{"item":{"_id":"6ae22780fc91b0a0b42f3db6","objectType":"Page","type":"Page","parentId":null,"order":0,"actorId":"@kwln.dev","title":"Privacy Policy","slug":"privacy","summary":"What we collect, what we don't, and what federation means for your data.","source":{"content":"# Privacy Policy\n\n_Last updated: 2026-10-28_\n\nThis policy covers **Kowloon Dev Server** (kwln.dev). Other Kowloon servers are run\nby other people and have their own policies.\n\nThe short version: we collect what is needed to run the service, we do not\ntrack you, we do not advertise, and we never sell your data.\n\n## What we collect\n\n**You give us:**\n- A username and password (stored only as a cryptographic hash — we cannot read it)\n- An email address, used for account matters such as password resets and verification\n- Anything you choose to put in your profile\n- The posts, replies, reactions, bookmarks and files you create\n\n**Automatically:**\n- Your IP address is checked briefly in memory to rate-limit abusive traffic.\n  **It is not written to our database.**\n- Ordinary server operation produces technical logs. These are for diagnosing\n  faults and are not used to build any profile of you.\n\n## What we do NOT do\n\n- **No cookies.** This site sets none. Your login is kept in your browser's\n  local storage, which exists only to keep you signed in and is cleared when\n  you log out.\n- **No third-party analytics or trackers.** No Google Analytics, no pixels,\n  no advertising networks. Nothing about your visit is sent to a third party.\n- **No advertising, and no selling or sharing of your data.**\n\n## Who can see your content\n\nYou choose an audience for everything you post: public, this server only, a\nspecific circle, or just yourself. We enforce that.\n\n**Public posts are visible to anyone on the internet**, including people\nwithout accounts.\n\n## Federation — this is the important part\n\nKowloon servers pass content to one another. When you publish something\npublicly, or address it to someone on another Kowloon server, **a copy is\ntransmitted to that server and stored there, outside our control.**\n\nIf you delete it, we ask those servers to delete their copies too, and\nwell-behaved ones will — but **we cannot guarantee deletion elsewhere.** Treat\nanything you publish as potentially permanent.\n\nKowloon federates with **other Kowloon servers only** — not with Mastodon or\nother ActivityPub software.\n\n## Deleting your account\n\nYou can delete your account yourself, from Settings. It is immediate and\npermanent. It removes your account record, your posts, replies, reactions,\nbookmarks, uploaded files, circles and notifications from this server, and\nsigns out every device.\n\nTwo honest limits:\n- **Copies already sent to other servers are not recalled by this.** See\n  Federation above.\n- If you own a group, ownership transfers to a server administrator rather\n  than the group being destroyed, so its other members do not lose it.\n\n## How long we keep things\n\nYour content is kept while your account exists. Delete the account and it goes.\nBackups may retain data for a short period after that before being rotated out.\n\n## Security\n\nPasswords are hashed. Traffic is encrypted in transit (HTTPS). Uploaded files\nare stored privately and served only to people permitted to see them.\n\nNo service can promise perfect security, and we do not.\n\n## Your rights\n\nDepending on where you live, you may have rights to access, correct, export\nor erase your personal data. Deletion is self-service in Settings. For\nanything else, contact jzellis@gmail.com.\n\n## Children\n\nThis service is not intended for children under 13, and we do not knowingly\ncollect their data. If you believe a child under 13 has an account here,\ncontact jzellis@gmail.com.\n\n## Changes\n\nWe may update this policy. Significant changes will be announced on this\nserver.\n\n## Contact\n\njzellis@gmail.com\n","mediaType":"text/markdown","contentEncoding":"utf-8"},"body":"<h1>Privacy Policy</h1>\n<p><em>Last updated: 2026-10-28</em></p>\n<p>This policy covers <strong>Kowloon Dev Server</strong> (kwln.dev). Other Kowloon servers are run\nby other people and have their own policies.</p>\n<p>The short version: we collect what is needed to run the service, we do not\ntrack you, we do not advertise, and we never sell your data.</p>\n<h2>What we collect</h2>\n<p><strong>You give us:</strong></p>\n<ul>\n<li>A username and password (stored only as a cryptographic hash — we cannot read it)</li>\n<li>An email address, used for account matters such as password resets and verification</li>\n<li>Anything you choose to put in your profile</li>\n<li>The posts, replies, reactions, bookmarks and files you create</li>\n</ul>\n<p><strong>Automatically:</strong></p>\n<ul>\n<li>Your IP address is checked briefly in memory to rate-limit abusive traffic.\n<strong>It is not written to our database.</strong></li>\n<li>Ordinary server operation produces technical logs. These are for diagnosing\nfaults and are not used to build any profile of you.</li>\n</ul>\n<h2>What we do NOT do</h2>\n<ul>\n<li><strong>No cookies.</strong> This site sets none. Your login is kept in your browser's\nlocal storage, which exists only to keep you signed in and is cleared when\nyou log out.</li>\n<li><strong>No third-party analytics or trackers.</strong> No Google Analytics, no pixels,\nno advertising networks. Nothing about your visit is sent to a third party.</li>\n<li><strong>No advertising, and no selling or sharing of your data.</strong></li>\n</ul>\n<h2>Who can see your content</h2>\n<p>You choose an audience for everything you post: public, this server only, a\nspecific circle, or just yourself. We enforce that.</p>\n<p><strong>Public posts are visible to anyone on the internet</strong>, including people\nwithout accounts.</p>\n<h2>Federation — this is the important part</h2>\n<p>Kowloon servers pass content to one another. When you publish something\npublicly, or address it to someone on another Kowloon server, <strong>a copy is\ntransmitted to that server and stored there, outside our control.</strong></p>\n<p>If you delete it, we ask those servers to delete their copies too, and\nwell-behaved ones will — but <strong>we cannot guarantee deletion elsewhere.</strong> Treat\nanything you publish as potentially permanent.</p>\n<p>Kowloon federates with <strong>other Kowloon servers only</strong> — not with Mastodon or\nother ActivityPub software.</p>\n<h2>Deleting your account</h2>\n<p>You can delete your account yourself, from Settings. It is immediate and\npermanent. It removes your account record, your posts, replies, reactions,\nbookmarks, uploaded files, circles and notifications from this server, and\nsigns out every device.</p>\n<p>Two honest limits:</p>\n<ul>\n<li><strong>Copies already sent to other servers are not recalled by this.</strong> See\nFederation above.</li>\n<li>If you own a group, ownership transfers to a server administrator rather\nthan the group being destroyed, so its other members do not lose it.</li>\n</ul>\n<h2>How long we keep things</h2>\n<p>Your content is kept while your account exists. Delete the account and it goes.\nBackups may retain data for a short period after that before being rotated out.</p>\n<h2>Security</h2>\n<p>Passwords are hashed. Traffic is encrypted in transit (HTTPS). Uploaded files\nare stored privately and served only to people permitted to see them.</p>\n<p>No service can promise perfect security, and we do not.</p>\n<h2>Your rights</h2>\n<p>Depending on where you live, you may have rights to access, correct, export\nor erase your personal data. Deletion is self-service in Settings. For\nanything else, contact <a href=\"mailto:jzellis@gmail.com\">jzellis@gmail.com</a>.</p>\n<h2>Children</h2>\n<p>This service is not intended for children under 13, and we do not knowingly\ncollect their data. If you believe a child under 13 has an account here,\ncontact <a href=\"mailto:jzellis@gmail.com\">jzellis@gmail.com</a>.</p>\n<h2>Changes</h2>\n<p>We may update this policy. Significant changes will be announced on this\nserver.</p>\n<h2>Contact</h2>\n<p><a href=\"mailto:jzellis@gmail.com\">jzellis@gmail.com</a></p>\n","wordCount":496,"charCount":3439,"replyCount":0,"reactCount":0,"reactPreview":null,"shareCount":0,"tags":[],"to":"@public","canReply":"","canReact":"","deletedAt":null,"deletedBy":null,"originDomain":"kwln.dev","attachments":[],"createdAt":"2026-10-28T16:49:04.617Z","updatedAt":"2026-10-28T16:49:04.617Z","id":"page:6ae22780fc91b0a0b42f3db6@kwln.dev","url":"https://kwln.dev/pages/privacy","server":"@kwln.dev","signature":"Glg0SeEa2gxk161TZQPM4VedKBpip2PHTQ1pt3IzTKCXHLjMJRo52pK2sO6zgLzGLn4aZPnWFYr3Nmy2rJtNkGVbgJa9cw7XBOWmi1XkCmjNM5+mNWQCVsjCpWMvhd4XVwyo97KAEHPX77FCqH0vxE7SazqQV96oOCzMP4I6Sth+T4R56BHCfFQM+7olQQWKjsu4l1Dq3XDj+CfpiFnZHcx+ME6pOCUhxZ17QtGm22yRc19W7Y1zvT8VR+Z0jWjXt+S1T7Ev2I1nALdKuKTLQP6TpHxhr7T+oZ2VhXv9yXfalKIzYmlt3Hu3A6X/BI8L4cPjPCzJ2pY+Nv2GcFDCKw==","__v":0}}