Morning espresso for better productivity ☕️✨Fuel your focus and get things done! What do you want to see next in the @Openvibe app? 👨💻#crosspost #openvibe https://nostrcheck.me/media/e75da451e9e743b43cfb9a0d7f30c4df7272e7e53b03e999e17cedc7b8eb40b8/fefd4e5737c16da7f73e5f8fb987f1f00be24f0d0d06c8c9fbb8da5b50dab2ec.webp
Discussion
I want to see the webapp 🤙
Webapp!!
#Nostr users understand the fact that their nsec is to be protected at all costs. If it is ever compromised, there is no "password reset"; their account and all the connected services/(NWC) wallets they have in relation to that nsec will also be compromised.
Support for #Amber would go a long way to mitigating this risk.
https://github.com/greenart7c3/Amber
Do you have any plans to implement Amber for mobile and/or other Nostr signer extensions like #nos2x etc.?
Also, there are many privacy concerns I see with your privacy policy.
Why do you ask for, and share so much user data?
For instance, #Openvibe:
- Collects device information automatically, including device ID, model, hardware details, and IP address and more...
"Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device’s operating system or platform, the type of mobile device you use, your mobile device’s unique device ID, and information about the features of our application(s) you accessed."
- Shares information with Google Analytics to track the use of your services
- Tracks browsing history, search history, and online behavior on your services
- Collects precise and imprecise location data through GPS and IP address
"Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services."
- Disregards user's privacy settings by not honoring browser DO-NOT-TRACK (DNT) requests
- Explicitly states that you may share user data with affiliates (your parent company, and any subsidiaries, joint venture partners etc.)
And more...
Why did you not opt to make this app open source?
Are there any plans to go open source in the future?
Why do you collect so much user data and not honor user browser privacy settings?
I understand collecting site analytics and marketing metrics, but your data collection practices seem to go above and beyond what is necessary to deliver your services, not to mention your privacy policy explicitly states that user data may be shared with your affiliates.
I am looking for a service like this, and yours looks impressive, but these bullet points are concerning for user privacy.
Please help me understand why all this data collection is necessary, and how your services respect end user privacy.
Looking forward to your reply!
Thanks for calling this out. After using Damus for so long, I’m spoiled by the lack of data collection per their policy of intentionally not wanting to know anything about their users that they don’t voluntarily provide.
I didn't use Plebstr due to its closed-source, data-collecting practices. This appears to be from the same people, and I'm genuinely curious to hear their response.
An open-source Hootsuite alternative for scheduled cross-posting to Nostr, Bluesky, Threads, and Mastodon would be a valuable service.
The only similar app I've found is #Nootti (iOS-only), which also seems to be closed-source with similar privacy concerns.
Sadly, I think Nostr is an afterthought at this point. Seem to be focused more on Mastodon, Bluesky, and Threads integration.
They are/were Plebstr. They know.
Oh yea, I was a plebstr stan and was recommending it like crazy and providing them UI/UX suggestions in the early days. I guess i understand their pivot, with such a large team, to diversify.
Looking forward to their reply.
Before Plebstr, they built Tweetoshi, basically a Twitter client with zaps. They were too slow to develop a reliable Nostr client to compete with the ones already being built with smaller teams so they canned it. I’m not interested in what they are building now, it’s not my vibe (and it’s not open).
Ability to select relay(s)