Decentralized, open-source social network
Minimal data collection, varies by server
Strong security with server-dependent implementation
Excellent user control and data portability
Transparent operation with open-source code
No advertising or data monetization
| Category | Risk Level | Description |
|---|---|---|
| Data Collection | LOW | Minimal collection, no centralized tracking |
| Server Trust | MEDIUM | Privacy depends on instance administrator |
| Public Posts | MEDIUM | Public posts are permanently federated |
| Account Security | LOW | 2FA and strong security available |
| Data Breaches | MEDIUM | Security varies by server infrastructure |
| Surveillance | LOW | Decentralized structure resists mass surveillance |
No single point of control or data collection
Code is fully auditable and transparent
No data monetization or tracking
Privacy depends on choosing trustworthy instance
Public posts spread across federated network
Security quality depends on server admin
Select a server with strong privacy policies and trustworthy admins
Protect your account with 2FA
Configure post visibility and follower approval settings
Learn how public posts federate across instances
Export your data periodically
Common questions about Mastodon's privacy, security, and data practices.
View Mastodon's Privacy Policy
Read the official privacy policy to understand how Mastodon collects and uses your data.
Compare Mastodon with alternatives
See how Mastodon compares to similar products in terms of privacy and security.