Mastodon-meow.social
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- Staff may review your content; the policy does not describe an opt-out.
A Mastodon server that posts publicly, can read DMs, keeps IPs up to a year, and offers no paid AI features.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account details, public posts, follow lists, IP address, browser name, and cookies.
Read the exact line
Privacy policy
“If you register on this server, you may be asked to enter a username, an e-mail address and a password.”
Training
They use it to run Mastodon, send email notices, and help with moderation like spotting ban evasion.
Read the exact line
Privacy policy
“To aid moderation of the community, for example comparing your IP address with other known ones to determine ban evasion or other violations.”
Sharing
Public posts go to other servers; they say they do not sell personal info except to trusted helpers.
Read the exact line
Privacy policy
“We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.”
Kept
You can delete your account anytime; login IPs may be kept up to 12 months and logs up to 90 days.
Read the exact line
Privacy policy
“Retain the IP addresses associated with registered users no more than 12 months.”
Controls
You can download an archive, delete your account, review logins, and manually approve followers.
Read the exact line
Privacy policy
“You can request and download an archive of your content, including your posts, media attachments, profile picture, and header image.”
Fine print
Free as-is service; they can restrict access at their discretion; changes apply 14 days after posting.
Read the exact line
Terms of service
“The Instance is provided "as is" of any kind.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Download an archive of your posts and media
Privacy policy: request and download an archive of your content
Irreversibly delete your account
In the service; privacy policy says you may delete at any time
Review and revoke logged-in sessions
Account settings (privacy policy)
Turn on manual follower approval
Settings (privacy policy)
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
People who run this server, and other servers that get your DMs, can read those private messages.
Read the exact line
Privacy policy
“Please keep in mind that the operators of the server and any receiving server may view such messages”
For example, a direct message you think is private could be read by a moderator here or on a friend’s server.
They warn that this network is not a safe place for secrets.
Read the exact line
Privacy policy
“Do not share any sensitive information over Mastodon.”
For example, do not send a password, medical detail, or home address in a post or DM.
Your profile is public to anyone, not just people you follow.
Read the exact line
Privacy policy
“The username, display name, biography, profile picture and header image are always listed publicly.”
For example, a search engine or another Mastodon server can show your bio and photo.
Once a public post leaves this server, copies can live on other people’s servers.
Read the exact line
Privacy policy
“Your posts are delivered to your followers, in some cases it means they are delivered to different servers and copies are stored there.”
For example, deleting a post here may not erase copies already saved on another instance.
They keep the last IP you logged in from for as long as a year.
Read the exact line
Privacy policy
“The latest IP address used is stored for up to 12 months.”
For example, they could still see which network you used months after you last logged in.
They can take down posts or lock you out without promising a warning.
Read the exact line
Terms of service
“We reserve the right to remove content or restrict access at our discretion.”
For example, they could suspend your account after a report and you might not get a heads-up first.
If the site breaks or you lose access, they say they do not owe you money or a fix.
Read the exact line
Terms of service
“The Instance is provided "as is" of any kind.”
For example, if the server is down during an event, they say they will not pay for that inconvenience.
You still own your posts; they only get permission to show them on this network.
Read the exact line
Terms of service
“You own the rights to any content you post. By posting it, you give us a limited license to host, display, and distribute it in connection with the Instance.”
For example, they can federate your post to followers, but they are not claiming they own your art.
You can wipe your account yourself; it cannot be undone.
Read the exact line
Privacy policy
“You may irreversibly delete your account at any time.”
For example, after you delete, you cannot log back in to recover old posts from this server.
Adults are the main audience; younger teens need a parent, and under 15 is banned.
Read the exact line
Terms of service
“You must be at least 18 years old to use the Instance.”
For example, a 14-year-old is not allowed to sign up even with a parent.
Words to know
Legal words from the lines above, in plain English.
- human review
- Company staff or contractors may read your messages or content, usually to check for rule breaking. For example, a flagged private chat with an AI can be read by a person at the company.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- as is
- You get the service in whatever state it is in, with no promise that it works or will keep working. For example, if the app deletes your photos by mistake, it is not promising to fix that or pay you back.
- warranty
- A promise that a product will work as described; most apps say they make no such promise at all. For example, if a paid feature never works on your phone, a no-warranty clause says that is your problem.
- sensitive personal information
- Data that could hurt you if exposed, like health, religion, sexuality, race, exact location or bank details. For example, telling a chatbot about a medical condition creates sensitive data that some laws protect more strictly.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
How we got here · grade B · score 50/100 · 14 of 15 policy answers backed by a verified quote · 3 not stated
What does the app collect beyond what it needs to work?
They collect account and profile info, posts, plus IP addresses, browser name, cookies, and server logs.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Server operators (and receiving servers) may view direct and followers-only posts. No opt-out is described.
Are you profiled or tracked for advertising?
They describe cookies to save preferences, not ads or third-party ad tracking.
Do they sell or share your data, and can you opt out?
They say they do not sell personal info, except to trusted parties who help run the site, plus federation of posts.
What rights do they take over what you type and what the AI makes?
You own your posts. They only get a limited license to host, display, and distribute them on the instance.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete your account anytime and download an archive. They aim to keep request logs no more than 90 days; login IPs up to 12 months.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe SSL, hashed passwords, and optional two-factor authentication. No audit or leak history is stated.
Is there a real age gate, and are teens protected?
Terms require age 18, or 15–17 with parent consent; under 15 is banned. Privacy also cites 13 (US) / 16 (EU). No ID check is described.
Will they tell you when the rules change, and is the policy specific?
Policies are dated. Terms changes take effect 14 days after publication, and continued use means you accept.
Can they close your account without warning, and can you get your data out first?
They may suspend or terminate for violations and can restrict access at their discretion, with no promised notice or export first.
If something goes wrong, who pays?
The service is as-is with no warranty, and they say they are not liable for damages and will not pay compensation.
Do subscriptions renew on their own, and can you get a refund?
They describe a free, donation-funded service, not a paid subscription.
The privacy policy is 1,188 words at a fairly hard level (Flesch reading ease 54.8); the terms are 690 words at a fairly hard level.
