Page 1 of 1

GDPR & this site

Posted: 2018-05-18, 07:14
by Phantom
Do you have any plans to be GDPR compliant? Was just wondering. I can care less really. I have my own site, but it's based in the U.S. and I don't think it really matters. Europe has no bearing on me.

Re: GDPR & this site

Posted: 2018-05-18, 07:36
by davews
Since the only information this forum knows about me is my username (not my real name) and email address I am not sure there is any information that comes under the GDPR regulations.

Re: GDPR & this site

Posted: 2018-05-18, 08:14
by Moonchild
Our practices should already be GDPR compliant. See our privacy policy http://www.palemoon.org/privacy.shtml

Re: GDPR & this site

Posted: 2018-05-18, 08:14
by adesh
Moonchild's privacy policy is pretty solid already. If at all, any change would be a formality.
Off-topic:
EDIT: oh, timing!

Re: GDPR & this site

Posted: 2018-05-21, 17:49
by Phantom
May want to look at this ongoing discussion. https://www.phpbb.com/community/viewtop ... &start=360


There is an extension called Delete my account that may have to be used, though I'm not sure.

Re: GDPR & this site

Posted: 2018-05-21, 18:59
by Moonchild
Anyone who wants to have their account deleted can simply request it, as stated in the privacy policy.

Re: GDPR & this site

Posted: 2018-05-22, 07:17
by Phantom
Ah, then you have a pretty tight policy. I never did read it. :lol:

Re: GDPR & this site

Posted: 2018-05-22, 15:07
by Moonchild
I looked at the extension and it won't do, anyway, since it would give the user the option to also remove their posts which is not desirable.
And before you argue that posts may contain personal information: that is user-published public content that does not fall under the GDPR. We do not collect that information, it is consciously volunteered and published by the user so should not be removed since it is absolutely relevant to ongoing discussions and the resulting content of the site. Users may still request a certain post or posts to be anonymized before having their account removed (so we can verify it is an authorized request) but those decisions will be made by staff and fall outside of the GDPR.