# \#gdpr **URL:** https://meta.discourse.org/tag/gdpr/113.md [Latest](https://meta.discourse.org/latest.md) · [Categories](https://meta.discourse.org/categories.md) · [Tags](https://meta.discourse.org/tags.md) --- ## [Data export should include discourse post id](https://meta.discourse.org/t/data-export-should-include-discourse-post-id/397074)
**Author:** [@mnalis](https://meta.discourse.org/u/mnalis)\ **Replies:** 1\ **Last updated:** [February 27, 2026, 10:32pm UTC](https://meta.discourse.org/t/data-export-should-include-discourse-post-id/397074 "2026-02-27T22:32:29Z")
To be able to properly thread messages from personal data (i.e. “Export your data” / “Request archive”), the posts in created archive should include discourse post ID, not just URL. I.e. when you subscribe by e-mail f… --- ## [Storing date of birth in relation to GDPR](https://meta.discourse.org/t/storing-date-of-birth-in-relation-to-gdpr/397231)
**Author:** [@Jagster](https://meta.discourse.org/u/Jagster)\ **Replies:** 4\ **Last updated:** [February 27, 2026, 8:05am UTC](https://meta.discourse.org/t/storing-date-of-birth-in-relation-to-gdpr/397231 "2026-02-27T08:05:46Z")
Does it store birthday? That would be problematic when GDPR applies. --- ## [Safe by Design: How to Protect Your Community Members and Their Privacy](https://meta.discourse.org/t/safe-by-design-how-to-protect-your-community-members-and-their-privacy/386629)
**Author:** [@Bas](https://meta.discourse.org/u/Bas)\ **Replies:** 3\ **Last updated:** [October 28, 2025, 1:32pm UTC](https://meta.discourse.org/t/safe-by-design-how-to-protect-your-community-members-and-their-privacy/386629 "2025-10-28T13:32:25Z")
Safe communities don’t happen by accident. The latest White Paper from Discourse takes a deep dive into what it really means to create safe and trusted online spaces that protect member privacy. I was excited to contri… --- ## [Deleted user address appears in email log](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760)
**Author:** [@ToddZ](https://meta.discourse.org/u/ToddZ)\ **Replies:** 5\ **Last updated:** [October 21, 2025, 8:13am UTC](https://meta.discourse.org/t/deleted-user-address-appears-in-email-log/385760 "2025-10-21T08:13:30Z")
In reviewing the email log, I noticed that we would appear to be emailing an address that doesn’t have a user: Research elsewhere shows that this was a recently self-deleted user. These log entries do predate the del… --- ## [Question About Anonymizing Users and GDPR](https://meta.discourse.org/t/question-about-anonymizing-users-and-gdpr/372282)
**Author:** [@Rubi](https://meta.discourse.org/u/Rubi)\ **Replies:** 7\ **Last updated:** [June 30, 2025, 7:41pm UTC](https://meta.discourse.org/t/question-about-anonymizing-users-and-gdpr/372282 "2025-06-30T19:41:52Z")
Hi, I would like to ask if the following is true: Anonymization meets GDPR requirements for removal of personal data. Once anonymized, no data remains in the Discourse server to identify who you are or about you. Ar… --- ## [DNS4EU, is it for me ? 😀](https://meta.discourse.org/t/dns4eu-is-it-for-me/371193)
**Author:** [@patrickemin](https://meta.discourse.org/u/patrickemin)\ **Replies:** 1\ **Last updated:** [June 22, 2025, 4:10am UTC](https://meta.discourse.org/t/dns4eu-is-it-for-me/371193 "2025-06-22T04:10:56Z")
Hi, I was wondering whether the new European DNS4EU public service would improve the safety of my Discourse self hosted site? I am not too technical and not very knowledgeable regarding DNS, so I asked an AI to sum up th… --- ## [Reject an applicant and delete the information they supplied](https://meta.discourse.org/t/reject-an-applicant-and-delete-the-information-they-supplied/321343)
**Author:** [@robbie.morrison](https://meta.discourse.org/u/robbie.morrison)\ **Replies:** 7\ **Last updated:** [March 31, 2025, 2:07am UTC](https://meta.discourse.org/t/reject-an-applicant-and-delete-the-information-they-supplied/321343 "2025-03-31T02:07:09Z")
It seems that the email address and other personally‑identifiable information (PII) is removed when a accepted user is deleted. However when an applicant is rejected, without ever having become a user, the same is not t… --- ## [When Forum Admins Ignore Requests – What Are the Options?](https://meta.discourse.org/t/when-forum-admins-ignore-requests-what-are-the-options/354565)
**Author:** [@Okhre](https://meta.discourse.org/u/Okhre)\ **Replies:** 5\ **Last updated:** [February 26, 2025, 1:53pm UTC](https://meta.discourse.org/t/when-forum-admins-ignore-requests-what-are-the-options/354565 "2025-02-26T13:53:00Z")
Hello community and support team, Has anyone else experienced a situation where a forum admin refuses to respond to requests about personal account actions, such as username changes or account deletions? It’s frustrati… --- ## [EU visitor stats on /about page](https://meta.discourse.org/t/eu-visitor-stats-on-about-page/324459)
**Author:** [@Isambard](https://meta.discourse.org/u/Isambard)\ **Replies:** 10\ **Last updated:** [November 20, 2024, 1:24am UTC](https://meta.discourse.org/t/eu-visitor-stats-on-about-page/324459 "2024-11-20T01:24:52Z")
Is the EU visitor stats the one with reduced info (no table for 24 hours, 7 days, 30 days etc.)? I’m curious, what rule within the DSA does this address? I’m surprised that high-level aggregated stats can be problematic… --- ## [Does "Delete User" remove IP addresses from everywhere?](https://meta.discourse.org/t/does-delete-user-remove-ip-addresses-from-everywhere/324912)
**Author:** [@CaptainJ](https://meta.discourse.org/u/CaptainJ)\ **Replies:** 1\ **Last updated:** [September 10, 2024, 12:22pm UTC](https://meta.discourse.org/t/does-delete-user-remove-ip-addresses-from-everywhere/324912 "2024-09-10T12:22:59Z")
My site is hosted by Discourse. I deleted users before unchecking “log anonymizer details”. Does Discourse still have a log of their IP addresses somewhere? If so, is there any way for me to delete them or are they just … --- ## [How to enable the Akismet privacy notification?](https://meta.discourse.org/t/how-to-enable-the-akismet-privacy-notification/299054)
**Author:** [@Gavin\_Hudson](https://meta.discourse.org/u/Gavin_Hudson)\ **Replies:** 2\ **Last updated:** [March 22, 2024, 4:07pm UTC](https://meta.discourse.org/t/how-to-enable-the-akismet-privacy-notification/299054 "2024-03-22T16:07:24Z")
The Akismet GDPR page says you can enable a privacy notification. However, I don’t know where I can enable this. I don’t see it in the Akismet settings. When Akismet is enabled on your site, only the personal data need… --- ## [Subscriptions automatically sets two cookies before login](https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065)
**Author:** [@oddjobz](https://meta.discourse.org/u/oddjobz)\ **Replies:** 2\ **Last updated:** [February 28, 2024, 7:06pm UTC](https://meta.discourse.org/t/subscriptions-automatically-sets-two-cookies-before-login/297065 "2024-02-28T19:06:50Z")
Hi, I wonder if someone could advise. I added the subscriptions plugin and set it up with a Stripe account, looks great and seems to work well. However I noticed that Stripe seems to set two cookies as soon as someone hi… --- ## [How long does personal information remain in Discourse's servers after it's deleted on the front end?](https://meta.discourse.org/t/how-long-does-personal-information-remain-in-discourses-servers-after-its-deleted-on-the-front-end/284128)
**Author:** [@Gavin\_Hudson](https://meta.discourse.org/u/Gavin_Hudson)\ **Replies:** 10\ **Last updated:** [November 13, 2023, 6:40pm UTC](https://meta.discourse.org/t/how-long-does-personal-information-remain-in-discourses-servers-after-its-deleted-on-the-front-end/284128 "2023-11-13T18:40:18Z")
This is a GDPR topic. Basically, we need to know whether and over what time frame personal data, such as IP address, name and email, are deleted permanently. After a period of inactivity, is the IP deleted and if so af… --- ## [Adsense GDPR notification popup not display](https://meta.discourse.org/t/adsense-gdpr-notification-popup-not-display/282963)
**Author:** [@Vico\_Vo](https://meta.discourse.org/u/Vico_Vo)\ **Replies:** 2\ **Last updated:** [October 26, 2023, 7:47am UTC](https://meta.discourse.org/t/adsense-gdpr-notification-popup-not-display/282963 "2023-10-26T07:47:13Z")
Adsense GDPR notification popup not display. Can you help me? I have enabled this notification in adsense settings. But it doesn’t show up on my site for users in Europe. So adsense ads are not displayed to users in thi… --- ## [What personal data is collected and who can read/edit it?](https://meta.discourse.org/t/what-personal-data-is-collected-and-who-can-read-edit-it/279802)
**Author:** [@Gavin\_Hudson](https://meta.discourse.org/u/Gavin_Hudson)\ **Replies:** 7\ **Last updated:** [October 12, 2023, 2:44pm UTC](https://meta.discourse.org/t/what-personal-data-is-collected-and-who-can-read-edit-it/279802 "2023-10-12T14:44:47Z")
I’m looking for a complete list of what personal data Discourse collects, for example first name, last name, email, user principle name, location, etc. Also, I need to know firstly who can view and secondly who can edit … --- ## [GDPR outside of the EU](https://meta.discourse.org/t/gdpr-outside-of-the-eu/278349)
**Author:** [@anon65426961](https://meta.discourse.org/u/anon65426961)\ **Replies:** 41\ **Last updated:** [October 1, 2023, 1:30pm UTC](https://meta.discourse.org/t/gdpr-outside-of-the-eu/278349 "2023-10-01T13:30:32Z")
With GDPR this only applies to users that are in the E.U. I believe? --- ## [Privacy-hardened version?](https://meta.discourse.org/t/privacy-hardened-version/269643)
**Author:** [@paulmelis](https://meta.discourse.org/u/paulmelis)\ **Replies:** 3\ **Last updated:** [June 26, 2023, 3:02pm UTC](https://meta.discourse.org/t/privacy-hardened-version/269643 "2023-06-26T15:02:49Z")
I’m wondering if, during all the years of Discourse’s development, there have been discussions of having a privacy-hardened version? I’m specifically thinking of disabling any tracking and profiling features and correspo… --- ## [Cookie compliance under GDPR](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275)
**Author:** [@allu](https://meta.discourse.org/u/allu)\ **Replies:** 63\ **Last updated:** [May 5, 2023, 10:26am UTC](https://meta.discourse.org/t/cookie-compliance-under-gdpr/85275 "2023-05-05T10:26:08Z")
I would like to start a conversation on how to become GDPR compliant with regards to the use of cookies. There was an old topic on EU cookie compliance here, https://meta.discourse.org/t/compliance-with-eu-cookie-law/1… --- ## [New user signup webhook and GDPR](https://meta.discourse.org/t/new-user-signup-webhook-and-gdpr/88338)
**Author:** [@AMP](https://meta.discourse.org/u/AMP)\ **Replies:** 2\ **Last updated:** [May 25, 2018, 12:25am UTC](https://meta.discourse.org/t/new-user-signup-webhook-and-gdpr/88338 "2018-05-25T00:25:02Z")
I’ve been lurking here for a bit as I’ve been setting up a Discourse forum, but I’m not completely certain of the forum structure to be sure that this is the right place for this post. Please move if needed. GDPR is a h… --- ## [Summary of current state of GDPR compliance](https://meta.discourse.org/t/summary-of-current-state-of-gdpr-compliance/85893)
**Author:** [@Judith](https://meta.discourse.org/u/Judith)\ **Replies:** 4\ **Last updated:** [April 22, 2018, 12:10pm UTC](https://meta.discourse.org/t/summary-of-current-state-of-gdpr-compliance/85893 "2018-04-22T12:10:15Z")
We (diem25.org) are in the process of GDPR-proofing our operations. As others pointed out, the danger is not the authorities but the Abmahnanwälte, who are suing e.g. small personal blogs for lacking the legally-mandated… --- ## [GDPR - "right to be forgotten" after anonymizing](https://meta.discourse.org/t/gdpr-right-to-be-forgotten-after-anonymizing/152956)
**Author:** [@pnoeric](https://meta.discourse.org/u/pnoeric)\ **Replies:** 10\ **Last updated:** [June 1, 2020, 11:50am UTC](https://meta.discourse.org/t/gdpr-right-to-be-forgotten-after-anonymizing/152956 "2020-06-01T11:50:29Z")
Hello admins, I found many (many, many) GDPR topics but nothing that seemed to have this answer. I apologize if this is a duplicate. I’m using Discourse with SSO, attached to a larger membership site. I’m trying to figu… --- ## [How to make users to explicitly agree to ToS](https://meta.discourse.org/t/how-to-make-users-to-explicitly-agree-to-tos/83480)
**Author:** [@Krzysztof\_Daniel](https://meta.discourse.org/u/Krzysztof_Daniel)\ **Replies:** 67\ **Last updated:** [June 20, 2018, 9:38am UTC](https://meta.discourse.org/t/how-to-make-users-to-explicitly-agree-to-tos/83480 "2018-06-20T09:38:44Z")
It’s one of the GDPR requirements in Europe - the ToS acceptance must be an explicit act (like marking a checkbox), not an effect of a separate action (like pressing the sign up). Is it possible with the SSO? --- ## [Providing data for GDPR](https://meta.discourse.org/t/providing-data-for-gdpr/83595)
**Author:** [@richp10](https://meta.discourse.org/u/richp10)\ **Replies:** 81\ **Last updated:** [December 20, 2018, 10:02pm UTC](https://meta.discourse.org/t/providing-data-for-gdpr/83595 "2018-12-20T22:02:34Z")
Sorry I am late to this conversation, but this is a very important issue and it does not appear it reached resolution. It strikes me that GDPR compliance does mean changes to Discourse - maybe this is all in hand but I … --- ## [GDPR and anonymizing personal data](https://meta.discourse.org/t/gdpr-and-anonymizing-personal-data/72103)
**Author:** [@Overgrow](https://meta.discourse.org/u/Overgrow)\ **Replies:** 74\ **Last updated:** [December 1, 2018, 1:39am UTC](https://meta.discourse.org/t/gdpr-and-anonymizing-personal-data/72103 "2018-12-01T01:39:37Z")
GDPR that will be effective in EU by 28/5/2018 requires more careful handling of personal data. As I’ve analyzed needed changes in our software I’ve found following: We need explicit consent by user to gather personal… --- ## [Updating privacy statement - what data does CDCK collect from independent installs?](https://meta.discourse.org/t/updating-privacy-statement-what-data-does-cdck-collect-from-independent-installs/90484)
**Author:** [@merefield](https://meta.discourse.org/u/merefield)\ **Replies:** 3\ **Last updated:** [June 22, 2018, 10:39pm UTC](https://meta.discourse.org/t/updating-privacy-statement-what-data-does-cdck-collect-from-independent-installs/90484 "2018-06-22T22:39:58Z")
Correct me if I’m wrong but I believe CDCK gathers some information from remote, independent installs of Discourse, it’s been alluded to in the past. Is there a statement anywhere of exactly what? Or at least a statemen… --- ## [GDPR countdown and compliance](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190)
**Author:** [@GBrowning](https://meta.discourse.org/u/GBrowning)\ **Replies:** 89\ **Last updated:** [June 18, 2018, 10:46pm UTC](https://meta.discourse.org/t/gdpr-countdown-and-compliance/87190 "2018-06-18T22:46:08Z")
As we’re quickly approaching May 25th, here’s my (perhaps naive) understanding of certain key Discourse GDPR issues: Right to Be Forgotten :white\_check\_mark: If the user requests, the admin can use the user info panel t… --- ## [GDPR troll defense?](https://meta.discourse.org/t/gdpr-troll-defense/89026)
**Author:** [@KajMagnus](https://meta.discourse.org/u/KajMagnus)\ **Replies:** 37\ **Last updated:** [June 18, 2018, 2:35pm UTC](https://meta.discourse.org/t/gdpr-troll-defense/89026 "2018-06-18T14:35:36Z")
A Discourse forum was reportedly just “attacked” by someone posting a GDPR “troll” request: asking for 999 999 things the requester likely doesn’t care about — instead, his/her only purpose is, fairly likely, just to cau… --- ## [GDPR and the Digest email](https://meta.discourse.org/t/gdpr-and-the-digest-email/86753)
**Author:** [@maia\_internet](https://meta.discourse.org/u/maia_internet)\ **Replies:** 22\ **Last updated:** [June 4, 2018, 4:01pm UTC](https://meta.discourse.org/t/gdpr-and-the-digest-email/86753 "2018-06-04T16:01:24Z")
Here’s a question… Does the email digest, sent out automatically, contravene the GDPR post 25 May if users haven’t explicitly asked for it? Discourse sends all active users the digest but there seems to be no way of sw… --- ## [Should we discourage the use of 'Social Logins' to improve our users' privacy?](https://meta.discourse.org/t/should-we-discourage-the-use-of-social-logins-to-improve-our-users-privacy/89007)
**Author:** [@merefield](https://meta.discourse.org/u/merefield)\ **Replies:** 3\ **Last updated:** [June 3, 2018, 1:22am UTC](https://meta.discourse.org/t/should-we-discourage-the-use-of-social-logins-to-improve-our-users-privacy/89007 "2018-06-03T01:22:20Z")
Given we are now operating under GDPR (for anyone who has even one user based in the EU), do you think we should discourage the use of Social Logins (e.g. Facebook, Google), thereby reducing the level of data that would … --- ## [Problematic IP address fields](https://meta.discourse.org/t/problematic-ip-address-fields/83785)
**Author:** [@riking](https://meta.discourse.org/u/riking)\ **Replies:** 30\ **Last updated:** [May 24, 2018, 11:10pm UTC](https://meta.discourse.org/t/problematic-ip-address-fields/83785 "2018-05-24T23:10:12Z")
Continuing the discussion from Providing data for GDPR: I did a first pass over Discourse’s tables, and I found several places where IP addresses are being accidentally correlated with user IDs. This is toxic data gener… [Next page](https://meta.discourse.org/tag/gdpr/113.md?match_all_tags=true&page=1&tags%5B%5D=gdpr)