Privacy Policy
Last updated: 2026-04-21
Data controller
lyra.social is operated by the node administrator. For any question about your personal data, contact: privacy@lyra.social.
Data we collect
We collect and process the following categories of data:
- Account data: username, email, hashed password, avatar.
- Content you publish: messages, files, reactions, statuses.
- Technical data: IP address, user agent, connection logs.
- Moderation data: reports, sanctions, infraction history.
Purposes
Your data is used to provide the communication service, secure your account, moderate the platform, prevent abuse, comply with legal obligations and — with your consent — notify you of channel activity.
Legal basis
Performance of the contract (Terms), legitimate interest (security and moderation), legal obligations (log retention), and explicit consent for push notifications.
Retention period
Active account: as long as you use it. Deleted account: profile and messages erased immediately (GDPR Art. 17). Audit logs: 12 months. Moderation logs: kept for abuse-prevention, anonymised on request.
Your rights
You have rights of access, rectification, erasure, portability, restriction and objection. Exercise them from your settings or via privacy@lyra.social. You may file a complaint with your local data-protection authority.
Cross-node federation
lyra.social is a federated platform: if you join a shared space hosted on another node, your messages and public profile are forwarded to that node, which becomes a joint controller for that scope. You will be informed before any cross-node join.
Contact
For any data-related request: privacy@lyra.social.