Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extending the retention period to 30 days? #16

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions dnt-policy-discussion-draft2.txt
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ listed below:
2. LOG RETENTION:

a. Logs with DNT Users' identifiers removed (but including IP addresses and
User Agent strings) may be retained for a period of 10 days or less,
User Agent strings) may be retained for a period of 30 days or less,
unless an Exception (below) applies. This period of time balances privacy
concerns with the need to ensure that log processing systems have time to
operate; that operations engineers have time to monitor and fix technical
Expand Down Expand Up @@ -143,14 +143,14 @@ the following specific situations:
3. TECHNICAL AND SECURITY LOGGING:

a. If, during the processing of the initial request (for unique identifiers)
or during the subsequent 10 days (for IP addresses and User Agent strings),
or during the subsequent 30 days (for IP addresses and User Agent strings),
we obtain specific information that causes our employees or systems to
believe that a request is, or is likely to be, part of a security attack or
fraudulent transaction, then logs of those requests are not subject to this
policy.

b. If we encounter technical problems with our site, then, in rare
circumstances, we may retain logs for longer than 10 days, if that is
circumstances, we may retain logs for longer than 30 days, if that is
necessary diagnose and fix those problems, but this practice will not be
routinized and we will strive to delete such logs as soon as possible.

Expand Down