In regards to the recent GDPR discussions, here is the Mastodon Privacy Guide V.1.0, which provides some advice and guidelines to instance admins ( github.com )