Last updated
den.shuymn.me is a personal server run by shuymn for their own account. It has no other users and does not accept sign-ups. This policy explains what the server stores and shares, mostly about people on other servers whose posts and profiles reach it through federation, and about visitors to its public pages.
What is stored
- Posts and profiles from other servers. When you follow, mention, reply to or interact with @shuymn@den.shuymn.me, or your posts otherwise reach this server, it stores the public parts of your profile and the posts it receives. A post addressed only to its recipients (a direct message or a followers-only post) is stored and shown only to the people it is addressed to.
- Media from other servers. Avatars, headers, custom emoji and attachments are copied to this server's storage and served from it. Attachments of remote posts are removed after a retention period; profile images are kept while the profile shows them.
- Interactions. Follows, favourites, boosts, mentions and reports that involve this server.
The server does not store visitors' IP addresses. An IP address is used only momentarily to rate-limit sign-in and app registration.
Logs
The server keeps its own application logs for 7 days. Request logs with headers are turned off, and query strings are redacted.
Cookies
Public pages (profiles, posts, hashtags and this page) set no cookies and use no browser storage. Cookies are set only to sign in: a session cookie that lasts 7 days, a short-lived cookie during sign-in, and Cloudflare Access's own cookie on the sign-in and admin pages. There are no analytics, advertising or tracking scripts.
Who else handles the data
- Cloudflare hosts the server (Workers, Durable Objects, R2, Queues, Images) and its access control, so every request passes through Cloudflare. See Cloudflare's privacy policy.
- Other fediverse servers. Posts by @shuymn@den.shuymn.me are delivered to the servers of their recipients and followers, and links in posts are fetched to build link previews.
- Backups. The server's data is backed up daily to storage outside Cloudflare. Each backup is encrypted before it leaves the server, so the storage provider cannot read it.
Deletion
When you delete a post or your account on your own server, and the deletion reaches this server, the copy here is removed. Deleting a post here sends a deletion to the servers it was delivered to, but this server cannot guarantee that other servers remove their copies.
To ask for your data to be removed from this server, or for a copy of what it holds about you, contact the operator using the details on the about page.
Changes
This policy may change as the server's software changes. The date of the last change is shown on this page.