Terms of service

This is a private Mastodon instance for me, Stephen. I run it as a purely personal activity.

Contacting me

You can DM me.

Purposes of processing and lawful basis

I process personal data to run my littleFedi instance, and hopefully have a fun and interesting time learning things, chatting with people, boosting posts I find interesting, and liking posts when I want to say "thanks!" to the author.

If I were to have a lawful basis for this, it would be "for the legitimate interests of the things above".

Recipients of personal data

This server runs on my server, in my house. I don't share the data with anyone, and no-one else has access to it.

I do not do anything unusual or untoward - just the basics of social media. So if I boost your post, or engage with you on posts which are not limited to certain followers or just to you, anyone who is able to see my posts can see it.

I allow unauthenticated access to my timeline, so this means "anyone in the world with an Internet connection".

International transfers

The server is in Bedford, in the UK.

Obviously, I will be wherever I am, but since I'm not travelling much at the moment, that's probably in the UK too.

The server is connected to the Internet. It is accessible from anywhere in the world. Well, anywhere with an Internet connection. So my posts could be viewed by anyone in the world, including my boosts and replies to you.

You may be somewhere else in the world. I wouldn't blame you if you were.

But any international transfers here are a function of your connection to the fediverse.

Automatic deletions

I automatically delete most of my posts after 90 days. The same is true of direct messages.

Of course, I have no control over what someone else does with my posts. They might be storing them.

I also have no control over what anyone does with your posts.

Data subject rights

If I were subject to the UK GDPR - which I consider I am not - you would have lots of rights, including the right to request access to and rectification or erasure of your personal data or restriction of processing, or to object to processing, as well as the right to data portability.

Frankly, you are more likely to have far more tools available to you, through your own instance, such as blocking me, or requesting your archive from your instance administrator.

But, whether I'm subject to the UK GDPR or not, you are welcome to ask me to delete posts that I make that contain your personal data, if you are struggling with them. Just let me know. This isn't about data protection, this about me not being an arse.

I suppose you could ask me whether I've been talking about you in my DMs with others but I probably haven't, and anyway my DMs auto-delete after a week anyway.

You would also have the right to lodge a complaint with the Information Commissioner's Office.

This document seems familiar?

This is shamelessly copied from Neil Brown's Mastodon and very lightly modified to suit me.

To reproduce his final notice verbatim...

Can I copy this for my own fediverse instance?

Help yourself (and don't forget to change it to your own name!). Obviously, I'm not making any promises that it is correct or suitable for your situation.

To the extent one can get copyright protection for such a thing, I license this under CC0.