Problematic IP address fields

They can be stored, but no longer than necessary for a legitimate purpose.

For rate limiting, there is a legitimate interest and this period is pretty short.

For deduplicating link clicks, there is a legitimate interest but they need only to be stored in Redis for 24 hours. I don’t see any reason at all to keep them in the database.

I don’t see the purpose or a legitimate interest for keeping IP addresses in search logs or incoming links.

In contrast to the opening post I do think the topic_views and user_profile_views are problematic. After all, Redis is already deduplicating IP addresses so there is no need to store the IP address longer than topic view duration hours.

「いいね!」 2