Privacy Policy

Last updated June 29, 2026

Who we are

write.folk is operated by Brennan Kenneth Brown in Calgary, Alberta, Canada. folk.zone is a personal project, not a company. This policy covers write.folk.zone. See the folk.zone policy for the full network policy.

Contact: mail@brennanbrown.ca

What we collect

We collect only what we need to run the service:

Account information: username, email address, and password (stored as a one-way hash — we cannot read it).
Content: blog posts, drafts, and pages you create.
Server logs: IP addresses and request metadata, retained for no more than 30 days, then deleted automatically.

We do not collect your real name, location, phone number, or any payment information.

Why we collect it

To create and maintain your account
To publish content you choose to make public
To send password reset emails when you request one
To identify and address abuse

How we use it

We do not sell, rent, or share your personal information with third parties for advertising or marketing. We do not run ads.

We use Resend to deliver transactional email (password resets, notifications). Your email address is passed to Resend solely for this purpose and is governed by Resend's privacy policy.

Your data may be disclosed if required by a valid legal order from a Canadian court. We will notify you of any such request where we are legally permitted to do so.

Federation and the fediverse

write.folk is a federated service. When you publish a public post, it is distributed to other servers in the fediverse via ActivityPub. Once a post is federated, folk.zone cannot control or delete copies held by other servers. Use the “unlisted” or “private” visibility settings if you want to limit distribution.

How long we keep your data

Account data is kept for as long as your account is active.
Accounts inactive for more than 24 months may be removed with notice.
Server logs are deleted after a maximum of 30 days.
When you delete a post, it is removed from our database. Federated copies on other servers are outside our control.

Your rights

You have the right to:

Access the personal information we hold about you
Correct inaccurate information
Delete your account and all associated data

To exercise any of these rights, email mail@brennanbrown.ca.

Security

Passwords are stored as one-way cryptographic hashes. All connections to write.folk.zone are encrypted via HTTPS (TLS). The server is located in a private residence in Canada and access is restricted to the operator.

No security measure is perfect. In the event of a data breach affecting your personal information, we will notify affected users by email as soon as reasonably possible.

Canadian law (PIPEDA)

This service is operated under Canadian federal law. folk.zone makes reasonable efforts to comply with the Personal Information Protection and Electronic Documents Act (PIPEDA, S.C. 2000, c. 5) and its 10 fair information principles: accountability, identifying purposes, consent, limiting collection, limiting use and retention, accuracy, safeguards, openness, individual access, and challenging compliance.

To submit a privacy complaint, contact us at hello@folk.zone. If you are unsatisfied with our response, you may contact the Office of the Privacy Commissioner of Canada (OPC).

European residents

folk.zone is not a GDPR-covered organisation. However, we voluntarily apply GDPR principles, including data minimisation and the right to erasure. Contact mail@brennanbrown.ca with any concerns.

Changes to this policy

Material changes will be announced at @folkzone@social.folk.zone. Continued use after a change takes effect constitutes acceptance.

folk.zone is operated by Brennan Brown, Treaty 7 territory, Calgary, Alberta, Canada. This project is not affiliated with any company or institution.