This document contains almost no substantive privacy content. It defines relevant data protection terminology and states that separate data processing terms apply only in the rare case the company acts as a processor rather than a controller, then points users to a standalone privacy policy for everything else. Since the actual collection, use, sharing, retention, and rights content lives in that companion document, which was not provided, this category cannot be scored on its real merits and is treated as thin coverage.
The terms apply once a user registers an account and remain in effect until either party deletes it, which functions as an implicit clickwrap tied to registration rather than a separate explicit acceptance step. The scope is clearly limited to registered users of mastodon.social and explicitly excludes people on other federated servers who merely interact with visible content. The document does not state any minimum age requirement or age verification step for registration, and it offers no plain language summary alongside the legal text.
No indemnification, hold harmless, or defense cost clause of any kind appears anywhere in this document. Users are not asked to cover the company's legal fees, defense costs, or claims arising from their use of the service. This absence is favorable to consumers, but because indemnification is not addressed as a dedicated topic, the assessment carries lower confidence than a category with explicit protective language.
The document gives users a clean, no notice right to delete their own account at any time, which is a genuine consumer protection. However, it says nothing about how or when the company itself may suspend or terminate a user's account, what conduct would trigger that, whether notice or a cure period is given, or whether any appeal exists. That silence leaves account enforcement entirely undocumented in this text, likely deferred to a separate content or conduct policy not included here.
There is no arbitration clause, no class action waiver, and no jury waiver anywhere in the document, which already puts it ahead of most consumer contracts in this category. EU and EEA resident consumers get a strong protection: they may only be sued, and may only sue, in the courts of their own country of habitual residence, with that country's mandatory consumer protection law applying regardless of the German choice of law. Consumers outside the EU and EEA are less protected since they remain subject to German courts and German law, though the text still preserves their home country's mandatory consumer protections and does not strip small claims access or impose fee shifting.
Users clearly retain ownership of everything they post, and the company takes only a narrow, non-exclusive, royalty-free license limited to operating the service, such as hosting, format conversion, translation, and backups. The license ends automatically when content is deleted, with a transparent carve-out explaining that deleted content may briefly persist in backups and that federation to other servers is outside the company's control. This is a consumer favorable structure with real limits on scope and duration.
Mastodon.social is explicitly stated to be a free service with no payment obligation at all, so billing, auto renewal, cancellation, and refund risks that this category evaluates do not exist in this document. Because the category is genuinely not addressed, a neutral score is used rather than a judgment of the company's billing practices.
The liability clause is unusually consumer favorable and closely follows German civil law's mandatory carve outs. The company accepts full liability for injury to life, body, or health, for intent, for gross negligence, and under product liability law. Liability for ordinary negligence is limited only to breaches of material contractual obligations and capped at typical, foreseeable damages, rather than excluded outright, and the same standard extends to the company's vicarious agents. There is no attempt to disclaim liability for willful misconduct or non waivable statutory rights.
Changes require at least 30 days advance notice except where a shorter legally mandated period applies, and the company commits to explaining both the change and its reasoning rather than posting silent edits. Changes are also constrained to cases where the current terms are outdated, incomplete, or where the change is reasonable to the user or legally necessary. Users who disagree may close their account, though the document does not explicitly promise the changes apply only prospectively, which is a minor gap given the service is free.