Free2Z values the privacy of our users above all else. Our mission is to provide a safe and private environment for fundraising and social interactions. We want to openly discuss the strengths and weaknesses of privacy on our platform, and how we're working to strike the perfect balance between user privacy and an enjoyable user experience.
Strengths
Free2Z is designed with privacy in mind. We have implemented the following features to ensure the highest level of privacy for our users:
- Peer-to-Peer (P2P) Private Donations: We facilitate private donations using Zcash, providing financial privacy for both supporters and creators.
- No Ads, No Tracking Cookies: We do not serve ads or use tracking cookies, meaning your browsing behavior remains private.
- Controlled Code and Content: We manage most of the code and content served on our platform, minimizing the risk of privacy leaks.
- Simple Account Creation: You only need a username and password to create an account on Free2Z, eliminating the need for an email address or third-party services.
- Permission-Based Embeds: Iframely only serves embeds after obtaining user permission, ensuring you stay in control of the content you view.
- No User-Level Analytics: We do not attempt to correlate external identities with profiles or content, and we do not engage in user-level analytics or logging.
Weaknesses
Despite our strong commitment to privacy, there are certain trade-offs we have made to ensure a convenient and rich user experience. These include:
- Traditional Session Management: We use a traditional username and password system, stored in a centralized database, to manage user sessions. To prevent automated account creation, we rely on Google Recaptcha.
- Lenient Content Security Policy: To allow for rich content, such as embedded images from other domains, we have implemented a more lenient Content Security Policy. This could potentially lead to tracking pixels or other privacy leaks.
- Google Cloud Platform: Our infrastructure is hosted on the Google Cloud Platform, which means Google could theoretically log or correlate data behind our backs.
Mitigating Weaknesses with TOR or VPN
The risk of malicious 3rd parties (lenient CSP, GCP) can be ameliorated by using TOR or a VPN while browsing Free2Z. These tools help anonymize your online presence and provide an additional layer of privacy. We encourage users who prioritize privacy to take advantage of these solutions to block malicious 3rd parties. Free2Z works to improve privacy while maintaining a seamless and enjoyable experience. We believe in being transparent about our strengths and weaknesses, and we welcome feedback from the community. Together, we can create a more private and secure online space for everyone.
The problem of traditional session management with username/password in a centralized database is difficult. Nearly every service that you use is based on this model of identity. But, just because it is what everyone uses for everything, doesn't mean that we can't do better.
A Vision for the Radical Decentralization of Free2Z
Free2Z is not only focused on the present but also on the future of the platform. Radical decentralization could provide a path to solve some of the current privacy challenges faced. By thinking beyond the centralized CRUD (Create, Read, Update, Delete) box, Free2Z envisions a more secure and robust platform that empowers users to take full control of their data and privacy.
Federated Content Distribution:
One way to achieve this is by implementing a federated content distribution model. This model would allow users to host their content on their own servers or trusted third-party servers. By eliminating the need for all content to pass through Free2Z, the risks associated with centralization could be significantly reduced.
This federated approach could be built on top of existing technologies, such as the InterPlanetary File System (IPFS) or the ActivityPub protocol. These technologies enable distributed storage and communication, allowing users to create, share, and interact with content without relying on a central authority.
Advantages of Radical Decentralization:
- Enhanced Privacy: By moving away from a centralized infrastructure, users gain more control over their data, reducing the risk of unauthorized access, leaks, or surveillance.
- Censorship Resistance: Decentralization makes it harder for a single entity to censor or manipulate content, fostering an open and resilient platform.
- Greater User Control: Users can choose which servers or third-party services to trust, ensuring that their data remains in their hands.
Challenges and Next Steps:
Radical decentralization is not without its challenges. Implementing a federated content distribution model requires significant development effort and poses questions about user experience, content discovery, and moderation. However, Free2Z believes that these challenges can be addressed with the help of the dedicated community.
Free2Z is committed to exploring the potential of decentralization to provide a more private, secure, and user-controlled platform. The platform invites users to join in shaping the future of Free2Z as everyone works together to create a truly decentralized and privacy-centric fundraising and social experience.
Privacyscore.org does a decent job of sniffing out the technicals.
https://privacyscore.org/site/212259/
