this post was submitted on 18 Nov 2024
2 points (58.3% liked)

Privacy

4328 readers
707 users here now

A community for Lemmy users interested in privacy

Rules:

  1. Be civil
  2. No spam posting
  3. Keep posts on-topic
  4. No trolling

founded 2 years ago
MODERATORS
iopq
2
Why does this instance have kind of a lame data retention policy...? (self.privacy)
submitted 3 weeks ago by ComradeMiao to c/privacy
3 comments fedilink hide all child comments
 

"We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us keeping your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible."

top 3 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 3 weeks ago (1 children)

That's actually very boilerplate and tame compared to what Lemmy actually does with your data...

[–] ComradeMiao 1 points 3 weeks ago (1 children)

I admit that seemed scary at first but Lenny responded https://github.com/LemmyNet/lemmy/issues/2977

They make a good point that why would this matter when we are posting on a public forum that is cached by Google, among others.

I don’t like personal private information retained. It seems they do federate deletion based on this response.

Thanks for commenting this though! I had never considered or read about it before

[–] [email protected] 0 points 3 weeks ago

There are a few good points in that response and a few I don't. They also concede a couple points, and complain about somebody who reposted that article (but not the original author I linked, thankfully).

To address your question: For example, sure, maybe Google does cache data but...

  1. It's probably better to have data in two places deleted from one place (Lemmy) instead of neither place
  2. Google allows you to specifically request removal of caches anyway
  3. Canonizing deletion of data probably has legal and tech benefits. (I'm not a lawyer, but deletion after a reasonable retention rate probably will help server administrators more than it hurts them, and it certainly helps the users.)