example.com

server {
    listen 80;
    server_name example.com;
    error_log /dev/null;
    access_log /dev/null;
    location / {
        root /var/www/example.com;
        index index.html;
        try_files $uri $uri/index.html $uri.html =404;
    }
}

If you like, you can also enable IP-based rate limiting:

# /etc/nginx/sites-available/example.com

limit_req_zone $binary_remote_addr zone=example:10m rate=5r/s;

server {
    listen 80;
    server_name example.com;
    error_log /dev/null;
    access_log /dev/null;
    limit_req zone=example burst=8 nodelay;
    location / {
        root /var/www/example.com;
        index index.html;
        try_files $uri $uri/index.html $uri.html =404;
    }
}