GDPR prep for user metrics collection

[jdangerx]

Overview

We want to write logs with some useful metrics... but that means we need to do a good job with GDPR

Success Criteria

We need a privacy policy that enumerates:

• what data we collect
• why we need it
• we don't FRICKIN sell your data
• how you can access and delete your data
• a reasonable log retention timeline

We also need to set up an automatic user activity deleter script that:

• finds logs older than a certain time
• ... deletes them

Next steps

Preview Give feedback

1. decide on log retention timeline
2. write privacy policy