On Thu, Mar 13, 2014 at 9:32 AM, Federico Leva (Nemo) <nemowiki@gmail.com> wrote:

Andrew Gray, 13/03/2014 00:56:

For that matter, surely this data won't exist anyway before 2013 or so?
I'm not sure how long we retain IP data for logged-in users, but I'd be
a bit startled if it was five years.

EventLogging can contain almost anything I think. Is there any purging? I don't think so. Is it aggregate and anonymised? No longer. <https://www.mediawiki.org/w/index.php?title=Extension:EventLogging&diff=prev&oldid=905171>

On Thu, Mar 13, 2014 at 5:19 AM, Nuria Ruiz <nuria@wikimedia.org> wrote:

Sorry but this is not correct:
IP addresses are anonymized in Event Logging and they always have been so. We calculate a HMAC with a rotating salt that changes either every 90 days or with a service restart.

Event Logging data has never been aggregated, it is a system to log discrete events. There had not been any changes on this regard as of late.

What Nuria said is correct, however, we do store some data, such as User Agents currently. This is not our intention for the long term, we are in the middle of putting in place a sanitization strategy to get rid of any PII after 90 days. This discussion might make more sense in another thread though, kindly please do not hijack Sajjad's thread :)