Recently, I downloaded my data archive and found that the auth_token_logs.csv file contains all my IP addresses from the past three years. Unfortunately, my real IP address was exposed a couple of times, which could indirectly reveal my physical location. I have a few questions about this: Visibility of IP Addresses: Are these IP addresses accessible to admins and moderators through their dashboard? Can they view them outside the database? Data Removal: Is there a way to permanently delete all such data? Can this be done via the API? If I delete my account and recreate it, will this remove the IP logs as well? Reaching out to admins or moderators isn’t an option, as they are the ones I want to avoid sharing my data with. I believe the forum is hosted on Discourse’s managed hosting, as all images are served from discourse-cdn links. Does this mean the database is fully controlled by Discourse, and the forum admins have no access to it? Is this a safe assumption?

Hi there, you may want to take a quick read of How to delete all IP addresses? to see where IP addresses are (and could be) stored.

[imagem] arandomstranger: Does this mean the database is fully controlled by Discourse, and the forum admins have no access to it? Is this a safe assumption? No, that is not a safe assumption. The forum admins could: use the data explorer plugin to query the database create and download a backup and extract it somewhere else

@NateDhaliwal The forum in question is hosted by discourse. From what I have gathered: Admins and mods can directly see initial signup I.P and last I.P on the dashboard. User data can be downloaded by any admin or mod on the dashboard, which exposes the entire I.P history for any user.

[imagem] arandomstranger: Are these IP addresses accessible to admins and moderators through their dashboard? Can they view them outside the database? yes, sometimes this is necessary if a user needs to be blocked at the IP level (often spammers), if someone creates sockpuppet accounts, etc [imagem] arandomstranger: Reaching out to admins or moderators isn’t an option, as they are the ones I want to avoid sharing my data with. There is no other way for a user to delete this data. You must contact the admins.

[imagem] arandomstranger: Reaching out to admins or moderators isn’t an option, as they are the ones I want to avoid sharing my data with. Back to my general #1 rule: if you don’t trust a forums admins, don’t become / stay a member of that forum.

If you are concerned about IP sharing on the Internet, you are best to use things like VPNs & private browser windows. There maybe other types of up masking services.

Como posso apagar todos os meus dados de usuário PII?

Suporte ao Produto

RGJ (Richard - Communiteq) 17 Dezembro , 2025 21:57 6

Voltando à minha regra geral nº 1: se você não confia nos administradores de um fórum, não se torne / permaneça membro desse fórum.

Tópico		Respostas	Vistas
How to delete all IP addresses? Product Support	3	264	8 Junho , 2025
Does "Delete User" remove IP addresses from everywhere? Product Support gdpr , privacy , anonymization	1	283	10 Setembro , 2024
Data retention claims in default privacy topic Product Support	6	1099	30 Março , 2026
Using Discourse without IP logins Product Support privacy	0	107	8 Junho , 2025
Privacy feature request: disabling or hashing logs (using cryptolog or similar) Feature privacy	4	2347	14 Janeiro , 2017

Como posso apagar todos os meus dados de usuário PII?

Related topics