Yea they keep all the data. I deleted everything on my account when the whole shitshow happened and then GDPR requested the data associated with the account and it was all still there. And when I requested that they delete that too they outright refused.
I been banning the accounts (and removing everything they have posted) as I randomly come across them/they get reported. So if you report the account everything will get removed as soon as I see it. They been spamming from other instances not just eviltoast.org tho.