회사 소개 페이지에 언급된 통계를 제거하여 더 적절한 회사 소개 설명을 제공하려고 했는데, 이것이 불가능하다는 것을 알게 되었습니다. 이는 Discourse 플랫폼에서 기본적으로 지원하지 않는 것 같습니다.
누군가는 CSS를 사용해 우회하라고 제안했습니다. 그러나 무언가를 제거하고 싶다면 완전히 접근할 수 없어야 합니다. CSS는 단순히 콘텐츠를 숨길 뿐이며, 브라우저의 인스펙션 패널을 사용하면 쉽게 노출됩니다.
이것은 Discourse가 회사 소개 섹션을 의도적으로 수정할 수 없도록 만든 것 같은 인상을 줍니다. 이러한 설계 결정의 근거는 무엇인지 모르겠습니다. Discourse 팀이 제 사이트에서 저를 대신하여 미리 정의된 ‘회사 소개’ 페이지를 강요하고, 제가 직접 커스터마이징하여 정보를 제공할 수 있는 권한을 주지 않는 것처럼 느껴집니다. 이는 상당히 이상한 상황입니다.
여기서 우려스러운 점은 사이트 개인화 불가능이라는 번거로움을 넘어섭니다. 법을 위반하지 않으면서도 누구나 사이트의 데이터와 통계를 추적할 수 있습니다. 이는 사이트 소유자가 자발적으로 이러한 통계를 공개적으로 제공한 것처럼 보이기 때문입니다. 그러나 현실은 사이트 소유자가 이를 공개하고 싶지 않았는데, Discourse가 이를 숨길 옵션을 제공하지 않은 채 공개적으로 노출시킨 것입니다.
우리는 사이트 소유자로서 대중과 공유할 정보를 제어할 권리가 있어야 합니다. 불행히도, 현재 Discourse 플랫폼은 이 부분에 대해 어떤 옵션도 제공하지 않습니다. "Discourse의 현재 방식이 마음에 들지 않으면 사용하지 말라"고 말하는 것만으로 해결될 문제가 아닙니다. 많은 사람들이 이 문제로 인해 모르게 영향을 받고 있을 수 있습니다.
데이터 추적과 이에 따른 프라이버시 문제는 우리의 최대의 주의를 기울여야 할 심각한 문제입니다.
Even though the data is anonymous, continuous exposure of such data could, in theory, be used to infer certain trends or patterns over time. Sophisticated data analysis techniques might be able to glean more information from these data points than one might initially imagine.
The principle of data minimisation in privacy law implies that we should only collect and display the data that is necessary. If these statistics are not essential for your users or the operation of my site, I should be given the option to not to be displayed the site data and statistics. In this case, you leave me (as site owner) with no option, as you’re forcing it.
I believe you’re even breaching,
General Data Protection Regulation (GDPR) California Consumer Privacy Act (CCPA)
You’re not allowing me (as the site owner) to execute Data minimisation which are stated in those regulations and acts (which applies to both personal and anonymised data).
While these statistics are often used to foster a sense of community and transparency in a forum, I have valid reasons to consider removing or limiting access to them.
I believe it’s in the best interest of my community’s privacy to remove the statistics. So, you need to allow the forum owners to control what is shared with public or not.
I wonder how many people, both users and owners, are impacted by your forceful enforcement of these policies. It’s high time you started seriously considering improvements to data protection and privacy.
Please take these as suggestions for improving Discourse policies, some of which currently exist in a gray area, while others appear to be out of line with privacy norms. I mean to make no personal impact; my sole aim is to enhance privacy and data protection for all users.
From my understanding of GDPR (I’m not a lawyer but I was part of the small team that had to apply it at a large site before I retired) the site statistics are not personal data in any way so not covered by the regulations. I see no way to infer the identity of an individual from the statistics, so there’s no way to infer any personal sensitive data from the summary statistics.
Anonymisation can take personal data outside the regulations, and indeed many organisations use that as a way to process bulk data without having to implement the regulations for that data set - as long as they truly anonymise the data.
Data minimisation is also a good thing, but removing the data from display doesn’t minimise data. The data is still there and could be accessed by an admin.
As such if it were truly personal sensitive data, it would still be covered by GDPR just as much as if it were displayed.
By all means ask for the ability to change the About page, but don’t do it by claiming you’re breaking the law by not having that ability. To be honest, I’m intrigued at what personal information you believe could be inferred from the summary statistics that are provided? Perhaps if people could understand why you’re so worried about the data being displayed it might change our minds.
I understand that removing these statistics from public view doesn’t eliminate them from the backend and that admins could still access them. My suggestion is not about hiding data from admins, but about limiting public exposure of data.
As for what personal information could be inferred from the summary statistics, it’s more about the potential misuse of the data by bad actors, such as data scraping or unwanted analysis. While the risk is low and the data is anonymized, I believe we could offer users the peace of mind by giving them the option to hide these statistics.
I’m not claiming that we’re breaking the law by not having this ability. My point is that adding this option could be a valuable step towards promoting data privacy, which is the core ethos behind laws like GDPR and CCPA. I hope this clarifies my position and I’m open to further discussions.
Laws often have grey areas, but exploiting these ambiguities doesn’t contribute to a healthy community.
Further, may I inquire whether you’re an official member of the Discourse team or an unaffiliated member of the community?
Moreover, I would like to emphasise that the public site data is my own, even though the platform was created by Discourse. As a user (of discourse platform), it’s my preference to keep my data (statistics in my site) private and not display it publicly. I also think it’s important to note that it’s not as simple as saying, ‘If you don’t like it, then don’t use Discourse.’ There may be many other users who, unknowingly and without the option to remove their data, continue to use the platform.
Please re-read the following sentence in my last reply. thanks
I would like to emphasise that the public site data is my own, even though the platform was created by Discourse. As a user (of discourse platform), it’s my preference to keep my data (statistics in my site) private and not display it publicly.
Yes, perhaps Discourse is utilizing the gray area of GDPR and CCPA laws to collect user data or scrape information in order to measure the usage of their Discourse platform. However, I consider this sensitive site statistics data to be my own private data as the owner, and I believe I should have the option to decide whether to reveal my personal data to the public or not. This is crucial for protecting my data privacy as a Discourse platform user and as the owner of my website, as well as the privacy of my website users.
My intention is to protect the statistics of my site from being publicly displayed without my explicit consent. While certain data may not directly identify individuals, it is crucial to respect the privacy and control of such information.
GDPR and CCPA laws reinforce the significance of data protection and individual consent. As the owner of the website, I strive to uphold the principles of these laws by ensuring the confidentiality and privacy of my site’s statistics. By having the option to decide whether to share this data publicly, I can maintain the privacy of my users and comply with the regulations established in GDPR and CCPA.
Please don’t perceive my opinions as personal attacks; they are solely intended for the betterment of the Discourse platform for all users. It’s important to consider that there may be numerous other users who unknowingly continue to use the platform without the option to remove their data. By providing the ability to control and remove personal data, we can enhance privacy and ensure a more positive experience for all users.
I think the GDPR debate is likely to muddy the waters in this discussion. As Simon says, removing the /about stats/page info is something that has been mentioned before. Some have been happy with the CSS approach to hide things, though others did want to go a step further and remove/replace it altogether.
It is not a request without merit. Though I think the tone of the discussion is also important. If it becomes too fractious then I’m afraid the topic will be closed even if the feature request is valid. Could everyone please bear this in mind when posting.
My apologizies if my earlier comment came across as a definitive statement.
It was not my intention to assert that Discourse is exploiting legal gray areas. Instead, I was raising a hypothetical scenario based on the concerns of my site’s data and privacy, as well as that of my site’s users.
Further, I want to express my concerns about the possibility of my site’s data becoming publicly available without my consent (as discourse does not provide me an option to remove it). The unauthorised dissemination of such data would not only violate the trust of my site’s users, but it could also potentially contravene legal frameworks such as the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
These regulations mandate explicit consent and provide individuals with significant control over their personal data. Therefore, it’s vital that Discourse adheres to these principles, ensuring that any data shared or collected through my site is handled in a manner that upholds the highest standards of data privacy and protection.
I think these points have been adequately covered. Forgive me , but your replies are sounding a little AI ish. Let’s draw a line under the GDPR issue and say that your points have been heard.
While I understand my responses may come off as AI-like, my aim is to provide accurate and useful information. Regardless of the delivery, the points raised are of critical importance, particularly when it relates to data privacy and legal frameworks like GDPR and CCPA.
It’s essential that these matters are given due consideration, irrespective of whether they’re being written with help of an AI (which is not the focus of the thread). I’m glad to hear that these points have been heard, and I completely agree that it’s time to move forward. Thank you for the engaging discussion.
@JammyDodger I have the same feature request, but not for GDPR issues, simply so that none of my competitors can see the activity of our community. Which is something we absolutely would like to avoid.
Competitors can easily figure out that we use Discourse, and hence easily bypass any CSS masking or theming we could do simply by going to the https://[my-community-name].discourse.group//site/statistics.json
Should I create a new topic (it is the same feature request but a new use case)?
I think 
