mirror of
https://github.com/lux-apps/papers.git
synced 2026-10-30 18:15:21 +00:00
zeekay
abf99d05fc
Restructured from flat .tex/.pdf files into per-paper subdirectories. Added Antje Worring as co-author on all papers. Synced PDFs to pdfs/ for download site.
40 lines
1.1 KiB
TeX
40 lines
1.1 KiB
TeX
\section{Privacy Considerations}
|
|
|
|
|
|
\subsection{Data Minimization}
|
|
|
|
Lux ID follows privacy-by-design principles:
|
|
\begin{itemize}
|
|
\item Collect only essential user data (email, username, password hash)
|
|
\item Optional fields: phone, address, bio
|
|
\item No tracking cookies or third-party analytics
|
|
\end{itemize}
|
|
|
|
\subsection{Selective Disclosure}
|
|
|
|
Users control which attributes to share with applications:
|
|
\begin{itemize}
|
|
\item OAuth scopes define requested permissions
|
|
\item Users approve/deny each permission during consent
|
|
\item Applications receive only approved attributes
|
|
\end{itemize}
|
|
|
|
\subsection{Zero-Knowledge Proofs (Planned)}
|
|
|
|
Future versions will support ZK proofs for:
|
|
\begin{itemize}
|
|
\item Prove age $\geq$ 18 without revealing birthdate
|
|
\item Prove balance $\geq$ \$1000 without revealing exact amount
|
|
\item Prove credential issuance without revealing issuer identity
|
|
\end{itemize}
|
|
|
|
\subsection{Right to be Forgotten}
|
|
|
|
GDPR compliance via:
|
|
\begin{itemize}
|
|
\item User-initiated account deletion
|
|
\item Data export in portable JSON format
|
|
\item Automatic data purge after 90 days of deactivation
|
|
\end{itemize}
|
|
|