Privacy notice

Who is responsible

lk media, Felchenstr 21, 76437 Rastatt, Germany, operates this instance and is responsible for its processing of personal data. Contact: [email protected].

Data and purposes

• Email address, display name and a password hash support account registration, sign-in, verification and recovery. Optional passkeys store public keys; two-factor authentication stores protected authentication secrets.
• Memberships, roles, messages and uploaded files provide community communication. Community content is readable by the server and by people with permission to access it. Encryption guarantees for individual communication features are stated in those features.
• Session identifiers, timestamps and coarse browser/platform labels maintain sign-in and show your devices. The application does not retain raw IP addresses with sessions. Abuse limits store keyed hashes and counters.
• Reports, restriction reasons, appeals and moderation audit records support safety and accountability. Relevant community moderators or instance administrators can access them according to their permissions.
• Registration requires a self-attestation that you are at least 16. We do not request a birth date or identity documents for this check.

Account and communication processing serves the provision of the requested service (Article 6(1)(b) GDPR). Security, abuse prevention and moderation serve our legitimate interests in protecting the service and its users (Article 6(1)(f)). Required account data is necessary to provide an account; optional features can be left unused.

Public channels

Existing channels remain private. An owner can explicitly create a new public text channel with separately chosen public titles. Before posting or editing there, you must acknowledge that your message, send-time display name and timestamps are public, searchable and accessible without joining. Later profile renames do not change a stored public name. The public projection does not automatically include member lists, private files or account identifiers. Do not post private information.

Unpublishing removes the channel from public pages, discovery and the sitemap. It cannot revoke copies already downloaded or held by search engines. Retained snapshots are deleted with their original message or account; your personal export includes your snapshots and publication state for communities you currently own, including unpublished channels. Public channels cannot be republished; a new public channel is required.

Recipients and infrastructure

Other users receive content according to channel and community permissions. Hosting, storage and email-delivery providers process data needed to operate the service. The official instance uses Cloudflare for its proxy and object storage; the proxy receives connection information such as IP address and browser headers. Optional Turnstile anti-spam verification sends browser information to Cloudflare.

Providers may process information outside the European Economic Area. Information about applicable processing arrangements and transfer safeguards is available from the operator; Cloudflare publishes its data processing terms. Self-hosted instances can configure different infrastructure. Opening GitHub contribution or sponsorship links connects you to GitHub.

Storage and deletion

Account data remains until deletion or an applicable retention requirement. Messages remain until deleted by their author, an authorized moderator, account deletion or community deletion. Uploaded files become inaccessible when their linked content is removed and are subsequently swept from storage. Community emoji and stickers belong to their community and remain after the uploader deletes their account; uploader attribution is removed. Removing the image or community makes its private files eligible for cleanup.

The software retention policy removes expired sessions and verification records, old rate-limit records after one day, and audit records and resolved reports or appeals after 180 days. Unresolved reports and active restrictions remain until resolved or removed. Actual cleanup requires scheduled operator maintenance.

This instance runs scheduled maintenance and daily encrypted backups. Backup copies expire after 30 days; deletion reaches those copies when they expire. Existing backup copies are protected from normal application access.

Browser storage and optional notifications

Necessary authentication cookies keep you signed in. Browser storage supports application state and, where an encrypted feature uses it, local cryptographic material. Presence, desktop notifications and Web Push are optional. Push subscriptions are stored while enabled; your browser push provider receives delivery metadata. Disable these features in settings or revoke browser permissions at any time.

The application includes no advertising or analytics SDK. Infrastructure-level connection processing is described above. Automated spam, rate and keyword checks may reject requests; moderators review reports and appeals.

Your rights

You can request access, correction, deletion, restriction and portability where applicable, and object to processing based on legitimate interests. Settings provide account export, correction and deletion. Your export lists your community image uploads separately from personal messages. Community owners can export the complete image library and messages as a compressed archive; these downloaded archives are not encrypted and do not replace operator backups. JSON community exports contain image metadata and readable text fallbacks without image files. Communities you own must first be deleted; instance administrators must have their administrative role removed before deleting their account. Contact the operator for requests not covered by settings or for information about retained moderation records.

You can lodge a complaint with a data-protection supervisory authority, including the LfDI Baden-Württemberg for the official operator. This does not affect your other rights.

Technical details

The technical privacy documentation describes the software data inventory and security boundaries.