Nitecrew (Mastodon Instance)
- The documents do not say whether your data trains AI.
- The documents do not say whether your data is used for ads.
- Data is shared only with the providers who run the service.
- The documents do not say who can read your content.
A small Mastodon server: they say they don’t sell your data, you can delete your account, but the policy is undated and thin.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Whatever personal info you give the site or API, plus cookies that remember your preferences.
Read the exact line
Privacy policy
“This privacy policy describes how nitecrew.rip ("nitecrew.rip", "we", "us") collects, protects and uses the personally identifiable information you may provide through the nitecrew.rip website or its API.”
Training
They say they use what they collect, but the policy never lists the actual uses.
Read the exact line
Privacy policy
“Any of the information we collect from you may be used in the following ways:”
Sharing
They say they don’t sell your personal info; trusted helpers and other Mastodon servers can still see public posts.
Read the exact line
Privacy policy
“We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.”
Kept
You can delete your account; they do not say how long copies stay after that.
Read the exact line
Privacy policy
“You may irreversibly delete your account at any time.”
Controls
You can download an archive of posts and media, and you can delete your account.
Read the exact line
Privacy policy
“You can request and download an archive of your content, including your posts, media attachments, profile picture, and header image.”
Fine print
Age is 16 in the EU and 13 in the USA; there is no dated terms page about lawsuits or payments.
Read the exact line
Privacy policy
“If this server is in the USA: Our site, products and services are all directed to people who are at least 13 years old.”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Download an archive of your posts and media
Privacy policy: request and download an archive of your content
Irreversibly delete your account
Privacy policy: you may irreversibly delete your account at any time
Turn on two-factor authentication
Account security settings described in the privacy policy
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
They start a list of how they use your data but never actually list the uses.
Read the exact line
Privacy policy
“Any of the information we collect from you may be used in the following ways:”
For example, you cannot tell from this page whether they log IPs, keep DMs, or share stats.
Posts you make public can be copied onto other people’s servers, not just this one.
Read the exact line
Privacy policy
“Your public content may be downloaded by other servers in the network.”
For example, a public toot can sit on another instance even after you delete it here.
They say they will not sell your personal details, except to trusted helpers or when the law requires it.
Read the exact line
Privacy policy
“We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.”
For example, they should not sell your email to an advertiser.
Companies that run the site for them can still get your data if they promise to keep it secret.
Read the exact line
Privacy policy
“This does not include trusted third parties who assist us in operating our site, conducting our business, or servicing you, so long as those parties agree to keep this information confidential.”
For example, a hosting company could hold backups of your account.
Apps you connect can read a lot of your social data if you allow it.
Read the exact line
Privacy policy
“When you authorize an application to use your account, depending on the scope of permissions you approve, it may access your public profile information, your following list, your followers, your lists, all your posts, and your favourites.”
For example, a third-party client could pull all your posts and who you follow.
You can wipe the account, but they do not say how long backups last.
Read the exact line
Privacy policy
“You may irreversibly delete your account at any time.”
For example, you might delete today and still exist in a backup for an unknown time.
You can get a copy of your posts and pictures before you leave.
Read the exact line
Privacy policy
“You can request and download an archive of your content, including your posts, media attachments, profile picture, and header image.”
For example, you can download your toots and then delete the account.
Login traffic is encrypted and passwords are stored hashed, not as plain text.
Read the exact line
Privacy policy
“Among other things, your browser session, as well as the traffic between your applications and the API, are secured with SSL, and your password is hashed using a strong one-way algorithm.”
For example, someone sniffing the network should not see your password in the clear.
Kids under 13 in the US (16 in the EU) are told not to use it; they do not describe ID checks.
Read the exact line
Privacy policy
“If you are under the age of 13, per the requirements of () do not use this site.”
For example, a 12-year-old could still sign up if they type a fake age.
Words to know
Legal words from the lines above, in plain English.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- COPPA
- A US law that limits what apps can collect from children under 13 without a parent's permission. For example, an app must get a parent's OK before it collects a 10-year-old's email address.
How we got here · grade F · score 34/100 · 14 of 15 policy answers backed by a verified quote · 9 not stated
What does the app collect beyond what it needs to work?
They collect personal information you provide on the site or API, plus cookies that recognize your browser and account. They do not list extra things like contacts or precise location.
Does it record your voice, face or body, and what happens to that?
Not stated in the documents.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Not stated in the documents.
Are you profiled or tracked for advertising?
Not stated in the documents.
Do they sell or share your data, and can you opt out?
They say they do not sell your personal information, but trusted third parties who help run the site can get it, and public posts go to other servers.
What rights do they take over what you type and what the AI makes?
Not stated in the documents.
How long do they keep your data after you delete it, and can you delete it in the app?
Not stated in the documents.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe SSL, hashed passwords, and optional two-factor authentication. No audit or leak history is mentioned.
Is there a real age gate, and are teens protected?
They say the site is for people 16+ in the EU/EEA and 13+ in the USA, with no age-check process described.
Will they tell you when the rules change, and is the policy specific?
The page says “Last updated” with no date and no promise of notice if the rules change.
Can they close your account without warning, and can you get your data out first?
Not stated in the documents.
If something goes wrong, who pays?
Not stated in the documents.
Do subscriptions renew on their own, and can you get a refund?
No subscriptions, prices, or refunds are described.
The privacy policy is 549 words at a college level (Flesch reading ease 48.9).
