AntiCompositeNumber (2023-06-06 01:01):
In case it was unclear: I do not intentionally store usernames. The
Toolforge infrastructure, in its default configuration, stores
usernames.

To my knowledge storing IP addresses and URLs (typical access logs) is fine, because it is required by some laws to e.g. fight crimes... As long as you remove this data after some time.

Toolforge also does not provide tools to easily clean up
logs.

Does it? I mean I'm sure web services have some logs, but I don't think I (as a Tollforge dev) have access to access logs. I don't think it's responsibility of devs to cleanup logs they don't actively create.

Kind regards,
Nux
_______________________________________________
Cloud mailing list -- [email protected]
List information: 
https://lists.wikimedia.org/postorius/lists/cloud.lists.wikimedia.org/

Reply via email to