From 6d7687a31135383c13ac6372a568c3325e24066d Mon Sep 17 00:00:00 2001 From: Hein Date: Wed, 4 Feb 2026 19:19:35 +0200 Subject: [PATCH] =?UTF-8?q?feat(static):=20=E2=9C=A8=20Add=20privacy=20pol?= =?UTF-8?q?icy=20page=20and=20route?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - Implement ServePrivacyPolicy handler to serve the privacy policy. - Update index.html to include a link to the privacy policy. - Add privacy-policy.html file with content outlining data handling practices. --- docker-compose.yml | 2 +- pkg/handlers/static.go | 16 +++ pkg/handlers/static/index.html | 2 +- pkg/handlers/static/privacy-policy.html | 184 ++++++++++++++++++++++++ pkg/whatshooked/server.go | 3 + 5 files changed, 205 insertions(+), 2 deletions(-) create mode 100644 pkg/handlers/static/privacy-policy.html diff --git a/docker-compose.yml b/docker-compose.yml index d0d73db..08e94ef 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -35,7 +35,7 @@ services: # environment: # - LOG_LEVEL=info - network_mode: bridge + # Resource limits (optional) deploy: diff --git a/pkg/handlers/static.go b/pkg/handlers/static.go index eeab97a..e287b3f 100644 --- a/pkg/handlers/static.go +++ b/pkg/handlers/static.go @@ -31,6 +31,20 @@ func (h *Handlers) ServeIndex(w http.ResponseWriter, r *http.Request) { writeBytes(w, content) } +// ServePrivacyPolicy serves the privacy policy page +func (h *Handlers) ServePrivacyPolicy(w http.ResponseWriter, r *http.Request) { + content, err := staticFiles.ReadFile("static/privacy-policy.html") + if err != nil { + logging.Error("Failed to read privacy-policy.html", "error", err) + http.Error(w, "Internal Server Error", http.StatusInternalServerError) + return + } + + w.Header().Set("Content-Type", "text/html; charset=utf-8") + w.WriteHeader(http.StatusOK) + writeBytes(w, content) +} + // ServeStatic serves static files (logo, etc.) func (h *Handlers) ServeStatic(w http.ResponseWriter, r *http.Request) { // Get the file path from URL @@ -53,6 +67,8 @@ func (h *Handlers) ServeStatic(w http.ResponseWriter, r *http.Request) { w.Header().Set("Content-Type", "image/jpeg") case ".svg": w.Header().Set("Content-Type", "image/svg+xml") + case ".html": + w.Header().Set("Content-Type", "text/html; charset=utf-8") case ".css": w.Header().Set("Content-Type", "text/css") case ".js": diff --git a/pkg/handlers/static/index.html b/pkg/handlers/static/index.html index 934adf4..12fe3bc 100644 --- a/pkg/handlers/static/index.html +++ b/pkg/handlers/static/index.html @@ -564,7 +564,7 @@
-

Need help? Check out the documentation

+

Need help? Check out the documentation · Privacy Policy

Made with ❤️ for developers

diff --git a/pkg/handlers/static/privacy-policy.html b/pkg/handlers/static/privacy-policy.html new file mode 100644 index 0000000..e3db877 --- /dev/null +++ b/pkg/handlers/static/privacy-policy.html @@ -0,0 +1,184 @@ + + + + + + Privacy Policy - WhatsHooked + + + +
+
+

WhatsHooked

+

Privacy Policy

+
+ +
+

No customer data is collected, stored, or saved by WhatsHooked. Messages are forwarded in real time and are not retained on our servers.

+

Our use of the Meta API is limited exclusively to WhatsApp Business messaging.

+
+ +
+

What We Do Not Collect

+

WhatsHooked does not save, log, or persist any customer data. This includes, but is not limited to:

+
    +
  • Message content exchanged via WhatsApp
    • +
  • Contact information or phone numbers of end users
    • +
  • Media files, locations, or any other payload sent through the platform
    • +
  • Browsing history, cookies, or device identifiers
    • +
+
+ +
+

How WhatsApp Messages Are Handled

+

WhatsHooked acts as a bridge between WhatsApp and your configured webhook endpoints. Incoming messages are received and forwarded to your endpoints in real time. No message content is stored or cached beyond what is necessary for the immediate delivery.

+
+ +
+

Use of the Meta API

+

WhatsHooked integrates with the Meta (WhatsApp Business) API solely for the purpose of sending and receiving WhatsApp Business messages. The API access is not used for any other purpose, including but not limited to:

+
    +
  • Advertising or marketing outside of your own business messaging
    • +
  • Data collection or analytics on end users
    • +
  • Any use beyond WhatsApp Business messaging as permitted by Meta's terms of service
    • +
+
+ +
+

Your Responsibilities

+

As the operator of a WhatsHooked instance, you are responsible for ensuring that your use of the platform complies with applicable privacy laws and Meta's terms of service. WhatsHooked provides the infrastructure; the data handling obligations rest with you as the account owner.

+
+ +
+

Changes to This Policy

+

This privacy policy may be updated at any time. Changes will be reflected on this page. Continued use of WhatsHooked after an update constitutes acceptance of the revised policy.

+
+ +
+

Back to WhatsHooked

+

Made with ❤️ for developers

+
+
+ + diff --git a/pkg/whatshooked/server.go b/pkg/whatshooked/server.go index 86f6298..742ce4e 100644 --- a/pkg/whatshooked/server.go +++ b/pkg/whatshooked/server.go @@ -207,6 +207,9 @@ func (s *Server) setupRoutes() *http.ServeMux { // Landing page (no auth required) mux.HandleFunc("/", h.ServeIndex) + // Privacy policy (no auth required) + mux.HandleFunc("/privacy-policy", h.ServePrivacyPolicy) + // Static files (no auth required) mux.HandleFunc("/static/", h.ServeStatic)