you are viewing a single comment's thread
view the rest of the comments
[+] [S] 11 points 6 months ago (5 children)
  • [–] 40 points 6 months ago*

    Logging is standard practice if you give even the slightest damn about security (read: you should), so I don't see it as a problem. It's what you use those logs for, how long they're retained, and whether you sell them off.

    So as long as you're only using them for security auditing and website analytics and don't keep them forever and don't plan to sell them to data brokers, there's really nothing to fret over. A good place to disclose how you use the logs, how long you retain them, and what is logged is in the site's privacy policy.

  • source
  • parent