privacy policy
what we collect
folk.zone collects only the data necessary to operate each service. This varies by service but typically includes:
- Email address: for account creation, password resets, and notifications you have explicitly opted into
- Username and display name: your public identity on the service
- Content you post: posts, comments, uploads, and other content you create
- IP addresses: in server logs, retained for no more than 30 days for security and debugging purposes
- Device and browser information: user agent strings, for security and debugging
what we do not collect
folk.zone does not:
- Track you across the web with third-party cookies or tracking scripts
- Sell your data to third parties
- Share your data with third parties for advertising purposes
- Use your data for profiling or targeted advertising
how we use your data
Your data is used to:
- Provide the service you signed up for
- Send you notifications you have explicitly opted into
- Respond to support requests and abuse reports
- Maintain security and prevent abuse
- Comply with legal obligations
data sharing
folk.zone does not share your data with third parties for advertising or commercial purposes. Data may be shared if required by a valid legal order from a Canadian court. The operator will notify you if possible when such a request is received, unless prohibited by law.
federation (ActivityPub services)
For federated services like Mastodon, WriteFreely, Lemmy, and Pixelfed, your public content is sent to other servers that follow you or interact with your content. This is how the fediverse works. Once your content is federated, folk.zone has no control over how other servers store, display, or use it. If you delete your content on folk.zone, it may persist on other servers.
Private or followers-only content is only sent to servers that host users who follow you. It is not publicly accessible on the wider fediverse.
data retention
Server logs, including IP addresses, are retained for no more than 30 days. Your account data and content are retained for as long as your account exists. When you delete your account, your data is deleted within 30 days, with the exception of federated content as noted above.
your rights
You have the right to:
- Access: request a copy of your data
- Correction: request correction of inaccurate data
- Deletion: request deletion of your account and associated data
- Export: export your data from services that support it
To exercise these rights, contact the operator at hello@folk.zone.
data location
folk.zone services are hosted in Canada and/or on servers operated from Canada. If you are in the European Economic Area, you are using these services with the understanding that they are operated by an individual under Canadian law, not a GDPR-covered organisation. The operator makes reasonable efforts to apply GDPR principles, such as data minimisation and right to deletion, voluntarily.
security
The operator takes reasonable steps to protect your data, including:
- HTTPS for all connections
- Encrypted storage where supported by the service
- Regular backups
- Monitoring for security issues
No system is completely secure. The operator cannot guarantee absolute security.
children
folk.zone is not intended for children under 13. If you are under 13, do not use these services. If the operator becomes aware that a child under 13 has provided personal information, the operator will take steps to delete that information.
changes to this policy
The operator may update this privacy policy at any time. Material changes will be announced on social.folk.zone and, where the service supports it, by email to registered users. Continued use of folk.zone services after a policy change constitutes acceptance of the new policy.
contact
For privacy-related questions, data requests, or concerns:
- Email: hello@folk.zone
- Mastodon: @folkzone@social.folk.zone