nvrl 27225332fb Add opt-in pl8list connection with library sync, follows and resync ...

At sign-in users can choose to stay connected to pl8list on that device.
The pl8list session is then stored in the device's session row, encrypted
with XChaCha20-Poly1305 under a key derived from the device's local token
(only the browser has it) and a server key kept outside the database. It
is only decrypted during that device's own requests, re-encrypted when the
token rotates or pl8list sends a new cookie, and deleted when pl8list
rejects it.

Every sign-in now syncs the personal feed, saved tracks (imported as likes)
and saved artists (imported as follows). Connected devices resync on use
every six hours and push new likes and follows to the pl8list library with
addOnly, so nothing is ever removed there. Without the connection, the
resync button runs the email-code sign-in again.

Artists can be followed from each card (f); follows feed the ranker. The
account menu shows the sync state, resync and disconnect. Privacy policy,
export and account deletion cover the new data.

2026-11-01 12:36:00 +01:00

..

datenschutz.html

Add opt-in pl8list connection with library sync, follows and resync

2026-11-01 12:36:00 +01:00

impressum.html

Rewrite backend in Rust, add Impressum, privacy policy and account tools

2026-11-01 12:02:37 +01:00