Privacy
runv.club is run by one admin, from Brazil. Questions, or a request to see or delete your data: admin@runv.club.
When you ask to join
We keep the username you picked, your email, your SSH public key, and what you wrote about yourself. To stop one person from filling the line, we also keep a hash of your address, mixed with a secret, so we can count requests from the same place without knowing where that is. Only the admins read it. If you're turned down, drop out of the line or don't answer the 60 day check, the request is deleted right away.
When you're a member
We keep your username, email, the fingerprint of your key and when the account was created or changed. The email is only used to write to you about your account. It is never shown, shared or sold. Mail goes out through Mailgun.
Everything in your home directory is yours, and so is the mail other members send you here. The admins can technically read both, and only do when something on the server needs fixing or a rule may have been broken.
Logs
The web server logs the IP address, time, page and browser of each visit, and keeps that for 14 days. Logins over SSH and requests to the Gemini and Gopher servers go to the system log, kept for up to 90 days. Visitors who come through I2P arrive without an IP address. There are no cookies, trackers or analytics on any runv.club page.
Visits to members' pages
Each member can see the visits to their own pages, with the address cut short (the last part of an IPv4 address, most of an IPv6 one), for 14 days. Members who turn on analytics also get counts: unique visitors, page views, top pages, the sites that linked to them and the addresses that weren't found. Visitors are told apart by a hash of the address and browser mixed with a value that changes every day and is then thrown away, so nobody, us included, can follow a visitor from one day to the next or get the address back. The counts are kept for a year.
Status
What you post with status is public: on the site, in feeds, on gemini, gopher and finger. It's kept until you delete it (status rm) or leave, and then it goes right away.
Short links
Your short links and where they go are public, at runv.club/go/you/. When you make one, and once a day after that, the address may be looked up in Google Safe Browsing and in URLhaus (abuse.ch) to catch malware and phishing. Only the address is sent, nothing about you.
Public keys
The SSH keys you log in with are published at runv.club/~you.keys, without their comments, so people and servers can find them. A PGP key in ~/.pgp.asc goes up at runv.club/~you.asc. Public keys only: that's what they're for.
Proofs
Proofs you add with runv proof are public once confirmed, at runv.club/proofs/you/, along with when they were last checked. To check one, the server visits the address you gave, from runv.club's own address, when you add it and once a day after that. Nothing about you is sent along. Proofs that aren't confirmed are only visible to you. They go when you remove them or leave.
Your own domain
If you point a domain of yours here with runv domain, the server looks up its DNS records when you add it and once an hour after that, to see that it still points here and still names you. The domain is public, and anyone can see which member it belongs to by looking at the same records. Visits to it are logged like visits to your page at runv.club/~you/. It stops working here when you remove it or leave.
Photos
Photos you put up with pics are public, at runv.club/~you/pics/ and on runv.club/pics/. What's published is a new copy made from the picture alone: the GPS location, camera, time of day and everything else stored in the original file are left out. The originals stay in your home, private to you.
Corpse, nice things and graffiti
Lines you write with corpse are kept with your name and published, name included, once the story is finished. Nice things from runv nice are published without your name; we keep who wrote each one so you can take yours down. Every version of the graffiti wall is kept with the name of whoever painted it, and the list of who painted when is public. When you leave, your nice things are deleted, and your lines and wall versions stay without your name.
If you forward your runv.club mail, we keep the address it goes to, and only use it for that. Mail from outside is scanned for spam as it arrives and passed on; it isn't stored here unless you keep a copy, or while it waits in the queue (a day at most). The mail server logs who wrote to whom and when, without the content, like every mail server.
Guestbooks
Members can turn on a guestbook. A note left there keeps the name and text you typed and when you sent it. To stop floods, we also keep a hash of your address, mixed with a secret, for 30 days and then drop it. The member reads every note before it shows up, and unapproved notes are deleted after 30 days.
Bouncer and chat history
The IRC bouncer keeps the messages of the channels a member is in, so they can read what they missed. That history belongs to the member's account and goes away with it.
Backups
The server is backed up every 15 days, and the signup line and member list again whenever they change. Backups are encrypted before they leave the machine and stored with a hosting company in the EU. Full backups are kept for about 3 months. The quick copies of the signup line are kept for 30 days.
Leaving
When an account is deleted, its home directory is kept for 14 days in case it was a mistake, then removed. It disappears from the backups as they age out, within about 3 months.
Chat
#runvclub lives on tilde.chat, a separate network run by other people, with its own rules and its own logs.
lemmy.club
If you run runv lemmy, your username and email are sent to lemmy.club to create your account there. lemmy.club runs on a separate server, also run by pablo, and has its own privacy terms. Nothing is sent unless you ask for the account.
Accounts are for people 16 or older. If we find out a member is younger, the account and everything in it is deleted.
The LGPD (Brazil) and the GDPR (EU) give you the right to see, correct and delete what we hold about you. Write to admin@runv.club and we'll answer within 15 days.