This is an extremely minimalistic Privacy Policy intended to be adequate for a small instance. This instance attempts to set guidelines for interactions with the rest of the Fediverse. The TL;DR is that our admins will remove any federated content you request to be deleted if you can show you are a person responsible for it (an author, custodian, etc).

Administration and moderation team:

• @m
• @anna

Data collected and usage

Administrators and moderators do have access to:

• For local accounts: all profile information, registration email address, posts, interactions, account connection information, interaction metadata, etc.
• For remote accounts: this is a federated server, which means we store cached copies of profile information and content published by accounts followed by local accounts, responses to posts on local accounts, posts boosted by accounts followed by local accounts, direct and followers-only messages involving our local accounts, interaction metadata, and possibly other data delivered by federation protocols.
• IP and other metadata.

We do not have easy access to all this information (e.g. DMs and all HTTP client IP addresses are not easily available in our admin interfaces), we do not plan to make effort to review, collect, or copy such information, and prefer and will make effort to avoid having unnecessary access to any personal or identifying information. However, the data still may be stored for up to a year (90 days for server logs that include IP addresses to the HTTP endpoint, 12 months for local account IP addresses).

The data is intended for publication, replication, and retrieval per the core functionality of Mastodon as a social network or communication network. IP address information may be used for moderation purposes. Email addresses may be used for software generated notifications or communication from administrators and moderators in case of concerns regarding service usage, especially if unreachability on the platform.

The software employs encryption for in-transit protection of client and server exchanges. The server has the AUTHORIZED_FETCH option enabled in an effort to limit spread of content to service providers we deem unfederatable.

Data storage and third party access

This mastodon instance is fully managed by masto.host and thus masto.host Privacy Policy is relevant: masto.host is our Data Processor and posseses access to the stored data and IP addresses of interacting clients and federated servers. This data access is trusted not be misused per the Privacy of Hosting Service policy.

The data storage server is currently located in France, see masto.host Infrastructure page.

Otherwise, no data is passed to third party providers by us. However, this is a federated server and the data will be exchanged freely with servers we haven't blocked. We also cannot effectively fully prevent scraping, indexing, and replicating of the data beyond the server by either the website surface or federation protocol. In general, all information posted to Fediverse should be considered public and always accessible via the open Web.

Requests to remove data

We will process any request to delete local account and its content when requested. We will run mass post deletion if needed to notify federated servers they should remove the content. However, we cannot guarantee the federated network will remove the already exchanged content and won't be responsible for it. In general, all information posted to Fediverse should be considered public and freely replicable by federated servers - despite our best efforts to block federation with known bad actors, the data may be accessed by people you did not intend to share it with.

We will process any request to delete remote account and related federated content if: - you prove you are an author that wishes to clear created content, but which was not cleared automatically by federated deletion requests - you prove you are an author that does not wish for us to keep copies of your posts; in this case we will block your account and/or server from ours to prevent future profile and content fetches - you are a server owner who defederated from us and wants us to purge your content - we will also block your server to prevent future interactions - the content flagged is illegal, infringes copyright, or discloses your private or sensitive information and you can prove your identity - in this case this follows from our moderation policy and should go through report mechanisms

The actions may take up to a couple days to verify the given reasons and in case of server defederation give local and remote accounts a chance to prepare for the consequences of breaking communication (e.g. )

Please send such requests to the admin contact available on the About / server information pages.

Site usage by children

Our site, products and services are all directed to people who are at least 16 years old. If you are under the age of 16, per the requirements of the GDPR (General Data Protection Regulation) do not use this site.