The default privacy_topic includes: Retain server logs containing the IP address of all requests to this server no more than 90 days. Retain the IP addresses associated with registered users and their posts no more than 5 years. I’m pretty sure that the first of these refers to nginx and rails logs that are rotated in the container. I’m not quite sure what “IP addresses associated with registered users and their posts” means, but I don’t see any evidence that these get removed from the database. Is this a promise to delete the registration IP after some time? Or is it about users and post, so it would refer only to something in the posts record (I dont’ see anything there?)

Hmm so I guess we should add a daily job that deletes the registration_ip_address from the user after the account is 5 years old?

I actually didn’t see this topic when I created mine. However, it would be advisable to know exactly to know these things .. on the other hand you did the forum software, so you should know that i suppose.. it’s important per privacy policy, legally speaking.

I am reviewing the privacy policy on my new self hosted discourse. The policy out of the box says - * Retain server logs containing the IP address of all requests to this server no more than [NUMBER OF DAYS] days. Is there a setting in discourse to remove the logs after a certain number of days? I am not even sure how many days it should be kept for legally. We will have worldwide users in the forum. Could someone point me in the right direction please?

Is this IP deletion already done automatically by Discourse or do I need to set something up? Are there instructions somewhere or do I need to go figure this out myself?

IP detection is already done IIRC. It’s in the user’s Admin page. However, IP lookup needs to be done manually. You can set it up by filling in the Maxmind details in your app.yml file.

Data retention claims in default privacy topic

Product Support

pfaffman (Jay Pfaffman) October 22, 2021, 7:06pm 3

That’s what the document seems to imply.

I don’t know if there are other places that an ip might be.

Topic		Replies	Views
Default IP log retention time Self-hosting hosting	3	2313	October 5, 2023
How to customize the no of days in Data retention policy? Product Support	2	660	September 19, 2023
Possible to remove signup ip? Product Support privacy	4	1251	March 19, 2018
Purging old IP logs? Product Support	2	748	January 26, 2019
Does "Delete User" remove IP addresses from everywhere? Product Support gdpr , privacy , anonymization	1	287	September 10, 2024

Data retention claims in default privacy topic

Related topics