Notes on privacy and data collection of Matrix.org

In this document, we will attempt to answer the following questions:

To do so, we will follow the most common setup and the ones recommended by Matrix.org itself for self-hosting:

Matrix.org only gives self-hosting recommendations for client, Home and Identity server, a full Matrix stack also include several other items. Riot therefore uses, by default, a for-profit service that has no related privacy policy, sharing Personal Identifiable data with a 3rd-party without informing its users, while relying on the trust of a Matrix.org recommendation. While Matrix.org does not recommend self-hosting Identity servers, they deal with several key behaviours and personal identifiers:

Control of the and/or server allows several Denial of Services in terms of blocking 3PID associations and finding other people.

Source: gist.github.com