Support » Plugin: NewStatPress » Is NewStatPress GDPR Compliant?

  • Resolved AlanP57

    (@alanp57)


    Is NewStatPress GDPR compliant or how would you advise we handle our NewStatPress data?

Viewing 5 replies - 1 through 5 (of 5 total)
  • Alex

    (@wilmotdesign)

    I’m also curious about this. Does the plugin collect or pass on any information to third parties? Please assist.

    • This reply was modified 1 year, 1 month ago by  Alex.
    Plugin Author ice00

    (@ice00)

    hi,

    all data is stored into the DB where the WordPress is installed and are not send to external server at all.

    Please take present that this is already true even without GDPR normative as Worpress plugin guideline prohibit to send data to external server unless user make explicit consensus for that by enable it.
    Code that send data to external server without this option are removed from the Worpress repository by plugin reviewers.

    thanks

    • This reply was modified 1 year, 1 month ago by  ice00.

    Thank you.

    One more thing to add here however. The Data needs to be anonimized to be GDPR compliant, meaning in the options page under the tab Filters, you need to check “Crypt IP addresses” so as to “not being able to track individual users”. If you want to keep the IP tracking on than you need to get explicit consent from the users and an option to delete individual users data if requested.

    But those are just my thoughts and interpretations on the new law. I am by no means an expert here.

    Plugin Author ice00

    (@ice00)

    hi,

    I think that the solution is to use “Crypt IP addresses” and you are CGPR compliant because there is no a decrypt function possible on collected data.

    About getting clear IP address collected without consensus this is a open question as IP could be shared from users by his service data provider, so only fixed registered IP address correspond to one real user.

    This means that you cannot implement easy a function that ask the user for consensus as data collected is by IP, not by a way to know him directly.
    You could know a user if you set a persistent cookie into his computer or force him to register and login as WordPress user into your site.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Is NewStatPress GDPR Compliant?’ is closed to new replies.