This website has webmention support since it launched. It was one of the features I defined as a requirement. When you link to this site (an you support webmentions as well) I'll get a notification automatically. In addition I could always have used brid.gy or other solutions to pull in likes, retweets and other stuff from social silos. With that I would be able to display details of these mentions underneath each post, note or photo.
I was always intrigued to add support for this feature. It looks so nice, active and community driven on sites that use it. Users can see which articles got liked and even more interestingly which discussions grew out of the original post.
The thing is: I did make the careful decision (actually multiple times) that I don't think it's correct to publish them here. Users on e.g. Twitter will not know that they end up here. Indexable and stored "forever". Who am I to store data without telling publishers about this. With the case of Twitter I actually through about mentioning the user automatically, but… seriously? »tobiastom.name published your like about…«.
In the recent days an excellent article from Sebastian Greger crossed by feed reader multiple times: The Indieweb privacy challenge (Webmentions, silo backfeeds, and the GDPR). Today I finally found the time to read it and I could not agree more with what he writes.
… while the idea behind pulling in the social backfeed is about “owning the conversation” around my content, an Indieweb site is at the same time also taking ownership of other peoples’ content, expressions and conversations – this comes with responsibilities.
“unliking” a tweet later will not reliably remove it
That is exactly the reasoning why I don't show third party content here. I don't want the responsibility of other people’s data. They keep theirs, I'll be busy taking care of mine.
The more people complain about the GDPR, the more I like it. I actually enjoy that people have to think about this stuff. It's not only about what's legally ok to do, but also about your own reasoning behind all that. If nobody reasoned with this things before, the GDPR is a good start to force them to. It's a little bit sad that we need a law for this, but that seems to be how things are. People don't seem to think when there are no implications for themselves.