Open mvexel opened 8 years ago
We currently don't store any PII for the user, although we do store information retrieved from the OSM profile, so it is possibly that we may be storing PII based on OSM display name, and if you have any PII in your description. We could always make it such that any OSM data we retrieve we retrieve every session, things to think about.
Also need to consider rotating / anonymizing web server and application server logs (IP addresses)
I was just reading Mapzen's privacy policy for their mapping platform. It's interesting, bold, and I like it a lot. We should mimic this for MapRoulette, not keeping any PII, and having a meaningful statement about it.
In MapRoulette 1, we never gave this proper attention.
https://mapzen.com/erasermap/privacy