Previous Status: PENDING
Updated Status: APPROVED
Previous Title: Logs are deleted after a finite period of time
Updated Title: Logs are kept for up to 90 days
Previous Analysis: We changed our policy and made efforts to really delete log files. Log files don't contain IP addresses or other browser-tracking information at all. Nearly all information in the logfiles is about logged-in users (or failed login attempts). By default log files are kept for 8 days, but we extend that if we need some follow-up on a assumed technical or administrative problem for up to 6 weeks. Because those files are then evaluated by a technician that could take another two weeks, before they can be deleted. With a buffer for holidays and sick leaves we can be sure to state: ``` Log files of the portal are kept for up to 90 days. ```
Updated Analysis: We changed our policy and made efforts to really delete log files. Log files don't contain IP addresses or other browser-tracking information at all. Nearly all information in the logfiles is about logged-in users (or failed login attempts). By default log files are kept for 8 days, but we extend that if we need some follow-up on a assumed technical or administrative problem for up to 6 weeks. Because those files are then evaluated by a technician that could take another two weeks, before they can be deleted. With a buffer for holidays and sick leaves we can be sure to state: ``` + Log files of the portal are kept for up to 90 days. + IP addresses of failed and successful login attempts are kept for up to 90 days. + Browser platforms, names and versions, which were used during login attempts, are kept for up to 90 days. + Other backups of the portal are kept for up to 90 days. ```
Title: Logs are deleted after a finite period of time
Analysis: We changed our policy and made efforts to really delete log files. Log files don't contain IP addresses or other browser-tracking information at all. Nearly all information in the logfiles is about logged-in users (or failed login attempts). By default log files are kept for 8 days, but we extend that if we need some follow-up on a assumed technical or administrative problem for up to 6 weeks. Because those files are then evaluated by a technician that could take another two weeks, before they can be deleted. With a buffer for holidays and sick leaves we can be sure to state: ``` Log files of the portal are kept for up to 90 days. ```
Status: PENDING