mastodon.social privacy policy — score 25/100 (high risk)
Sidst analyseret
Rapportindholdet (resumé, fund, citater) er genereret på engelsk og er ikke lokaliseret.
Mastodon GmbH · mastodon.social
Rapportdetaljer
high risikoMastodon GmbH's mastodon.social privacy policy page was not actually provided for analysis — only navigation chrome and marketing copy were included, making it impossible to assess compliance and leaving users without verifiable assurances.
The provided text contains only the website's navigation structure, footer links, and marketing taglines for mastodon.social, operated by Mastodon GmbH. The actual privacy policy content linked at /privacy-policy was not captured in the scrape. No substantive privacy language, data processing details, legal bases, user rights, or transfer mechanisms are present in the provided text. This means the analysis can only flag the absence of information rather than evaluate existing protections.
Vurdering pr. kategori
Opdeling af politikken på vigtige compliance-områder. God = stærk, rimelig = blandet, dårlig = bekymrende.
No policy text was provided, so there is no evidence of data minimization commitments or collection limits.
The privacy policy page link exists but its content was not captured, meaning transparency cannot be verified from the provided text.
Zero information available about subprocessors, analytics providers, or any third-party data recipients in the provided content.
No mention of data residency, transfer mechanisms, or geographic processing locations anywhere in the provided text.
Silent — no language about whether user data is used for AI training, and no opt-out mechanism described.
No GDPR user rights (access, deletion, portability, objection) are documented in the provided text.
Vigtige fund
Bemærkelsesværdige klausuler, problemer eller gode praksisser (kritiske først)
Privacy policy content entirely missing from provided text
The linked privacy policy page at /privacy-policy was included in the scrape but only rendered navigation chrome and marketing copy — no substantive privacy language appeared. This makes it impossible to assess what data is collected, how it is processed, or what rights users have.
No data processing details or legal bases stated
The provided text contains no information about what personal data mastodon.social collects, the legal bases under GDPR Article 6, or purposes of processing. This is a fundamental transparency failure if the policy itself is not accessible or readable.
Fediverse data sharing implications unaddressed
Mastodon.social is part of the fediverse, meaning user data (posts, profiles, interactions) is federated to other independent servers. The provided text does not explain this cross-server data flow, its privacy implications, or how users can control it — a significant gap for a decentralized social network.
Marketing claims about privacy lack substantiation
The page states 'No algorithms, ads, or clickbait in sight' as a privacy-positive differentiator, but without an accessible privacy policy, these claims are unverifiable and potentially misleading under GDPR transparency requirements.
Resumé til brugeren
You cannot evaluate mastodon.social's privacy practices from this text because the actual policy content is missing; visit the privacy policy page directly and review it before trusting the service with your data.
Compliance-stilling
Unknown and unverifiable — the privacy policy content was not provided, so no compliance assessment can be made. This itself is a concern if the policy is not easily accessible or renderable.
EU-overførsler
No information provided about data storage locations, international transfers, or safeguard mechanisms such as Standard Contractual Clauses.
Registrerede signaler
Specifikke datapunkter og praksisser identificeret i teksten
Bevisuddrag
Direkte citater fra politikken, der understøtter disse fund
The original server of Mastodon, operated by Mastodon GmbH for the common good.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
mastodon.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mangler eller uklart
- Actual privacy policy text — the page content was not captured
- Legal bases for data processing under GDPR
- Data retention periods and deletion policies
- List of subprocessors or third-party recipients
- International data transfer mechanisms and safeguards
- Cookie and tracking technology details
- User rights procedures and contact information for the DPO
- Fediverse federation data flow explanation and user controls
- Data breach notification procedures
- Children's privacy protections
Spørgsmål at stille
- Why did the privacy policy page fail to render its substantive content, and is this a recurring accessibility issue for users trying to review their privacy rights?
- How does mastodon.social handle the inherent data federation of the fediverse — what personal data flows to other servers, and what legal basis supports this?
- Does Mastodon GmbH have a Data Protection Officer, and how can users exercise their GDPR rights (access, erasure, portability, objection)?
Del denne analyse
Alle med dette link kan se resultatet ovenfor.
Bygget af DentroChat
100 % europæisk AI-chat for alle
Chat med AI, arbejd med filer, generer billeder og søg på nettet. Data forbliver i Europa.