Say the HN logs the ip, URL visited, and the referrer: 123.123.123.123 200 https://news.ycombinator.com/user?id=DanBC https://news.ycombinator.com/user?id=DanB

Say the HN logs the ip, URL visited, and the referrer: 123.123.123.123 200 https://news.ycombinator.com/user?id=DanBC https://news.ycombinator.com/user?id=DanBC referrer https://news.ycombinator.com/news https://news.ycombinator.com/news 123.123.123.123 200 https://news.ycombinator.com/changepw https://news.ycombinator.com/changepw referrer https://news.ycombinator.com/user?id=DanBC https://news.ycombinator.com/user?id=DanBC This log now links this ip address to user account DanBC (since the change password link is only present on the page when the user themselves visits it). Your user page has information that identifies you as a natural person. Now what? It seems like anyone could be entitled to collect the logs to prevent fraud (and abuse). What about providing people with "their" data if they request it? If they want to delete their account, does that include deleting these lines in the logs?