I said a nonsense above, embedly seems to capture the avatar no matter what permissions.
How is this option at home DeDiary (Settings => general) ?Is not it on "none"?
Baloo it's not set to "none", Embedly requires API to work I believe and couldn't get it. I have Iframely API, so am using Iframely.