Activities
Sign in

Privacy policy

Last updated

This policy explains what personal data prod.llun.social collects, why, who it is shared with, and the choices you have. prod.llun.social is a small, personally run server for the fediverse, built on the open-source Activities.next software.

Who runs this server: Maythee Anegboonlap, Bennekom, the Netherlands. Contact: contact@llun.social. The operator is the data controller for the personal data described here.

What we collect

Your account

  • Email address, username, display name, profile text, avatar and header images, and profile fields you add.
  • Your password, stored only as a one-way bcrypt hash. Passkeys and two-factor authentication settings, if you turn them on.
  • Sessions: when you sign in, we store the session's IP address, browser user agent and times. Sessions expire after 7 days without use.
  • Apps you authorize through OAuth, and the access tokens issued to them.
  • Accounts you connect, such as Strava or Wahoo, and the tokens needed to import your activities.

What you post

  • Posts, replies, polls, likes, boosts, bookmarks, lists and follows.
  • Photos and videos. We remove embedded metadata (EXIF) from the stored files. Location and camera details read at upload are kept in our database. Other people see a location only at the precision you choose, and never inside the hidden locations you set.
  • Fitness activities: routes (GPS tracks), times, distances, heart rate and other sensor data in the files you upload or import. Privacy zones you set hide the parts of a route near those places from other people.
  • Direct messages are stored on this server and on the servers of the people you send them to. They are not end-to-end encrypted, and the operator can technically read them.

Technical data

  • Server logs and traces, which can include IP addresses, browser user agents and the pages requested. They are used to keep the service running and secure.

Why we use it

  • To run your account and show your content to the people you choose (performance of the contract with you).
  • To keep the service secure, for example detecting sign-in abuse and fixing errors (legitimate interest).
  • To send emails you need, such as confirmations, password resets and notifications you turned on.

We do not sell your data, show ads or use analytics trackers.

Federation: what other servers receive

prod.llun.social is part of the fediverse. When you post publicly, or to followers who are on other servers, your post, your public profile and any attached media are sent to those servers. They display it under their own policies. Deleting a post or your account sends a deletion request to them, but we cannot guarantee that every server honours it.

Service providers

We use these providers to run the service. They process data on our behalf, only for that purpose.

  • Google Cloud (Belgium, EU): hosting, database, background jobs and logs.
  • Amazon Web Services (Frankfurt, EU): storage of uploaded media and fitness files in Amazon S3, delivered through Amazon CloudFront.
  • Amazon Simple Email Service (Frankfurt, EU): sending account emails.
  • Better Auth (better-auth.com): sign-in security and account monitoring.
    • We send account events (sign-in, sign-out, sign-up, profile, password and two-factor changes), with your name, email, IP address and browser user agent.
    • On sign-in and password actions we also send your email or username, a keyed hash of failed passwords, and a partial hash used to check a new password against known breaches.
    • On the sign-in, sign-up, two-factor and password reset pages only, your browser sends a device fingerprint and the page address to Better Auth. The fingerprint covers screen, hardware, timezone, language and graphics, audio and font characteristics. It is used to detect automated or abusive sign-in attempts.
  • Apple Maps: your browser loads maps from Apple when you view a route. The server also sends route coordinates to Apple to draw static route maps.
  • OpenStreetMap Nominatim: to name the place a photo or activity was taken, we send a rounded location (about 5 km precision), never the exact point.
  • GBIF (gbif.org): we send species names only, to look up wildlife subjects.
  • DeepL (Germany, EU), free API plan: the text of a post, only when you ask to translate it. On this plan DeepL may keep the text and use it to improve its service, so avoid translating private posts.
  • Google Gemini API (paid plan): a photo you upload, to suggest alt text and identify its subject, and a route, if you turn on AI route descriptions. On the paid plan Google does not use this data to improve its products.
  • Strava, Wahoo: only if you connect them, to import your activities.
  • YouTube: video previews load from youtube-nocookie.com and i.ytimg.com when a post contains a YouTube link.
  • Hugging Face: the photo editor downloads its image model from huggingface.co to your browser. Your photos are not sent.
  • Your browser's push service (Apple, Google or Mozilla): only if you turn on push notifications.

Some of these providers (Apple, Google, Better Auth, Hugging Face and the push services) may process data outside the European Economic Area. Where they do, the transfer relies on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep it

  • Account data and content: until you delete them or your account.
  • Sessions: until you sign out, or 7 days after their last use.
  • Account archives you request: deleted 7 days after they are ready.
  • Logs and traces: about 30 days.
  • Data at Better Auth: kept under Better Auth's retention policy.

Cookies and browser storage

We use one cookie, better-auth.session_token, which keeps you signed in. Your browser also stores your theme choice, unsent drafts, an offline copy of pages and media you have viewed, and the photo editor's model. All of these stay on your device and are needed for the features you use, so we do not show a consent banner.

Your rights

Under the GDPR you can access, correct, export, delete or restrict your data, object to processing based on legitimate interest, and move your account. You can do most of this yourself:

  • Edit your profile and settings.
  • Download an archive of your account.
  • Move to another server.
  • Delete your account. This removes your data from this server and asks other servers to delete their copies.

For anything else, email contact@llun.social. You can also complain to a data protection authority, such as the Dutch Autoriteit Persoonsgegevens.

Children

prod.llun.social is not intended for children under 16.

Changes

We will update this page when this policy changes. The date at the top shows the last update.