CodeIssuesDiscussionsWikiPull RequestsProjectsCommitsActionsReleasesContributorsPulse● GatesSecuritySettingsDeploymentsPipelineInsightsAgents✨ Explain✨ Ask AI✨ Workspace✨ Spec✨ Tests▓ Debt Map✨ NL Search🏛 Archaeology
Blame · Line-by-line history
legal-audit.md
Each line is annotated with the commit that last touched it. Click any SHA to jump to that commit and see the surrounding change.
| 39a9165 | 1 | # Gluecron Legal Pages Audit |
| 2 | ||
| 3 | **Date:** 2026-04-16 | |
| 4 | **Branch:** `claude/setup-multi-repo-dev-BCwNQ` | |
| 5 | **Scope:** Inventory of user-facing legal pages on gluecron.com ahead of attorney review. | |
| 6 | ||
| 7 | ## Summary | |
| 8 | ||
| 9 | **No user-facing legal pages exist** in the Gluecron codebase as of this audit. | |
| 10 | ||
| 11 | A filesystem search of `src/routes/` and `src/views/` for the conventional filenames | |
| 12 | (`legal.*`, `terms.*`, `privacy.*`, `tos.*`, `eula.*`, `dmca.*`, `cookies.*`) | |
| 13 | returned zero matches. A broader substring grep across `src/` for the words | |
| 14 | `terms`, `privacy`, and `legal` surfaced only unrelated hits (a rate-limit | |
| 15 | error message and a test describing "legal characters" in a package-name | |
| 16 | validator) - no user-visible policy documents, no routes, no views, no links | |
| 17 | in the footer or navigation. | |
| 18 | ||
| 19 | The layout footer (`src/views/layout.tsx`) currently renders only the tagline | |
| 20 | "gluecron - AI-native code intelligence" with no links to Terms, Privacy, | |
| 21 | Acceptable Use, DMCA, or any other policy page. | |
| 22 | ||
| 23 | ## Implication | |
| 24 | ||
| 25 | Gluecron has **no independent legal surface** at this time. There are two | |
| 26 | defensible postures heading into attorney review; the attorney should be | |
| 27 | briefed on both so they can direct which path is taken before public launch: | |
| 28 | ||
| 29 | ### Scenario A - Gluecron operates under Crontech's umbrella legal terms | |
| 30 | ||
| 31 | If the business structure is that Crontech is the legal entity and Gluecron | |
| 32 | is a product surface of that entity, then Crontech's published Terms, | |
| 33 | Privacy Policy, Acceptable Use Policy, and DMCA notice would apply to | |
| 34 | Gluecron users by reference. | |
| 35 | ||
| 36 | Required before launch under this scenario: | |
| 37 | - Crontech's existing legal pages must explicitly name Gluecron and git | |
| 38 | hosting as covered products (or the umbrella clause must be demonstrably | |
| 39 | broad enough to cover user-uploaded code, git pushes, and third-party | |
| 40 | code hosted on behalf of users). | |
| 41 | - A footer link on every Gluecron page pointing to the Crontech legal pages | |
| 42 | so users have notice and can locate the governing terms. | |
| 43 | - Any Gluecron-specific data flows (e.g. git clone/push logs, SSH key | |
| 44 | retention, webhook payload retention, AI ingestion of hosted code) must | |
| 45 | be reflected in Crontech's privacy policy or addressed in a Gluecron | |
| 46 | supplement. | |
| 47 | ||
| 48 | ### Scenario B - Gluecron requires independent legal pages before public launch | |
| 49 | ||
| 50 | If Gluecron is (or will be) a separately-branded product with distinct | |
| 51 | risk surface (user-uploaded code, third-party repositories, AI review of | |
| 52 | private code, DMCA takedowns, export-controlled content), independent | |
| 53 | legal pages are likely required regardless of the corporate relationship | |
| 54 | to Crontech. | |
| 55 | ||
| 56 | Required before launch under this scenario: | |
| 57 | - Terms of Service (including acceptable use, content licensing grant | |
| 58 | from users to the platform for the purpose of hosting/serving, AI | |
| 59 | processing disclosure). | |
| 60 | - Privacy Policy (covering git hosting data, SSH keys, webhooks, | |
| 61 | access logs, AI ingestion, retention, subprocessors). | |
| 62 | - DMCA / Copyright policy (with a designated agent - statutory | |
| 63 | requirement for safe harbor under 17 U.S.C. § 512). | |
| 64 | - Acceptable Use Policy (malware hosting, phishing kits, abuse, | |
| 65 | rate-limit bypass). | |
| 66 | - Cookie / tracking notice if any analytics or third-party embeds are | |
| 67 | used on the public site. | |
| 68 | ||
| 69 | ## Recommendation to Attorney | |
| 70 | ||
| 71 | Brief the attorney on **both** scenarios. Ask them to: | |
| 72 | ||
| 73 | 1. Advise which posture Gluecron should adopt at launch (umbrella vs. | |
| 74 | standalone). | |
| 75 | 2. If umbrella: confirm Crontech's existing pages cover Gluecron's risk | |
| 76 | surface, or list the gaps that need patching. | |
| 77 | 3. If standalone: provide drafts (or approve drafts) for Terms, Privacy, | |
| 78 | DMCA, and Acceptable Use. | |
| 79 | 4. In either case, confirm the pre-launch banner currently shipped on | |
| 80 | gluecron.com ("Pre-launch - Gluecron is in final validation. Public | |
| 81 | signups and git hosting for non-owner users open after launch review.") | |
| 82 | is sufficient to manage reliance expectations during the validation | |
| 83 | window. | |
| 84 | ||
| 85 | ## Appendix - Files inspected | |
| 86 | ||
| 87 | - `src/routes/` - no legal-related routes | |
| 88 | - `src/views/layout.tsx` - footer has no legal links | |
| 89 | - `src/views/` - no legal-related view files | |
| 90 | - `docs/` - did not exist prior to this audit | |
| 91 | - Grep of `src/` for `terms`, `privacy`, `legal` (case-insensitive) - | |
| 92 | only non-legal hits (rate-limit error string, test description) |