Federated services have always had privacy issues but I expected Lemmy would have the fewest, but it’s visibly worse for privacy than even Reddit.
- Deleted comments remain on the server but hidden to non-admins, the username remains visible
- Deleted account usernames remain visible too
- Anything remains visible on federated servers!
- When you delete your account, media does not get deleted on any server
From what I understand instance 1 has to delete data if requested, but instance 2 has no obligation to unless requested. Just like data remains archived in sites like internet archive or other private archives. Just like it works on reddit or any other site currently.
Yes and no. The Web achieve and other data scrubbers are seen differently here as the data collection is done involuntarily. E g. your website will get crawled by the Web Achieve if you want it or not and it is doing it by using the same method a intended user does.
This cannot be applied to a federated instance where content is voluntarily transfered via the Federation interface. This makes the first data collection operator liable for securing the rights of the data owner and to get a processing agreement with the data processing operator that it transfers data to.