Passwords are definitely hashed unless it is a modified version of software, that does the opposite. Also, yes, IP and port number can be easily gathered from pretty much any https requests. Other than that it doesn't seem that instances collect any other additional info unlike Reddit, that aggressively does browser fingerprinting.
Recently it became a little bit to expensive to buy a separate computer for this purposes, so I would like to see some alternatives(if they exist) before spending money on a small server.
That is insane.