Can instance admins see users' history of visited post?
As we are concerned about privacy, I am curious just to understand if lemmy can be at some point exploited by someone to profile its users.
You are viewing a single comment
As we are concerned about privacy, I am curious just to understand if lemmy can be at some point exploited by someone to profile its users.
Being an admin of an instance, I can't even see my own history of visited posts. I can't verify this, but I doubt this information is being stored in the database currently.
This being said, each instance has full control over their API server and the web-based application being served, so they could add monitoring to either to gather this data. If they did this on the API end it would be undetectable. Running your own instance is the only fool proof method, otherwise you need to trust the instance operator.
Thanks for the clarification!
What if I view a thing from another instance? Would it not also be able to log that?
Each instance serves the content from that instance, so from my understanding the only thing other instances can see are subscribed communities to be able to federate posts. Upvotes/Downvotes can possibly be tracked per user as they are federated on a per-vote basis currently, though this is just something I read and don't have sources at the present.