Datenschutz
Privacy policy 1.9.9: a technical access log, kept 14 days
The proxy and the app now write one line per response to a log that only root can read. It holds no IP address, no account and no content, and it is deleted after 14 days.
We could not explain a few 503 errors a tester reported, because nothing logged the requests. Privacy policy 1.9.9 now names the access log we added for that.
Text version
Each response writes time, method, status, path without parameters and identifiers, duration, size and a request ID. It never holds IP address, browser identification, cookies, content or account. Only root reads it, and it is kept at most 14 days.
Identifiers inside paths are replaced by placeholders. The request ID can be matched with the administrator operations log, for administrator accounts only. The legal basis is our interest in finding and fixing faults.
The wording is in the privacy policy, sections 3.4, 6 and 8. Nothing else in the policy changed.