3 ms·
Passwords are not personal data, and even if they were, you aren't storing them anyway (right?). There's a tricky question around usernames: they're technicall
by lucideer 9y ago
Passwords are not personal data, and even if they were, you aren't storing them anyway (right?).
There's a tricky question around usernames: they're technically not personal data since they aren't necessarily the real name of the user, but the user can choose to use their real name as their username, which is not easy to distinguish in any automated way.
You don't need to store IPs
- tyfon 9y agoIf someone makes a real name username and you don't do anything else about it, you should be fine. However, if you take that username, look up the user in the real world and send spam without consent you are in deep shit. It's all about consent of use and for what. The user has implicitly given consent to use their username as a username but nothing else.