CYBERNETICA Privacy Policy

Effective date: November 7, 2026
Operator: CYBERNETICA ("we", "us")
Contact: admin@cybernetica.cc

1. Scope

This policy covers personal data we handle when you use any service under cybernetica.cc (the "Services"). It doesn't cover other servers on the networks we connect to or third parties we rely on (such as Discord, game account services, OVHcloud, and search and DNS providers), whose own policies apply to what they receive.

2. What we collect

• Single sign-on (Pocket ID). One account for Matrix, Wafrn, IRC, and the password manager. We store your username, name, email address, passkeys (public keys only), group memberships, and sign-in records, which may include your IP address and device details. The services you sign in to receive details such as your username, name, and email address.
• Accounts (Wafrn, Matrix via Continuwuity, and IRC via Ergo). Username or nickname, display name, a salted password hash (where you use a password), email address (for resets, security notices, and announcements), birth date (to check age requirements), optional profile details, your content, IP address, device and session information, and room, channel, and other protocol events. On IRC, other users see a cloaked hostname instead of your IP address (server admins can still see it), and we keep recent message history.
• Discord. Discord collects and controls your account data under its privacy policy. As server admins, we see what Discord shows admins: your username and ID, roles, join date, and messages in channels we moderate. Bots we run, including the bridge, process messages in the channels they can read.
• Bridged spaces (Lightning). The CYBERNETICA hub spaces on Matrix, Discord, and IRC are bridged by a bot we host. The bridge copies your message, display name, avatar, and attachments to the other platforms, where their own policies apply, and may keep records of relayed messages so it can pass along edits and deletions. Those may not always carry across, and we can't remove copies held by other platforms or users.
• Game servers. Player names and IDs, chat and command logs, in-game activity, moderation records, and usually your IP address. Logging in may go through the game's own account service, whose policy applies.
• Password manager (Vaultwarden). Your vault is encrypted on your device with your master password, so we can't read its contents. We store your email address, your encrypted vault data, and device and sign-in details. Your apps request icons for the sites in your vault, so those domains appear in our logs and our server may fetch the icons from those sites.
• Search (SearXNG). The software keeps no search history by default. We forward queries to the search engines we've enabled, and our web server logs search requests, including your query text and IP address.
• DNS (AdGuard Home). We see the domains you look up and your IP address. Query logging is on with IP addresses anonymized, and queries we can't answer go to an upstream provider.
• Logs. Our web server or reverse proxy, firewall, security tools, and IRC server may record IP addresses, timestamps, URLs, response codes, and user agents. OVHcloud handles some connection data too.
• Cookies. Only functional cookies and local storage, with no advertising or analytics trackers. Third-party components may set their own, and our uptime monitor (Uptime Kuma) runs no analytics or third-party scripts. We don't track you across other websites or over time, so we don't act on Do Not Track signals.

3. Federation

Matrix, the Fediverse (ActivityPub), and Bluesky (AT Protocol) are decentralized. Public posts, and messages in non-private rooms, are copied to other servers worldwide, and we can't force deletion once they're copied. Matrix keeps room state history, so your username may stay visible in past events after you delete your profile. Private Matrix rooms may be end-to-end encrypted depending on your client. In unencrypted rooms and on IRC, admins can read messages, and we can always see account and room metadata. If you enable the optional Bluesky integration, your public posts are also published to Bluesky, where other services can copy and display them under their own policies.

4. How we use and share data

We use data to run and secure the Services, enforce our Terms of Service, respond to reports, contact you about your account, and comply with the law. We don't sell, rent, or trade personal data, use it for advertising, or use it to train AI models.

We share data only through federation and bridged spaces when you post; with the providers that run the infrastructure; when the law requires it or to protect users or the Services from serious harm, including reports to NCMEC; with your consent; or if the community moves to a new operator, who would have to honor this policy.

5. How long we keep data

6. Your rights

Wherever you live, you can ask us to tell you what personal data we hold, correct it, or delete your account and personal data. Email admin@cybernetica.cc from the address on your account so we can verify it's you. We aim to reply within 30 days. We may keep a limited record of a ban to enforce it, and we can't remove copies held by other servers. When you delete your account, we also ask other servers to remove your content where the protocol allows. If you're in the EU, EEA, or UK, you can also complain to your data protection authority.

7. Security

Connections use TLS, passwords are stored as salted hashes, and we limit admin access. No system is perfectly secure. If a breach affects your personal data, we'll tell affected users by email or in our announcement channels as soon as reasonably possible.

8. Children

You must be at least 13 to use the Services (16 in the EU, EEA, and UK). We don't knowingly collect personal data from younger children, and we'll delete any such account and its personal data and ask other servers to do the same where the protocol allows. Email admin@cybernetica.cc if you think a child below the minimum age is using the Services.

9. International users

We and our servers are in the United States, so your data is processed and stored here, and US law may give you fewer protections than the law where you live. The Services aren't aimed at people in the EU, EEA, or UK, and we aren't set up to meet every obligation EU and UK law places on services aimed at them, but we'll still honor the rights in Section 6.

10. Changes and contact

We'll post updates with a new date and announce material changes at least 14 days before they take effect, unless a change is needed right away for legal or security reasons. Questions and requests go to admin@cybernetica.cc. For copyright or abuse reports, see the Terms of Service.