# Question About Anonymizing Users and GDPR **URL:** \ **Category:** Product Support\ **Tags:** gdpr, anonymization\ **Created:** [June 30, 2025, 2:50pm UTC](https://meta.discourse.org/t/question-about-anonymizing-users-and-gdpr/372282 "2025-06-30T14:50:39Z")\ **Posts on this page:** 1\ **Showing post:** 4
**Author:** ![elmuerte](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/elmuerte/32/456517_2.png) [@elmuerte](https://meta.discourse.org/u/elmuerte)\ **Post date:** [June 30, 2025, 6:36pm UTC](https://meta.discourse.org/t/question-about-anonymizing-users-and-gdpr/372282/4 "2025-06-30T18:36:46Z")
PM in discourse are just private discussions, they are posts with really limited visibility. They are anonymized in the same way as the more public posts. The “invites and emails” I mentioned are the email messages send out by discourse for various actions. For example email notifications about reactions to followed discussions. > [@Rubi](#): > > From a legal perspective, can a user be told that the process of anonymizing is GDPR compliant or are the waters still muddy on this matter? I am not a lawyer. But it is not that simple. In spirit this mechanism does conform to the guidelines of the _[Right to erasure](https://gdpr-info.eu/art-17-gdpr/)_ from the GDPR, but the local implementing law might not agree. It also depend a lot on how you use Discourse. Further more, the amount of data being erased might violate some other laws which require this data to be kept. If this is really a big concern, like with everything legal, you should **contact a lawyer**. --- _[View the full topic](https://meta.discourse.org/t/question-about-anonymizing-users-and-gdpr/372282)._