dashblocks.github.io/privacy.html at develop · DashBlocks/dashblocks.github.io · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
<!DOCTYPE html>
<html lang="en">
    <!-- Google Tag Manager -->
    <script>(function (w, d, s, l, i) {
            w[l] = w[l] || []; w[l].push({
                'gtm.start':
                    new Date().getTime(), event: 'gtm.js'
            }); var f = d.getElementsByTagName(s)[0],
                j = d.createElement(s), dl = l != 'dataLayer' ? '&l=' + l : ''; j.async = true; j.src =
                    'https://www.googletagmanager.com/gtm.js?id=' + i + dl; f.parentNode.insertBefore(j, f);
        })(window, document, 'script', 'dataLayer', 'GTM-TZMQG6RR');</script>
    <!-- End Google Tag Manager -->
    <!-- Google Tag Manager (noscript) -->
    <noscript><iframe src="https://www.googletagmanager.com/ns.html?id=GTM-TZMQG6RR" height="0" width="0"
            style="display:none;visibility:hidden"></iframe></noscript>
    <!-- End Google Tag Manager (noscript) -->
    <head>
        <title>Dash Privacy Policy</title>
        <meta charset="utf8">
        <meta name="viewport" content="width=device-width, initial-scale=1">
        <style>
            body {
                font-family: Inter, ui-sans-serif, system-ui, -apple-system, Segoe UI, Roboto, Helvetica Neue, Arial;
                margin: 0; padding: 0;
            }
            header {
                background-color: rgb(255, 172, 77);
                color: white;
                text-align: center;
                padding: 20px 0;
            }
            main {
                max-width: 600px;
                margin: auto;
            }
            @media (prefers-color-scheme: dark) {
                body { background: #111; color: #eee; }
                a { color: #4af; }
            }
        </style>
    </head>

    <body>
        <header>
            <h1>Dash Privacy Policy</h1>
        </header>

        <main>
            <!-- UPDATE THIS WHEN MAKING CONTENT CHANGES -->
            <p><i>Updated July 28, 2026</i></p>

            <p><b>The Dash (DashBlocks) project respects your privacy.</b> For transparency, this page lists all the places in  Dash where we or a third-party receive your data and how your data is handled:</p>

            <h2>dashblocks.org</h2>

            <h3>Loading projects</h3>
            <p>When you load a project from another website, you are subject to the privacy practices of that website. For example, when loading projects from Scratch, you are subject to the <a href="https://scratch.mit.edu/privacy_policy">Scratch privacy policy</a>. When loading projects from Scratch specifically, the project ID will also be shared with Dash as part of Scratch's API does not allow direct access. We may briefly log the project ID for caching.</p>

            <h3>Uploading & Sharing projects</h3>
            <p>When you upload and share any project to Dash, your project will be accessable to anyone by project ID even if not logged in. You are responsible for what you are sharing.</p>
            <p>Dash Team members can delete your projects even you not knowing it. You can delete shared projects on <a href="/mystuff">mystuff page</a>.</p>

            <h3>Cloud variables</h3>
            <p>Dash rely on the <a href="https://turbowarp.org">TurboWarp</a>'s cloud variable servers, which is covered by the <a href="https://turbowarp.org/privacy">TurboWarp privacy policy</a>. Custom cloud variable servers are outside of our control.</p>

            <h3>Extensions</h3>
            <p>Some extensions must communicate with external APIs to function. For example, the translate and text-to-speech extensions rely on the Scratch API, which is covered by the <a href="https://scratch.mit.edu/privacy_policy">Scratch privacy policy</a>. To improve performance, some extensions access Dash's APIs instead where both the request (for example, the text being translated) and the result after forwarding to Scratch (for example, the translated version of the text) may be cached.</p>
            <p>Most extensions on the <a href="https://dashblocks.org/extensions">our official extension gallery</a> and the <a href="https://extensions.turbowarp.org">TurboWarp's official extension gallery</a> will ask for permission when the project attempts to use the extension to access an untrusted website, however we cannot guarantee this is 100% reliable.</p>
            <p>When loading a custom extension from a place other than the official gallery such as a URL or file on your computer, the editor will ask for permission to load the extension. If you approve this dialog, the extension can bypass the permission dialogs that official extensions show.</p>

            <h3>Users' Profiles</h3>
            <p>Once you registered on Dash, your profile will be visible to anyone by your user ID or username even if not logged in.</p>
            <p>When you upload image for profile picture, it will be also accessable to anyone. You are responsive for what you are uploading.</p>
            <p>When you change your profile description, it will be also accessable to anyone. You are responsive for what you are writing.</p>
            <p>Dash Team members can delete any parts of your profile even you not knowing it.</p>
            <p>Dash Team members can fully delete/ban your IP/profile/account even you not knowing it.</p>

            <h3>Usernames</h3>
            <p>If not logged in: A randomly generated username may be saved in your browser. You can replace this with a custom username.</p>
            <p>If logged in: The username will be set to the username you used to register. You cannot replace this with a custom username.</p>
            <p>Randomly generated usernames are anonymized (the random part is removed) before being sent to any cloud variable server.</p>

            <h3>Settings</h3>
            <p>Many Dash websites will store settings such as <a href="https://dashblocks.org/addons">addon settings</a> or <a href="https://dashblocks.org/packager/">packager settings</a> in your browser.</p>

            <h3>Aggregated data</h3>
            <p>We may log anonymous aggregated data such as how many people use a certain site per day.</p>

            <h3>"What's new?" section and version label</h3>
            <p>Dash make requests to GitHub API for information about recent commits in the <a href="https://github.com/DashBlocks/dashblocks.github.io">dashblocks.github.io repository</a></p>

            <!-- <h2>TurboWarp Desktop</h2>
            <p><a href="https://desktop.turbowarp.org/">TurboWarp Desktop</a> may make requests to check for updates. This can be disabled by pressing "Settings" then "Desktop Settings".</p>
            <p><a href="https://desktop.turbowarp.org/">TurboWarp Desktop</a> has a disabled-by-default option to enable "Rich Presence" which shares the name of the project you have open and how long it has been open with chat apps running on your computer, which may be displayed on your public profile. This can be disabled by pressing "Settings" then "Desktop Settings".</p>

            <h2>dashblocks.org/docs</h2>
            <p>The search bar is provided by Algolia. See the <a href="https://www.algolia.com/policies/privacy/">Algolia privacy policy</a>.</p> -->

            <h2>Dash Packager</h2>
            <p>The <a href="https://dashblocks.org/packager">Dash Packager</a> may store settings and cache large downloads such as Electron in your browser for convenience and performance. Dash Packager is a fork of the <a href="https://packager.turbowarp.org">TurboWarp Packager</a>.</p>
            <p>When packaging a project using custom extensions, the packager may access those websites to download the extensions.</p>

            <h2>Projects generated by the Dash Packager</h2>
            <p>Packaged projects include all scripts, costumes, and sounds to run the project. The packager tries to include all custom extensions too, but in some cases, the packaged project may need to download certain extensions each time it runs.</p>
            <p>Advanced features such as third-party custom extensions, custom cloud host, custom JS, and custom CSS are outside of our control.</p>
            <p>Note that, unlike the Dash editor, custom extensions in packaged projects will not ask for permission before contacting websites.</p>
            <p>You are responsible for informing end users about the privacy practices of the files you distribute. Do not link to this document as your project's privacy policy as it may change in the future. You must write your own.</p>

            <!-- <h2>TurboWarp Packager Extras</h2>
            <p><a href="https://github.com/TurboWarp/packager-extras/releases">TurboWarp Packager Extras</a> may make requests to check for updates.</p> -->

            <h2>Contact</h2>
            <p>Any concerns related to privacy or any other matter should be sent to: <a href="mailto:contact@dashblocks.org">contact@dashblocks.org</a></p>
        </main>
    </body>
</html>