From 1c9b825af269fe56a7411241989a5788faa690a0 Mon Sep 17 00:00:00 2001 From: Carmelo Messina Date: Wed, 19 Feb 2025 08:40:49 +0100 Subject: [PATCH] [DOCS] Update features and privacy policy (#1829) Added information about the new fonts anti-fingerprinting feature and changed the privacy policy indicating that fonts are downloaded from cromite.org and no log is active on the server. --- docs/FEATURES.md | 3 ++- docs/PRIVACY_POLICY.md | 5 ++++- 2 files changed, 6 insertions(+), 2 deletions(-) diff --git a/docs/FEATURES.md b/docs/FEATURES.md index 56e1e39f..cd8fb607 100644 --- a/docs/FEATURES.md +++ b/docs/FEATURES.md @@ -25,7 +25,6 @@ Also disable gamepadconnected and gamepaddisconnected, see https://jshelter.org/ - Disable WebGL by default - Disable WebRTC by default - Disable MIDI permission by default -- Disable the use of non-standard and local fonts - Enable Canvas and Rect API fingerprinting mitigations - Enable Media API fingerprinting mitigations - AudioBuffer and AnalyserNode fingerprinting mitigations (https://fingerprint.com/blog/audio-fingerprinting/) @@ -49,6 +48,8 @@ Also disable gamepadconnected and gamepaddisconnected, see https://jshelter.org/ - (WINDOWS) Hide the presence of the webcam if the user has not given permission - (WINDOWS) PublicKeyCredential fingerprinting mitigations, see #1758 - (DESKTOP) Disable Bluetooth API by default +- (WINDOWS) Disable the use of non-standard and local fonts +- (ANDROID) Replaces system fonts with a predefined set (https://github.com/uazo/cromite/issues/1829) #### Tracking navigation - Enable network isolation features diff --git a/docs/PRIVACY_POLICY.md b/docs/PRIVACY_POLICY.md index 2acd8ae4..b372d4b6 100644 --- a/docs/PRIVACY_POLICY.md +++ b/docs/PRIVACY_POLICY.md @@ -75,7 +75,10 @@ On desktop platforms it is possible to activate the automatic update of extensio In Android, the installation of PWAs is disabled and cannot be re-enabled. -Cromite does not download or update any external components. +Cromite does not download or update any google components. + +Cromite, by default, downloads from www.cromite.org a zip containing the fonts it uses for anti-fingerpriting protection. If the zip has already been downloaded, no connection is made again. +In www.cromite.org, no log is active. #### NETWORK TIME Cromite never uses network time to verify SSL certificates, and no call is made to verify it.