Replies (1)

• @daj@gofer.social 2026-02-02 12:45

  @david_bardos Like you, I have some concerns about Nolto. Specifically around who is behind the venture. There are no details on who is operating it. Users are providing some sensitive, and personal information (example: work employment), this causes me concerns. The Privacy Policy is dated 16 June 2025 but their domain name was only registered on 30 January 2026. (maybe not the end of the world, but you think you'd review around go live)The only contact email listed on the Policy is a (free?) Protonmail accountThe database is located in Germany according to their policy docs. Under EU GDPR, and German Federal Data Protection Act (Bundesdatenschutzgesetz – "BDSG"), they are required to identify their entity"Nolto is a federated platform developed using Lovable, a vibecoding tool registered in Sweden (EU)". This is the software used not who is running the server. Also vibecoding? Don't get me started on the use of AI for coding. Let alone the fact they may well be using automated decision making, which is another issue under GDPR and you must be able to opt out (I'm obviously guessing that they have automation)"Nolto does not use: Analytics tracking" -- They do have some kind of analytics loading It's an interesting idea and I don't wish to stifle it, but we need a bit more transparency. Nice looking site, and I really like the idea. It suggests it is designed to be hosted by anyone (similar to other fediverse servers) so most of the above is irrelevant if someone else decides to run a copy of Nolto (they'd need their own details and policies). But looking specially at nolto.socail the above points are up for discussion. I'm just concerned as there is the potential for people to store a lot of personal information on the site. I will keep an eye on progress. 👀

  Open ##1594407