How can I delete all of my PII user data?

Product Support

AI-generated summary

A user, arandomstranger, is concerned about their IP addresses being stored in the auth_token_logs.csv file within their data archive, fearing exposure of their physical location. They ask whether admins/mods can view these IPs via the dashboard or outside the database, and whether they can permanently delete this data — including via API or account deletion. They also question whether Discourse-hosted forums mean admins lack database access — a notion RGJ refutes, noting admins can use Data Explorer or backups to access such data. NateDhaliwal directs them to a meta topic on IP deletion. arandomstranger confirms admins/mods can see signup and last IPs, and can download full IP histories. awesomerobot confirms IPs are visible to admins when needed for moderation (e.g., blocking spammers or sockpuppets), and states users must contact admins to delete such data — the only available method. RGJ advises that if users don’t trust admins, they shouldn’t join or remain on the forum. Heliosurge suggests using VPNs or private browsing to mask IP exposure online. The consensus is that user-controlled deletion of IP logs is not possible without admin intervention, and users should consider their trust in forum admins before sharing data.

1

Recently, I downloaded my data archive and found that the auth_token_logs.csv file contains all my IP addresses from the past three years. Unfortunately, my real IP address was exposed a couple of times, which could indirectly reveal my physical location. I have a few questions about this:

  1. Visibility of IP Addresses: Are these IP addresses accessible to admins and moderators through their dashboard? Can they view them outside the database?

  2. Data Removal: Is there a way to permanently delete all such data? Can this be done via the API? If I delete my account and recreate it, will this remove the IP logs as well?

Reaching out to admins or moderators isn’t an option, as they are the ones I want to avoid sharing my data with.

I believe the forum is hosted on Discourse’s managed hosting, as all images are served from discourse-cdn links. Does this mean the database is fully controlled by Discourse, and the forum admins have no access to it? Is this a safe assumption?

2

Hi there, you may want to take a quick read of How to delete all IP addresses? to see where IP addresses are (and could be) stored.

3

No, that is not a safe assumption. The forum admins could:

  • use the data explorer plugin to query the database
  • create and download a backup and extract it somewhere else
4

@NateDhaliwal

The forum in question is hosted by discourse. From what I have gathered:

  • Admins and mods can directly see initial signup I.P and last I.P on the dashboard.
  • User data can be downloaded by any admin or mod on the dashboard, which exposes the entire I.P history for any user.
5

yes, sometimes this is necessary if a user needs to be blocked at the IP level (often spammers), if someone creates sockpuppet accounts, etc

There is no other way for a user to delete this data. You must contact the admins.

6

Back to my general #1 rule: if you don’t trust a forums admins, don’t become / stay a member of that forum.

7

If you are concerned about IP sharing on the Internet, you are best to use things like VPNs & private browser windows.

There maybe other types of up masking services.