Fretux/KrisHD_AI
3
0
Fork 0
Code Issues 3 Pull Requests Actions Packages Projects 1 Releases Wiki Activity

update tos and pp

Browse Source
This commit is contained in:
Frederik Spirgi
2026-09-23 10:26:49 +02:00
parent 08f5f3f8d9
commit c56b2c4058
5 changed files with 821 additions and 187 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PRIVACY_POLICY.md
+62 -39
View File
@@ -1,75 +1,98 @@
Privacy Policy # Privacy Policy
Last updated: 06.01.2026 Effective and last updated: 23 September 2026
1. Controller / Contact This policy explains what personal data Elsewhere handles, why it is needed, where it goes and the choices available to you.
Application: DeepFake ## 1. Who is responsible
Owner/Controller: Kristian Cerni Kristian Cerni is the controller responsible for Elsewhere. This policy applies to the Elsewhere website, account area, chats, persona market and related features.
Contact: https://github.com/KrisHD1337 - Service: Elsewhere
- Privacy contact: [kriscerni@gmail.com](mailto:kriscerni@gmail.com)
- Project contact: [github.com/KrisHD1337](https://github.com/KrisHD1337)
This policy applies to all users within Switzerland, the EU, and other jurisdictions. ## 2. Personal data we handle
2. What We Collect We collect data you provide and technical data generated while you use the service:
We collect only what’s needed to provide our service: - **Account data:** username, password hash and session records. Elsewhere does not ask for an email address during registration.
- **Workspace content:** chats, AI responses, conversation titles, personas, prompt templates, settings, memories, model choices, retry history and roleplay state.
- **Uploaded images:** image files plus filename, type, size, dimensions, ownership, storage key, timestamps and cached analysis associated with your question.
- **Persona market activity:** published personas and creator username, collections, favourites, ratings, reports and moderation records.
- **Web-search data:** the search query derived from your current message, selected result links and snippets when you turn on web search.
- **Technical and security data:** session identifiers, request identifiers, routes, response status and timing, account username for signed-in requests, and IP-based rate-limit information held temporarily in memory.
Account Data: Username, email (optional), hashed password Please avoid putting sensitive personal data into chats or images unless it is genuinely necessary for your use of the service.
Chat Data: Messages you send and the AI responses ## 3. How and why we use data
All data is processed to provide your chat history and account functionality.
3. Legal Basis (GDPR) We use personal data to:
For EU/EEA users, we process data based on: - create and secure your account, based on performance of our contract and legitimate interests in security;
- provide chats, personas, uploads, exports and settings, based on performance of our contract;
- run optional AI, image and search features at your request, based on performance of our contract;
- operate and moderate the persona market, based on performance of our contract and legitimate interests in a safe public space;
- prevent abuse, diagnose faults and maintain reliability, based on legitimate interests in security and service operation; and
- meet legal obligations and establish, exercise or defend legal claims where necessary.
Contract performance (to provide your account and chat history) We do not use your data for targeted advertising and do not sell it. Elsewhere does not make decisions about you that produce legal or similarly significant effects solely by automated means.
Legitimate interests (system security, fraud prevention) ## 4. AI models, image analysis and web search
Your data will not be processed for marketing without explicit consent.
4. How We Use Data To generate a reply, Elsewhere sends your current message and relevant conversation context to the configured model backend. Depending on your settings, this may also include persona instructions, conversation summaries, stored memories, selected web results and analysis derived from images. The final chat model does not receive image files directly; a separate configured vision model receives the image and your question to produce an analysis.
Your data is used to: If you enable web search, Elsewhere sends a query based on your current message to the configured SearXNG service. The service may pass that query to search engines enabled by its operator. It does not receive your full conversation, account password or persona profile from Elsewhere.
Authenticate and manage your account The deployment operator chooses and hosts or configures these services. Their location and sub-processors can therefore vary by deployment. Contact us if you need current information about the providers used by this instance.
Store and retrieve chat history ## 5. Public persona features
Improve and maintain the app Your chats, uploads and private personas are not public by default. If you publish a persona, its profile fields and your username become visible in the public market along with aggregate usage, favourite and rating information. Reports are available to administrators for moderation.
We do not sell your data. You can unpublish a persona. A private copy previously collected by another user is separate and is not automatically removed when the original is unpublished or your account is deleted.
5. Data Retention ## 6. When data is shared
We retain data as long as your account is active. If you request deletion, your data will be deleted unless we must retain it for legal reasons. We disclose personal data only as needed:
6. Data Transfers - to the configured model and search services when you use those features;
- to infrastructure providers that host or support the application under appropriate safeguards;
- to other users when you intentionally publish a persona;
- when required by law, a valid legal process or to protect rights, safety and service security; or
- as part of a service reorganisation, with notice and appropriate protection where required.
Your data may be stored or processed where our servers reside. Switzerland has an adequacy decision with the EU, meaning transfers can occur without additional safeguards. ## 7. Cookies and local storage
7. Your Rights (GDPR + Swiss rights) Elsewhere uses an essential, HTTP-only session cookie to keep you signed in. It expires after the configured session period or when invalidated. The browser also stores appearance and interface preferences locally on your device. These technologies are used for service functionality, not advertising or cross-site tracking.
Depending on jurisdiction, you may have the right to: ## 8. How long data is kept
Access your data - **Account and workspace data** remain until you delete individual items or your account.
- **Temporary, unattached uploads** are scheduled for deletion after 24 hours. Images attached to a message remain with that conversation.
- **Session records** expire according to the configured session lifetime and can be invalidated from Settings.
- **Operational logs and in-memory rate-limit records** are kept only as long as reasonably needed for security, diagnosis and operation.
Correct inaccuracies Deleting your account removes its workspace, attached files and published market entries from the active service. Deletion from backups or queued file cleanup may take additional time. We may keep limited records longer where required by law or necessary to establish, exercise or defend legal claims.
Request deletion ## 9. International transfers
Restrict or object to processing Data may be processed outside your country when infrastructure, model or search providers are located elsewhere. Where required, we rely on a legally recognised transfer mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact us for details relevant to the current deployment.
Request data portability (GDPR) ## 10. Security
To exercise these rights, contact us at: kriscerni@gmail.com We use reasonable technical and organisational measures designed to protect personal data, including hashed passwords, HTTP-only same-site session cookies, same-origin request protection, access checks for chats and attachments, upload validation and rate limiting. No system is completely secure, so please use a unique password and do not share it.
8. Data Security ## 11. Your choices and rights
We implement reasonable technical and organisational measures to protect your data — encryption for passwords and secure database access. Depending on the law that applies to you, you may have the right to request access, correction, deletion, restriction, portability or an objection to certain processing. You may also withdraw consent where processing relies on consent, without affecting earlier lawful processing.
9. Changes to this Policy You can export your workspace and delete your account directly in Settings. For other requests, email [kriscerni@gmail.com](mailto:kriscerni@gmail.com). We may need to verify your identity before completing a request.
We may update this document. Changes will be posted with a “Last updated” date. You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, your local data protection authority. We encourage you to contact us first so we can try to resolve the concern.
## 12. Changes and contact
We may update this policy when the service, providers or applicable requirements change. We will post the new version, change the date above and provide additional notice for material changes where appropriate.
Questions or requests can be sent to [kriscerni@gmail.com](mailto:kriscerni@gmail.com).
TERMS_OF_SERVICE.md
+66 -11
View File
@@ -1,17 +1,72 @@
Terms of Service # Terms of Service
Last updated: 06.01.2026 Effective and last updated: 23 September 2026
Use of DeepFake AI is subject to the following terms: These Terms form an agreement between you and Kristian Cerni, the operator of Elsewhere ("Elsewhere", "we", "us", or "our"). By creating an account or using the service, you agree to these Terms and acknowledge the [Privacy Policy](PRIVACY_POLICY.md). If you do not agree, do not use the service.
Service You must be legally able to enter into this agreement. If you use Elsewhere for an organisation, you confirm that you have authority to bind that organisation.
You agree that DeepFake is provided “as is,” and functionality may change.
User Conduct ## 1. The service
You are responsible for content you submit and maintaining secure account credentials.
Data Processing Elsewhere is an account-based AI chat and roleplay application. It lets you create conversations, personas and prompt templates; attach supported images; optionally search the web; and publish or collect personas through the public persona market.
By using the service, you consent to storing and processing your data as described in the Privacy Policy.
Limitation of Liability The service may change as features are added, removed or improved. We may set reasonable usage, storage or technical limits to keep Elsewhere reliable and safe.
We are not liable for service interruptions or data loss.
## 2. Your account
Provide accurate registration information, keep your password confidential and promptly tell us if you believe your account has been compromised. You are responsible for activity performed through your account unless it results from our failure to use reasonable security measures.
You may export your workspace, sign out active sessions, change your credentials or delete your account from Settings. Account deletion is permanent and removes your private workspace and published market content, subject to limited legal or operational retention described in the Privacy Policy.
## 3. Your content
You retain your rights in prompts, messages, images, personas and other material you submit. You give us a limited, non-exclusive licence to host, copy, process and display that content only as needed to operate, secure and improve the features you choose to use.
Content stays private to your account unless you deliberately publish it. When you publish a persona to the market, its persona details, your username and related public engagement data can be viewed and used by others. You can unpublish it, but copies already collected by other users may remain in their private workspaces.
You confirm that you have the rights and permissions needed for content you submit. You are responsible for that content and for deciding whether AI-generated output is suitable for your use.
## 4. Acceptable use
Do not use Elsewhere to:
- break the law, violate another person's rights or encourage serious harm;
- upload malware, probe for vulnerabilities, bypass access controls or disrupt the service;
- access another person's account or data without permission;
- misrepresent AI-generated material as authentic where that could deceive or harm someone;
- publish content that is unlawful, abusive, exploitative or infringes intellectual-property or privacy rights; or
- automate access in a way that places an unreasonable load on the service or circumvents its limits.
We may remove public content or restrict access when reasonably necessary to address abuse, security risks, legal obligations or violations of these Terms.
## 5. AI output, images and web search
AI output can be inaccurate, incomplete, biased or unexpected. It is not professional medical, legal, financial or other expert advice. Check important information independently and use human judgment before relying on or sharing output.
When image analysis is used, the system may misread visual details or text. When web search is enabled, Elsewhere may return links and excerpts from independent websites. We do not control or endorse those sites, and their content and availability remain their responsibility.
Outputs may not be unique. Other users may receive similar material, and we do not promise that generated output can be owned, registered or used without third-party restrictions.
## 6. Availability and warranties
Elsewhere is provided on an "as available" basis. To the extent permitted by law, we make no warranties that the service will always be available, secure or error-free, or that output will be accurate or fit for a particular purpose. Nothing in these Terms excludes warranties or consumer rights that cannot legally be excluded.
## 7. Limitation of liability
To the fullest extent permitted by applicable law, we are not liable for indirect, incidental, special, consequential or punitive loss, or for loss of profits, opportunities, data or goodwill, arising from your use of Elsewhere. We do not limit liability where doing so would be unlawful, including liability for intentional misconduct or gross negligence.
## 8. Suspension and termination
You may stop using Elsewhere or delete your account at any time. We may suspend or terminate access if you materially or repeatedly violate these Terms, create a security or legal risk, or misuse the service. Where reasonable, we will give notice and an opportunity to address the issue.
## 9. Governing law and changes
These Terms are governed by Swiss law, without regard to conflict-of-law principles. Mandatory protections and courts available to consumers in their country of residence remain unaffected.
We may update these Terms to reflect service, legal or security changes. We will post the revised version and update the date above. For material changes, we will provide reasonable notice where practicable. Continued use after the revised Terms take effect means you accept them.
If any provision is unenforceable, the remaining provisions continue in effect. A failure to enforce a provision is not a waiver of it.
## 10. Contact
Questions about these Terms can be sent to [kriscerni@gmail.com](mailto:kriscerni@gmail.com) or raised through the [project owner's GitHub profile](https://github.com/KrisHD1337).
public/css/legal.css
+347 -16
View File
@@ -1,21 +1,352 @@
.legal-page { .legal-page {
min-height: calc(100dvh - 36px); min-height: 100dvh;
}
.legal-shell {
width: min(1180px, calc(100% - 64px));
margin: 0 auto;
padding: clamp(56px, 8vw, 104px) 0 72px;
}
.legal-hero {
max-width: 820px;
margin-bottom: 48px;
}
.legal-hero .eyebrow {
margin-bottom: 14px;
color: var(--brand-strong);
}
.legal-hero h1 {
font-size: clamp(2.8rem, 7vw, 5.6rem);
letter-spacing: -.065em;
}
.legal-summary {
max-width: 720px;
margin: 24px 0 18px;
color: var(--text-soft);
font-size: clamp(1.05rem, 2vw, 1.28rem);
line-height: 1.7;
}
.legal-updated {
margin: 0;
color: var(--text-muted);
font-size: .83rem;
font-weight: 700;
letter-spacing: .035em;
text-transform: uppercase;
}
.legal-callout {
display: grid; display: grid;
place-items: center; grid-template-columns: repeat(3, 1fr);
} margin: 0 0 56px;
.legal-container, overflow: hidden;
.legal-content {
width: min(860px, 100%);
padding: clamp(24px, 5vw, 52px);
background: var(--surface-raised);
border: 1px solid var(--border); border: 1px solid var(--border);
border-radius: var(--radius-xl); border-radius: var(--radius-lg);
box-shadow: var(--shadow-md); background: var(--surface);
} }
.legal-container h1, .legal-content h1 { margin-bottom: 20px; }
.legal-container h2, .legal-content h2 { margin: 28px 0 10px; font-size: 1.25rem; } .legal-callout div {
.legal-container p, .legal-container li, .legal-content p, .legal-content li { color: var(--text-soft); line-height: 1.75; } min-width: 0;
.legal-container a, .legal-content a { font-weight: 700; } padding: 24px;
@media (max-width: 700px) { }
.legal-container, .legal-content { min-height: 100dvh; border: 0; border-radius: 0; }
.legal-callout div + div {
border-left: 1px solid var(--border);
}
.legal-callout strong,
.legal-callout span {
display: block;
}
.legal-callout strong {
margin-bottom: 7px;
color: var(--text);
font-family: var(--font-heading);
}
.legal-callout span {
color: var(--text-soft);
font-size: .88rem;
line-height: 1.6;
}
.legal-layout {
display: grid;
grid-template-columns: 220px minmax(0, 760px);
justify-content: space-between;
gap: clamp(48px, 8vw, 112px);
align-items: start;
}
.legal-toc {
position: sticky;
top: calc(var(--shell-header-height, 76px) + 28px);
padding-left: 18px;
border-left: 1px solid var(--border-strong);
}
.legal-toc p {
margin: 0 0 12px;
color: var(--text);
font-size: .74rem;
font-weight: 800;
letter-spacing: .1em;
text-transform: uppercase;
}
.legal-toc ol {
display: grid;
gap: 2px;
margin: 0;
padding: 0;
list-style: none;
}
.legal-toc a {
display: block;
padding: 5px 0;
color: var(--text-muted);
font-size: .83rem;
text-decoration: none;
}
.legal-toc a:hover,
.legal-toc a:focus-visible {
color: var(--brand-strong);
}
.legal-content {
min-width: 0;
}
.site-page .legal-content {
width: auto;
margin: 0;
padding: 0;
border: 0;
border-radius: 0;
background: transparent;
box-shadow: none;
}
.legal-content section {
scroll-margin-top: calc(var(--shell-header-height, 76px) + 24px);
padding: 0 0 44px;
}
.legal-content section + section {
padding-top: 44px;
border-top: 1px solid var(--border);
}
.legal-content h2 {
display: grid;
grid-template-columns: 34px minmax(0, 1fr);
gap: 12px;
align-items: baseline;
margin: 0 0 20px;
font-size: clamp(1.35rem, 2vw, 1.7rem);
}
.legal-content h2 span {
color: var(--brand);
font: 700 .68rem var(--font-body);
letter-spacing: .1em;
}
.legal-content p,
.legal-content li,
.legal-content dd,
.legal-content td,
.legal-content th {
color: var(--text-soft);
line-height: 1.78;
}
.legal-content p {
margin-bottom: 16px;
}
.legal-content p:last-child {
margin-bottom: 0;
}
.legal-content ul {
display: grid;
gap: 10px;
margin: 4px 0 20px;
padding-left: 24px;
}
.legal-content li::marker {
color: var(--brand);
}
.legal-content strong {
color: var(--text);
}
.legal-content a {
color: var(--brand-strong);
font-weight: 700;
text-underline-offset: 3px;
}
.legal-details {
display: grid;
margin: 24px 0 0;
border-top: 1px solid var(--border);
}
.legal-details div {
display: grid;
grid-template-columns: 150px minmax(0, 1fr);
gap: 20px;
padding: 13px 0;
border-bottom: 1px solid var(--border);
}
.legal-details dt {
color: var(--text-muted);
font-size: .78rem;
font-weight: 800;
letter-spacing: .04em;
text-transform: uppercase;
}
.legal-details dd {
margin: 0;
}
.legal-table-wrap {
margin: 22px 0;
overflow-x: auto;
border: 1px solid var(--border);
border-radius: var(--radius-md);
}
.legal-content table {
width: 100%;
min-width: 680px;
border-collapse: collapse;
background: var(--surface);
font-size: .84rem;
}
.legal-content th,
.legal-content td {
padding: 14px 16px;
border-bottom: 1px solid var(--border);
text-align: left;
vertical-align: top;
}
.legal-content th {
color: var(--text);
background: var(--surface-soft);
font-size: .74rem;
letter-spacing: .025em;
}
.legal-content tbody tr:last-child td {
border-bottom: 0;
}
.legal-footer {
display: flex;
align-items: center;
gap: 24px;
width: min(1180px, calc(100% - 64px));
margin: 0 auto;
padding: 24px 0 40px;
border-top: 1px solid var(--border);
color: var(--text-muted);
font-size: .8rem;
}
.legal-footer span {
margin-right: auto;
color: var(--text);
font-weight: 800;
}
.legal-footer a {
color: var(--text-soft);
}
@media (max-width: 840px) {
.legal-shell,
.legal-footer {
width: min(100% - 40px, 720px);
}
.legal-layout {
display: block;
}
.legal-toc {
position: static;
margin-bottom: 52px;
}
.legal-toc ol {
grid-template-columns: repeat(2, minmax(0, 1fr));
gap: 2px 20px;
}
.legal-callout {
grid-template-columns: 1fr;
}
.legal-callout div + div {
border-top: 1px solid var(--border);
border-left: 0;
}
}
@media (max-width: 560px) {
.legal-shell {
width: calc(100% - 32px);
padding: 42px 0 48px;
}
.legal-hero {
margin-bottom: 38px;
}
.legal-hero h1 {
font-size: clamp(2.55rem, 15vw, 4rem);
}
.legal-toc ol {
grid-template-columns: 1fr;
}
.legal-content section,
.legal-content section + section {
padding-top: 32px;
padding-bottom: 32px;
}
.legal-details div {
grid-template-columns: 1fr;
gap: 3px;
}
.legal-footer {
width: calc(100% - 32px);
align-items: flex-start;
gap: 10px;
flex-direction: column;
}
.legal-footer span {
margin: 0 0 6px;
}
} }
public/privacy.html
+177 -65
View File
@@ -1,15 +1,16 @@
<!DOCTYPE html> <!doctype html>
<html lang="en"> <html lang="en">
<head> <head>
<link rel="icon" type="image/svg+xml" href="/favicon.svg"> <meta charset="UTF-8">
<meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="description" content="How Elsewhere collects, uses and protects personal data.">
<title>Privacy Policy – DeepFake</title> <title>Privacy Policy – Elsewhere</title>
<link rel="stylesheet" href="/css/style.css?v=20260909-account-controls" /> <link rel="icon" type="image/svg+xml" href="/img/favicon.svg">
<link rel="stylesheet" href="/css/legal.css?v=20260909-account-controls" /> <script src="/js/theme-bootstrap.js?v=20260923-legal"></script>
<script src="/js/theme-bootstrap.js?v=20260909-account-controls"></script> <link rel="stylesheet" href="/css/style.css?v=20260923-legal">
<link rel="stylesheet" href="/css/shell.css?v=20260909-account-controls"> <link rel="stylesheet" href="/css/shell.css?v=20260923-legal">
<link rel="stylesheet" href="/css/legal.css?v=20260923-legal">
<link <link
href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap" href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap"
rel="stylesheet"> rel="stylesheet">
@@ -17,86 +18,197 @@
<body class="site-page legal-page"> <body class="site-page legal-page">
<!-- site-header --> <!-- site-header -->
<main id="main" class="legal-content"> <main id="main" class="legal-shell">
<header class="legal-hero">
<p class="eyebrow">Your data, explained</p>
<h1>Privacy Policy</h1> <h1>Privacy Policy</h1>
<p>Last updated: <strong>06.01.2026</strong></p> <p class="legal-summary">This policy explains what personal data Elsewhere handles, why it is needed, where
it goes and the choices available to you.</p>
<p class="legal-updated">Effective and last updated <time datetime="2026-09-23">23 September 2026</time></p>
</header>
<section> <aside class="legal-callout" aria-label="Privacy summary">
<h2>1. Controller / Contact</h2> <div><strong>No advertising</strong><span>We do not sell personal data or use it for targeted ads.</span></div>
<p><strong>Application:</strong> DeepFake</p> <div><strong>You stay in control</strong><span>Export your workspace or delete your account in Settings.</span></div>
<p><strong>Owner/Controller:</strong> Kristian Cerni</p> <div><strong>Features are optional</strong><span>Web search, image uploads and public publishing are choices you make.</span></div>
<p><strong>Contact:</strong> <a href="https://github.com/KrisHD1337">https://github.com/KrisHD1337</a></p> </aside>
<p>This policy applies to all users within Switzerland, the EU, and other jurisdictions.</p>
<div class="legal-layout">
<nav class="legal-toc" aria-label="On this page">
<p>On this page</p>
<ol>
<li><a href="#controller">Who is responsible</a></li>
<li><a href="#data">Data we handle</a></li>
<li><a href="#use">How and why we use it</a></li>
<li><a href="#providers">AI, images and search</a></li>
<li><a href="#public">Public features</a></li>
<li><a href="#sharing">Sharing</a></li>
<li><a href="#cookies">Cookies</a></li>
<li><a href="#retention">Retention</a></li>
<li><a href="#transfers">International transfers</a></li>
<li><a href="#security">Security</a></li>
<li><a href="#rights">Your rights</a></li>
<li><a href="#changes">Changes and contact</a></li>
</ol>
</nav>
<article class="legal-content">
<section id="controller">
<h2><span>01</span> Who is responsible</h2>
<p>Kristian Cerni is the controller responsible for Elsewhere. This policy applies to the Elsewhere
website, account area, chats, persona market and related features.</p>
<dl class="legal-details">
<div><dt>Service</dt><dd>Elsewhere</dd></div>
<div><dt>Privacy contact</dt><dd><a href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a></dd></div>
<div><dt>Project contact</dt><dd><a href="https://github.com/KrisHD1337" rel="external noopener">github.com/KrisHD1337</a></dd></div>
</dl>
</section> </section>
<section> <section id="data">
<h2>2. What We Collect</h2> <h2><span>02</span> Personal data we handle</h2>
<p>We collect only what’s needed to provide our service:</p> <p>We collect data you provide and technical data generated while you use the service:</p>
<ul> <ul>
<li><strong>Account Data:</strong> Username, email (optional), hashed password</li> <li><strong>Account data:</strong> username, password hash and session records. Elsewhere does not
<li><strong>Chat Data:</strong> Messages you send and the AI responses</li> ask for an email address during registration.</li>
<li><strong>Workspace content:</strong> chats, AI responses, conversation titles, personas, prompt
templates, settings, memories, model choices, retry history and roleplay state.</li>
<li><strong>Uploaded images:</strong> image files plus filename, type, size, dimensions, ownership,
storage key, timestamps and cached analysis associated with your question.</li>
<li><strong>Persona market activity:</strong> published personas and creator username, collections,
favourites, ratings, reports and moderation records.</li>
<li><strong>Web-search data:</strong> the search query derived from your current message, selected
result links and snippets when you turn on web search.</li>
<li><strong>Technical and security data:</strong> session identifiers, request identifiers, routes,
response status and timing, account username for signed-in requests, and IP-based rate-limit
information held temporarily in memory.</li>
</ul> </ul>
<p>All data is processed to provide your chat history and account functionality.</p> <p>Please avoid putting sensitive personal data into chats or images unless it is genuinely necessary
for your use of the service.</p>
</section> </section>
<section> <section id="use">
<h2>3. Legal Basis (GDPR)</h2> <h2><span>03</span> How and why we use data</h2>
<p>For EU/EEA users, we process data based on:</p> <div class="legal-table-wrap">
<table>
<thead><tr><th>Purpose</th><th>Data used</th><th>Basis where the GDPR applies</th></tr></thead>
<tbody>
<tr><td>Create and secure your account</td><td>Account, session and security data</td><td>Performance of our contract; legitimate interests in security</td></tr>
<tr><td>Provide chats, personas, uploads, exports and settings</td><td>Account and workspace content</td><td>Performance of our contract</td></tr>
<tr><td>Run optional AI, image and search features</td><td>Your selected message, relevant context, images or query</td><td>Performance of our contract at your request</td></tr>
<tr><td>Operate and moderate the persona market</td><td>Published content, username and market activity</td><td>Performance of our contract; legitimate interests in a safe public space</td></tr>
<tr><td>Prevent abuse, diagnose faults and maintain reliability</td><td>Technical, account and limited content data where necessary</td><td>Legitimate interests in security and service operation</td></tr>
<tr><td>Meet legal obligations and defend claims</td><td>Relevant records</td><td>Legal obligation or legitimate interests</td></tr>
</tbody>
</table>
</div>
<p>We do not use your data for targeted advertising and do not sell it. Elsewhere does not make
decisions about you that produce legal or similarly significant effects solely by automated means.</p>
</section>
<section id="providers">
<h2><span>04</span> AI models, image analysis and web search</h2>
<p>To generate a reply, Elsewhere sends your current message and relevant conversation context to the
configured model backend. Depending on your settings, this may also include persona instructions,
conversation summaries, stored memories, selected web results and analysis derived from images.
The final chat model does not receive image files directly; a separate configured vision model
receives the image and your question to produce an analysis.</p>
<p>If you enable web search, Elsewhere sends a query based on your current message to the configured
SearXNG service. The service may pass that query to search engines enabled by its operator. It does
not receive your full conversation, account password or persona profile from Elsewhere.</p>
<p>The deployment operator chooses and hosts or configures these services. Their location and
sub-processors can therefore vary by deployment. Contact us if you need current information about
the providers used by this instance.</p>
</section>
<section id="public">
<h2><span>05</span> Public persona features</h2>
<p>Your chats, uploads and private personas are not public by default. If you publish a persona, its
profile fields and your username become visible in the public market along with aggregate usage,
favourite and rating information. Reports are available to administrators for moderation.</p>
<p>You can unpublish a persona. A private copy previously collected by another user is separate and
is not automatically removed when the original is unpublished or your account is deleted.</p>
</section>
<section id="sharing">
<h2><span>06</span> When data is shared</h2>
<p>We disclose personal data only as needed:</p>
<ul> <ul>
<li>Contract performance (to provide your account and chat history)</li> <li>to the configured model and search services when you use those features;</li>
<li>Legitimate interests (system security, fraud prevention)</li> <li>to infrastructure providers that host or support the application under appropriate safeguards;</li>
<li>to other users when you intentionally publish a persona;</li>
<li>when required by law, a valid legal process or to protect rights, safety and service security; or</li>
<li>as part of a service reorganisation, with notice and appropriate protection where required.</li>
</ul> </ul>
<p>Your data will not be processed for marketing without explicit consent.</p>
</section> </section>
<section> <section id="cookies">
<h2>4. How We Use Data</h2> <h2><span>07</span> Cookies and local storage</h2>
<p>Your data is used to:</p> <p>Elsewhere uses an essential, HTTP-only session cookie to keep you signed in. It expires after the
configured session period or when invalidated. The browser also stores appearance and interface
preferences locally on your device. These technologies are used for service functionality, not
advertising or cross-site tracking.</p>
</section>
<section id="retention">
<h2><span>08</span> How long data is kept</h2>
<ul> <ul>
<li>Authenticate and manage your account</li> <li><strong>Account and workspace data</strong> remain until you delete individual items or your account.</li>
<li>Store and retrieve chat history</li> <li><strong>Temporary, unattached uploads</strong> are scheduled for deletion after 24 hours. Images attached to a message remain with that conversation.</li>
<li>Improve and maintain the app</li> <li><strong>Session records</strong> expire according to the configured session lifetime and can be invalidated from Settings.</li>
<li><strong>Operational logs and in-memory rate-limit records</strong> are kept only as long as reasonably needed for security, diagnosis and operation.</li>
</ul> </ul>
<p>We do not sell your data.</p> <p>Deleting your account removes its workspace, attached files and published market entries from the
active service. Deletion from backups or queued file cleanup may take additional time. We may keep
limited records longer where required by law or necessary to establish, exercise or defend legal claims.</p>
</section> </section>
<section> <section id="transfers">
<h2>5. Data Retention</h2> <h2><span>09</span> International transfers</h2>
<p>We retain data as long as your account is active. If you request deletion, your data will be deleted <p>Data may be processed outside your country when infrastructure, model or search providers are
unless we must retain it for legal reasons.</p> located elsewhere. Where required, we rely on a legally recognised transfer mechanism, such as an
adequacy decision or appropriate contractual safeguards. Contact us for details relevant to the
current deployment.</p>
</section> </section>
<section> <section id="security">
<h2>6. Data Transfers</h2> <h2><span>10</span> Security</h2>
<p>Your data may be stored or processed where our servers reside. Switzerland has an adequacy decision with <p>We use reasonable technical and organisational measures designed to protect personal data,
the EU, meaning transfers can occur without additional safeguards.</p> including hashed passwords, HTTP-only same-site session cookies, same-origin request protection,
access checks for chats and attachments, upload validation and rate limiting. No system is
completely secure, so please use a unique password and do not share it.</p>
</section> </section>
<section> <section id="rights">
<h2>7. Your Rights (GDPR + Swiss rights)</h2> <h2><span>11</span> Your choices and rights</h2>
<p>Depending on jurisdiction, you may have the right to:</p> <p>Depending on the law that applies to you, you may have the right to request access, correction,
<ul> deletion, restriction, portability or an objection to certain processing. You may also withdraw
<li>Access your data</li> consent where processing relies on consent, without affecting earlier lawful processing.</p>
<li>Correct inaccuracies</li> <p>You can export your workspace and delete your account directly in Settings. For other requests,
<li>Request deletion</li> email <a href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a>. We may need to verify your
<li>Restrict or object to processing</li> identity before completing a request.</p>
<li>Request data portability (GDPR)</li> <p>You may lodge a complaint with the Swiss Federal Data Protection and Information Commissioner
</ul> (FDPIC) or, where the GDPR applies, your local data protection authority. We encourage you to
<p>To exercise these rights, contact us at: <a href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a></p> contact us first so we can try to resolve the concern.</p>
</section> </section>
<section> <section id="changes">
<h2>8. Data Security</h2> <h2><span>12</span> Changes and contact</h2>
<p>We implement reasonable technical and organizational measures to protect your data — encryption for <p>We may update this policy when the service, providers or applicable requirements change. We will
passwords and secure database access.</p> post the new version here, change the date above and provide additional notice for material
</section> changes where appropriate.</p>
<p>Questions or requests can be sent to <a
<section> href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a>.</p>
<h2>9. Changes to this Policy</h2>
<p>We may update this document. Changes will be posted with a “Last updated” date.</p>
</section> </section>
</article>
</div>
</main> </main>
<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
<footer class="legal-footer">
<span>Elsewhere</span>
<a href="/tos.html">Terms of Service</a>
<a href="/">Back to Elsewhere</a>
</footer>
<script type="module" src="/js/workspaceNavigation.js?v=20260923-legal"></script>
</body> </body>
</html> </html>
public/tos.html
+146 -33
View File
@@ -1,15 +1,16 @@
<!DOCTYPE html> <!doctype html>
<html lang="en"> <html lang="en">
<head> <head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1">
<meta name="description" content="Terms governing your use of Elsewhere.">
<title>Terms of Service – Elsewhere</title>
<link rel="icon" type="image/svg+xml" href="/img/favicon.svg"> <link rel="icon" type="image/svg+xml" href="/img/favicon.svg">
<meta charset="UTF-8" /> <script src="/js/theme-bootstrap.js?v=20260923-legal"></script>
<meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="stylesheet" href="/css/style.css?v=20260923-legal">
<title>Terms of Service – DeepFake</title> <link rel="stylesheet" href="/css/shell.css?v=20260923-legal">
<link rel="stylesheet" href="/css/style.css?v=20260909-account-controls" /> <link rel="stylesheet" href="/css/legal.css?v=20260923-legal">
<link rel="stylesheet" href="/css/legal.css?v=20260909-account-controls" />
<script src="/js/theme-bootstrap.js?v=20260909-account-controls"></script>
<link rel="stylesheet" href="/css/shell.css?v=20260909-account-controls">
<link <link
href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap" href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;700&family=Manrope:wght@400;500;600;700;800&display=swap"
rel="stylesheet"> rel="stylesheet">
@@ -17,45 +18,157 @@
<body class="site-page legal-page"> <body class="site-page legal-page">
<!-- site-header --> <!-- site-header -->
<main id="main" class="legal-content"> <main id="main" class="legal-shell">
<header class="legal-hero">
<p class="eyebrow">The ground rules</p>
<h1>Terms of Service</h1> <h1>Terms of Service</h1>
<p>Last updated: <strong>06.01.2026</strong></p> <p class="legal-summary">Please read these terms before using Elsewhere. They explain what you can expect
from the service and what we expect from you.</p>
<p class="legal-updated">Effective and last updated <time datetime="2026-09-23">23 September 2026</time></p>
</header>
<section> <div class="legal-layout">
<h2>Service</h2> <nav class="legal-toc" aria-label="On this page">
<p>You agree that DeepFake AI is provided “as is,” and functionality may change without notice.</p> <p>On this page</p>
<ol>
<li><a href="#acceptance">Acceptance</a></li>
<li><a href="#service">The service</a></li>
<li><a href="#accounts">Accounts</a></li>
<li><a href="#content">Your content</a></li>
<li><a href="#conduct">Acceptable use</a></li>
<li><a href="#ai">AI and search</a></li>
<li><a href="#availability">Availability</a></li>
<li><a href="#liability">Liability</a></li>
<li><a href="#termination">Termination</a></li>
<li><a href="#law">Law and changes</a></li>
<li><a href="#contact">Contact</a></li>
</ol>
</nav>
<article class="legal-content">
<section id="acceptance">
<h2><span>01</span> Acceptance of these terms</h2>
<p>These Terms form an agreement between you and Kristian Cerni, the operator of Elsewhere
(“Elsewhere”, “we”, “us”, or “our”). By creating an account or using the service, you agree to
these Terms and acknowledge the <a href="/privacy.html">Privacy Policy</a>. If you do not agree,
do not use the service.</p>
<p>You must be legally able to enter into this agreement. If you use Elsewhere for an organisation,
you confirm that you have authority to bind that organisation.</p>
</section> </section>
<section> <section id="service">
<h2>User Conduct</h2> <h2><span>02</span> The service</h2>
<p>You are responsible for content you submit and for maintaining secure account credentials. Do not use <p>Elsewhere is an account-based AI chat and roleplay application. It lets you create conversations,
DeepFake for unlawful purposes.</p> personas and prompt templates; attach supported images; optionally search the web; and publish or
collect personas through the public persona market.</p>
<p>The service may change as features are added, removed or improved. We may set reasonable usage,
storage or technical limits to keep Elsewhere reliable and safe.</p>
</section> </section>
<section> <section id="accounts">
<h2>Data Processing</h2> <h2><span>03</span> Your account</h2>
<p>By using the service, you consent to storing and processing your data as described in the <a <p>Provide accurate registration information, keep your password confidential and promptly tell us
href="/privacy.html">Privacy Policy</a>.</p> if you believe your account has been compromised. You are responsible for activity performed
through your account unless it results from our failure to use reasonable security measures.</p>
<p>You may export your workspace, sign out active sessions, change your credentials or delete your
account from Settings. Account deletion is permanent and removes your private workspace and
published market content, subject to limited legal or operational retention described in the
Privacy Policy.</p>
</section> </section>
<section> <section id="content">
<h2>Limitation of Liability</h2> <h2><span>04</span> Your content</h2>
<p>We are not liable for service interruptions, data loss, or any indirect damages arising from your use of <p>You retain your rights in prompts, messages, images, personas and other material you submit. You
DeepFake AI.</p> give us a limited, non-exclusive licence to host, copy, process and display that content only as
needed to operate, secure and improve the features you choose to use.</p>
<p>Content stays private to your account unless you deliberately publish it. When you publish a
persona to the market, its persona details, your username and related public engagement data can
be viewed and used by others. You can unpublish it, but copies already collected by other users
may remain in their private workspaces.</p>
<p>You confirm that you have the rights and permissions needed for content you submit. You are
responsible for that content and for deciding whether AI-generated output is suitable for your
use.</p>
</section> </section>
<section> <section id="conduct">
<h2>Governing Law</h2> <h2><span>05</span> Acceptable use</h2>
<p>These Terms are governed by applicable laws in your jurisdiction (e.g., Switzerland or EU Member States). <p>Do not use Elsewhere to:</p>
</p> <ul>
<li>break the law, violate another person’s rights or encourage serious harm;</li>
<li>upload malware, probe for vulnerabilities, bypass access controls or disrupt the service;</li>
<li>access another person’s account or data without permission;</li>
<li>misrepresent AI-generated material as authentic where that could deceive or harm someone;</li>
<li>publish content that is unlawful, abusive, exploitative or infringes intellectual-property or
privacy rights; or</li>
<li>automate access in a way that places an unreasonable load on the service or circumvents its
limits.</li>
</ul>
<p>We may remove public content or restrict access when reasonably necessary to address abuse,
security risks, legal obligations or violations of these Terms.</p>
</section> </section>
<section> <section id="ai">
<h2>Changes to Terms</h2> <h2><span>06</span> AI output, images and web search</h2>
<p>We may modify these Terms at any time. Updates will be reflected with a new “Last updated” date.</p> <p>AI output can be inaccurate, incomplete, biased or unexpected. It is not professional medical,
legal, financial or other expert advice. Check important information independently and use human
judgment before relying on or sharing output.</p>
<p>When image analysis is used, the system may misread visual details or text. When web search is
enabled, Elsewhere may return links and excerpts from independent websites. We do not control or
endorse those sites, and their content and availability remain their responsibility.</p>
<p>Outputs may not be unique. Other users may receive similar material, and we do not promise that
generated output can be owned, registered or used without third-party restrictions.</p>
</section> </section>
<section id="availability">
<h2><span>07</span> Availability and warranties</h2>
<p>Elsewhere is provided on an “as available” basis. To the extent permitted by law, we make no
warranties that the service will always be available, secure or error-free, or that output will
be accurate or fit for a particular purpose. Nothing in these Terms excludes warranties or
consumer rights that cannot legally be excluded.</p>
</section>
<section id="liability">
<h2><span>08</span> Limitation of liability</h2>
<p>To the fullest extent permitted by applicable law, we are not liable for indirect, incidental,
special, consequential or punitive loss, or for loss of profits, opportunities, data or goodwill,
arising from your use of Elsewhere. We do not limit liability where doing so would be unlawful,
including liability for intentional misconduct or gross negligence.</p>
</section>
<section id="termination">
<h2><span>09</span> Suspension and termination</h2>
<p>You may stop using Elsewhere or delete your account at any time. We may suspend or terminate
access if you materially or repeatedly violate these Terms, create a security or legal risk, or
misuse the service. Where reasonable, we will give notice and an opportunity to address the issue.</p>
</section>
<section id="law">
<h2><span>10</span> Governing law and changes</h2>
<p>These Terms are governed by Swiss law, without regard to conflict-of-law principles. Mandatory
protections and courts available to consumers in their country of residence remain unaffected.</p>
<p>We may update these Terms to reflect service, legal or security changes. We will post the revised
version here and update the date above. For material changes, we will provide reasonable notice
where practicable. Continued use after the revised Terms take effect means you accept them.</p>
<p>If any provision is unenforceable, the remaining provisions continue in effect. A failure to
enforce a provision is not a waiver of it.</p>
</section>
<section id="contact">
<h2><span>11</span> Contact</h2>
<p>Questions about these Terms can be sent to <a
href="mailto:kriscerni@gmail.com">kriscerni@gmail.com</a> or raised through the project’s <a
href="https://github.com/KrisHD1337" rel="external noopener">GitHub profile</a>.</p>
</section>
</article>
</div>
</main> </main>
<script type="module" src="/js/workspaceNavigation.js?v=20260909-account-controls"></script>
<footer class="legal-footer">
<span>Elsewhere</span>
<a href="/privacy.html">Privacy Policy</a>
<a href="/">Back to Elsewhere</a>
</footer>
<script type="module" src="/js/workspaceNavigation.js?v=20260923-legal"></script>
</body> </body>
</html> </html>