Privacy, in plain language.

We retain the minimum information required to operate Mastodon: account data, federated interaction logs, and necessary security records. The Mastodon service does not create advertising identifiers.

When you delete an account or post, Mastodon’s standard deletion process is followed and related caches are cleared within 30 days.

Information supports core features such as notifications, moderation, federation, and abuse detection.

We do not sell or rent member data. If a valid legal request requires disclosure, we will notify affected people whenever the law allows.

The website and Mastodon service use encrypted transport and receive regular security updates.

Operational logs and backups are retained for no longer than 90 days and are limited to authorized administrators.

The public website uses Google Analytics only after you explicitly allow it. We measure page views and clicks on the Mastodon and App Store calls to action; we do not connect this data to Mastodon accounts.

Google receives technical information such as the page URL and IP address when analytics is enabled. Advertising storage, advertising user data, and ad personalization remain disabled. You can change this choice from “Analytics preferences” in the footer.

You can export or delete your account data at any time. For help, email contact@somincola.org.

Material changes to this policy will be announced and reflected on this page.