// Privacy Policy

Last updated: Dec 2, 2025 - 22:31 EST

⚠️ KEY POINT: The AT Protocol is PUBLIC by design. Everything you post is visible to the entire network. There's no such thing as "privacy" for your posts, likes, or follows. Only your email and brith day stays private.

What We Collect

When you sign up, we store:

Email address - For account recovery and occasional updates
Handle - Your username (e.g., you.pds.madebydanny.uk)
Password (hashed) - We don't store plaintext passwords, obviously
Posts, likes, follows, profile info - Everything you do on the network
Server logs - IP addresses, timestamps, API requests (standard server stuff)

What's Public vs Private

PUBLIC (visible to everyone):

Your posts
Your likes
Your follows & followers
Your profile (bio, avatar, banner)
Your handle & DID (decentralized identifier)

PRIVATE (only visible to server admins):

Your email address
Your Birthday
Your password hash
IP addresses in server logs

How Your Data is Used

Your email is only used for account stuff—password resets, critical service updates, that kind of thing. I'm not selling it or spamming you.

Everything else? It's federated across the AT Protocol network. That means:

Other PDS servers can pull your public posts
Relays aggregate and distribute your data
Anyone can build apps that query your public activity
Your content might appear on bsky.app, third-party apps, or anywhere else

This isn't a bug—it's literally how the protocol works. Decentralization means your data flows freely across the network.

Data Sharing & Federation

Your public data is shared with:

AT Protocol relays (e.g., bsky.network)
Other PDS instances when someone follows you
Any client application that queries the network
Search engines and archival services (because it's public!)

Data Retention

Your data sticks around as long as your account exists. Delete your account and everything goes away (from this server, at least—other servers might've already cached it).

Security

I take reasonable precautions: HTTPS everywhere, hashed passwords, regular updates, etc. But let's be real—no system is 100% secure. If nation-state hackers really want your memes, I can't stop them.

Cookies & Tracking

This site doesn't use tracking cookies or analytics. Server logs capture standard web server data (IP, timestamp, user agent) but that's it. No Google Analytics, no Facebook Pixel, none of that garbage.

Kids & Privacy

This service isn't for kids under 13. If you're under 13, go away. If I find out you lied about your age, your account gets deleted.

Changes to This Policy

Privacy policy might change. I'll update the date at the top when it does. Still using the service = you're cool with the changes.

Contact

Questions? Email: danielmorrisey@pm.me

← Back to home