Icon - Kiwi Vectors by Vecteezy

Privacy Policy

This privacy policy describes how No Last Name Needed (“we”, “us”) collects, uses, protects, and shares information you provide through our website and API. It also explains your choices regarding your data. This policy applies only to services we operate and does not cover third parties we do not control.

By using this service, you acknowledge that it is experimental and runs on early-release software. While we take reasonable precautions to protect your data, we cannot guarantee that the software or configuration is free from defects that could result in the exposure of submitted information.

Due to the federated nature of Lemmy, most activity should be considered public. Although we take steps to protect sensitive data such as your email address and IP address, your posts, comments, votes, subscriptions, and other interactions may be distributed to and stored on other servers. We strongly recommend that you do not share any personally identifiable or sensitive information.

Information We Collect

Account Information

  • Username, email address, and password
  • Optional profile details (display name, biography, profile picture)
  • Username and profile information are publicly visible

Posts, Comments, and Activity

  • Posts, comments, subscriptions, votes, and related metadata (including timestamps and client/app used)
  • Content is public and may be federated to other servers where copies are stored
  • Deletions are broadcast but may not be honored or propagated to all instances
  • Profile information, post history, and comment history are publicly accessible
  • Vote data is not exposed via the UI but should not be assumed private

Federation

  • Content is delivered to the servers hosting the communities or users involved
  • Other instances may store, process, and display your content differently
  • This service may interoperate with other platforms (e.g. Mastodon), which may handle your data under different rules

Direct Messages

  • Stored on this instance and may be delivered to other instances
  • We restrict access where possible, but cannot guarantee confidentiality across federated servers
  • Instance administrators and recipients may access or retain messages
  • Messages may be copied, logged, or re-shared by others

IP Addresses and Metadata

  • We log IP addresses and browser information when you access the service
  • The most recent IP address associated with your account may be stored for up to 12 months
  • Server logs containing IP addresses may be retained for up to 90 days

How We Use Your Information

  • To provide and operate the platform
  • To support moderation and enforce community rules (e.g. detecting ban evasion)
  • To communicate with you (notifications, account-related messages, support responses)

Data Security

We implement standard security measures, including SSL encryption for web traffic and secure password hashing.

Lemmy does not currently support SSL connections to PostgreSQL. To mitigate this, the database is hosted locally and external connections are blocked.

Data Retention

  • Account-associated IP addresses: up to 12 months
  • Server logs: up to 90 days (where retained)

You may delete your account at any time. However, due to federation, we cannot guarantee that all remote instances will remove copies of your data.

Cookies

We use cookies to:

  • Recognize your browser
  • Maintain login sessions
  • Store user preferences

Data Sharing

We do not sell or trade your personal information.

We may share information:

  • With trusted service providers who assist in operating the platform (under confidentiality obligations)
  • When required by law or to protect rights, safety, or property

Public content is federated to other servers as part of the network.
Posts and comments are delivered to the servers hosting the relevant communities.
Direct messages are delivered to recipient servers where applicable.

Third-party applications you authorize may access your account data depending on granted permissions, but cannot access your email address or password.

Age Requirement

This service is intended for users aged 13 and older.

Jurisdiction

Laws may vary depending on your location and the location of this server.

This document is adapted from the Mastodon and Discourse privacy policies (CC-BY-SA).