Has anybody considered the idea that boosts from non-Meta properties to Threads could legally be used to build ad profiles? We already know they do that sort of account association with non-fedi accounts.
EDIT: Looks like that's absolutely the plan. From the privacy policy
"Information From Third Party Services and Users: We collect information about the Third Party Services and Third Party Users who interact with Threads. If you interact with Threads through a Third Party Service (such as by following Threads users, interacting with Threads content, or by allowing Threads users to follow you or interact with your content), we collect information about your third-party account and profile (such as your username, profile picture, IP address, and the name of the Third Party Service on which you are registered), your content (such as when you allow Threads users to follow, like, reshare, or have mentions in your posts), and your interactions (such as when you follow, like, reshare, or have mentions in Threads posts).
We use the information we collect for Threads for the purposes described in the Meta Privacy Policy, including to provide, personalize, and improve Threads and other Meta Products (including seamless personalization of your experience across Threads and Instagram), to provide measurement, analytics and other business services (including ads), to promote safety, integrity and security, to communicate with you, and to research and innovate for social good."
https://help.instagram.com/515230437301944?helpref=faq_content
I don't fully understand—would Meta be able to serve you targeted ads based on your non-Threads fediverse activities? Where would these ads appear? How do they know it's you just from your fediverse accounts?
No they would associate your boosts and likes from your fedi accounts to existing known (some Facebook or Instagram based) ad profiles. Here's an article about that as a practice: here. That info would then be used in pretty much every location that you already see targeted ads, folding you into the existing Meta ad machine without you ever agreeing to a TOS or making an account.
That only works if your profile can be matched to an ad profile.
Which is not that hard, it's called fingerprinting. If your browser's fingerprint is unique they can identify you wherever you go.
But they can't fingerprint you on your home instance. If you don't use threads they will have a hard time.
From what I understand, those shadow profiles are based on information that Meta gets about you from other users, or through things like cookies and tracking pixels.
Suppose that Meta builds a shadow profile for each fedi user, then how would they link it back to you? They cannot get your IP address from just being federated with your home server, and they cannot inject a tracking pixel to your server's website. Is there another way that they could use your fedi activity to serve you targeted ads?
They could only create a correlation if you let them. If your username is cryptic a ough and you don't link to all your other social media it will be hard to profile you. And the ads would be on platforms where they can serve ads.
I absolutely do not think you can avoid the big social ad complex with a cryptic username.
I don't know how they would profile you? They don't have your IP and Lemmy doesn't have trackers. Still it's best to not post stuff that you don't want everyone to know. And don't misunderstand me: I hate that everyone tries to monetize me but that is the world we live in. I don't know how to change that so I stop moaning.
They do explicitly track your IP. Check the privacy statement listed in the OP.
Edit: Lol the way to change that is literally solidarity. They don't have a god given right to monetize our existence.
Meta can't track your IP if you post from your home instance. They don't have access to that.