Pixelfed is a decentralized, federated (ActivityPub) photo-sharing platform, created by Daniel Supernault ('Dansup') and run as a network of independently-operated servers rather than one company. The default Privacy Policy shipped with the software -- explicitly adapted from Mastodon's -- discloses standard account collection (username, e-mail, password, optional profile fields), IP-address logging at login with up to 12 months' retention, cookie use for session/preferences, and a stated no-sell policy for personally identifiable information. Because it is federated, a server's public and followers-only posts are delivered to and copied on the servers where followers reside, a structural sharing surface outside any single operator's control. The codebase is AGPL-3.0 licensed on GitHub with over 13,000 public commits. Unlike Mastodon, which is run by a registered German nonprofit (Mastodon gGmbH), no filed legal entity for the Pixelfed project itself was found in this research -- the creator is publicly named on the project's own about page, but that is a personal identity, not a registered organization. Vulnerability reporting is handled by a plain e-mail contact with no published bounty program or credited-finding list.