Gregory's ServerIrresponsibility with data that you shouldn't even have in first place https://tilde.town/~kzimmermann/updates/20220814_1013.html
|
3 comments
 @kzimmermann (of course, admins can choose not to record IP addresses by not passing over the real IP from their frontend proxy in a header at all. still.)  @kescher IPs are technical data that's required for the service to accomplish its task, also useful for troubleshooting and occasionally weeding bad actors out of the platform. It's also not a personal identifier and can be masked at the client's own discression and own risk. Phone number, though, is pretty much a passport in a lot of countries. You have the number - you have their ID. |
@kzimmermann Mastodon, by default, keeps IP addresses for an entire year, which basically tracks each user's IPs, as long as they've been used within 12 months.
This was made configurable by me recently, but there hasn't been a new release including that change.