EDRLab: Difference between revisions

Line 9:

EDRLab is a "non-profit development laboratory working on the deployment of an open, interoperable and accessible digital publishing ecosystem worldwide." It has over 100 members, but some of its founding members are: [[wikipedia:Editis|Editis]], [[wikipedia:Hachette Livre|Hachette]], [[wikipedia:Centre national du livre|Centre National du livre]], [[wikipedia:Groupe Madrigall|Groupe Madrigall]] and the French State. EDRLab is a member of [[wikipedia:World Wide Web Consortium|W3C]] and [[Readium|Readium Foundation]]. It is one of the main contributors to Readium toolkits and the manager of Readium LCP [[Digital rights management|DRM]]. They are also the creators of Thorium Reader, an EPUB reading application.<ref>{{Cite web |title=About |url=https://www.edrlab.org/about/ |url-status=live |website=edrlab.org |archive-url=https://web.archive.org/web/20260502070949/https://www.edrlab.org/about/ |archive-date=2 May 2026 |access-date=24 Jun 2026}}</ref><ref>{{Cite web |title=EDRLab members directory |url=https://members.edrlab.org |url-status=live |archive-url=https://web.archive.org/web/20260303083006/https://members.edrlab.org/ |archive-date=3 Mar 2026 |access-date=24 Jun 2026}}</ref><ref>{{Cite web |language=fr |title=SITUATION AU REPERTOIRE SIRENE |date=24 Jun 2026 |url=https://api-avis-situation-sirene.insee.fr/identification/pdf/81344547500029 |url-status=live |website=insee.fr |archive-url=https://web.archive.org/web/20260624170714/https://api-avis-situation-sirene.insee.fr/identification/pdf/81344547500029 |archive-date=24 Jun 2026}}</ref>

==Consumer-impact summary==

~~{{Ph~~-~~C-CIS}}~~

EDRLab is one of the main contributors to [[Readium]] LCP DRM. Their EPUB reader application, Thorium Reader, which uses LCP, does claims to be private, yet it has "non-personal" data collection that the user cannot opt out of. It also contacts EDRLab's servers every time the application is started.

This is not apparent, since Thorium's installer doesn't inform the user of this, there are no "agree/disagree" options and Thorium's interface does not directly link to either the terms of service or the privacy policy. Users also wouldn't be notified if the privacy policy were to change, since that would require them to manually check the privacy policy page for updates.

The Terms of service also mentions that the user agrees to "indemnify and hold harmless the EDRLab" even for "alleged" breaches by the user of the terms of service. It is also stated that "EDRLab Parties have the right to monitor the use of the Application."

The application is also marketed as open source yet it is stated in the privacy policy that it is in fact not entirely open source, but rather has a "small software library used as core for the Readium LCP DRM, which does not store or send any data." This requires users to trust the company on their word, since users cannot inspect the application, as they may not "rent, sell, modify, decompile, disassemble, reverse engineer or transfer the Application in whole or in part", according to the Terms of service. Furthermore, this connects directly to the 2nd paragraph.

==Incidents==

@@ Line 9: / Line 9: @@
 EDRLab is a "non-profit development laboratory working on the deployment of an open, interoperable and accessible digital publishing ecosystem worldwide." It has over 100 members, but some of its founding members are: [[wikipedia:Editis|Editis]], [[wikipedia:Hachette Livre|Hachette]], [[wikipedia:Centre national du livre|Centre National du livre]], [[wikipedia:Groupe Madrigall|Groupe Madrigall]] and the French State. EDRLab is a member of [[wikipedia:World Wide Web Consortium|W3C]] and [[Readium|Readium Foundation]]. It is one of the main contributors to Readium toolkits and the manager of Readium LCP [[Digital rights management|DRM]]. They are also the creators of Thorium Reader, an EPUB reading application.<ref>{{Cite web |title=About |url=https://www.edrlab.org/about/ |url-status=live |website=edrlab.org |archive-url=https://web.archive.org/web/20260502070949/https://www.edrlab.org/about/ |archive-date=2 May 2026 |access-date=24 Jun 2026}}</ref><ref>{{Cite web |title=EDRLab members directory |url=https://members.edrlab.org |url-status=live |archive-url=https://web.archive.org/web/20260303083006/https://members.edrlab.org/ |archive-date=3 Mar 2026 |access-date=24 Jun 2026}}</ref><ref>{{Cite web |language=fr |title=SITUATION AU REPERTOIRE SIRENE |date=24 Jun 2026 |url=https://api-avis-situation-sirene.insee.fr/identification/pdf/81344547500029 |url-status=live |website=insee.fr |archive-url=https://web.archive.org/web/20260624170714/https://api-avis-situation-sirene.insee.fr/identification/pdf/81344547500029 |archive-date=24 Jun 2026}}</ref>
 ==Consumer-impact summary==
-{{Ph-C-CIS}}
+EDRLab is one of the main contributors to [[Readium]] LCP DRM. Their EPUB reader application, Thorium Reader, which uses LCP, does claims to be private, yet it has "non-personal" data collection that the user cannot opt out of. It also contacts EDRLab's servers every time the application is started.
+This is not apparent, since Thorium's installer doesn't inform the user of this, there are no "agree/disagree" options and Thorium's interface does not directly link to either the terms of service or the privacy policy. Users also wouldn't be notified if the privacy policy were to change, since that would require them to manually check the privacy policy page for updates.
+The Terms of service also mentions that the user agrees to "indemnify and hold harmless the EDRLab" even for "alleged" breaches by the user of the terms of service. It is also stated that "EDRLab Parties have the right to monitor the use of the Application."
+The application is also marketed as open source yet it is stated in the privacy policy that it is in fact not entirely open source, but rather has a "small software library used as core for the Readium LCP DRM, which does not store or send any data." This requires users to trust the company on their word, since users cannot inspect the application, as they may not "rent, sell, modify, decompile, disassemble, reverse engineer or transfer the Application in whole or in part", according to the Terms of service. Furthermore, this connects directly to the 2nd paragraph.
 ==Incidents==