[dariosalvi78]

collecting IPs can be perfectly lawful without consent [0], if you justify it for security or performances, but you need to make sure to get rid of logs when they don't fulfil those purposes any longer.

[0] https://law.stackexchange.com/questions/28603/how-to-satisfy...