Privacy Statement
- Dr. Roy Schestowitz
- 2018-05-25 04:54:34 UTC
- Modified: 2018-05-25 04:54:34 UTC
Summary: Today, May 25th, the European General Data Protection Regulation (GDPR) goes into full effect; we hereby make a statement on privacy
AS a matter of strict principle, this site
never has and
never will accumulate data on visitors (e.g. access logs) for longer than 28 days. The servers are configured to
permanently delete
all access data after this period of time. No 'offline' copies are being made. Temporary logging is only required in case of DDOS attacks and cracking attempts -- the sole purpose of such access. Additionally, we never have and never will sell any data pertaining to anything. We never received demands for such data from authorities; even if we had, we would openly declare this (publicly,
a la Canary) and decline to comply. Privacy is
extremely important to us, which is why pages contain little or no cross-site channels (such as Google Analytics, 'interactive' buttons for 'social' media etc.) and won't be adding any.
Shall readers have any further questions on such matters, do not hesitate to contact us.
⬆
Comments
Canta
2018-05-25 13:26:52
Usually, I tend to save logs forever, even with some copies, in order to never lose that data. I do this in order to be able to do some forensics (like searching for historical appearance of events in the logs), and/or understanding common patterns (like "there's much more consumption when this kind of event happens"). Access logs are usually discarded after a while, but not because of privacy, but because of the space they use (and, even so, there's log rotation).
I've never think about that as a violation of someone else's privacy. Now that I see your comment, I fear there's an argument against that practices as unethical behaviour. Would you mind to expand a little more on that issue? Even some link would be nice.
Thanks.
Dr. Roy Schestowitz
2018-05-25 15:17:08
But generally speaking, in the long run such data can be compromised (e.g. stolen computer/drive) and IP addresses correlated with other data sets, e.g. in efforts to frame or convict people.
RMS is touring Latin/South America these days, where he (also elsewhere nowadays) speaks not just about software freedom but also about why longtime data retention should be made illegal. There have been like a dozen articles about it over the past week, mostly if not only in Spanish (so I could not put them in daily links).