We want to keep this short but informative, but a tl;dr:
We do not want to collect data, and all data collected should be logical.
(i.e. emails for a gitea account or so).
We will change this Privacy Policy from time to time to reflect the current situation. Please keep an eye out.
This notice is very general and there might be exceptions for each individual service we offer.
Consider reading about the services before you use them, but they are all doing their best to
be privacy friendly.
We will list some exceptions further down the privacy policy.
We do not keep nginx access logs - so we can't see who has connected. However, our main server uses modsecurity to protect against different types of attacks. If one of your requests is flagged as an attack, modsecurity will write to an audit log. This will log your User Agent.
Our main page (qwik.space) does not have any cookies.
The modsecurity log is kept until we clear it from time to time.
We do not share any data with third parties unless we have to by law or state otherwise.
Here are some services that make exceptions to the above statements:
Our XMPP server caches messages and uploads for up to seven days. If your client uses encryption (such as OMEMO) the cached messages and uploads will be encrypted. We strongly advise using encryption.
Gitea will collect your email upon registration. (Sadly we don't know any way to disable this.) However,
the email isn't used for anything so it can be whatever. We would maybe even advise you to use a temporary
or throwaway email.
Gitea will require a username on signup, which you might consider personal. We would advise
you to not use your real name and instead use an alias.
Gitea also uses some cookies, but this is for your comfort. For example keeping you signed in and remembering
your settings or what not.
These services all use cookies to remember your settings.
The internet is not a good place when it comes to privacy. If you want to limit the risks of something or someone invading your privacy online, we recommend: