26 September: privacy policy 1.4.1 to 1.6 (crash reports, push notifications, DPF dates)

The privacy policy now describes error and crash reports and push notifications, and updates the Data Privacy Framework dates.

User impact: Not reviewed

Added on 23 October 2026 from legal/CHANGELOG.md. The three versions are dated 26 September in the changelog. The first production deploy that contained them ran on 27 September at 19:43 UTC.

Legal

Privacy Policy 1.4.1: the Data Privacy Framework due dates for Google and Cloudflare were out of date. They now show the check of 26 September 2026.
Privacy Policy 1.5: new section 3.6 describes error and crash reports sent by the web interface, the Android apps and ZeroLog Code. It states the stored fields, deletion 30 days after the last occurrence, and names Anthropic as recipient of the redacted entries.
Privacy Policy 1.6: new section 3.7 describes push notifications through our own ntfy server (ntfy.zerolog.ch) and browser Web Push.

New

ZeroLog apps can receive push notifications through ntfy.zerolog.ch.

Fixed

Idle connections are kept open long enough, so pages and replies no longer fail with a short gateway error.
A workspace stopping during file sync no longer crashes the server process.
Admin alert mails that cannot be sent are shown on the alert board and sent as push.