Data policy

The binding document is this server's privacy policy, which its operators wrote. This page is the plain-language version of what the software stores and what you can do about it.

What is stored

• Your account: username, display name, bio, e-mail address, and your password as a hash — the password itself is never stored.
• What you post: photos, videos, captions, comments, likes, shares, collections and the visibility you gave each one.
• Your connections: who you follow, who follows you, and who you have blocked or muted.
• Technical records kept so the service can run and be defended: sign-in times, sessions, and addresses associated with them. How long these are kept is the operator's decision.

What leaves this server

This is the part that is different from a website that is only a website. When you post publicly, or to followers on other servers, the post and its media are copied to those servers so their users can see it. Your profile travels the same way. Those copies live on machines nicagram does not control.

Deleting a post here sends a delete to the servers that received it, and well-behaved software removes its copy. That is a request, honoured by convention and by nearly everyone, and it is not a guarantee. Assume anything you publish publicly is public permanently, and choose the visibility of a post before you post it rather than after.

What you can do

• Export your data — your account, your followers and the accounts you follow, as files you can keep.
• Change your e-mail address.
• Temporarily disable your account — your profile, posts, comments and likes are hidden until you sign in again.
• Delete your account — permanent. The username is not released afterwards, and copies already sent to other servers are asked to be deleted.

If you want to know something this page does not answer — how long logs are kept here, where the server is, who can read what — ask the operators from the contact page. Those answers are specific to this server and only they have them.