EDIT: An example that comes to mind is the ongoing copyright infringement news that the IP addresses of Reddit users discussing piracy should be given up to film studios. Do Lemmy users have any kind of protection when lawyers come knocking?

If provided with a court order, we could theoretically provide:

• Email address
• Record of all comments / posts made by the user
• Incoming/outgoing DMs for the user
• Voting activity made by that user
• Communities subscribed to

(I think that's everything off the top of my head)

IP addresses are not logged in the db or linked to a user, but if the RCMP shows up with a warrant and says "We want all IP addresses that submitted a comment at 09:11:43am PST Jan 16 2024" then I'd be able to get that from the access logs. Access logs are only stored for 14 days and then purged, DB backups are taken daily and stored for 30 days.

Lemmy is pretty light on activity logging, I'm not aware of anywhere that records user IPs. They also made some changes in a recent patch that moved user IDs from a get to a post variable, so I don't think there's a way to correlate hits in the access log with a particular user ID. (I haven't looked into this in a few months, so my info might be slightly wrong)

Basically what we can see is any content you post, even if it's a private DM (or one you received). We can also see all your voting data.