Federated services have always had privacy issues but I expected Lemmy would have the fewest, but it’s visibly worse for privacy than even Reddit.
- Deleted comments remain on the server but hidden to non-admins, the username remains visible
- Deleted account usernames remain visible too
- Anything remains visible on federated servers!
- When you delete your account, media does not get deleted on any server
One thing that mastodon does is proxying all the media from the federated servers, lemmy does not do this… (yet)
For example on this comment page there are 9 domains trying to connect directly to me according to ublock origin. I suggest blocking all third party requests on your instance using ublock origins advanced mode because the website works fine without them, it might be mostly avatars?
ublock origin isn’t a firewall. They aren’t connecting inbound to your system, you are loading content from those servers.
Wait, I thought your instance will copy the media as well? For example, the image from this kbin post is also hosted by your instance here: https://lemmy.one/pictrs/image/a52b7c5e-2dcf-4864-b737-33228fb565b0.png