[kyledrake]

Protip: It's not illegal to throw out IP address data, as there are no mandatory retention laws in the United States. Then if you get a John Doe subpoena, you have no useful information to supply.

https://www.eff.org/issues/mandatory-data-retention/us

Neocities currently scrambles stored IP addresses with scrypt, and (soon) after 30 days, we intend to delete those IP hashes. It's legal. Consider doing it.

Here's the code we used to do it: https://github.com/neocities/neocities/commit/4983a9b24eac00...