Privacy Policy

This policy explains how Fae Social (operated by Junovy) collects, uses, and protects your personal data. Fae Social is an ActivityPub-compatible social platform; this policy covers data processing on our servers at social.junovy.com.

Data Controller

Loading contact details… — Contact: Loading contact details…

What Data We Collect

We collect only the data necessary to provide the service:

• Account data — your email address, display name, and username, provided via your identity provider (Keycloak SSO). We do not store passwords directly.
• Profile data — optional bio, avatar, and display preferences you choose to share.
• Content data — posts, replies, chat messages, media uploads, and reactions you create.
• Social graph — your follow/follower relationships and group chat memberships.
• Technical data — IP address, browser type, and device information collected automatically for security and performance monitoring.
• Usage data — anonymous analytics (only if you consent via cookie preferences) to help us improve the service.

How We Use Your Data

• Providing the service — displaying your posts and profile, delivering chat messages, and federating content via ActivityPub.
• Authentication — verifying your identity through Keycloak SSO.
• Security — rate limiting, abuse prevention, and monitoring for unauthorised access.
• Service improvement — aggregated, anonymous analytics (with your consent) to improve performance and usability.

We do not use your data for advertising. We do not sell your data to third parties. We do not use your data for automated decision-making or profiling.

Legal Basis for Processing

• Contractual necessity — processing required to provide the service you signed up for (Article 6(1)(b) GDPR).
• Legitimate interest — security monitoring and abuse prevention (Article 6(1)(f) GDPR).
• Consent — optional analytics cookies (Article 6(1)(a) GDPR). You can withdraw consent at any time.

Data Sharing

• Federation — posts marked as public are distributed to other ActivityPub servers. Once federated, those servers have their own data policies. Private messages are only delivered to the intended recipient's server.
• Infrastructure providers — we use EU-based hosting (Hetzner) and the Junovy CDN (also Hetzner) for media storage. These providers act as data processors under GDPR.
• Email delivery — system emails (account registration, password resets, follow requests, chat notifications, and other platform notifications) are sent via Mailjet (Mailgun Technologies SAS, Paris, France), which processes your email address as a data processor under GDPR.
• No other sharing — we do not share data with advertisers, data brokers, or any other third parties.

Data Storage and Retention

All data is stored and processed within the European Union. We retain your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Some data may be retained longer where required by law (e.g. abuse reports for moderation records).

Cookies

Fae Social uses the following cookies:

• Essential cookies — authentication session, CSRF protection. These are strictly necessary and cannot be disabled.
• Preference cookies — theme (light/dark), language, and display settings. Only set if you consent.
• Analytics cookies — anonymous usage statistics. Only set if you consent.

You can manage your cookie preferences at any time using the cookie banner or via Settings.

Your Rights (GDPR)

Under the General Data Protection Regulation, you have the following rights:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data ("right to be forgotten").
• Data portability — receive your data in a machine-readable format. As an ActivityPub platform, you can also migrate your social graph to another compatible service.
• Restriction — request that we limit processing of your data.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — withdraw consent for analytics cookies at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, use the privacy controls in Settings or contact us at privacy@junovy.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Fae Social is not intended for users under 16. We do not knowingly collect data from children. If we discover that a user is under 16, we will delete their account and data.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by posting a notice on the platform. The "Last updated" date at the top of this page indicates when this policy was last revised.

Contact

For privacy questions or data requests:

Loading contact details…