meteor-gdpr

GDPR package for the meteor framework used with Blaze

Add it to your app using meteor add yellowsquare:gdpr

Table of Contents generated with DocToc

• Disclaimer
• Introduction
• Requirements
• How to use
  • Email personalization
  • Customization of the texts
  • User personal data
• Contributions

Disclaimer

We are not lawyers, you cannot rely only on using this package to be GDPR compliant. You can find official reglementation here. We advise you to read and understand the whereabouts before using the package.

Introduction

This packages helps you comply with GDPR. It includes :

• a modal presenting a customizable opt-in window to users, which should contain :

  • which personal data you collect
  • which entity is collecting the data
  • information about the purpose of personal data collection
  • personal data conservation rules
  • rights of the user about his data
  • it could also contain your app Terms of Service

• access to a profile center (overlay div) which includes

  • first name, last name, picture
  • last connexion date
  • disconnect button
  • ability to contact you by email (using an in-app form) to ask for access, modification or deletion of personal data

Requirements

This package requires the simpl-schema NPM package @1.4.3, which defines the schema syntax and provides the validation logic.

This packages requires the definition of the MAIL_URL variable to send emails.

How to use

Create a template containing all the information you want to display in the opt-in window, you can name it as you wish. Here we name it OptInTemplate. Import it in your app.

import "/imports/ui/components/optInTemplate/optInTemplate.js"

Add the following in your app to activate the package

{{> ProfileName optIn="OptInTemplate"}}

You can add an extraTemplate on the lower part of the Profile window (you could use it to include some more details about the user on the lower part)

{{> ProfileName optIn="OptInTemplate" extraTemplate="TemplateName"}}

Email personalization

In your imports/startup/server/index.js file :

GDPR.addServerConfig({
    emailSender: "[email protected]",
    emailTo: "[email protected]"
});

Customization of the texts

Two languages are built-in : english en and french fr. Anyway you need to review and personalize the texts presented according to your entity. The reference files are available in lib/i18n, we encourage you to copy and modify it in your app.

You can add as many translation as you want. If you add the same language twice, the previous insert is overriden

The last language inserted is used. If you want a previously inserted language, do as follow

GDPRconfig.language = 'wanted language (2 letters)';

User personal data

The package needs to access the user firstname, lastname and picture, from the user collection record.

Default values are :

{
    "firstName": "profile.firstName",
    "lastName": "profile.lastName",
    "picture": "profile.picture",
    "email": "profile.email"
}

But you can set your values as follow in your imports/startup/client/index.js file :

GDPRconfig.setUserFields({
    firstName: 'personalData.FirstName',
    lastName: 'personalData.surname',
    picture: 'avatar',
    email: "personalData.email"
});

If a field is omitted, the default value will be used.

Specific logout routine

The disconnect button use the Meteor.logout() function to log out users.

If you need to override the behavior of the logout button (i.e. to implement single logout), you can declare the new function in your imports/startup/client.js:

GDPR.logout = function () {
    mySingleLogoutFunction();
}

Specific callback after giving consent

If needed to have a specific action once the user validated the consent window, you can this function, which is called right after the user validates. One use case of this callback is to enter a tutorial mode for the first visit of the user.

You can declare the new function in imports/startup/client.js:

GDPR.afterGivingConsent = function () {
   // specific actions
}

Contributions

Contributions are welcome, please post issues or pull requests! This package has been created in May 2018. We tried to make it generic and easy to use to help other people who where struggling with GDPR, but it is surely not perfect. We will be very happy to see its use and functionalities growing.

Please respect the code style when contributing, and the tests.

How to test

To test the app while developping (in watch mode), run the following command:

cd tests 
meteor npm install
npm run test:watch