If at some point you want to delete your account and have your posts and comments be gone, you better delete it all manually before you actually delete the account, because that deletion process does not really work as advertised.
For my main account on world (which runs an outdated lemmy version), it seemed like at least the account deletion was federated so that my user page was no longer browsable from other instances, but none of my posts, comments or images had been deleted, not even on the home instance.
The homie @MrKaplan@lemmy.world helped me by manually deleting my stuff, but it seems like that has only worked for the home instance, posts and comments seem to still be readable from other instances (except for some of the images that MrKaplan manually deleted too, but that was only possible up to a date not too far in the past because lemmy used to not associate user uploads with the accounts). So my old posts from the world account can be viewed just fine from other instances:
For other instances that are more up to date the process is even worse imo, while locally things seem to get deleted, federation does not seem to happen at all. For example you can still browse my deleted slrpnk or lemmee accounts from other instances just fine:
https://slrpnk.net/u/achtungdrempels@lemm.ee
https://lemm.ee/u/AchtungDrempels@slrpnk.net
Account deletion in piefed works kinda like the old lemmy system (as on lemmy.world), and nothing gets deleted except the user page (which also seems to get federated), the posts and comments stay up.
Thought this would be interesting to some, if i had known what a mess this would be (obviously expected some federation issues, just not like that), i would have manually deleted everything. I deleted all these accounts in December, maybe this has been addressed somehow in the meantime, personally i’d have trust issues in this process.
Probably a technical consideration (like what if they have an edit timestamp which would allow a dedicated person to find all the comments unlinked at the exact same time), a personal consideration (what if you actually want that information purged as thoroughly as possible), and a legal consideration (sounds like it violates the GDPR)
Tl;dr: Yes, it’s complicated.
Hmmh. I think 1) just means it has to be implemented properly. But you’re right. That sounds exactly like something a developer would do. Unlink the information and at the same time add a timestamp that immediately links it again 😅
And I’m not sure about 3) I’d have to read the GDPR again. Afaik it just mandates the user is provided with the ability to do so. Not that it needs to be the default.
And 2) is kind of my question. I suppose a user who is about to delete their account, might not be super relaxed and ready to deal with the intricate details. I mean they could be pissed and want out asap. Or something happened and they need to get it over with, quickly. Either way, it’s probably not the right time to bother them with 500 questions and make them learn about the consequences. Though… They need to do the right thing. Once their account is gone, and it turns out they would have liked to delete more (or less), that’s not really possible any more (without manual admin intervention). So maybe it’s down to: delete everything in any case, and accept that it has a negative effect on the content on the platform.
It also has to be balanced with handling abuse etc since malicious actors use the same features to cover their tracks.
But I’m probably getting way ahead of where we are. OP said deletion doesn’t even propagate through the federated network correctly. So realistically, we probably don’t need to bother with the details several steps down the line.