Data policy

The binding document is this server's privacy policy, which its operators wrote. This page is the plain-language version of what the software stores and what you can do about it.

What is stored

• Your account: username, display name, bio, e-mail address, and your password as a hash — the password itself is never stored.
• What you post: photos, videos, captions, comments, likes, shares, collections and the visibility you gave each one.
• Your connections: who you follow, who follows you, and who you have blocked or muted.
• Technical records kept so the service can run and be defended: sign-in times, sessions, and addresses associated with them. How long these are kept is the operator's decision.
• If — and only if — you turn on the recommended feed: the posts and profiles you opened and the searches you ran, deleted automatically after 30 days, plus a list of accounts and hashtags derived from them. See exactly what that is, and delete any of it.

The recommended feed

It is off unless you turn it on, and the home, local and network timelines are in time order whether you do or not.

It learns from things you did deliberately: posts and profiles you opened, searches you ran, and the likes, bookmarks, follows, boosts and replies this server already stores anyway. It does not record what merely scrolled past you, how long you looked at anything, or where you were on a page — there is nowhere in the software to put any of that. None of it is shared with anyone, here or elsewhere, and none of it is tuned to keep you on the site longer.

Turning it off stops the feed and stops anything new being recorded. What was already learned is kept but unused, so turning it back on does not start from nothing. Delete everything is the control that erases it, and today it is the only one: asking to delete your account records that intention, and the software does not yet act on it by itself.

What leaves this server

This is the part that is different from a website that is only a website. When you post publicly, or to followers on other servers, the post and its media are copied to those servers so their users can see it. Your profile travels the same way. Those copies live on machines nicagram does not control.

Deleting a post here sends a delete to the servers that received it, and well-behaved software removes its copy. That is a request, honoured by convention and by nearly everyone, and it is not a guarantee. Assume anything you publish publicly is public permanently, and choose the visibility of a post before you post it rather than after.

What you can do

• Export your data — your account, your followers and the accounts you follow, as files you can keep.
• Change your e-mail address.
• See and change what the recommended feed has learned — every interest it has attributed to you, individually deletable, and a button that erases the lot.
• Temporarily disable your account — your profile, posts, comments and likes are hidden until you sign in again.
• Delete your account — permanent. The username is not released afterwards, and copies already sent to other servers are asked to be deleted.

If you want to know something this page does not answer — how long logs are kept here, where the server is, who can read what — ask the operators from the contact page. Those answers are specific to this server and only they have them.