In my opinion a very privacy invasive feature. It is also very problematic if it can not be turned off because IP addresses are considered personal data under GDPR.https://github.com/misskey-dev/misskey/issues/7840#issuecomment-1163989778
Me: "GDPR? I thought Misskey stopped registration from non-JP countries because the service could not comply with GDPR(to be specific, Misskey is not capable of following everything stated under the Right to Erasure section of GDPR).
…wait a minute, what's this?
(comment by Johann150)
I am not a legal expert, but please also note that deletion in GDPR only includes 'personal data'. So not everything has to be deleted, only data that can be traced back to a specific person. So I think only keeping the username could be in compliance with GDPR. It always depends on if the data is "personal data". For example, protonmail.com says they do not use an email address again even if it is deleted. So they also have to keep a list of deleted user accounts.https://github.com/misskey-dev/misskey/issues/7342#issuecomment-910241969
Why I think only partial deletion (for example setting most fields to empty string) would be okay: Article 17 (right to erasure) only applies if there is no legal basis for processing. In this case I believe that keeping for example a copy of the username would be a "legitimate interest of the data controller" (Article 6 Section 1 Letter f GDPR).
Huh. I did not know about this. So Misskey is GDPR compliant now?
RE: https://p1.a9z.dev/notes/91u9qh1mdc
