Holos Discover - Privacy Policy

visibility Overview

Holos Discover is designed with privacy at its core. We only index public content from users who have opted in to discoverability, and we collect minimal data necessary to operate the service.

public Public Content Indexing

We index content from the Fediverse (Mastodon, Pleroma, Misskey, etc.) using the ActivityPub protocol.

check_circleOnly public posts are indexed - never private, followers-only, or direct messages
check_circleOnly content from users who have enabled discoverability is indexed
check_circleUsers can opt out at any time via their instance settings
check_circleWhen content is deleted or a user opts out, we remove it within 24 hours

vpn_key API Key Data

When you request an API key, we collect some information to manage access and prevent abuse.

Data Collected

emailEmail address - to communicate about your API key status
appsApplication name and description - to understand your use case
routerIP addresses (hashed) - for abuse detection and rate limiting
analyticsAPI usage statistics - request counts per endpoint

Purpose

checkEmail you about key approval, rejection, or revocation
checkDetect and prevent API abuse (rate limit violations, key sharing)
checkProvide you with usage statistics in your dashboard

Data Retention

API key data is retained while your key is active. Usage logs are kept for 90 days. IP tracking data is deleted after 24 hours. When a key is revoked, all associated data is deleted immediately.

api Public API Usage (No API Key)

When you use the API without an API key:

memoryYour IP address is kept in memory only for rate limiting
blockIP addresses are not stored in database or logged
auto_deleteRate limit data is automatically cleared within minutes
blockNo persistent tracking or fingerprinting

web Web Interface

When you use our web search interface:

        verified
        No tracking, no cookies, no analytics
      

blockNo user tracking or fingerprinting
blockNo cookies except essential session cookies for admin
blockNo third-party analytics or advertising

gavel Your Rights

Under GDPR and similar regulations, you have the following rights:

Fediverse Users

If your public content is indexed, you can opt out using any of these methods:

toggle_offDisable the "indexable" option in your profile settings
tagAdd #nobot or #noindex to your bio
lockLock your account (require follow approval)
blockBlock @HolosDiscover directly
alternate_emailMention us with "unfollow"

Any of these will remove all your content from our index immediately.

API Key Holders

If you have requested an API key, you can manage your data directly from your dashboard:

visibilityView your data - see all information we have about you
downloadExport your data - download a JSON file with all your information
deleteDelete your data - permanently remove your API key and all associated data

Access these options from your API key dashboard using the link sent to your email.

For any other privacy concerns, contact the instance administrator.

update Policy Updates

We may update this privacy policy from time to time. Significant changes will be announced on the instance.