and I don't think the wiki should be a problem either
2018-05-25 14550, 2018
ruaok
should we mention discourse in the GDPR statement then?
2018-05-25 14558, 2018
Freso looks over GDPR statement again
2018-05-25 14532, 2018
Leo_Verto
couldn't hurt to mention that it may send you emails if you opt in
2018-05-25 14500, 2018
Leo_Verto
ruaok: iliekcomputers alastairp I just had a realization, isn't Spotify legally obligated to provide an export of a user's full listen history now? :O
2018-05-25 14502, 2018
Freso
Hm. "Right to be forgotten" is not fully compliant right now. "Restriction of processing" I think is fine. "Right to data portability / exporting your data" is fine, users can download their essential data from the interface, and zas/me can install a plugin to allow them to download extensive data about them upon request.
2018-05-25 14532, 2018
Freso
"Right to rectification" - they can alter their data either in Discourse itself or via MB.
2018-05-25 14542, 2018
Leo_Verto
"right to be forgotten" should probably use that account deletion system bitmap is working on
2018-05-25 14542, 2018
Freso
"Right to be informed" is the same as everywhere else.
2018-05-25 14538, 2018
Freso
Leo_Verto: Right now if you delete you MB account, MB will ping Discourse and change username and email to the new anonymised username and e-mail from MB, but it won't change the "name", which means the name will remain the same as the username was.
I think there's an option to toggle this, which will mean that e.g., CatQuest won't be able to be "CatQuest, the Endeavouring Cat" but only "CatQuest".
2018-05-25 14528, 2018
Freso
"Right to access" is the same as "Right to data portability / exporting your data"
2018-05-25 14506, 2018
Freso
But I guess I should turn that name toggle on for now, which should mean that someone deleting their MB account will also effectively get anonymised in Discourse.
2018-05-25 14513, 2018
Leo_Verto
yeah, right to access mostly doesn't apply because we don't track our users
2018-05-25 14530, 2018
reosarevok
Heh. "We are preparing your data file. This can take up to 30 days to complete."
2018-05-25 14535, 2018
Freso
:p
2018-05-25 14541, 2018
reosarevok
I guess that's the legal requirement? Because it should take like 5 minutes...
2018-05-25 14559, 2018
Leo_Verto
yeah, because they legally have to do it within 30 days
2018-05-25 14514, 2018
Leo_Verto
I wonder if they're going to artificially delay this
2018-05-25 14540, 2018
Freso
ruaok: I think the "IP addresses" section of "Right to data portability / exporting your data" of our GDPR page is directly applicable to the Discourse site as well.
2018-05-25 14511, 2018
ruaok
Fresco, I pretty much came to the same agreement.
2018-05-25 14516, 2018
ruaok
-c
2018-05-25 14524, 2018
Leo_Verto
as far as I understand it, IP addresses are kind of a gray zone so we're already playing it pretty safe
2018-05-25 14507, 2018
Freso
I updated our Discourse install this morning to include a number of PRs merged in the last 48 hours to decrease the numbers of IPs logged in the Discourse db too.
2018-05-25 14522, 2018
Nyanko-sensei joined the channel
2018-05-25 14514, 2018
D4RK-PH0ENiX has quit
2018-05-25 14526, 2018
ruaok
I cant wait to get my spotify data.
2018-05-25 14538, 2018
Leo_Verto
we should totally build an importer for that data
2018-05-25 14548, 2018
ruaok
yep, already on my mind.
2018-05-25 14557, 2018
ruaok
should be a matter of parsing whatever format they give us.
2018-05-25 14512, 2018
Leo_Verto
do you know any other services we'd want to import from?
2018-05-25 14538, 2018
ruaok
deezer. google music. tidal.
2018-05-25 14557, 2018
Leo_Verto
pandora
2018-05-25 14502, 2018
ruaok
yes
2018-05-25 14507, 2018
ruaok
though...
2018-05-25 14516, 2018
ruaok
do they have service in the EU?
2018-05-25 14529, 2018
ruaok
if not, they can just ignore the GDPR
2018-05-25 14541, 2018
Leo_Verto
ah, they don't
2018-05-25 14542, 2018
Leo_Verto
shame
2018-05-25 14512, 2018
Leo_Verto
I wonder if google music is part of the complete google download?
ok, back to our own GDPR statement.... With regard to discourse, I think we're fine, and I don't really think we need to amend our statement. does anyone disagree with that?
2018-05-25 14528, 2018
Freso
Seems good to me.
2018-05-25 14546, 2018
ruaok
Leo_Verto?
2018-05-25 14538, 2018
Freso
ruaok, bitmap (if you're awake/around :)): I'm thinking of creating an MBS ticket to send a "please delete user" request to Discourse when a user deletes themselves on MB, so the user actually gets removed instead of just "anonymised".
2018-05-25 14500, 2018
Leo_Verto
does discord store IP addresses for longer than 7 days?
2018-05-25 14501, 2018
ruaok
does that mean that their posts go away?
2018-05-25 14542, 2018
Freso
ruaok: That's configurable (a boolean in the "delete user" call), so we can say "yes" or "no" or let the user decide.
2018-05-25 14538, 2018
ruaok
the real question is this: do we want that? potentially very useful posts will go away from that action.
2018-05-25 14541, 2018
Freso
I'm also thinking of making a script to iterate over all our "deleted user #…" users in Discourse and deleting them (without removing any posts they may have).
2018-05-25 14502, 2018
Freso
ruaok: I'd say we say "no, don't delete posts (but do delete user)".
2018-05-25 14515, 2018
ruaok
I'm ok with that.
2018-05-25 14530, 2018
Leo_Verto
do we still allow deleting all posts at once?
2018-05-25 14535, 2018
Leo_Verto
i.e. right to be forgotten
2018-05-25 14506, 2018
Freso
Leo_Verto: Right to be forgotten, as I understand it from discussions, is also okay with anonymisation as an alternative to deletion.
2018-05-25 14523, 2018
Freso
(Which this would be, a step further than currently.)
2018-05-25 14538, 2018
reosarevok would rather not allow removing any posts
2018-05-25 14506, 2018
Leo_Verto
pretty sure we have to allow that
2018-05-25 14504, 2018
D4RK-PH0ENiX joined the channel
2018-05-25 14542, 2018
Nyanko-sensei has quit
2018-05-25 14555, 2018
samj1912
Leo_Verto: lol
2018-05-25 14507, 2018
reosarevok
Leo_Verto: even if there's the anonymity option?
2018-05-25 14509, 2018
samj1912
I wonder if I should comment
2018-05-25 14546, 2018
Leo_Verto
do it :D
2018-05-25 14516, 2018
rsh7[m] joined the channel
2018-05-25 14537, 2018
ruaok
ok, last concern from me... google captcha. what concrete action should we take there?
it'd be interesting to know if they store more detailed data there... under the "old" freedom to data my understanding is that they need to give you more data
2018-05-25 14515, 2018
alastairp
but I don't know how possible it is to use that right now, or how much gdpr overrides it
it's funny that they want to exclude MB for it being a wiki and unreliable while wikipedia is also a wiki
2018-05-25 14524, 2018
Lotheric
:)
2018-05-25 14509, 2018
ruaok
yeah. and with their deletionist tendencies our track record for stable data is better than theirs.
2018-05-25 14540, 2018
SothoTalKer
it's just one stupid guy
2018-05-25 14549, 2018
SothoTalKer
well, 2
2018-05-25 14505, 2018
SothoTalKer
looks like the "community" decides on it again (:
2018-05-25 14533, 2018
SothoTalKer
legoktm: thanks for trying, at least (:
2018-05-25 14507, 2018
legoktm
:/
2018-05-25 14530, 2018
SothoTalKer
well, they want to get rid of it from the authority control template.
2018-05-25 14545, 2018
SothoTalKer
which i can kinda understand (:
2018-05-25 14537, 2018
zas
MB is an unreliable wiki ? bs.
2018-05-25 14510, 2018
SothoTalKer
i know
2018-05-25 14501, 2018
zas
Wasn't the possibility to add homepage link removed for new editors ?? Because we have plenty of new editors (few days), 0 edits, Beginner, which are spam accounts
