Users of Joplin Server, please help crowdfund the license! (16 Dec - license draft is ready)

As some of you may know, we need to hire a lawyer in order to write a proper license for Joplin Server (this has been discussed in this thread) so I have now created a page on GoFundMe for this purpose.

So if you're using Joplin Server and would like to help with this, please follow the link! And if you have any question feel free to ask here.

12 Likes

Great opportunity to give something back to the project! Thanks for everything!

1 Like

A newbie to gofundme here. Couldn't find Russia or Ukraine in the list of countries with postal codes. So, had to go with Paypal (Transaction ID: 20797613886741618 / 4NT21994BT550390V). Not sure if it could be accounted in the crowdfunding campaign on gofundme. Just wanted to attribute morally these 10 EUR to it.

Many thanks for your effort!


ramblings about donations

As a bit of context: I don't use Joplin Server / Cloud nor intent to. Yet, I strongly appreciate being transparent about donations spending and FOSS spirit of this campaign.

Personally, I find funding bounties (and campaigns) to be much more appealing due to tangible impact on development future. I wish there are more funding campaigns and bounties I could vote for with a wallet. I understand that current and past recurring expenses can't be covered this way yet I still would like splitting donation piles into groups (like bug fixes, server improvements, UI development, "donateable" roadmap, etc)

4 Likes

Thanks for your support!

You make good points about funding for open source projects, but the difficulty is that setting up this kind of campaign with an amount that is known in advance is difficult in the general case.

As for bounties, I'm still not convinced that it works at all. I've tried once to implement a feature that had a bounty on it (The PortableApps package). It was done, I've tried to claim the bounty but never got it, so that was the end of it as far as I'm concerned. Also it's hard to put an amount on a feature. How do you calculate how much it's worth?

Also when money is involved there's an incentive to drop half done pull requests on us, hoping it's enough to get it merged and claim the bounty. But of course that won't work, so we'll have never ending back and forth between us, who want quality, and the bounty hunter, who just wants to get that merged quickly and get his money.

So yes, I don't have a very positive view on bounties, but I'd be glad to be proven wrong!

Maybe Open Collective could be an option. I only noticed it the other day when looking at the Mark Text website (Mark Text - Open Collective)

2 Likes

Hi,
I donated, I like the idea of a collaborative funded licence. I hope money target will be enough to get the good licence that fits the project.
Good luck,
Bruno

1 Like

I don't use the Joplin server, but I use and appreciate the project so I've donated.

Many thanks.
Adam.

4 Likes

Glad to be late
As now my donation could finally make this goal reached.
THANK YOU FOR JOPLIN!!!!!!!!!!!!
WHAT A GREAT PROGRAM

3 Likes

Indeed we already got there in just one week. Many thanks to everybody who's contributed! I will contact back the lawyer soon and will keep you informed.

6 Likes

The goal has been reached now and even exceeded, thanks so much everyone for your help with this!

The next step then is write the new software license, and for this I have now hired DIMOV, an internet law consulting firm based in Brussels, which has extensive experience writing this kind of documents.

3 Likes

The license text went through a few iterations already and I think is nearly ready now. I thought I'd share it here in case someone has any questions or suggestions about it?

It's not as concise as I would have hoped but I think it covers well the allowed and disallowed usages.

License_Joplin_Server_v4.pdf (74.3 KB)

3 Likes

Just casually proof reading the doc, not trying to stir a trouble

Regarding the paragraph 2.3

By way of illustration, the Licensee is not allowed to:
vi. Use the Software or grant other the right to use the Software in a way that generates income or commercial profits.

Does a CEO of non-profit organization sharing the server among employees (free of charge) regard as personal and non commercial use?

Can a non-profit use the server for its recipients? say they give away laptops to children, can they provide the server service (free of charge) for preinstalled Joplin clients?

The same situation but with government related institutions (university/hospital)?

Here I'm pointing at the profits/income part: as long as you're providing public service (i.e. running at an intended loss), you can use the software. Is this reading true? if so, is it intended?

About 2.3.v

By way of illustration, the Licensee is not allowed to:
v. Grant access to the Software to others for a fee or free of charge if the Licensee is a legal or natural person engaged in commercial activities;

so, does viewing (and collaborating) a note shared publicly with Joplin Server count as using the software?

In other words, yes, you shouldn't give access a person performing commercial activity, but if you share a note on the internet, it is at least scanned by crawlers, running by commercial businesses.
And what if (by accident) the note will be viewed by an employee of commercial business? Is there a breach? Does collaborating with commercial entity count as a breach?

Those are good questions, but quite hard to answer to each of them in details. I expect that if some org contacts me and have a particular use case in mind and questions similar to yours we can discuss it at that time. The goal is to allow casual use, which I think is what's most common, and disallow obvious commercial use.

1 Like

I've a few concerns that I think are probably actionable

  1. I think that certain sections, e.g, the Acceptible Use Policy, don't belong in a software license. It feels like this license is trying to be a bit more than just a license, edging onto being part of the ToS of Joplin Cloud. And while Joplin Cloud's ToS might need work (I haven't looked at them since it's release), the mixing of purpose is probably too much here, especially when it's the license explicitly for the self hosted release. Joplin Cloud doesn't need a license because the users aren't running it.

There's also specific bits of the acceptable use policy that I think are overkill, e.g:

ii. Circumvent the technical limitations of the Software;

If the server has a bug that I can fix on my machine, I'm now not allowed to.

This implies Joplin Server has limitations. Of course, it has technical limitations, one instance can't run the world, you can't use any arbitrary database backend. But these kind of clauses are meant for licensing limitations enforced via technical policies, E.G, on Windows, it'd be understandable I couldn't modify Windows 10 Home to let me use BitLocker, because it's a Windows 10 Pro feature, and hence an actual licensing limitation. Yet Windows 10 Home does actually contain the same files as Windows 10 pro, the only difference is how it lets you use them. Joplin Server doesn't have this same model, because the Joplin Server doesn't have artificial limitations to begin with.

Use the Software for committing cyber offences, including, without limitation, gaining
unauthorised access to machines, devices, networks, or data;

Again, this makes sense in Joplin Cloud, it doesn't make sense in Joplin Server. It means that definitions of Cyber Offences and Unauthorised Access are defined by English law, even when it's running outside of England on someones Raspberry Pi in the attic.

The only bit of the AUP I believe makes sense in the license is

vi. Use the Software for any purpose that the Licensor may consider a breach of the Li-
cense;

  1. There's a lot of repetition that doesn't serve to strengthen the protections, but might weaken them. It's mostly 2.3.X), the repeated usage of "charge others" doesn't need to be repeated. 2.3.I) Should just be "You can't charge others". By adding this statement onto every sub-sub-section, it implies the logical AND rather than the grammatical and.

You can see instead an proper grammatical and used here

(i) use the Software for commercial purposes and (ii) grant others the right

It's clear that these are entirely independent. Unlike e.g,

Install the Software on Licensee’s infrastructure and charge others for the use of the Software
So I could potentially install it on infrastructure I don't own, E.G, AWS, and charge for it? Obviously this isn't the intention, but it becomes a reasonable interpretation because of the repeated usage of and when it isn't needed.


commercial purposes, including, without
limitation, copying, reproducing, publishing, transmitting, transferring, selling, renting, modi-
fying, creating derivative works from, distributing, reposting, performing, displaying, or in
any other way commercially exploiting the Software

This implicitly defines a lot of the context of commercial use. But I don't think for example you're going to want "modifying", because it would deny Github contributions. Similarly, reproducing & publishing would deny users making alternate Docker releases. You could argue the mere presence of submitting to DockerHub would be giving Docker commercial influence via popularity. It leaves a lot open to interpretation.

Of course practically, there's an preference for people to be using the official releases of the software to ease support. But I don't think the this document has the balance that I assume you were hoping for.

2 Likes

Thanks for the feedback @james-carroll. Trimming down the license would be good so I'll look if these parts can be changed or removed.

The final license, which includes some of the changes mentioned by James Carroll, is now live:

It was more work than I would have hoped but I think the end result is quite good. It should still allow anyone, like before, to self host Joplin Server, while also restricting commercial use. I don't expect it will be changed further unless there's something obviously very wrong with it.

In any case, thanks everyone for your support to get there!

7 Likes

To focus on the positives, it's definitely good for the purpose which it was designed. The extreme majority of people will have no issues with the license, and the possibility for exploitative commercialisation on someone elses infrastructure is clearly dealt with. There's a big success there and it's money well spent.

The negatives would only effect a ridiculously small subset of people (e.g people like myself who might be keen to attempt repackaging it, or people who might want to hack on it directly). 99.9% of the users won't be doing that. If I've sounded negative so far, it's only because as part of the small minority, it's annoying when you end up crossing licensing terms on very minor issues (sometimes at the level of single words!).

I'm glad to see the lawyers agreed with removing the AUP. The lack of changes to the illustrations in 2.3 weren't that important (they are just illustrations, not actual terms by themselves). And while it's unfortunate that there isn't e.g an explicit grant to repackage the software; the end result is absolutely fine for the incredibly vast majority.

1 Like

The license actually allows modifying the software, as long as it's not for commercial purposes, so I think the current Docker images should be fine (such as the alternative AMR release).

1 Like