System Design · Senior · Question 43 of 75
What should be minimized in logs and analytics for privacy?
- ✓Correct answer: Personal data: tokens, passwords, emails and the like in URLs and events
- 2The number of log lines, regardless of content
- 3Timestamps, so the sequence of events can't be reconstructed
Explanation
Tokens in query strings end up in server and proxy logs, and emails in analytics violate GDPR requirements. Mask fields, don't put secrets in URLs, limit log retention.