PRIVACY NOTICE·DATA MINIMIZATION BY DESIGN·EFFECTIVE JULY 1, 2026·PARODIA.DEV·PRIVACY NOTICE·DATA MINIMIZATION BY DESIGN·EFFECTIVE JULY 1, 2026·PARODIA.DEV·
Parodia.dev is a small, invitation-only, non-commercial federated community operated by a single administrator ("the Operator"). It is the data controller for the personal data described here. The community runs several self-hosted services: Akkoma (microblogging), Lemmy (discussion), WriteFreely (blogging), Matrix/Element (messaging), Gitea (code), Miniflux (feed reading), and a pair of in-house bots (Pete and Pastel). These are connected to the wider internet over the ActivityPub and Matrix protocols.
This notice explains what personal data those services process, why, and what control you have over it. It sits alongside the Terms of Service and the community Rules.
02 · COLLECT AS LITTLE AS POSSIBLE
Data minimization is a deliberate design choice, not an afterthought. We ask for the least we need to run the services and keep them safe.
No real names. Pseudonyms are required across every service (see the Terms).
No phone numbers, no government identifiers, no payment information — the community is free and takes no payments.
No third-party analytics, advertising, or tracking scripts. The homepage loads its own fonts and makes no calls to Google, Meta, or any ad network.
Email is optional and used only where you choose to enable it (for example, account recovery or the invite process).
03 · WHAT WE COLLECT, PER SERVICE
ALL SERVICES
A username (pseudonym) and a salted, hashed password. Plaintext passwords are never stored or logged.
IP addresses and access logs, retained transiently for security and abuse prevention.
An optional email address, if you provide one for recovery or notifications.
MATRIX / ELEMENT
Account credentials and the messages needed to deliver conversations. Many rooms are end-to-end encrypted, in which case the Operator cannot read their contents.
Message content is retained for delivery and history; the Operator does not read it except where strictly required for a security or abuse investigation.
AKKOMA
Posts, replies, follows, and any profile information you enter.
Public and unlisted posts federate to other servers and leave the Operator's control once sent (see Section 6).
Followers-only and direct messages are treated as non-public, but confidentiality cannot be guaranteed once shared with other people or servers.
LEMMY & WRITEFREELY
Posts, comments, community memberships, and published writing you create.
This content is public by default and may be federated, cached, or indexed by third-party servers and search engines.
GITEA & MINIFLUX
Repositories, issues, and code you push to Gitea; feed subscriptions and read state in Miniflux.
This data is private to your account unless you deliberately make a repository public.
PETE & PASTEL (IN-HOUSE BOTS)
These bots relay RSS headlines and deals into Matrix rooms. They process public feed content, not personal data about you, beyond the fact that you are a member of the rooms they post to.
04 · COOKIES & LOCAL STORAGE
The public homepage sets no cookies and no tracking storage. The individual services set only the functional cookies required to keep you logged in and to operate their own interfaces. There are no advertising or cross-site tracking cookies anywhere in the network.
05 · HOW YOUR DATA IS USED
Personal data is used only for:
Service delivery — authenticating you, showing content, and enabling federation.
Security and abuse prevention — reviewing logs in response to reports, incidents, or rule violations.
Backups — as described in Section 7.
Aggregate health metrics — capacity and uptime planning, never tied to an individual identity or shared externally.
THE OPERATOR WILL NEVER
Sell, rent, or license your data to anyone.
Use your data for advertising, profiling, or behavioural targeting.
Hand your data to a government authority except under a valid legal order — and will notify you where legally permitted.
Use your content to train machine-learning models without your explicit, informed consent.
06 · FEDERATION: WHAT LEAVES OUR SERVER
Parodia.dev is a federated service, and federation places real limits on what privacy anyone can promise. By joining you acknowledge:
Public and unlisted posts are, by design, delivered to other servers. Once federated, the Operator cannot recall, edit, or delete copies held elsewhere.
Other servers may cache, archive, or index your public content. The Operator has no control over them.
Search engines and crawlers may index public content.
The Operator cannot vouch for the security or conduct of federated servers your content reaches through your own posting and following.
07 · BACKUPS & CROSS-BORDER TRANSFERS
Infrastructure is hosted in the European Union. Backups are taken periodically so the community can recover from failure.
Backups may include credentials and content and, for disaster-recovery purposes only, a copy may be stored outside the EU.
All backups are encrypted in transit (TLS 1.2+) and at rest (AES-256 or equivalent).
Backup data is used solely for restoration and is never shared with or accessible to any third party.
By using the service you consent to this transfer under the stated encryption controls. See the Terms of Service, Section 4, for the full backup and transfer terms.
08 · RETENTION
Account data is kept for as long as your account exists.
Access logs and IP records are kept only transiently for security, then discarded.
When you delete your account, associated data is removed from Parodia.dev infrastructure. Backups age out on their normal rotation.
09 · YOUR RIGHTS
You may contact the Operator at any time to:
Get a copy of the data associated with your account.
Correct inaccurate account data.
Delete your account and its data from Parodia.dev servers.
Object to or ask about any processing described here.
Deletion applies to data on Parodia.dev infrastructure only. The Operator cannot delete federated copies of public content held by third-party servers. To retract content from the wider fediverse, delete it before closing your account — this sends federated deletion requests to known servers, though their compliance cannot be guaranteed.
10 · CHANGES & CONTACT
Material changes to this notice will be announced in the community's Matrix space. Continued use after notice constitutes acceptance of the revised notice.
For data requests, privacy questions, abuse reports, or security disclosures, contact the Operator by email at admin@parodia.dev, or on the fediverse at @popolon@social.parodia.dev.