Mastodon-C.IM
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- The policy describes staff access for safety and legal checks.
A Mastodon server that keeps posts public, shares them across the fediverse, and can suspend you without notice.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, posts, profile pictures, IP address, and browser data when you log in.
Read the exact line
Privacy policy
“When you register, we collect your username, email address, and a password. You may optionally provide profile information such as a display name, biography, profile and header images.”
Training
They use it to run Mastodon, moderate abuse, send notifications, and answer legal requests—not ads.
Read the exact line
Privacy policy
“We do not profile users or use your data for advertising or commercial targeting.”
Sharing
Your public posts go to other fediverse servers; Cloudflare and Stripe also process some data.
Read the exact line
Privacy policy
“Your public posts, profile, and activity may be downloaded and cached by other servers in the Fediverse.”
Kept
Your media stays until you delete it; login IPs can be kept up to 12 months.
Read the exact line
Privacy policy
“Media uploaded by local users is stored indefinitely unless deleted by the user”
Controls
You can export posts and media or delete your account anytime in settings.
Read the exact line
Privacy policy
“You can export your content (including posts and media) or delete your account at any time.”
Fine print
You must be 18. They can suspend you without notice. The service is as-is under Estonian law.
Read the exact line
Terms of service
“We reserve the right to remove content or suspend accounts that violate these Terms, without prior notice.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Export your posts and media
Account settings (privacy policy: export your content at any time)
Delete your account
Your settings (terms: delete your account at any time in your settings)
Revoke logged-in sessions
Account settings (sessions visible and can be revoked anytime)
Contact them about data access or removal
hi@o.ee (privacy) or admin@c.im (terms)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They can take down your posts or lock you out without warning if they think you broke the rules.
Read the exact line
Terms of service
“We reserve the right to remove content or suspend accounts that violate these Terms, without prior notice.”
For example, a post they dislike could vanish and your login could stop working the same day, with no heads-up.
If they warn, limit, or ban you, you cannot formally appeal that choice.
Read the exact line
Terms of service
“Moderation decisions are made at our discretion and are not subject to appeal.”
For example, if they suspend you for a joke they read as harassment, there is no appeal process in the terms.
Anyone can see your name, bio, and pictures. You cannot hide those on this server.
Read the exact line
Privacy policy
“Your username, display name, biography, profile picture, and header image are always public.”
For example, a searcher can open your profile and see your photo and bio without following you.
Once you post publicly, other Mastodon servers can keep a copy even if this site later changes.
Read the exact line
Privacy policy
“Public and unlisted posts may be delivered to other servers and remain accessible outside of c.im.”
For example, a public toot can still show up on another instance after you try to take it down here.
Deleting a post here does not promise it disappears everywhere else on the network.
Read the exact line
Privacy policy
“When you delete posts, deletion requests are also sent to other servers, but we cannot guarantee remote deletion.”
For example, you delete a rant, but a copy may still sit on a follower’s server.
They do not promise the site will work, stay up, or stay secure.
Read the exact line
Terms of service
“The Service is provided "as is" and "as available", of any kind.”
For example, if the server is down when you need to post, you have little contractual recourse.
They say they will not sell your information to others for money.
Read the exact line
Privacy policy
“We do not sell or trade your personal data.”
For example, they are not supposed to sell your email list to marketers.
They say they are not tracking you with ad or analytics cookies.
Read the exact line
Privacy policy
“We do not use third-party cookies, advertising cookies, or any analytics tools.”
For example, visiting the site should not load a Google Analytics or ad pixel according to this policy.
You can download your stuff or wipe the account from the service.
Read the exact line
Privacy policy
“You can export your content (including posts and media) or delete your account at any time.”
For example, before leaving you can export posts and then delete the account in settings.
Kids and teens are not allowed; you confirm you are 18 when you sign up.
Read the exact line
Terms of service
“You may use the Service only if you are at least 18 years old and capable of forming a binding contract.”
For example, a 16-year-old is told not to register, but they only check by you saying you are 18.
Words to know
Legal words from the lines above, in plain English.
- human review
- Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- cookies
- Small files a website saves on your device so it can recognise you and remember what you did. For example, a cookie keeps you logged in and can also tell an ad company which sites you visited.
How we got here · grade A · score 57/100 · 14 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account details, optional profile media, posts, plus login IP and browser data and short access logs.
Does it record your voice, face or body, and what happens to that?
This is a text social server. The documents do not describe collecting voice, face, or body data.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
They say data may be used to moderate content, detect abuse, and respond to legal requests.
Are you profiled or tracked for advertising?
They say they do not profile for ads and do not use advertising or analytics cookies.
Do they sell or share your data, and can you opt out?
They say they do not sell data. They use Cloudflare and Stripe, and public posts federate to other servers.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
They say they do not profile users. There is no AI memory feature described.
Do they commit to basic security, and have they leaked data?
They describe HTTPS, hashed passwords, optional 2FA, and monitoring. No audit or leak history is stated.
Is there a real age gate, and are teens protected?
The service is for people 18 and older. You confirm that by registering; no extra age check is described.
Will they tell you when the rules change, and is the policy specific?
Both documents are dated. They say material term changes will be announced in advance, and the privacy policy lists data types and retention.
Can they close your account without warning, and can you get your data out first?
They can remove content or suspend accounts without prior notice, and may suspend the whole service for any reason.
If something goes wrong, who pays?
The service is as-is with no warranties, and they disclaim indirect and consequential damages.
Do subscriptions renew on their own, and can you get a refund?
Stripe is mentioned only for optional donations. No subscription or auto-renew terms are described.
The privacy policy is 722 words at a fairly hard level (Flesch reading ease 52.5); the terms are 611 words at a fairly hard level.
