mastodon.social privacy policy — score 25/100 (high risk)
Ultima analisi
Il contenuto del report (sintesi, risultati, citazioni) è stato generato in inglese e non è localizzato.
Mastodon GmbH · mastodon.social
Dettagli del report
high rischioMastodon GmbH's mastodon.social privacy policy page was not actually provided for analysis — only navigation chrome and marketing copy were included, making it impossible to assess compliance and leaving users without verifiable assurances.
The provided text contains only the website's navigation structure, footer links, and marketing taglines for mastodon.social, operated by Mastodon GmbH. The actual privacy policy content linked at /privacy-policy was not captured in the scrape. No substantive privacy language, data processing details, legal bases, user rights, or transfer mechanisms are present in the provided text. This means the analysis can only flag the absence of information rather than evaluate existing protections.
Valutazione per categoria
Suddivisione dell'informativa nelle principali aree di conformità. Buono = solido, discreto = misto, scarso = preoccupante.
No policy text was provided, so there is no evidence of data minimization commitments or collection limits.
The privacy policy page link exists but its content was not captured, meaning transparency cannot be verified from the provided text.
Zero information available about subprocessors, analytics providers, or any third-party data recipients in the provided content.
No mention of data residency, transfer mechanisms, or geographic processing locations anywhere in the provided text.
Silent — no language about whether user data is used for AI training, and no opt-out mechanism described.
No GDPR user rights (access, deletion, portability, objection) are documented in the provided text.
Risultati chiave
Clausole rilevanti, problemi o buone pratiche individuate (critici per primi)
Privacy policy content entirely missing from provided text
The linked privacy policy page at /privacy-policy was included in the scrape but only rendered navigation chrome and marketing copy — no substantive privacy language appeared. This makes it impossible to assess what data is collected, how it is processed, or what rights users have.
No data processing details or legal bases stated
The provided text contains no information about what personal data mastodon.social collects, the legal bases under GDPR Article 6, or purposes of processing. This is a fundamental transparency failure if the policy itself is not accessible or readable.
Fediverse data sharing implications unaddressed
Mastodon.social is part of the fediverse, meaning user data (posts, profiles, interactions) is federated to other independent servers. The provided text does not explain this cross-server data flow, its privacy implications, or how users can control it — a significant gap for a decentralized social network.
Marketing claims about privacy lack substantiation
The page states 'No algorithms, ads, or clickbait in sight' as a privacy-positive differentiator, but without an accessible privacy policy, these claims are unverifiable and potentially misleading under GDPR transparency requirements.
Sintesi per l'utente
You cannot evaluate mastodon.social's privacy practices from this text because the actual policy content is missing; visit the privacy policy page directly and review it before trusting the service with your data.
Postura di conformità
Unknown and unverifiable — the privacy policy content was not provided, so no compliance assessment can be made. This itself is a concern if the policy is not easily accessible or renderable.
Trasferimenti UE
No information provided about data storage locations, international transfers, or safeguard mechanisms such as Standard Contractual Clauses.
Segnali rilevati
Dati e pratiche specifiche identificate nel testo
Estratti probatori
Citazioni dirette dall'informativa a supporto di questi risultati
The original server of Mastodon, operated by Mastodon GmbH for the common good.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
mastodon.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mancante o poco chiaro
- Actual privacy policy text — the page content was not captured
- Legal bases for data processing under GDPR
- Data retention periods and deletion policies
- List of subprocessors or third-party recipients
- International data transfer mechanisms and safeguards
- Cookie and tracking technology details
- User rights procedures and contact information for the DPO
- Fediverse federation data flow explanation and user controls
- Data breach notification procedures
- Children's privacy protections
Domande da porre
- Why did the privacy policy page fail to render its substantive content, and is this a recurring accessibility issue for users trying to review their privacy rights?
- How does mastodon.social handle the inherent data federation of the fediverse — what personal data flows to other servers, and what legal basis supports this?
- Does Mastodon GmbH have a Data Protection Officer, and how can users exercise their GDPR rights (access, erasure, portability, objection)?
Condividi questa analisi
Chiunque abbia questo link può visualizzare il risultato sopra.
Realizzato da DentroChat
Chat IA 100% europea per tutti
Chatta con l'IA, lavora con file, genera immagini e cerca sul web. I dati restano in Europa.