This privacy policy describes how bizarre.social (“bizarre.social”, “we”, “us”) collects, protects and uses the personally identifiable information you may provide through the bizarre.social website or its API. The policy also describes the choices available to you regarding our use of your personal information and how you can access and update this information. This policy does not apply to the practices of companies that bizarre.social does not own or control, or to individuals that bizarre.social does not employ or manage.
What information do we collect?
Basic account information: If you register on this server, you may be asked to enter a username, an e-mail address and a password. You may also enter additional profile information such as a display name and biography, and upload a profile picture and header image. The username, display name, biography, profile picture and header image are always listed publicly.
Posts, following and other public information: The list of people you follow is listed publicly, the same is true for your followers. When you submit a message, the date and time is stored as well as the application you submitted the message from. Messages may contain media attachments, such as pictures and videos. Public and unlisted posts are available publicly. When you feature a post on your profile, that is also publicly available information. Your posts are delivered to your followers, in some cases it means they are delivered to different servers and copies are stored there. When you delete posts, this is likewise delivered to your followers. The action of reblogging or favouriting another post is always public.
Direct and followers-only posts: All posts are stored and processed on the server. Followers-only posts are delivered to your followers and users who are mentioned in them, and direct posts are delivered only to users mentioned in them. In some cases it means they are delivered to different servers and copies are stored there. We make a good faith effort to limit the access to those posts only to authorized persons, but other servers may fail to do so. Therefore it’s important to review servers your followers belong to. You may toggle an option to approve and reject new followers manually in the settings. Please keep in mind that the operators of the server and any receiving server may view such messages, and that recipients may screenshot, copy or otherwise re-share them. Do not share any sensitive information over Mastodon.
IPs and other metadata: When you log in, we record the IP address you log in from, as well as the name of your browser application. All the logged in sessions are available for your review and revocation in the settings. The latest IP address used is stored for up to 12 months. We also may retain server logs which include the IP address of every request to our server.
What do we use your information for?
Any information we collect from you may be used in the following ways: To provide the core features of Mastodon. You can only interact with other people’s content and post your own content if you are logged in. For example, you can follow other people to see their combined posts in your own personalised timeline.
To assist in moderating the community, for example, to compare your IP address with other known IP addresses to determine circumvention of bans or other violations. The email address you provide may be used to send you information and notifications about others who interact with your content or send you messages, and to respond to enquiries and/or other requests or questions.
How do we protect your information?
We use a number of security measures to ensure the safety of your personal information when you enter, submit or access it. Among other things, your browser session and traffic between your apps and the API are secured with SSL, and your password is hashed with a strong one-way algorithm. You can enable two-factor authentication to further secure access to your account.
What is our data retention policy?
We make our best efforts to: Retain server logs containing the IP addresses of all requests to that server, where such logs are kept, but for no longer than 90 days. Retain IP addresses of registered users for no longer than 12 months. You may request and download an archive of your content, including your posts, media attachments, profile picture and header picture.
You can delete your account irrevocably at any time.
Do we use cookies?
Yes. Cookies are small files that a website or its service provider transfers to your computer’s hard drive through your web browser (if you allow it). These cookies allow the website to recognise your browser and, if you have a registered account, to link it to your registered account.
We use cookies to understand and store your preferences for future visits.
Do we disclose any information to outside parties?
No, we do not sell, trade, or otherwise transfer to outside parties your personally identifiable information. This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential. We may also release your information when we believe release is appropriate to comply with the law, enforce our site policies, or protect ours or others rights, property, or safety.
Your public content may be downloaded by other servers in the network. Your public and followers-only posts are delivered to the servers where your followers reside, and direct messages are delivered to the servers of the recipients, in so far as those followers or recipients reside on a different server than this.
When you authorize an application to use your account, depending on the scope of permissions you approve, it may access your public profile information, your following list, your followers, your lists, all your posts, and your favourites. Applications can never access your e-mail address or password.
Site usage by children
If this server is in the EU or the EEA: Our site, products and services are all directed to people who are at least 18 years old. If you are under the age of 18, per the requirements of the GDPR (General Data Protection Regulation) do not use this site.
Updates to this privacy policy will be posted on bizarre.social.
Status: 02.02.2023