Overview is my personal web site using the WriteFreely server software. You can reach me by sending me a Mastodon DM at if you have any questions, need to submit a data subject request, want to tell me I'm wrong, or otherwise have thoughts.

Cookies does not place any cookies on your browser as a Controller

Under the General Data Protection Regulation (GDPR), acts as a controller of your personal data in the following cases:

What types of personal data are processed ?

I process the following types of personal data:

Purposes for processing data

Because the Fediverse (including instances of WriteFreely, Mastodon, and related platforms) is, in effect, a bunch of databases sharing data with one another, personal data is stored in databases (both a Sqlite database I control on GCP, and other databases controlled by other instance admins).

Some information (such as user access, registration, errors, etc.) are also stored in separate Linux system logs (SystemD), which are also maintained on GCP. These logs serve the purpose of maintenance and security of the server.

I rely on consent obtained by the user's (third-party) ActivityPub service for processing follower information. I also rely on your consent if you contact me via DM at, or follow me on this instance.

In the unlikely event that you do something that violates the site rules, I rely on legitimate interests for subsequent processing (i.e., if necessary, reporting to authorities). If I am served with a legal order requiring me to provide information relating to you in connection with suspected or alleged misuse of the service, and I comply with that order, my lawful basis will be necessity to comply with a legal obligation.

Please don't let it come to that.

I rely on contractual necessity and legitimate interests to host this instance and deal with DMs to I have agreements in place with GCP for hosting.

Retaining your data

The server attempts to delete content stored in logs automatically after 30 days, to make optimal use of server space.

Exercising your rights

You have the right to request access to and rectification or erasure of personal data. You can also ask us to restrict processing or object to processing (to the extent that's possible).

To contact me, including to exercise your rights, please DM me at


Personal data processed by is accessible to only me. In addition to limited access, the following additional security measures are in place: – hourly, redundant backups of instance data; – encryption in transit (TLS 1.3, via LetsEncrypt); – encryption at rest on GCP

I rely on assurances provided by GCP regarding their own technical and organisational measures. Details on Sub-processor controls can be found below:



This privacy policy is based on Mastodon privacy policy template by