3 ms·
You don't have to log IPs. And if you need them for rate limits / abuse prevention, that falls under the "necessary / legitimate interest" rule.
by viraptor 2y ago
You don't have to log IPs. And if you need them for rate limits / abuse prevention, that falls under the "necessary / legitimate interest" rule.
- p_l 2y agoSecurity, debugging and audit logs all fall under "legitimate interest". Just keep them out of hands of parties that might want to use them for other reasons.