1. Introduction

Social at ourcloudspace.net ("the Service") is a privately operated photo sharing platform. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data. The Service is operated in the United States.

2. Information We Collect

Account Information: When you register, we collect your username, email address, and password (stored securely using bcrypt hashing). We also record the IP address used during registration.

Profile Information: Any information you voluntarily add to your profile, such as a display name, bio, or avatar.

Content: Photos, videos, and text you upload or post to the Service.

Server Logs: We collect standard server logs including IP addresses, browser user-agent strings, and request timestamps for security and troubleshooting purposes.

Cookies: We use session cookies strictly for authentication and maintaining your login state. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

3. How We Use Your Information

Your information is used solely to:

• Operate and maintain the Service
• Authenticate your identity and manage your account
• Display your content to other approved members
• Send transactional emails (account verification, approval notifications, password resets)
• Protect the security and integrity of the Service
• Comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes. We do not use your data for advertising or profiling.

4. Who Can See Your Information

Social is a restricted, invite-only instance. Only approved members can view content on the platform. However:

• Federation: If federation (ActivityPub) is enabled, content you post may be shared with users on other compatible servers according to your post privacy settings. Federated servers have their own privacy policies.
• Administrator: The server administrator has access to all data stored on the Service for maintenance and moderation purposes.

5. Data Retention

• Account data: Retained as long as your account is active. If your account is deleted, your data will be removed from our servers within 90 days.
• Server logs: IP addresses in server logs are retained for up to 90 days, then automatically purged.
• Uploaded media: Retained as long as your account is active. Deleted content is removed from our servers, though copies may persist on federated servers outside our control.

6. Data Security

We take reasonable measures to protect your data, including:

• Encrypted connections (HTTPS) for all web traffic
• Secure password hashing (bcrypt)
• Restricted server access
• Regular security updates

However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

In compliance with the Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under the age of 13. If we become aware that a user is under 13, their account will be terminated and their data deleted.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your account and associated data
• Export your data (available through account settings)

To exercise these rights, contact the administrator.

9. Third-Party Services

The Service uses Cloudflare for DNS and traffic routing. Cloudflare may process some connection metadata according to their own privacy policy. No other third-party services are used for analytics, advertising, or tracking.

10. Changes to This Policy

This Privacy Policy may be updated from time to time. Continued use of the Service after changes constitutes acceptance of the revised policy.

11. Contact

For questions about this Privacy Policy or to exercise your data rights, contact the administrator through the Service.

Last updated: February 28, 2026