默认隐私主题中的数据保留声明

支持
1

The default privacy_topic includes:

  • Retain server logs containing the IP address of all requests to this server no more than 90 days.

  • Retain the IP addresses associated with registered users and their posts no more than 5 years.

I’m pretty sure that the first of these refers to nginx and rails logs that are rotated in the container.

I’m not quite sure what “IP addresses associated with registered users and their posts” means, but I don’t see any evidence that these get removed from the database. Is this a promise to delete the registration IP after some time? Or is it about users and post, so it would refer only to something in the posts record (I dont’ see anything there?)

3 个赞
2

Hmm so I guess we should add a daily job that deletes the registration_ip_address from the user after the account is 5 years old?

6 个赞
3

That’s what the document seems to imply.

I don’t know if there are other places that an ip might be.

4 个赞
4

我创建我的帖子时实际上没有看到这个话题。但是，为了确切地了解这些事情，最好知道……另一方面，你创建了论坛软件，所以我想你应该知道……从法律上讲，这对于隐私政策很重要。

5

我正在审查我新自托管 Discourse 的隐私政策。

默认政策是 - *保留包含所有请求到此服务器的 IP 地址的服务器日志，不超过 [天数] 天。

Discourse 中是否有设置可以在一定天数后删除日志？

我甚至不确定从法律上讲应该保留多少天。我们的论坛将有全球用户。

有人能给我指明正确的方向吗？