trails-cool/trails
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
trails/openspec/changes/legal-disclaimers/tasks.md
Ullrich Schäfer cc0f44258a
Add legal pages, ToS acceptance, and alpha banner 
- Journal: Impressum (§5 TMG), Terms of Service, GDPR privacy page
- Registration flow: required ToS checkbox, termsAcceptedAt persisted
- Alpha banner on Journal (always visible); alpha badge on Planner hero
- Footer with legal links + GitHub on both apps
- Reduce PII: sendDefaultPii=false, Sentry init only after login (Journal)
- Drop Sentry from Planner (no login, no consent possible)
- Drop localStorage caching from i18n client detection
- Sync SSR i18n resources each request so locale edits HMR without restart

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-18 00:08:48 +02:00

2.8 KiB
Raw Blame History

1. Operator Information

  • 1.1 Decide what operator address to use on the Impressum (private address vs. business address service vs. lawyer's address) — legal requirement, must be reachable
  • 1.2 Create apps/journal/app/lib/operator.ts exporting the operator details (name, address, email, responsible person)

2. Legal Pages

  • 2.1 Create apps/journal/app/routes/legal.imprint.tsx rendering the Impressum from the operator config
  • 2.2 Create apps/journal/app/routes/legal.terms.tsx with Terms of Service covering alpha status, warranty disclaimer, DB reset disclosure, and data export responsibility
  • 2.3 Move existing apps/journal/app/routes/privacy.tsx to apps/journal/app/routes/legal.privacy.tsx and expand with GDPR-required sections (controller, legal basis, data subject rights, complaint right)
  • 2.4 Add a redirect from /privacy to /legal/privacy with 301 status
  • 2.5 Register the new routes in apps/journal/app/routes.ts

3. i18n

  • 3.1 Add German translations for all legal page copy (Impressum, Terms, Datenschutzerklärung) — DE is the authoritative version for German consumers
  • 3.2 Add English translations for the same pages
  • 3.3 Add translation keys for the alpha banner and signup acknowledgement checkbox

4. Signup Acknowledgement

  • 4.1 Add terms_accepted_at column (timestamp, nullable initially for existing users) to the users table in packages/db/src/schema/journal.ts
  • 4.2 Run pnpm db:push to apply the schema
  • 4.3 Add a required checkbox to apps/journal/app/routes/auth.register.tsx linking to the Terms
  • 4.4 Client-side: block form submission if checkbox is unchecked; show validation message
  • 4.5 Server-side: reject registration requests in api.auth.register.ts that don't include termsAccepted: true
  • 4.6 On successful registration, set users.terms_accepted_at = NOW()

5. Alpha Banner

  • 5.1 Create apps/journal/app/components/AlphaBanner.tsx — thin banner with message and dismiss button, reads sessionStorage.alphaBannerDismissed
  • 5.2 Render <AlphaBanner /> in the Journal root layout
  • 5.3 Add corresponding i18n strings

6. Footer Links

  • 6.1 Create apps/journal/app/components/Footer.tsx with links to Impressum, Privacy, Terms
  • 6.2 Add the footer to the Journal root layout
  • 6.3 Add a footer to the Planner layout linking to the Journal's legal pages (absolute URLs, since Planner is stateless)

7. Review & Publish

  • 7.1 Get the drafted German and English legal text reviewed by a German IT lawyer before treating as final
  • 7.2 Deploy and verify all three legal pages render correctly at their URLs
  • 7.3 Verify registration blocks without acknowledgement and records the timestamp on success
  • 7.4 Verify the alpha banner appears and dismisses correctly