Hacker News new | ask | show | jobs
by kuschku 2026 days ago
If they contain IPs, and are stored for >30 days, they're automatically illegal, yes.

Below 30 days it's a grey area as long as you only store as much information as is technically necessary (so e.g. for 14 days IP addresses could be okay, ask your lawyer about specifics), but you definitely need to inform your users about this.