Consent storage

  • Resolved christian70

    (@christian70)


    2 years, 7 months ago

    Hi,
    first: thank you indeed for the plugin, it’s exactly what I was looking for, simple, customizable, effective, suitable for small sites. All other solutions I tested are uselessly complicated (and expensive). GDPR fear is new business.

    I’d like to understand just one thing: where are consents saved? In a specific db table maybe? And, in your opinion, is anonymized IP address a valid proof of consent? That’s my huge doubt, because without consent I can’t save the IP but without saving it there’s no effective proof of consent…

    Future feature suggestion: the possibility to export all consents in a CSV file.

    Best regards.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author christophrado

    (@christophrado)

    Hey there,

    consents are a separate CPT (custom post type). So they’re basically posts, saved in the regular wp_posts table, along with meta data that’s saved in the wp_postmeta table.

    Since consents are basic CPTs, you should be able to export them with just any export plugin that allows for CSV export (e.g. WP All Export).

    As for IP anonymization, I can’t really give a recommendation here – I’m not a lawyer, and I’m not going to try to be one. I’ve heard of IP anonymization being a must (at least in Germany), so an anonymized consent (along with the UUID) kinda has to be sufficient? But I’ve also heard the opposite, so … Sorry, I’m no help here ??

    Thread Starter christian70

    (@christian70)

    Hi, thank you for your kind and quick reply.
    I’m a bit confused: are consents really treated as CPT? I thought there are stored in a different table. Or in a log file. Because now I ask you: in case of thousands of visits a month, have you idea if it effects negatively on site’s performance? Thousands of consents among posts, pages, and other content CPT…

    As for IP anonymization I was just curious on your opinion, no legal statements required hihihi. Thank you anyway.

    Plugin Author christophrado

    (@christophrado)

    I think there’s a few things to consider here:

    1) A large amount of posts alone is not really a factor for performance. Because of the way MySQL is build, the database can handle 1 million posts just as fine as 100 posts.

    2) Post types don’t interfere with each other. Having a lot of consent logs will not affect posts, pages, etc.

    3) Consent logs are mostly write-only. They are only queried on the consent statistics and consent list views in the admin (they’re not public). They don’t add any database queries on regular page loads. They don’t even really “exist” for a regular page load.

    Overall, I don’t think using a CPT for the consent logs causes any notable change in site performance or load time. I’d personally run more tests if I was ever to expect tens of thousands of users per day though. So far, I’m “only” running this on sites with max. 2k visits/logs per day.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Consent storage’ is closed to new replies.