That's what I was thinking. At the very least there will be NginX or Apache access logs with IP addresses and times -- but maybe simply purging this or not hol

That's what I was thinking. At the very least there will be NginX or Apache access logs with IP addresses and times -- but maybe simply purging this or not holding it would be fine to achieve the same privacy. However, makes it hard to prevent malicious actors from DDOS'ing and stuff without knowing at least that much, and users could use a VPN.