Page MenuHomeMiraheze

Review Fastly CSP Entry
Closed, ResolvedPublic



  • Is the site equipped with a privacy policy? Yes
  • Does the site attempt to comply with the GDPR? Can European Union inhabitants invoke their individual rights? Yes, GDPR is mentioned in the PP
  • Does the site provide a list of personal data being collected by using the service? Yes
  • Is the website owner known to have a bad reputation regarding privacy? No
  • Can wikis use the external service, even if the visitor wants to deny any cookies or other form of tracking? Unclear, possibly not "if you choose to disable cookies, it may limit your use of certain features or functions on our website or service"
  • Will wikis stay usable, even if the visitor blocks the external resource by using an ad blocker? Likely yes
  • Is there a Data Protection Officer and/or Privacy Team that can be contacted by Miraheze? Not clear if there's a privacy team/DPO but PP says contact
  • Is the site equipped with a security policy? Yes, part of PP
  • Does the site clarify their security measures to protect collected user data? Can the site assure measures are being taken to protect code injection into the loaded external resources? No specifics; standard general assurances
  • Is the website owner known to have a bad reputation regarding information security? No
  • Is there a Chief Information Security Officer and/or Security Team that can be contacted by Miraheze? Doesn't appear to be the case but someone can possibly be contacted via general support

Event Timeline

John triaged this task as Normal priority.Aug 28 2021, 19:35
John created this task.

Fastly seems to fulfil our checklist and doesn't appear to have any particular issues so this should be good to approve. Passing onto T&S.

Owen subscribed.

Assessment looks good.

John claimed this task.
John moved this task from EM Review to Completed on the CSP Review board.