[colejohnson66]

> Also, IP addresses are considered PII under GDPR.

Not true. They’re only PII if they can be used to connect something to a person. It’s a minor distinction, but it is one nonetheless.

[jdnenej]

In this case it would not be PII data if it was just an IP address in a webserver log saying someone checked for an update. It would be PII data if it was linked to your GitHub account.