Privacy Policy

Privacy Notice

Last updated: 2026-01-16

1. Controller and contact

  • Controller: Azrak Group Ltd (Company No. 16788982)
  • Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom
  • Contact: support@azrak.io

2. Privacy-first defaults

  • No ads
  • No tracking pixels
  • No third‑party analytics
  • We do not sell personal data

3. Data we process

  • Account data: username, email address, and profile details you choose to provide.
  • Content: posts, media, captions, comments, and metadata needed for delivery, federation, and moderation.
  • Operational/security logs: logs used for reliability, abuse prevention, and incident response (limited access).
  • Reports/moderation data: reports you file, moderator actions, and related notes needed to enforce rules and keep the service safe.

4. Why we process data (lawful bases)

  • Contract: to provide the service you request (accounts, posting, media delivery).
  • Legitimate interests: to secure the service, prevent abuse, and maintain reliability.
  • Legal obligation: to comply with applicable law and respond to lawful requests.

5. Federation and recipients

Pixelfed is federated. When you publish public content or interact with other servers, data is shared with those servers to deliver the interaction. Other servers and client apps may store copies outside our control.

We may also share data with service providers (hosting, backups, monitoring) only as needed to operate the service and under appropriate controls.

6. International transfers

Federation can involve transfers to servers outside the UK. We cannot control where other servers are located or how they retain data once delivered.

7. Retention

We keep data for as long as necessary to operate the service, prevent abuse, and meet legal/security requirements. Log retention is limited where practical. Federation means third parties may retain copies independently.

8. Security

We use reasonable technical and organisational measures to protect the service and your data. No system is perfectly secure; you use the service at your own risk.

9. Your rights

Where applicable (including under UK GDPR), you may request access to, correction of, or deletion of your data, and you may object to or restrict certain processing. Email: support@azrak.io

Where applicable, you may also lodge a complaint with a supervisory authority (for example, the UK Information Commissioner’s Office).