search

maproulette / maproulette-backend

MapRoulette back-end / API
Apache License 2.0
50 stars 37 forks source link

privacy policy / retaining user data #4

Open mvexel opened 8 years ago

mvexel commented 8 years ago

I was just reading Mapzen's privacy policy for their mapping platform. It's interesting, bold, and I like it a lot. We should mimic this for MapRoulette, not keeping any PII, and having a meaningful statement about it.

In MapRoulette 1, we never gave this proper attention.

https://mapzen.com/erasermap/privacy

mgcuthbert commented 8 years ago

We currently don't store any PII for the user, although we do store information retrieved from the OSM profile, so it is possibly that we may be storing PII based on OSM display name, and if you have any PII in your description. We could always make it such that any OSM data we retrieve we retrieve every session, things to think about.

mvexel commented 8 years ago

Also need to consider rotating / anonymizing web server and application server logs (IP addresses)