4 ms·
Thank you! Here's how we've done it. There's no legal precedent but we believe this makes us compliant: To enhance the visitor privacy, we don’t actually stor
by markosaric 6y ago
Thank you!
Here's how we've done it. There's no legal precedent but we believe this makes us compliant:
To enhance the visitor privacy, we don’t actually store the raw visitor IP address in our database or logs. We run it through a one-way hash function to scramble the raw IP addresses and make them impossible to recover.
To further enhance privacy, we add the website domain to the IP hash.
We also add the User-Agent string to the hash.
We've shared more details on this here https://plausible.io/data-policy https://plausible.io/data-policy
- mstolpm 6y agoThanks. Had a lot on your site before posting, but didn't find that details. Perhaps you should add a link/hint on the frontpage regarding how you address GDPR compliance. (I'm not a lawyer, so I'm not qualified to judge on the solution.)
- markosaric 6y agoThanks for the feedback. We link to it from the top menu under "Why Plausible" as "GDPR / CCPA Compliant" but perhaps there could be a better placement for it. Thanks again!