Privacy Policy

How your data is used within Foxnet.

Foxnet is a project operated in Italy by Raul Larosa and is not registered as a business.

Foxnet membership is intended for individuals aged sixteen or older, and the data practices described in this document are governed by Regulation (EU) 2016/679 (“GDPR”). Should the need arise, EU citizens may file a complaint with their local data protection authority.

Data Collection

Foxnet collects and stores the following information:

  • Usernames, email addresses, hashed passwords, two-factor authentication secrets, and authentication tokens.
  • Display names, avatars, and user-authored profile fields.
  • Message content and metadata, uploaded files, channel membership, presence, and client application metadata.
  • Cryptographic public keys, IP addresses, and timestamped access logs.

Data Retention and Sharing

Due to the federated nature of some services hosted by Foxnet, the messages, profile data, and presence information of any member who chooses to interact with these services are guaranteed to be transmitted to a third-party server at some point in time. Foxnet cannot enforce data deletion on external systems, therefore such data is subject to the policies of the receiving servers and may persist indefinitely.

Data is stored for the sole purpose of:

  • authenticating member access and managing sessions;
  • routing messages;
  • troubleshooting and preventing abuse.

Data that can be erased is erased upon account deletion, but may persist in access logs for up to six months from when it was last logged. Passwords, two-factor authentication secrets, and authentication tokens are never logged or made available to the host. Data belonging to a deleted account may also persist in backups, but it is not considered readily available and will be erased if an offending backup is ever restored.

Service-specific accounts linked to a deleted account will be deleted or deactivated based on what the service allows. The Matrix protocol is append-only and does not support deleting historical data.

Data Storage and Access

While Foxnet and the services it provides do not make use of encryption at rest (i.e., most stored data is not encrypted), sensitive account credentials are never stored in plain text. For all intents and purposes, the host is capable of accessing plain text data in a database. Data is always encrypted in transit, and Foxnet uses services that support end-to-end encryption where possible.

Other Foxnet members and users of services that interact with Foxnet over federation may be able to access your profile details, presence, and message content as permitted by the service and channels you participate in. The content of messages protected by end-to-end encryption can only ever be accessed by the sender and the recipients.

Third-Party Processors

Account data and particular service-specific data are stored on the infrastructure of Hetzner Online GmbH. Email delivery is handled through Soverin B.V..

Data Export, Correction, and Deletion

Members may request a copy of the data Foxnet holds about them by contacting the host. Any such request is best-effort and is fulfilled manually. Members may also contact the host to correct inaccurate information on their account or request for their account to be deleted irreversibly.

Change Policy

The contents of this document may be updated at any time with prior notice to members. Continued use of Foxnet’s services after a change takes effect constitutes consent to the updated contents.

Inquiries

For inquiries, you may contact privacy@foxnet.systems.