Privacy Policy
VAAK is the invite-only ActivityPub / Mastodon-compatible server on mkultra.monster. The public website (blog, radio, archives) has its own site privacy note at https://mkultra.monster/pages/privacy/ — this page covers federation accounts and the VAAK web app.
What is public by design
- Your public profile (display name, bio, avatar, profile fields) and public posts are part of the open web. Other Fediverse servers that follow or interact with you may fetch and store them under their own policies.
- Followers / following lists may be visible according to ActivityPub norms.
- Remote servers that receive public activities process them under their own rules (including large commercial services if federation is not blocked).
What this server may store
- Account credentials (password hashes), invite codes, and session cookies for VAAK login.
- ActivityPub inbox/outbox traffic needed to operate your actor (follows, accepts, public posts/mentions observed locally, delivery logs).
- OAuth tokens for apps you authorize (e.g. Ice Cubes), stored hashed, with expiry and admin revoke.
- Optional media uploaded for posts, subject to size limits.
- Server access logs (IP, user-agent, path) retained for operations and abuse response on normal web-server schedules.
What we do not do
- No ads, no sale of personal data, no training of third-party language models on private inbox contents for commercial product features.
- Direct messages, where supported, are treated as private between participants but remain visible to this server’s operator and to any remote servers that receive them — do not send secrets over the Fediverse.
Contact
Questions about this policy or a VAAK account: cmdr-nova@mkultra.monster