[TheCoelacanth]

No, you don't need consent for that. It falls under the legitimate interest exception.

You need to disclose it in your privacy policy, you need to delete it after a reasonable retention period and you can't use those logs for other purposes like ad targeting, but you don't need a consent banner to track things that you are legitimately using for security purposes.

[charcircuit]

>It falls under the legitimate interest exception.

What makes that a legitimate interest and not advertising?

[TheCoelacanth]

Because preventing crime is drastically more important to having a functioning society than being able to target advertising slightly more accurately.

[charcircuit]

But how is wanting to show targeted ads not a legitimate interest. Without such a feature a site might be unprofitable and be shut down. If something is required to operate it sounds pretty important feature.

[srdjanr]

> and you can't use those logs for other purposes like ad targeting

This part I guess

[charcircuit]

Because he said so is not a good reason.