Kwetter is a European microblogging service. We do not show ads, sell personal data, or use third-party trackers.
Controller
Kwetter B.V., Amsterdam, the Netherlands, is the controller for personal data processed through this service.
Lawful basis
We process your account, identities, posts, in-app notifications, and magic-link authentication to perform the contract of providing Kwetter. Rate limiting uses hashed identifiers under legitimate interest in preventing abuse. Optional features that need consent (such as location) stay off until you opt in.
What we process
Email, locale, identities (handle, display name, bio, avatar colour), posts, likes, rekwets, bookmarks, profile pins, lists, space memberships, spaces you create, follows, in-app notifications (who acted, which post, timestamps — not private-space post bodies), and one-shot hashed login tokens. When you post an http(s) link, our EU servers fetch that public page to store a title, description, and image for the preview card — we do not send your account to the linked site. Your public profile (handle, display name, bio, avatar colour, joined date, public-space memberships, who you follow or is followed by you, and up to five pinned public kwets you chose as an intro) is visible to anyone. Public spaces you create are public objects. Private-space memberships are visible only to co-members. Rate-limit buckets store hashed IP and subject keys — never raw IP or email.
Cookies
We use only a strictly necessary session cookie to keep you signed in. We do not set analytics or marketing cookies.
Retention and deletion
Posts can expire by TTL and are then hard-deleted. Spent login tokens, old rate-limit windows, and in-app notifications older than 90 days are purged regularly. Notification previews never include private-space bodies. If you delete your account, it is hidden immediately. You have 14 days to cancel. After that we erase your personal data: private-space posts are always deleted; for public posts you choose at deletion whether to anonymise them (author becomes “Deleted account”) or delete them. Database backups and access logs (which may briefly include search queries) are retained only as long as operationally necessary — we will align that window with Art. 17 (see product backlog).
Your rights
In Settings you can change your language, download a machine-readable export of your data, and delete your account. Display name, bio, and avatar colour are edited on your profile. You pin or unpin public kwets on your profile from your own card. You may also contact us to exercise access, rectification, erasure, restriction, objection, or portability under the GDPR/AVG.
Age
Kwetter is not directed at people under 16. You must confirm you are 16 or older when you register.
EEA residency
Application data, sessions, backups, and mail that process personal data stay in the EEA. We do not use US-only SaaS for personal data.