Would it be possible and desirable to prevent even the admin from seeing anonymous user’s data?
It would allow collecting truly anonymous feedback without the suspicion that the admins could infer the user’s identity from the IP address.
I suppose this was never high prio on your tasklist, but I’d appreciate feedback 
You can search for things like “anonymity” and “anonymous” to find a series of previous conversations on this topic.
In short, since we’re dealing with redistributable, open source software, there is no way we can guarantee that a site owner can’t read your “anonymously” posted content.
I think a better way to achieve truly anonymous feedback with Discourse still in the mix would be to set up an anonymous form (using Google Forms, Airtable, a WP plugin…) that mails in feedback on behalf of users.
4 Likes