Setting to disable logging username/IP for (self-)delete user log lines

Feature
1

Currently when a user self-deletes their Discourse account, the log line shows the IP and username of that user:

image
image1158×58 4.3 KB

We’d rather not store if we can help it for GDPR purposes. If the user deletes their Discourse account, then later sends a GDPR request to our platform (the SSO provider for our Discourse instance), we want to avoid needing to search all log lines for relevant data on that user to wipe it.

We already have this setting off on our instance so that we don’t log as much data when we anonymize a user as part of GDPR request handling:

image
image758×63 3.6 KB

It would be convenient to have a similar setting so that (self-)delete log lines do not include user data.

1 Like
2

GDPR allows saving those two. But if something is wanted to make things more wider then storing just IP is just enogh. It doesn’t identified anybody (and is quite useless anyway, but that is another story).

3

I think user expectation (from perspective of someone requesting a GDPR right-to-erasure from us) here would be that we do not store their username, as it might contain PII. Note that the scribbled out part on the right contains the username of the user prior to anonymization on a normal Discourse setup.