Hacker News new | ask | show | jobs
by rendall 2027 days ago
Peripherally related question. Is it GDPR compliant to hash a user's IP address to just a wide region and store only that? e.g. "Finland", "California", "Chennai". Just to get an idea of from where visitors come?

I'd like to add only usage tracking to my sites to see how they are used, but I have zero interest in selling or using user data for any other purpose. I could add a pop-up banner, but that's for consent on using personally identifiable information (and I associate it with sleaze, to be honest).
1 comments
xxs 2026 days ago
>Is it GDPR compliant to hash a user's IP address

It is not, hashing would be pretty much a bijection, anyways. Storing state would be fine, though.

link
rendall 2026 days ago
> hashing would be pretty much a bijection

By "hash" I just meant its broader meaning of "converting": "IP address" to "broad geographical region". There would be no way to convert, say, "Monaco" back to an IP address

link