3 ms·
You still need a privacy policy that states that your server collects IP addresses (PII/personal data), but there's no need for a user to consent to it IMO beca
by mhitza 4y ago
You still need a privacy policy that states that your server collects IP addresses (PII/personal data), but there's no need for a user to consent to it IMO because it's intrinsic information when accessing the website. Although you should state how long the IP addresses are stored within the logs/backups.
- capableweb 4y agoIndeed. Easiest solution I found to this "problem" is to mask the last parts of the IP, don't store any of it.