What information do we collect?

• Basic account information

  We collect information from you when you register on this server and gather data when you participate in the platform by reading, writing, and interacting with content shared here. If you register on this server, you will be asked to enter an e-mail address, a password and at least an username. Your e-mail address will be verified by an email containing a unique link. If that link is visited, we know that you control the e-mail address. You may also enter additional profile information such as a display name and biography, and upload a profile picture and header image. The username, display name, biography, profile picture and header image are always listed publicly. You may, however, visit this server without registering.

• Published events and comments

  Your events and comments are delivered to other instances that follow your own, meaning they are delivered to different servers and copies are stored there. When you delete events or comments, this is likewise delivered to these other instances. The action of joining an event is federated as well. Please keep in mind that the operators of the server and any receiving server may view such messages, and that recipients may screenshot, copy or otherwise re-share them. Do not share any dangerous information over Mobilizon.

• IPs and other metadata

  We also may retain server logs which include the IP address of every request to our server.

What do we use your information for?

Any of the information we collect from you may be used in the following ways:

• To provide the core functionality of Mobilizon. Depending on this instance's policy you may only be able to interact with other people's content and post your own content if you are logged in.
• To aid moderation of the community, for example comparing your IP address with other known ones to determine ban evasion or other violations.
• The email address you provide may be used to send you information, updates and notifications about other people interacting with your content or sending you messages and to respond to inquiries, and/or other requests or questions.

How do we protect your information?

We implement a variety of security measures to maintain the safety of your personal information when you enter, submit, or access your personal information. Among other things, your browser session, as well as the traffic between your applications and the API, are secured with SSL/TLS, and your password is hashed using a strong one-way algorithm.

What is our data retention policy?

We will make a good faith effort to:

• Retain server logs containing the IP address of all requests to this server, in so far as such logs are kept, no more than 90 days.
• Retain the IP addresses associated with registered users no more than 12 months.

You can request and download an archive of your content, including your posts, media attachments, profile picture, and header image.

You may irreversibly delete your account at any time.

Do we use cookies?

We store the following information on your device when you connect:

• An internal user ID
• An internal ID for your current selected identity
• Tokens to authenticate you

If you delete these informations, you need to login again.

If you're not connected, we don't store any information on your device, unless you participate in an event anonymously. In that case we store the hash of the UUID and participation status in your browser so that we may display participation status. Deleting these informations will only stop displaying participation status in your browser.

Note: These informations are stored in your localStorage and not your cookies.

Do we disclose any information to outside parties?

We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety.

Your content may be downloaded by other servers in the network. Your content is delivered to the servers following your instance, and direct messages are delivered to the servers of the recipients, in so far as these recipients reside on a different server than this one.

Site usage by children

If this server is in the EU or the EEA: Our site, products and services are all directed to people who are at least 16 years old. If you are under the age of 16, per the requirements of the GDPR (General Data Protection Regulation) do not use this site.

If this server is in the USA: Our site, products and services are all directed to people who are at least 13 years old. If you are under the age of 13, per the requirements of COPPA (Children's Online Privacy Protection Act) do not use this site.

Law requirements can be different if this server is in another jurisdiction.

Changes to our Privacy Policy

If we decide to change our privacy policy, we will post those changes on this page.

This document is CC-BY-SA. It was last updated January 16, 2020.

Originally adapted from the Mastodon and Discourse privacy policies.