3 ms·
>user-data is totally fine to have, it's what you _do_ with it that matters Unless the user explicitly opts into having that data recorded, it isn't ok to stoc
by worble 7y ago
>user-data is totally fine to have, it's what you _do_ with it that matters
Unless the user explicitly opts into having that data recorded, it isn't ok to stockpile it, regardless if the intent behind it.
The path to hell is paved with good intentions.
- henryfjordan 7y agoI disagree. By interacting with a web server, you are inherently sharing some data with the operator like your ip address (so you can get a response back) or any request headers you choose to set (User-agent for mobile vs desktop sites, for instance). Nobody is forcing you to make requests to any particular site, and nobody is forcing to you include all this info. If you don't want your data spread around, don't do all that spreading. I agree that using user-data outside of some agreement is bad (and illegal under the GDPR), but I believe that an implicit agreement exists between web-server provider and user that their data will be used for the mechanical operation of the website, including logging stack-traces. Otherwise TCP/IP wouldn't work.