Mastodon-Toot.Community
- The documents do not say whether your data trains AI.
- The policy rules out using your data for targeted ads.
- Data is shared only with the providers who run the service.
- Staff may review your content; the policy does not describe an opt-out.
A Mastodon server that keeps public posts public, can read DMs, shares signup data with spam checkers.
Agent Trust Hub uses AI and may make mistakes. Review reports and confirm their contents before relying on them.
Collected
Account info, posts, profile pictures, IP address, browser, and signup checks with spam services.
Read the exact line
Privacy policy
“If you register on this server, you may be asked to enter a username, an e-mail address and a password.”
Training
They use your data to run Mastodon, moderate, fight spam, and send optional emails—not for ads.
Read the exact line
Privacy policy
“Any of the information we collect from you may be used in the following ways:”
Sharing
Public posts go to the fediverse; hosts and spam checkers see some data; they say they do not sell it.
Read the exact line
Privacy policy
“We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.”
Kept
Login IPs up to 12 months, server logs up to 90 days; you can delete your account anytime.
Read the exact line
Privacy policy
“Retain the IP addresses associated with registered users no more than 12 months.”
Controls
You can download an archive, delete your account, revoke sessions, and email them about rights.
Read the exact line
Privacy policy
“You can request and download an archive of your content, including your posts, media attachments, profile picture, and header image.”
Fine print
You keep ownership but grant a license; is capped at $100.
Read the exact line
Terms of service
“You and the Instance agree that any and all disputes, claims, demands, or causes of action (“Claims”) that have arisen or may arise between you and us”
Expand “Read the exact line” to see the source alongside the explanation.
What you can turn off
The controls and opt-outs their own documents describe, and where they say to find them.
Download an archive of your posts and media
Account settings (right to data portability)
Delete your account
In the app/account; or contact jorijn@jorijn.com
Review and revoke logged-in sessions
Settings, logged-in sessions list
Object to automated signup screening
Email jorijn@jorijn.com ( )
If a switch is not where they say, the deletion request above still applies.
Line by line
The lines that matter most, worst first.
You cannot sue them in a normal court with a jury or join a group lawsuit.
Read the exact line
Terms of service
“you and we are each waiving the right to a trial by jury or to participate in a ”
For example, if many users lost posts, you could not join a .
You still own your posts, but they get a forever license to copy and share them as needed to run the server.
Read the exact line
Terms of service
“you grant us a limited, non-exclusive, , transferable, , license to use, copy, store, display, share, distribute, communicate and transfer the Content”
For example, even after you leave, they can keep copies needed to show old public posts that already spread.
Admins on this server and on other servers can read your direct and followers-only posts.
Read the exact line
Privacy policy
“Please keep in mind that the operators of the server and any receiving server may view such messages”
For example, a private DM about a job could be seen by the people who run either server.
At signup they send your name, email, and IP to several outside spam and abuse checkers.
Read the exact line
Privacy policy
“When you register an account, your username, e-mail address and IP address are automatically submitted to the following third-party services”
For example, CleanTalk and StopForumSpam get your email and IP when you create an account.
If they mess up, they say they will not pay you more than $100.
Read the exact line
Terms of service
“In no event will Administrator's to you for all damages, losses, or causes of action exceed one hundred dollars ($100).”
For example, if a bug wiped years of posts, they still claim they owe at most $100.
They can shut off your account if they decide you broke the rules.
Read the exact line
Terms of service
“Any violation of these Terms may result in the suspension or termination by us, in our sole discretion, of your access to and use of the Instance.”
For example, they could lock you out after a moderation call without a promised warning period.
Your profile is public on the internet, not just to people you follow.
Read the exact line
Privacy policy
“The username, display name, biography, profile picture and header image are always listed publicly.”
For example, anyone can see your display name and profile photo without logging in.
You can wipe your account yourself; it cannot be undone.
Read the exact line
Privacy policy
“You may irreversibly delete your account at any time.”
For example, you can delete the account from settings and they say that removes your personal data from their systems.
You must be 16 or older; they rely on you saying so.
Read the exact line
Privacy policy
“Our site, products and services are all directed to people who are at least 16 years old.”
For example, a 15-year-old is told not to use the site, but there is no extra age check described.
Words to know
Legal words from the lines above, in plain English.
- sell or share
- Under California law, selling means passing your data to others for money or other value; sharing means passing it on for targeted ads. For example, letting an ad network use your browsing history in return for ad space counts as a sale.
- personal data
- Any information that is about you or can be linked to you, from your name to your phone's ID. For example, your email, your IP address and the list of apps on your phone are all personal data.
- class action waiver
- You agree not to join with other users in one lawsuit; each person must complain alone. For example, if a bug overcharges a million people, you cannot all sue together for a refund.
- worldwide license
- You let the company use your content anywhere on earth, usually for free and for as long as it likes. For example, a video you post can be shown in ads in any country without asking you again.
- irrevocable
- Cannot be taken back or cancelled once given, even if you change your mind or delete your account. For example, an irrevocable licence to your photos means you cannot withdraw it later.
- royalty-free
- The company can use your content without ever paying you for it. For example, your photo can appear in the app's ads and you get nothing.
- perpetual
- Lasting forever, with no end date. For example, a perpetual licence means the company can keep using your video years after you leave.
- third parties
- Any company or person other than you and the app, such as advertisers, partners or analytics firms. For example, an analytics company that receives a record of every screen you tap is a third party.
- limitation of liability
- A cap on what the company will ever pay you if something goes wrong, often only what you paid in the last year. For example, if a leak of your data costs you thousands, the most you may get back is a month's subscription fee.
How we got here · grade B · score 52/100 · 13 of 15 policy answers backed by a verified quote · 2 not stated
What does the app collect beyond what it needs to work?
They collect account details, posts, media, IP addresses, browser name, and session data, plus signup checks with third parties.
Does it record your voice, face or body, and what happens to that?
The documents do not describe recording voice, face, or body as biometric data; you can upload a profile picture.
Are your chats and uploads used to train AI models, and is that off by default?
Not stated in the documents.
Can employees or contractors read your conversations, and when?
Server operators may view direct and followers-only messages, and they may monitor the instance for rule breaks, with no opt-out described.
Are you profiled or tracked for advertising?
They say they do not use cookies for advertising or tracking.
Do they sell or share your data, and can you opt out?
They say they do not sell your data. They share with hosts, email, Cloudflare, and spam-screening services that help run the site, plus federation copies of posts.
What rights do they take over what you type and what the AI makes?
You keep ownership, but you grant an irrevocable, transferable, perpetual license so they can host and share your content.
How long do they keep your data after you delete it, and can you delete it in the app?
You can delete your account and download an archive. They aim to keep server logs no more than 90 days and user IPs no more than 12 months.
Does it build a lasting memory or profile of you, and can you see, edit or turn it off?
Not stated in the documents.
Do they commit to basic security, and have they leaked data?
They describe SSL, hashed passwords, and optional two-factor authentication. No independent audit is named.
Is there a real age gate, and are teens protected?
You must be at least 16. They ask you (or a parent) to confirm; no extra age check is described.
Will they tell you when the rules change, and is the policy specific?
Both documents are dated. Terms changes are posted and take effect no sooner than 14 days, except legal changes. Continued use means you agree.
Can they close your account without warning, and can you get your data out first?
They may deny access or suspend or terminate in their sole discretion. They may also modify or discontinue the instance with or without notice.
If something goes wrong, who pays?
Their total liability is capped at $100. If you are unhappy, your only remedy is to stop using the service.
Do subscriptions renew on their own, and can you get a refund?
The documents do not describe paid subscriptions or refunds.
The privacy policy is 2,012 words at a college level (Flesch reading ease 48.8); the terms are 2,603 words at a college level.
