You are right. The IP address is considered private information, at least in the EU (and therefore in Germany, where Freeciv-web is hosted). Even recording the IPs without prior user consent is illegal. A privacy policy is needed in any case (even if no personal information is collected). IIRC, the information collected must be limited to what is strictly necessary in order to run the service. And I think stronger laws are on the way.pungtryne wrote:About the IPs. Without knowing the exact laws on this, an IP is (in some, but probably not all cases) considered private data like your credit card info and personal ID number. An organization or business, at least in EU, can't just post their users IPs. At least not without consent, and I'm unsure if that's possible even.
Disclaimer: I'm not a lawyer.
Louis
PS: Freeciv-web may also not use cookies (or HTML5 storage, which is the same as far as the law is concerned) without prior user consent.