patch notes · #243 October

#24 · Newsletter consent and working management links

The optional newsletter page (not open yet) records a versioned consent request and queues a confirmation message. No account is required. Patch notes become eligible only after confirmation. Confirmation and newsletter messages carry the actual unsubscribe token in their body and List-Unsubscribe header. Public configuration is empty by default, so collection stays disabled until the operator configures the existing project and completes the notice.

A new consent generation now rotates its management token and clears the old account binding. Previously, an old mail link and linked account could continue to control fresh consent. A late completion for confirmation T1 can no longer mark a newer T2 request as mailed: the service RPC checks the token it actually sent. Cleanup also preserves a newly mailed link's 48-hour validity instead of removing it when an older pending request reaches seven days. Removal requires an operated cleanup; these thresholds are not an automatic deletion promise.

The data and privacy draft (not open yet) separates application records from provider logs and identifies the controller, contact, processing and retention details still missing. It does not claim KVKK/GDPR compliance.


previous: #23 Prepare simulator discovery and enforce its browser checks
next: #25 Mail attempts retain uncertainty and campaigns require an owner test
This entry in the full list
Every SystemVerilog construct measured so far, next to what Vivado does: the probes, stage by stage