Understanding MaxMind privacy for our users

[sunjam (james.network)]

Continuing the discussion from MaxMind IP database updates require a license:

Can someone please explain what the process is for protecting our user’s data if we exist outside EU GDPR compliance. I find the need for a MaxMind license off-putting, especially if they are tracking our user base across this fully open platform. Perhaps this was built into the platform already, but I was not aware of it and am uncomfortable with it, although I acknowledge not understanding what purpose it serves.

Thanks for any thoughts and suggestions!

[Falco]

@sunjam

and am uncomfortable with it

If you feel this way, remove the license from the app.yml file and rebuild to remove the MaxMind DB feature.

@sunjam

I acknowledge not understanding what purpose it serves.

It is used on the User Admin view when you click on the " IP Lookup button"

On the user profile Recently Used Devices section:

And on the email warning when a new user session is created from a place too far away from a recent session as a added security warning.