this post was submitted on 19 Jun 2023
122 points (100.0% liked)

Technology

37705 readers
209 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 2 years ago
MODERATORS
 

Federated services have always had privacy issues but I expected Lemmy would have the fewest, but it's visibly worse for privacy than even Reddit.

  • Deleted comments remain on the server but hidden to non-admins, the username remains visible
  • Deleted account usernames remain visible too
  • Anything remains visible on federated servers!
  • When you delete your account, media does not get deleted on any server
you are viewing a single comment's thread
view the rest of the comments
[–] Pulp@lemmy.dbzer0.com 5 points 1 year ago (1 children)

From what I understand instance 1 has to delete data if requested, but instance 2 has no obligation to unless requested. Just like data remains archived in sites like internet archive or other private archives. Just like it works on reddit or any other site currently.

[–] philpo@feddit.de 1 points 1 year ago

Yes and no. The Web achieve and other data scrubbers are seen differently here as the data collection is done involuntarily. E g. your website will get crawled by the Web Achieve if you want it or not and it is doing it by using the same method a intended user does.

This cannot be applied to a federated instance where content is voluntarily transfered via the Federation interface. This makes the first data collection operator liable for securing the rights of the data owner and to get a processing agreement with the data processing operator that it transfers data to.