Go2Social Docs

Appearance

Data Protection ​

WARNING

The protective measures outlined on this page apply only to the gotosocial.social instance itself. Once your posts and other data are acquired by other instances or services, they will be beyond the control of gotosocial.social. We bear no responsibility for how other instances handle such data or for any resulting consequences. For further clarification, please refer to our Disclaimer and Privacy & Security Tips (The Privacy & Security Tips are provided for informational purposes only and do not constitute any express or implied promise or guarantee).

In addition to standard data protection measures (such as TLS encryption), gotosocial.social implements the following additional measures:

Network Level ​

  1. gotosocial.social adds two X-Robots-Tag headers to all HTTP responses, with values noimageai and noai. Many AI crawlers recognize headers with these values as explicit declarations to opt out of data indexing, which helps protect your posts from being crawled and used for training AI models.
  2. We monitor requests from individual IP addresses, through either automated systems or manual review, to selectively block IPs or networks exhibiting malicious behavior (e.g., bulk crawling, malicious scanning/probing) from accessing gotosocial.social.
  3. We have enabled post-quantum TLS encryption algorithms such as X25519MLKEM768. If your client also supports these, it helps mitigate the risk of "store now, decrypt later" attacks.

Application Level ​

  1. Our indexing rules prohibit major AI, promotional, and SEO crawlers from crawling our site. Specifically, for AI crawlers, we have enabled dedicated, User-Agent-based rules to forcibly block them from crawling. View gotosocial.social's robots.txt
  2. GoToSocial's default settings support displaying "Public" visibility posts on the web. By default, posts with "Unlisted" or stricter visibility settings cannot be viewed by directly accessing their URLs via a browser.
  3. GoToSocial has implemented request rate limiting across all API endpoints. This, to a certain extent, increases the difficulty of data extraction specifically via the API.
  4. We have enabled crawler deterrance mode, which increases the cost of crawling public account pages by implementing Proof-of-Work (PoW) based verification on designated pages.