mastodon.social privacy policy — score 25/100 (high risk)
Laatst geanalyseerd
De rapportinhoud (samenvatting, bevindingen, citaten) is in het Engels gegenereerd en niet gelokaliseerd.
Mastodon GmbH · mastodon.social
Rapportdetails
high risicoMastodon GmbH's mastodon.social privacy policy page was not actually provided for analysis — only navigation chrome and marketing copy were included, making it impossible to assess compliance and leaving users without verifiable assurances.
The provided text contains only the website's navigation structure, footer links, and marketing taglines for mastodon.social, operated by Mastodon GmbH. The actual privacy policy content linked at /privacy-policy was not captured in the scrape. No substantive privacy language, data processing details, legal bases, user rights, or transfer mechanisms are present in the provided text. This means the analysis can only flag the absence of information rather than evaluate existing protections.
Beoordeling per categorie
Uitsplitsing van het beleid over belangrijke compliancegebieden. Goed = sterk, redelijk = gemengd, slecht = zorgwekkend.
No policy text was provided, so there is no evidence of data minimization commitments or collection limits.
The privacy policy page link exists but its content was not captured, meaning transparency cannot be verified from the provided text.
Zero information available about subprocessors, analytics providers, or any third-party data recipients in the provided content.
No mention of data residency, transfer mechanisms, or geographic processing locations anywhere in the provided text.
Silent — no language about whether user data is used for AI training, and no opt-out mechanism described.
No GDPR user rights (access, deletion, portability, objection) are documented in the provided text.
Belangrijkste bevindingen
Opvallende clausules, problemen of positieve praktijken (kritiek eerst)
Privacy policy content entirely missing from provided text
The linked privacy policy page at /privacy-policy was included in the scrape but only rendered navigation chrome and marketing copy — no substantive privacy language appeared. This makes it impossible to assess what data is collected, how it is processed, or what rights users have.
No data processing details or legal bases stated
The provided text contains no information about what personal data mastodon.social collects, the legal bases under GDPR Article 6, or purposes of processing. This is a fundamental transparency failure if the policy itself is not accessible or readable.
Fediverse data sharing implications unaddressed
Mastodon.social is part of the fediverse, meaning user data (posts, profiles, interactions) is federated to other independent servers. The provided text does not explain this cross-server data flow, its privacy implications, or how users can control it — a significant gap for a decentralized social network.
Marketing claims about privacy lack substantiation
The page states 'No algorithms, ads, or clickbait in sight' as a privacy-positive differentiator, but without an accessible privacy policy, these claims are unverifiable and potentially misleading under GDPR transparency requirements.
Samenvatting voor de gebruiker
You cannot evaluate mastodon.social's privacy practices from this text because the actual policy content is missing; visit the privacy policy page directly and review it before trusting the service with your data.
Nalevingshouding
Unknown and unverifiable — the privacy policy content was not provided, so no compliance assessment can be made. This itself is a concern if the policy is not easily accessible or renderable.
EU-overdrachten
No information provided about data storage locations, international transfers, or safeguard mechanisms such as Standard Contractual Clauses.
Gedetecteerde signalen
Specifieke gegevens en praktijken geïdentificeerd in de tekst
Bewijsfragmenten
Directe citaten uit het beleid ter ondersteuning van deze bevindingen
The original server of Mastodon, operated by Mastodon GmbH for the common good.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
mastodon.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Ontbreekt of onduidelijk
- Actual privacy policy text — the page content was not captured
- Legal bases for data processing under GDPR
- Data retention periods and deletion policies
- List of subprocessors or third-party recipients
- International data transfer mechanisms and safeguards
- Cookie and tracking technology details
- User rights procedures and contact information for the DPO
- Fediverse federation data flow explanation and user controls
- Data breach notification procedures
- Children's privacy protections
Vragen om te stellen
- Why did the privacy policy page fail to render its substantive content, and is this a recurring accessibility issue for users trying to review their privacy rights?
- How does mastodon.social handle the inherent data federation of the fediverse — what personal data flows to other servers, and what legal basis supports this?
- Does Mastodon GmbH have a Data Protection Officer, and how can users exercise their GDPR rights (access, erasure, portability, objection)?
Deel deze analyse
Iedereen met deze link kan het resultaat hierboven bekijken.
Gebouwd door DentroChat
100% Europese AI-chat voor iedereen
Chat met AI, werk met bestanden, genereer afbeeldingen en zoek op het web. Gegevens blijven in Europa.