Then message the server admins or you create a PR on the lemmy github page with the missing information. The missing legal footnotes is an issue you have to take up with them or the upstream lemmy repo on github.

I’m also no expert, just trying to learn more about the topic as it’s kind of interesting to see how other people are interpreting it.

Receive users’ consent before you use any cookies except strictly necessary cookies.

Wouldn’t the auth cookie fall into the strictly necessary category?

https://lemmy.world/legal

There is only one cookie present when I inspect the Cookies with my browsers dev tools. Which seems to be the auth token for my account.

I agree, there is definitely work to be done regarding compliance.

But this won’t be shared or processed outside of the instance as far as I can tell.

At least use the whole sentence when quoting to avoid confusion.

Looking through the activityStreams definition it seems only Usernames are shared (https://www.w3.org/TR/activitystreams-core/#actors), which is already personal Data according to another comment (https://lemmy.world/comment/929906)

Disclaimer: I have no law degree and everything in this post is speculative.

After reading up on GDPR (https://en.wikipedia.org/wiki/General_Data_Protection_Regulation) it deals with the transfer of personal data to entities outside the EU or EEA for processing. The definition of personal data would be the main point to see if/how GDPR is applicable to lemmy instances. (https://en.wikipedia.org/wiki/Personal_data)

Your IP address and EMail address could be classified as personal data from my point of view. But this won’t be shared or processed outside of the instance as far as I can tell. If your username and associated posts are classified as personal data I can’t say, but there seems no connection of these to your IP or Mail outside the instance. According to this TechDispatch (https://edps.europa.eu/data-protection/our-work/publications/techdispatch/2022-07-26-techdispatch-12022-federated-social-media-platforms_en) the instances still must adhere to GPDR, but as there is not much or no processing of personal data taking place this should pose no issue.

All of this is based on a bit of research, so please enlighten me if I made any mistakes.

I didn’t mean to pretend that this will be any different. My hope is, that there will be some people who will see that there is an alternative to big tech and maybe drop Threads in favour of a real fediverse instance.

Yeah there is more content on Reddit or FB/IG, but that doesn’t mean, that the content there is useful to users in the fediverse.

The reactions you are seeing are based off of Metas history. We will see how it works out.