This service keeps user logs for an undefined period of time

Service: Bitwarden
Status: pending
Changes: 1
Source: link
Author: Joe

What information Bitwarden collects and why Information from website browsers <p> If you're <strong>just browsing the website</strong>, we collect the same basic information that most websites collect. We use common internet technologies, such as cookies and web server logs. This is stuff we collect from everybody, whether they have an account or not. </p> <p> The information we collect about all visitors to our website includes the visitor's browser type, language preference, referring site, additional websites requested, and the date and time of each visitor request. We also collect potentially personally-identifying information like Internet Protocol (IP) addresses. </p> <p> We collect this information to better understand how our website visitors use Bitwarden, and to monitor and protect the security of the website.

On 2019-12-02 16:39:35 UTC, Joe wrote:

The privacy policy does not state any amount of time that server logs are retained for.

It sounds like standard Apache Server logs, which can be deleted by log rotation, but this is up to the service to define.
Log Rotation:

On 2019-12-02 16:45:20 UTC, Joe wrote:

Apache logs also log both GET and POST requests.

GET is like


POST is when you press submit on a page, like a login page.

This can contain user data, such as passwords, emails, or anything not specifically encrypted on the user's side before sending.

We track editorial changes to analyses and updates to a point's status and display the previous versions here as part of an effort to promote transparency regarding our curation process.

Version 1: 2019-12-02 16:34:18 UTC by Joe

Previous Title:

Updated Title: This service keeps user logs for an undefined period of time

Previous Analysis:

Updated Analysis: Generated through the annotate view

Previous Status:

Updated Status: pending