Deletion flag instead of physical deletion

To make it easier to recover unintentionally or unauthorized deleted data and also for auditability (e. g. in legal cases), profiles, messages, comments and photos should get a deletion flag instead of being physically deleted. This also avoids that a federated pod accidentally recreates an already deleted comment when it receives an older version for any reason.

It also prevents users from physically removing their data. I’d just like to mention that privacy and “Own your own data” are key features that we promote.


Good idea but only in conjunction with a to be discussed retention period.
Proposal: 4 weeks after notification mail to owner.