Where your data lives

All data is stored exclusively in Infomaniak’s own data centers in Geneva and the canton of Vaud, Switzerland. It never leaves Swiss infrastructure. Infomaniak is 100% Swiss-owned and operates its own hardware — your data is never on AWS, Google Cloud, or any US-based infrastructure.

Encryption

All data is encrypted at rest using AES-256 and in transit using TLS 1.3. Your password is never stored — only a bcrypt hash (cost factor 12) that cannot be reversed. Photos and videos are stored in private object storage and served only via signed, time-limited URLs that expire automatically. Nobody can hotlink or scrape your media.

Who can access your data

Only you and the people you are tied with can see your posts. Knot’s team cannot read your posts or messages. Infomaniak maintains the physical servers but cannot access application-level data. No third party — advertiser, analytics company, or data broker — ever receives your data.

What we collect

We collect only what is necessary: your username, hashed password, optional recovery email, your posts, media files, and tie relationships. That is it. No IP logging, no device fingerprinting, no behavioural analytics, no ad tracking pixels, no cookies beyond your session token. We do not sell, share, or monetise your data in any form.

Legal jurisdiction

Your data is protected by Swiss law (FADP — Federal Act on Data Protection) and EU GDPR. Switzerland is formally recognised by the EU as providing adequate data protection. Crucially, Swiss law is outside the reach of the US CLOUD Act and FISA surveillance orders. Any government request for your data requires a formal Swiss legal process, which Knot will publish in a transparency report.

Deletion

When you delete a post or cut loose from Knot, data is permanently deleted from our database and storage immediately. There are no soft deletes, no hidden archives, and no backups that preserve deleted content. What you delete is gone.