Privacy Policy

1. Our approach to privacy

MILAN is a privacy-first decentralized social network. The platform is designed so that you — not a company — hold your data. Posts are private unless you choose to make them public or share them with a specific Decentralized Identifier (DID).

2. What we store

To run the service, MILAN stores the minimum needed:

• Account data — your email and a securely hashed password (we never store passwords in plain text).
• Identity — your Decentralized Identifier (DID) and the reference to your Decentralized Web Node (DWN).
• Profile — display name, bio, website and avatar that you choose to add.
• Content — posts, media and metadata you create, stored with the access level you set (private, public or shared).
• Operational data — basic technical information needed to deliver, secure and debug the service.

3. What we don't do

• We don't show advertising.
• We don't sell, rent or trade your personal data.
• We don't build advertising profiles or track you across other websites.

4. How sharing works

You control visibility on every post. Private means only you. Public means visible in the public feed. Share with DID means only the specific identities you choose can see it. Changing a post's access updates who can view it going forward.

5. Security

Passwords are hashed using industry-standard algorithms. Content is associated with your cryptographic identity. We apply standard transport and storage protections. No online service can promise perfect security, but we minimize what we hold and design for data ownership.

6. Data retention and deletion

You can edit or delete your posts at any time. When you delete content, it is removed from your active node and feeds. If you wish to delete your account or request a copy of your data, contact us at the address below.

7. Cookies and local storage

MILAN uses only strictly necessary cookies and browser local storage — to keep you signed in (authentication token), remember your theme and preferences, and make the app work offline (PWA). We do not use advertising cookies, third-party tracking cookies, or cross-site tracking of any kind. Details are in our Cookie Policy.

8. Log data

Like most services, our servers keep short-lived technical logs (IP address, browser type, date/time, requested page) used only for security, abuse prevention and debugging. Logs are not used for advertising or profiling and are routinely deleted.

9. Your data protection rights

Depending on where you live, you have rights under India's Digital Personal Data Protection Act (DPDP Act, 2023), the EU/UK GDPR, and the California CCPA/CPRA. On MILAN these rights are built into the product:

• Access / portability — your content already lives in your own Decentralized Web Node; you can request a full copy of your account data.
• Correction — you can edit your profile and posts at any time.
• Erasure — you can delete posts yourself, and request full account deletion.
• Objection / restriction — you can restrict visibility of any post (private / shared / public).
• No sale of data — we do not sell personal data, so there is nothing to opt out of under CCPA.

To exercise any right, email [email protected]. We respond within 30 days. You also have the right to complain to your local data protection authority.

10. Children

MILAN is not intended for users under the age permitted by their local law. We do not knowingly collect data from children.

11. Changes

As MILAN evolves we may update this policy. Significant changes will be reflected here with an updated date.

12. Contact

Questions about privacy? Email [email protected]. MILAN was founded by Nitesh Pandey and is hosted at milanlife.in.