Hacker News new | ask | show | jobs
by ildon 1042 days ago
Have you considered restrictions on personal data collection due to regulations such as the GDPR? I'm curious how you are dealing with those, especially having to track all countries of the world.

Sorry if this is mentioned on the website, I've had a brief look and I might have missed it

1 comments

Thank you for your remark. We try to address the issue in the Methodology section but it's a complex question. Roughly speaking, GDPR was passed to prevent merchants from contacting potential consumers without their consent. Well, we don't have anything to sell, we don't collect phone numbers or email addresses and we will never contact anybody.
Found it, thanks for the directions.

> Ours is that we perform a task in the public interest.

You really really want to change this. It will never hold. You need a legal basis for this condition (lett. e of art. 6). Not legal advice: a legitimate interest (lett. f, art. 6) looks more defendable

> We will erase any individual’s personal data at their request within 30 days, according to GDPR’s article 17.

30 days is a very long time

Also: I'm getting an internal server error, data collected: 0