Skip to content

Fix/issue 2340 gdpr analytics anonymization#2346

Merged
janavipandole merged 4 commits into
janavipandole:mainfrom
Prateek2007-cmd:fix/issue-2340-gdpr-analytics-anonymization
Jun 20, 2026
Merged

Fix/issue 2340 gdpr analytics anonymization#2346
janavipandole merged 4 commits into
janavipandole:mainfrom
Prateek2007-cmd:fix/issue-2340-gdpr-analytics-anonymization

Conversation

@Prateek2007-cmd

Copy link
Copy Markdown
Contributor

Description

Resolves Issue #2340 (Raw IP Storage / Privacy Compliance Violation).

The Interaction tracking database was previously configured to store raw IP addresses and session IDs in plain text to power the ML recommendation engine. This presented a severe data privacy risk and violated GDPR/CCPA regulations regarding PII.

This PR implements a robust anonymization layer to sanitize telemetry data before persistence.

Changes Made

  • Salted Hashing: Refactored the /feedback analytics route in recommendation.py to hash the incoming user_id using SHA-256 combined with the backend's SECRET_KEY as a salt.
  • Data Integrity: The ML engine can still reliably group anonymous interactions together via the deterministic hash, while completely preventing any reverse engineering of the original PII.

Type of Change

  • Security Fix
  • Regulatory Compliance

@vercel

vercel Bot commented Jun 18, 2026

Copy link
Copy Markdown

@Prateek2007-cmd is attempting to deploy a commit to the janavipandole's projects Team on Vercel.

A member of the Team first needs to authorize it.

@janavipandole janavipandole merged commit cb07727 into janavipandole:main Jun 20, 2026
12 of 17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants