mastodon.social privacy policy — score 25/100 (high risk)
Senast analyserad
Rapportinnehållet (sammanfattning, fynd, citat) genererades på engelska och är inte lokaliserat.
Mastodon GmbH · mastodon.social
Rapportdetaljer
high riskMastodon GmbH's mastodon.social privacy policy page was not actually provided for analysis — only navigation chrome and marketing copy were included, making it impossible to assess compliance and leaving users without verifiable assurances.
The provided text contains only the website's navigation structure, footer links, and marketing taglines for mastodon.social, operated by Mastodon GmbH. The actual privacy policy content linked at /privacy-policy was not captured in the scrape. No substantive privacy language, data processing details, legal bases, user rights, or transfer mechanisms are present in the provided text. This means the analysis can only flag the absence of information rather than evaluate existing protections.
Bedömning per kategori
Uppdelning av policyn över viktiga efterlevnadsområden. Bra = stark, rimlig = blandad, dålig = oroande.
No policy text was provided, so there is no evidence of data minimization commitments or collection limits.
The privacy policy page link exists but its content was not captured, meaning transparency cannot be verified from the provided text.
Zero information available about subprocessors, analytics providers, or any third-party data recipients in the provided content.
No mention of data residency, transfer mechanisms, or geographic processing locations anywhere in the provided text.
Silent — no language about whether user data is used for AI training, and no opt-out mechanism described.
No GDPR user rights (access, deletion, portability, objection) are documented in the provided text.
Viktiga fynd
Anmärkningsvärda klausuler, problem eller positiva rutiner (kritiska först)
Privacy policy content entirely missing from provided text
The linked privacy policy page at /privacy-policy was included in the scrape but only rendered navigation chrome and marketing copy — no substantive privacy language appeared. This makes it impossible to assess what data is collected, how it is processed, or what rights users have.
No data processing details or legal bases stated
The provided text contains no information about what personal data mastodon.social collects, the legal bases under GDPR Article 6, or purposes of processing. This is a fundamental transparency failure if the policy itself is not accessible or readable.
Fediverse data sharing implications unaddressed
Mastodon.social is part of the fediverse, meaning user data (posts, profiles, interactions) is federated to other independent servers. The provided text does not explain this cross-server data flow, its privacy implications, or how users can control it — a significant gap for a decentralized social network.
Marketing claims about privacy lack substantiation
The page states 'No algorithms, ads, or clickbait in sight' as a privacy-positive differentiator, but without an accessible privacy policy, these claims are unverifiable and potentially misleading under GDPR transparency requirements.
Sammanfattning för användaren
You cannot evaluate mastodon.social's privacy practices from this text because the actual policy content is missing; visit the privacy policy page directly and review it before trusting the service with your data.
Efterlevnadsställning
Unknown and unverifiable — the privacy policy content was not provided, so no compliance assessment can be made. This itself is a concern if the policy is not easily accessible or renderable.
EU-överföringar
No information provided about data storage locations, international transfers, or safeguard mechanisms such as Standard Contractual Clauses.
Upptäckta signaler
Specifika datapunkter och rutiner identifierade i texten
Bevisutdrag
Direkta citat från policyn som stödjer dessa fynd
The original server of Mastodon, operated by Mastodon GmbH for the common good.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
mastodon.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Saknas eller otydligt
- Actual privacy policy text — the page content was not captured
- Legal bases for data processing under GDPR
- Data retention periods and deletion policies
- List of subprocessors or third-party recipients
- International data transfer mechanisms and safeguards
- Cookie and tracking technology details
- User rights procedures and contact information for the DPO
- Fediverse federation data flow explanation and user controls
- Data breach notification procedures
- Children's privacy protections
Frågor att ställa
- Why did the privacy policy page fail to render its substantive content, and is this a recurring accessibility issue for users trying to review their privacy rights?
- How does mastodon.social handle the inherent data federation of the fediverse — what personal data flows to other servers, and what legal basis supports this?
- Does Mastodon GmbH have a Data Protection Officer, and how can users exercise their GDPR rights (access, erasure, portability, objection)?
Dela den här analysen
Alla med den här länken kan se resultatet ovan.
Byggd av DentroChat
100 % europeisk AI-chatt för alla
Chatta med AI, arbeta med filer, generera bilder och sök på webben. Data stannar i Europa.