Legal
Privacy Policy for lemdro.id (a Lemmy instance)
Last Updated: 2023-08-11
1. Introduction
Welcome to lemdro.id, a Lemmy instance. We are committed to protecting and respecting your privacy, retaining only the essential data for our instance's basic functionality. Our platform is open source, and all our code can be found transparently on Github.
2. Information We Collect
2.1. Account Information: When registering on our Lemmy instance, we collect your username, encrypted password, and email address. This information is used solely for account-related notifications and password recovery.
2.2. Activity Data: We document activities such as posts and comments. Due to the federation process, these can be shared with other Lemmy instances. Therefore, consider all posts as public and avoid sharing sensitive information.
2.3. Image Hosting: Images uploaded to our Lemmy instance are hosted by Backblaze, a third-party service.
3. How We Use Your Information
We use your data for community interactions and content sharing across the Lemmy network. Your email address is used exclusively for account alerts and password recovery.
4. Data Preservation, Retention, and User Conduct
We retain user data as long as it is necessary for the purposes for which it was collected. While we strive to maintain user data's integrity, we do not guarantee its indefinite preservation. We reserve the right to purge or delete user data from our database for any reason, especially involving violations of our instance rules, codes of conduct, or other community guidelines. Users should maintain personal backups of their critical and valuable information posted on lemdro.id.
4.1. Data Storage and Backups: Our operation involves a rolling database backup system. Therefore, user account data, activities, and hosted images on Backblaze may remain in our main database or backup database temporarily after deletion. It may take some time before their complete removal.
5. Data Protection and Third-party Processors
We have implemented safeguards to protect your data against unauthorized access, intended to meet or exceed industry standards. Our Lemmy instance is hosted on fly.io; we use Cloudflare for security and performance optimization, and Backblaze for image hosting. Processing of your data by these third-party service providers is done according to their respective privacy policies, which we encourage you to review. If additional third-party processors are engaged in the future, we will update this policy accordingly.
6. Age Requirement
To comply with the General Data Protection Regulation (GDPR, EU 2016/679), users must be at least 16 years old to use lemdro.id.
7. Your Rights and Choice
Under laws such as the General Data Protection Regulation (GDPR) in Europe, the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada, and the California Consumer Privacy Act (CCPA) in the United States, you have certain rights around your personal information. This includes the right to see your data, correct it if it's wrong, and in certain cases, have it completely erased. If you want to stop us from processing your data, you can do that anytime by deleting your account. If you're worried about how your personal data is used, you can object to us processing your data, or you can file a complaint with the proper authority. To take advantage of your other rights or to lodge a complaint, you can reach out to us at support@lemdro.id.
8. Data Transfers
Given the nature of federation, data might be transferred to servers outside the European Economic Area (EEA).
9. DMCA Requests
If you believe that your rights under the DMCA are being infringed upon, send an email to dmca@lemdro.id detailing the following required information:
- The name, address, and physical or electronic signature of the complaining party
- Identification of the infringing materials and their internet location (e.g. a url)
- Sufficient information to identify the copyrighted works
- A statement by the copyright holder of a good faith belief that there is no legal basis for the use complained of
- A statement of the accuracy of the notice and, under penalty of perjury, that the complaining party is authorized to act on the behalf of the copyright holder
We will review your request within 48 hours. If it is found to be valid, the infringing content will be taken down and the DMCA request forwarded to the original poster of the content.
10. Changes to This Policy
We may revise this policy periodically. We will communicate significant changes but also recommend that you review this policy regularly.
11. Contact Us
For inquiries or concerns, please reach out at support@lemdro.id.