Merge pull request #432 from 18F/privacy-skeleton

Privacy skeleton

ui/components/footer.jsx

@@ -6,6 +6,7 @@ export default function Footer() {
       <h4>OMB Policy Library</h4>
       <ul className="list-reset">
         <li><a href="https://github.com/18F/omb-eregs/">GitHub</a></li>
+        <li><a href="/privacy">Privacy Policy</a></li>
         <li><a href="https://github.com/18F/omb-eregs/issues/">Report issue</a></li>
         <li><a href="mailto:ofcio@omb.eop.gov">Contact us</a></li>
       </ul>

ui/components/privacy-view.jsx

@@ -0,0 +1,100 @@
+import React from 'react';
+
+export default function PrivacyView() {
+  return (
+    <div className="ml3">
+      <h2 className="h1">Privacy Policy</h2>
+      <h3 className="caps">Protecting privacy and security</h3>
+
+      <p className="max-width-3">
+        {/*eslint-disable */}
+        Protecting the privacy and security of individuals’ personal information is very important to us.
+        We do not collect any information that directly identifies you when you visit the OMB Policy Library unless you choose to provide that information by contacting us.
+         However, the website may collect a limited amount of information about your visit for the purposes of website analytics and customization.
+         Please read this notice to understand what we do with the limited amount of information about your visit that we may collect.
+         {/*eslint-enable */}
+      </p>
+
+      <h4>Information collected and stored automatically</h4>
+      <p className="max-width-3">
+        {/*eslint-disable */}
+        As with many Federal Government websites, the OMB Policy Library is hosted by the U.S.
+         General Services Administration (GSA).
+        GSA, or contractors working on behalf of GSA, collect limited information about visits to the OMB Policy Library.
+         This information is used to measure the number of visitors to the various sections of our website and to identify performance or problem areas.
+         Authorized individuals may also use this information to help us develop the site, analyze patterns of usage, and to make the site more useful.
+         We do not share or sell visitor data for the purposes of advertising, marketing, or any other commercial purpose.
+         This information is not used for associating search terms or patterns of site navigation with individual users.
+         The information that is automatically collected and stored concerning your visit includes:
+
+        the name of the domain from which you access the Internet (i.e., HHS.gov if you are connecting from a HHS domain, or GMU.edu if you are connecting from George Mason University’s domain);
+        the date and time of your visit;
+        the pages you visit on the OMB Policy Library;
+        Internet Protocol Address;
+        the Internet address of the website you came from if it linked you directly to the OMB Policy Library; and
+        search terms that you enter into the the OMB Policy Library search tool.
+        {/*eslint-enable */}
+      </p>
+
+      <h4>Google Analytics</h4>
+      <p className="max-width-3">
+        {/*eslint-disable */}
+        The OMB Policy Library participates in the U.S.
+         Digital Analytics Program, (DAP) which utilizes a unified Google Analytics account for Federal Government agencies.
+         This program helps Federal agencies understand how people find, access, and use government services online.
+
+        The DAP is a hosted shared service provided by the General Services Administration’s (GSA’s) Office of Citizen Services and Innovative Technologies, and the protocol and information collected are the same for all websites participating in the DAP.
+        As a participant in GSA’s DAP program, this website’s Google Analytics traffic data is automatically reported to GSA.
+
+        Google Analytics is a third-party web measurement and customization technology as defined in OMB M-10-22.
+
+        Here is how it works: Google Analytics sets one or more cookies on your computer so that it can recognize your computer if you visit the the OMB Policy Library website in the future.
+         This cookie(s) does not collect personally identifiable information.
+         This is considered a Tier 2 usage, as defined in the OMB guidance.
+
+        Google Analytics does not collect personally identifiable information through its cookie(s).
+         The program does not track individuals and anonymizes the IP addresses of visitors.
+        <a href="https://www.digitalgov.gov/services/dap/common-questions-about-dap-faq/">Common Questions about DAP (FAQ) provides more information about how Google Analytics handles IP addresses</a>. According to GSA’s Common Questions About DAP, “none of the federal government data tracked as part of the Data Analytics Program will be shared with or available to Google’s corporate advertising partners.”
+
+        A limited number of authorized individuals will have user accounts that will allow them to log in to the Google Analytics dashboard and view or run reports regarding visits to the OMB Policy Library and the other web metrics available from the DAP.
+
+        Visitors who choose to disable this web measurement tool will still have full access to the OMB Policy Library.
+        While the details vary from browser to browser, most modern browsers can be set up to accept, reject, or request user intervention when a site asks to set a cookie.
+
+        You can view web metrics information at <a href="https://analytics.usa.gov/">analytics.usa.gov</a>.
+        {/*eslint-enable */}
+      </p>
+
+      <h4>Information you choose to give the OMB</h4>
+      <p className="max-width-3">
+        {/*eslint-disable */}
+        Users of this website may send the OMB feedback or report an issue by sending an email to <a href="mailto:ofcio@omb.eop.gov">ofcio@omb.eop.gov</a>.
+        If you choose to send us your personally identifiable information, we will only use that information to respond to your message.
+         We only share the information you give us with another government agency if your question relates to that agency, or as otherwise required by law.
+         The OMB Policy Library never collects information or creates individual profiles for the purposes of advertising, marketing, or any other commercial purpose.
+          We do not create or store lists of email addresses or other information to deliver email alerts, newsletters, or otherwise send marketing messages or contact individuals.
+           When you contact us, any personally identifiable information you provide is voluntary.
+           Please do not include sensitive personally identifiable information or other sensitive information in the content of your email.
+           {/*eslint-enable */}
+      </p>
+
+      <h4>Children and privacy on the OMB policy library</h4>
+      <p className="max-width-3">
+        {/*eslint-disable */}
+        We believe in the importance of protecting the privacy of children online.
+         The Children’s Online Privacy Protection Act (COPPA) governs information gathered online from or about children under the age of 13.
+         This site is not intended to solicit or collection information of any kind from children under age 13.
+         If you believe that we have received information from a child under age 13, please contact us at <a href="mailto:ofcio@omb.eop.gov">ofcio@omb.eop.gov</a>.
+         {/*eslint-enable */}
+      </p>
+
+      <h4>Questions about the privacy policy</h4>
+      <p className="max-width-3">
+        {/*eslint-disable */}
+        If you have questions about this privacy policy or the privacy practices of the OMB, please submit your questions to <a href="mailto:ofcio@omb.eop.gov">ofcio@omb.eop.gov</a>.
+        {/*eslint-enable */}
+      </p>
+
+    </div>
+  );
+}

ui/routes.jsx

@@ -2,6 +2,7 @@ import React from 'react';
 import { browserHistory, IndexRoute, Redirect, Route, Router } from 'react-router';
 
 import App from './components/app';
+import PrivacyView from './components/privacy-view';
 import PolicyContainerResolver from './components/policies/container';
 import RequirementsContainerResolver from './components/requirements/container';
 import LookupSearchResolver from './components/lookup-search';
@@ -20,6 +21,7 @@ if (browserHistory && typeof gas !== 'undefined') {
 export default <Router history={browserHistory} >
   <Route path="/" component={App}>
     <IndexRoute component={Homepage} />
+    <Route path="privacy" component={PrivacyView} />
     <Route path="search-redirect">
       <Route path="agencies" component={LookupSearchResolver} />
       <Route path="policies" component={LookupSearchResolver} />