Show HN: Add Snow to Your Website • Hacker News Board

Re: Show HN: Add Snow to Your Website

#21

Post by jacquesm » Thu, Dec 24, 2015, 4:44 PM UTC

bosdev wrote: post #17

flipp3r wrote: post #6

Earlier quoted context omitted.

I don't know why you were downvoted, they literally state in their terms of service they will do this: """ Apps installed with Eager may, for example: Add cookies to your domain to track visitors. """

Just to clarify, Snow and Snow Pro don't to anything of the kind. You can view the source here: https://github.com/EagerApps/Snow https://github.com/EagerApps/SnowPro

They don't do anything of the kind right now but the terms and conditions permit you to change that at any moment you wish to.

If you don't want to do this and will not do this then make it plain in your terms and conditions.

Re: Show HN: Add Snow to Your Website

#22

Post by bosdev » Thu, Dec 24, 2015, 5:39 PM UTC

jacquesm wrote: post #21

bosdev wrote: post #17

Earlier quoted context omitted.

Just to clarify, Snow and Snow Pro don't to anything of the kind. You can view the source here: https://github.com/EagerApps/Snow https://github.com/EagerApps/SnowPro

They don't do anything of the kind right now but the terms and conditions permit you to change that at any moment you wish to. If you don't want to do this and will not do this then make it plain in your terms and conditions.

The reason that is in the terms and conditions is because Eager exists to allow people to install all sorts of third-party SaaS tools. If you install the Google Analytics app, they are going to track you, that is what we're trying to convey. Every app Eager has built is open-source, and is going to remain that way.

The nice thing about delivering software directly to the client as we do is you can examine the exact code which gets sent, and confirm that it is what you expect.

Re: Show HN: Add Snow to Your Website

#23

Post by bosdev » Thu, Dec 24, 2015, 5:43 PM UTC

jacquesm wrote: post #20

bosdev wrote: post #18

Earlier quoted context omitted.

Eager is to give all of the non-technical website owners access to the JavaScript tools we use every day. If you do know how to install a script manually, there is certainly less of a reason to use it.

If you don't know how to install a script manually you definitely don't have any business to install remotely hosted javascript, especially not from a source that has terms and conditions that all but guarantee abuse of the fact that you installed their scripts. I'd also advise anybody installing such scripts (even locally) to read them to make sure that they only do what they say they do.

We view Eager as a safer alternative to installing something like a WordPress plugin. Non-technical people certainly use them extensively, yet they introduce very large security holes. We are trying to provide much of the same power, but without the danger of a server exploit.

If you do read the Eager terms of service, you'll see that we explicitly guarantee that we won't sell any tracking information. We don't build every Eager app, but the ones we have built are open source, and don't track or report anything to us.