Data Controller
The data controller responsible for processing personal data on this homeserver is:
krille-chan - Christian Kußowski
c/o Online-Impressum #8198
Europaring 90
53757 St Augustin
E-Mail: christian-kussowski[at]posteo.de
Feel free to reach out to this address with any questions about this privacy policy or your data.
Registration & Account
Using the homeserver requires an account. Authentication is handled by the Matrix Authentication Service (MAS), which stores at least your username, an e-mail address for account recovery, and a securely hashed password. MAS also manages your active sessions and devices, so you can review and revoke access to your account at any time. MAS also allows to login by SSO with external services like Google or Apple.
Messages & Content
Private chats and most rooms use end-to-end encryption. In that case, the homeserver only relays encrypted message content and cannot read it. For unencrypted rooms, in particular public rooms, the content is visible to the server.
Regardless of content encryption, the server inevitably processes metadata, such as who is a member of which room, message timestamps, and technical event identifiers. Learn more about which metadata are stored at matrix.org.
Calls
Audio and video calls (Matrix RTC) are routed through a LiveKit SFU (Selective Forwarding Unit) that we operate. The SFU forwards the media streams between call participants to connect them. The transmission is encrypted, and encryption keys are exchanged end-to-end over Matrix, so voice and video data is generally not accessible to the operator. Call content is not recorded or permanently stored; it is only processed for the duration of the call.
Server Logs
As with any server, operating the service produces technical log data, such as IP addresses, access times, and the client used. This data is used to maintain the security and stability of the service, for example to detect abuse, and is automatically deleted after a short period.
Retention & Deletion
Account data and messages are stored for as long as your account exists. You can delete your account, as well as individual messages, at any time by yourself atauth.fluffy.chat. Once your account is deleted, your personal data is removed. Since Matrix rooms are federated, copies of messages you sent to rooms with participants from other servers may persist on those servers.
Your Rights
Under the GDPR, you have the right to access, rectify, erase, and restrict the processing of your data, as well as the right to data portability. You also have the right to lodge a complaint with a data protection supervisory authority. To exercise your rights, please contact us using the address above.
