Fedora considers "privacy-preserving" telemetry

The proposed data collection is indeed anonymous and does not include any of the data points you mention. The metrics system goes beyond this and is designed to make it impossible to tell whether two separate data points stored on the server came from the same computer or not.

Data lifetime is a great question. Right now there is no automatic retention policy (though the server admin can of course manually remove older data). This would be a great area to improve.