this post was submitted on 02 Mar 2026
19 points (78.8% liked)

Fediverse

40707 readers
430 users here now

A community to talk about the Fediverse and all it's related services using ActivityPub (Mastodon, Lemmy, Mbin, etc).

If you wanted to get help with moderating your own community then head over to !moderators@lemmy.world!

Rules

Learn more at these websites: Join The Fediverse Wiki, Fediverse.info, Wikipedia Page, The Federation Info (Stats), FediDB (Stats), Sub Rehab (Reddit Migration)

founded 2 years ago
MODERATORS
 

In other words, can any user delete its data on its will and is there something that will remove its data from all the connected activitypub services? I believe this should actually be a basic feature and pretty much a requirement.

top 24 comments
sorted by: hot top controversial new old
[–] Zak@lemmy.world 2 points 1 hour ago

Well-behaved server software honors delete requests, but there are a bunch of ways for that to fail without anyone doing anything malicious:

  • If your instance shuts down, there is no way for you to generate delete requests
  • If a server admin has to restore a backup from before your request, the deleted data will be restored
  • Immature or experimental software may not work as designed; Lemmy itself has a version number starting with 0
  • Archiving services may keep snapshots of pages from fediverse servers; here's your user page on lemmy.world on archive.org
  • Fediverse servers often make content available by RSS, and RSS clients may store that content; there's no way for them to receive a signal that it should be deleted

And then there's malicious activity. It wouldn't be hard to run a server that speaks ActivityPub, subscribes to a bunch of stuff, pretends to honor delete requests, and actually keeps everything.

Deletion will always be unreliable on the fediverse as long as it runs on technology that looks anything like current implementations.

[–] fuckwit_mcbumcrumble@lemmy.dbzer0.com 52 points 5 hours ago (1 children)

No, not at all. Any data that is federated out assume it's impossible to delete. Sure you can delete stuff from the original server, but will the federated ones obey the request? Or even get the request in the first place?

Nothing you post on social media should have any expectation of privacy.

[–] rimu@piefed.social 15 points 5 hours ago (2 children)

You are technically correct but the fact is that 99.9% of federated activities, including delete requests, are processed normally and in the expected way. That is not "impossible to delete" that is "will be deleted except in exceptional circumstances".

[–] homesweethomeMrL@lemmy.world 4 points 3 hours ago

So deleted everywhere except in the places you most wish it was deleted.

[–] GlenRambo@jlai.lu 4 points 4 hours ago (1 children)

What happens with servers that are defederared. Is that one of the 0.01%?

[–] rimu@piefed.social 5 points 3 hours ago (1 children)

Good question!

PieFed sends delete requests to every known server, including defederated ones. I've seen a ton of delete requests from Mastodon too, for accounts that don't exist on PieFed so it looks like Mastodon does that too. No idea about other fedi platforms.

[–] nomy@lemmy.zip 5 points 3 hours ago (2 children)

I'd be willing to bet there's archiving going via software/servers that don't obey deletion requests.

Anything federated is public information.

With how Lemmy handles deleted posts (and nuking access to the comments) I'm probably gonna make my own removeddit for Lemmy.

[–] admin@scrapetacular.ydns.eu 2 points 3 hours ago

There's definitely a bot with a user agent like "fedi big data" doing some scraping in my server logs, does anyone know who that is?

[–] schnurrito@discuss.tchncs.de 16 points 5 hours ago

It's harder to delete things here than on non-federated services because everything you do here gets copied to lots of other servers, which are supposed to delete things when you do, but it's impossible to guarantee that they always will (on purpose or by mistake).

I once deleted a comment here almost immediately after saving it, but then still got multiple upvotes for it. I found out that this was because one big instance hadn't deleted it for whatever reason and its users had no idea that I'd meant to delete it.

[–] LibertyLizard@slrpnk.net 8 points 4 hours ago

Unfortunately I think it must be assumed in this day and age that any content posted online publicly may be stored indefinitely, on any platform. Even if you delete it, there are bots scraping all your comments, and you won't be able to delete from those databases. So I'm not sure how much utility this feature would have today.

[–] slazer2au@lemmy.world 14 points 5 hours ago

Don't think so. There is also nothing stopping an instance admin to patch Lemmy to ignore delete requests.

[–] Sanctus@anarchist.nexus 11 points 5 hours ago

Anything you post here is public as well as your activity through the modlog.

[–] admin@scrapetacular.ydns.eu 2 points 3 hours ago

If your instance goes down, then you have no way of deleting your federated posts on your own. So the posts on my lemmynsfw alt will be up forever.

[–] AmbitiousProcess@piefed.social 3 points 4 hours ago

Treat it similarly to how you should treat posting on any social media service.

If you make a post, that is federated to all kinds of other instances. They might process your delete request, or they might just ignore it and keep old posts stored for as long as they want. It's the same with if you make a post on Reddit, someone sends that thread's URL to the Internet Archive, and now there's a permanent record of your account there.

If you post publicly, expect it will be recorded by someone publicly viewing it, and it will not be guaranteed to be removed.

[–] birdwing@lemmy.blahaj.zone 2 points 5 hours ago (1 children)

Basically, the right to be forgotten? Afaik, on Reddit you have scripts to erase all message and rewrite/redact them with nonsense.

I assume something similar may exist for Lemmy, Piefed, etc.

[–] dontblink@feddit.it -4 points 5 hours ago* (last edited 5 hours ago) (3 children)

I believed we were better than Reddit.. I truly believe this should be a BASIC feature. On Reddit you have to manually delete every single post, if you forget to do that basically your entire posts and comments history will be online forever..

I know there's still internet archive ecc ecc ecc, but still I believe this should just be an activitypub feature, not something to be managed by single platforms.

[–] rglullis@communick.news 9 points 5 hours ago

Asking to delete data that you published on the public internet is the same as asking for water to be not wet.

Don't fall for the illusion of privacy that the proprietary networks give you: there are people that copy data from reddit just for the fun of it. Always assume that anything you publish online is publicly available.

[–] TheJesusaurus@piefed.ca 5 points 5 hours ago

Why? It's all public information. If a central authority COULD delete all your posts and erase your existence, that would be bad

[–] rimu@piefed.social 4 points 4 hours ago

It is a basic feature and it does work. Except in rare cases.

[–] HubertManne@piefed.social 1 points 5 hours ago

The only really important thing is the user account and it should never cave info about ip address or such that is connecting to it.

[–] meldrik@lemmy.wtf 0 points 4 hours ago (1 children)

Yes, all data on your account can be deleted, by deleting your account.

[–] frongt@lemmy.zip 3 points 3 hours ago (1 children)

Except what has been federated. There is no guarantee any server honors that request.

[–] meldrik@lemmy.wtf 1 points 3 hours ago

You mean publicly made comments? If if all servers honoured the delete request, there’s no guarantee that the comments are not saved somewhere else.

Data like IP, email etc. is deleted.