GDPR compliance of forum software

“Discourse does not have a focus on GDPR compliance as discussed on their forum”
(https://gitlab.e.foundation/e/management/issues/318)

Everybody logs your IP address so I don’t see the need to worry too much…
But deleting logs after time x seems like a good idea even only from the space saving perspective it makes sense.

As I don’t know discourse, I am not sure what they were refering to, but saw other web software e.g. send out data to a “spam detection service”. Or, even with nextcloud looking at the outbound packet log can be surprising.

1 Like

Discourse is GDPR-compliant if the admins uncheck the log anonymizer details in the settings:

The conversation linked above dates from 2016. There have been a lot of improvements since.

Especially:

1 Like