Pretty much wanted to say similar. Ip address isn't known beyond your local instance (and any retention time and purposes should be stated in their privacy policy).

The rest is standard data any federation app will collect upon seeing content from a user.

It's also worth noting that in general the user URL (which provides this user data) is generally also public. So if you know the user url you can get this too.

Having said that, I do wonder how much they can monetize third party data about people that have not agreed to their privacy policy that grants such uses. It'll be interesting to see.