Security & privacy at Skriza
Digital sovereignty means full control over your own digital space — uncompromising, and without backdoors. This page explains how Skriza protects your data, where it lives, and why our algorithms have nothing to hide.
GDPR — and beyond
We don't just meet the legal requirements, we exceed them. Privacy isn't a feature bolted on afterwards — it's the foundation. Every product decision starts with privacy by design and data minimisation: we collect only what the platform genuinely needs, and nothing is repurposed behind your back.
EU cloud sovereignty
Accounts, posts and media sit on infrastructure we operate ourselves in Europe, governed by European law — no US hyperscaler, no dependence on foreign cloud acts. One exception, stated plainly: a US-based CDN sits in front of the site to absorb attacks. It is named in our privacy notice, and we want to solve it in Europe before production. Analytics used to be the second exception; since July 2026 it runs on our own servers.
Transparent algorithms
No hidden manipulation, no black box. We publish what the public feed rewards: a reply counts for more than a like, and a view counts for nothing — rewarding views is what makes a feed optimise for attention. What we withhold are the thresholds of the anti-abuse checks, because those only help someone stay just below them. Your home feed stays chronological, because following someone is a decision no algorithm should overrule.
No surveillance advertising
Skriza does not build shadow profiles and does not sell your behaviour. Advertising, where it exists, is strictly vetted, contextual and never targeted at children. No dark patterns and no consent theatre: there is no cookie banner, because nothing we run needs consent.
Hardened against abuse
Bots, spam and coordinated manipulation undermine trust. Skriza Shield — our own EU-hosted verification layer — protects sign-ups and sensitive actions without shipping your data to third-party captcha providers.
Your data stays yours
During the closed beta, export and deletion run on request: message us and we carry it out by hand, normally within a few days. Building them into the interface is part of getting to launch. What we already guarantee is the outcome — deleted means deleted, never archived for resale.
At a glance
- Core data on EU servers, legal venue in Europe — the one US service we still use, the CDN, is named in the privacy notice.
- Privacy by design and data minimisation as engineering principles.
- Public feed ranked by published principles; anti-abuse thresholds deliberately not published.
- No surveillance advertising, no shadow profiles, no dark patterns.
- Own EU-sovereign bot protection (Skriza Shield) instead of third-party captchas.
- Export and deletion on request during the beta, handled by hand; GDPR rights honoured either way.