dashblocks.github.io/privacy.html at develop · DashBlocks/dashblocks.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
<!DOCTYPE html>
<html lang="en">
    <!-- Google Tag Manager -->
    <script>(function (w, d, s, l, i) {
            w[l] = w[l] || []; w[l].push({
                'gtm.start':
                    new Date().getTime(), event: 'gtm.js'
            }); var f = d.getElementsByTagName(s)[0],
                j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
                    'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
        })(window, document, 'script', 'dataLayer', 'GTM-TZMQG6RR');</script>
    <!-- End Google Tag Manager -->
    <!-- Google Tag Manager (noscript) -->
    <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TZMQG6RR" height="0" width="0"
            style="display:none;visibility:hidden"></iframe></noscript>
    <!-- End Google Tag Manager (noscript) -->
    <head>
        <title>Dash Privacy Policy</title>
        <meta charset="utf8">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <style>
            body {
                font-family: Inter, ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Arial;
                margin: 0; padding: 0;
            }
            header {
                background-color: rgb(255, 172, 77);
                color: white;
                text-align: center;
                padding: 20px 0;
            }
            main {
                max-width: 600px;
                margin: auto;
            }
            @media (prefers-color-scheme: dark) {
                body { background: #111; color: #eee; }
                a { color: #4af; }
            }
        </style>
    </head>

    <body>
        <header>
            <h1>Dash Privacy Policy</h1>
        </header>

        <main>
            <!-- UPDATE THIS WHEN MAKING CONTENT CHANGES -->
            <p><i>Updated April 23, 2026</i></p>

            <p><b>The Dash (DashBlocks) project respects your privacy.</b> Every website says this, but we mean it: We aren't interested in your data. In the interest of full transparency, this document lists every place where your data might be collected or shared:</p>

            <h2>Loading projects</h2>
            <p>When you load a project from another website, you are subject to the privacy practices of that website. For example, when loading projects from Scratch, you are subject to the <a href="https://scratch.mit.edu/privacy_policy">Scratch privacy policy</a>. When loading projects from Scratch specifically, the project ID will also be shared with Dash as part of Scratch's API does not allow direct access. We may briefly log the project ID for caching.</p>

            <h2>Uploading & Sharing projects</h2>
            <p>When you upload and share any project to Dash, your project will be accessable to anyone by project ID even if not logged in. You are responsible for what you are sharing.</p>
            <p>Dash Team members can delete your projects even you not knowing it. You can delete shared projects on <a href="/mystuff">mystuff page</a>. Note that if project was created more than 48 hours: It will be removed from your profile, but still may be accessable by it's ID. For full deletion, any member of Dash Team should review and manually delete project assets. If project was created less than 48 hours, your project should be deleted immediately.</p>

            <h2>Running projects</h2>
            <p>When connecting to <a href="https://turbowarp.org">TurboWarp</a>'s cloud variable servers, the project ID and username may be logged for 14 days. Data in cloud variables is sent to anyone else connected at the same time. Custom cloud variable servers are outside of our control.</p>
            <p>Some extensions must communicate with external APIs to function. For example, the translate and text-to-speech extensions rely on the Scratch API, which is covered by the <a href="https://scratch.mit.edu/privacy_policy">Scratch privacy policy</a>. To improve performance, some extensions access Dash's APIs instead where both the request (for example, the text being translated) and the result after forwarding to Scratch (for example, the translated version of the text) may be cached.</p>
            <p>Most extensions on the <a href="https://dashblocks.github.io/extensions">official extension gallery</a> will ask for permission when the project attempts to use the extension to access an untrusted website, however we cannot guarantee this is 100% reliable.</p>
            <p>When loading a custom extension from a place other than the official gallery such as a URL or file on your computer, the editor will ask for permission to load the extension. If you approve this dialog, the extension can bypass the permission dialogs that official extensions show.</p>

            <h2>Users' Profiles</h2>
            <p>Once you registered on Dash, your profile will be visible to anyone by your user ID or username even if not logged in.</p>
            <p>When you upload image for profile picture, it will be also accessable to anyone. You are responsive for what you are uploading.</p>
            <p>When you change your profile description, it will be also accessable to anyone. You are responsive for what you are writing.</p>
            <p>Dash Team members can delete any parts of your profile even you not knowing it.</p>
            <p>Dash Team members can fully delete/ban your IP/profile/account even you not knowing it.</p>

            <h2>Usernames</h2>
            <p>If not logged in: A randomly generated username may be saved in your browser. You can replace this with a custom username.</p>
            <p>If logged in: The username will be set to the username you used to register. You cannot replace this with a custom username.</p>
            <p>Randomly generated usernames are anonymized (the random part is removed) before being sent to any cloud variable server.</p>

            <h2>Settings</h2>
            <p>Many Dash websites will store settings such as <a href="https://dashblocks.github.io/addons.html">addon settings</a> or <a href="https://dashblocks.github.io/packager/">packager settings</a> in your browser.</p>

            <h2>Aggregated data</h2>
            <p>We may log anonymous aggregated data such as how many people use a certain site per day.</p>

            <h2>Dash (DashBlocks)</h2>
            <p>Dash is a mod of <a href="https://scratch.org">Scratch</a> and other mods.</p>

            <!-- <h2>TurboWarp Desktop</h2>
            <p><a href="https://desktop.turbowarp.org/">TurboWarp Desktop</a> may make requests to check for updates. This can be disabled by pressing "Settings" then "Desktop Settings".</p>
            <p><a href="https://desktop.turbowarp.org/">TurboWarp Desktop</a> has a disabled-by-default option to enable "Rich Presence" which shares the name of the project you have open and how long it has been open with chat apps running on your computer, which may be displayed on your public profile. This can be disabled by pressing "Settings" then "Desktop Settings".</p>

            <h2>docs.turbowarp.org</h2>
            <p>The search bar is provided by Algolia. See the <a href="https://www.algolia.com/policies/privacy/">Algolia privacy policy</a>.</p> -->

            <h2>Dash Packager</h2>
            <p>The <a href="https://dashblocks.github.io/packager">Dash Packager</a> may store settings and cache large downloads such as Electron in your browser for convenience and performance. Dash Packager is a fork of the <a href="https://packager.turbowarp.org">TurboWarp Packager</a>.</p>
            <p>When packaging a project using custom extensions, the packager may access those websites to download the extensions.</p>

            <h2>Projects generated by the Dash Packager</h2>
            <p>Packaged projects include all scripts, costumes, and sounds to run the project. The packager tries to include all custom extensions too, but in some cases, the packaged project may need to download certain extensions each time it runs.</p>
            <p>Advanced features such as third-party custom extensions, custom cloud host, custom JS, and custom CSS are outside of our control.</p>
            <p>Note that, unlike the Dash editor, custom extensions in packaged projects will not ask for permission before contacting websites.</p>
            <p>You are responsible for informing end users about the privacy practices of the files you distribute. Do not link to this document as your project's privacy policy as it may change in the future. You must write your own.</p>

            <!-- <h2>TurboWarp Packager Extras</h2>
            <p><a href="https://github.com/TurboWarp/packager-extras/releases">TurboWarp Packager Extras</a> may make requests to check for updates.</p> -->

            <h2>Contact</h2>
            <p>Any concerns related to privacy or any other matter should be sent to: <a href="https://t.me/DashBlocksForum">Dash Forum</a> in Telegram messenger.</p>
        </main>
    </body>
</html>