Threads new ‘Supplemental Privacy Policy’ (Instagram link) says they’ll collect (from fediverse users interacting with Threads users):
- Username
- Profile Picture
- IP Address
- Name of Third Party Service
- Posts from profile
- Post interactions (Follow, Like, Reshare, Mentions)
From the linked article:
“Granted, these sound like basic table stakes for federation to work well within the Fediverse. Most Mastodon servers collect roughly about the same amount of data for basic features to work correctly. But again, Meta is first and foremost an advertising and data harvesting company…”
I thought IP addresses are accessible to all 3 instances (where the account is, where the post is made, and where the post is viewed)
Otherwise it would be hard to deal with spam bots from an instance, and the only avenue would be to defederate.
The issue here is that other instances use the IP address to prevent spam and they don’t track it unless they need to
No, IP addresses of the users are only known to the instance you connect to directly / have an account on.
Spam is managed on a user account level, not user IP level.
That said, user IPs leak to other instances due to Lemmy’s incomplete image caching, but that is entirely unrelated.
Good to know :)