Re: Elephant in the room
"IP address is defined as personally identifiable"
If you collect NOTHING else?
The Server needs it to serve the page. Though you'd not store it.
You need it to identify DDOS sources or malicious posts?
I don't know. Surely the IP is only really personal if collected with other information, or if a warrant obtained and IP + time presented to ISP?
But yes an IP address can be part of personal information.
Twitter, Facebook, Google etc are using IP address to make a good guess on where you live. It worries me that the "guess" is usually much better than which ISP you are using (mobile may be different due carrier NAT). Surely WHERE ISPs have allocated their IPs should be private or are they guessing from people with Location on etc?