Data which may potentially relate to an identifiable person is anonymised as early as possible, by: - Abridging the IP address by prior to processing - Geo-localisation to the level of province/region - Processing of anonymised identification device numbers and anonymised login information to measure distributed usage The stored user activity is deleted after a maximum of 7 months.