Skip to content

Fix/issue 2361 anonymize pii analytics#2368

Open
Prateek2007-cmd wants to merge 7 commits into
janavipandole:mainfrom
Prateek2007-cmd:fix/issue-2361-anonymize-pii-analytics
Open

Fix/issue 2361 anonymize pii analytics#2368
Prateek2007-cmd wants to merge 7 commits into
janavipandole:mainfrom
Prateek2007-cmd:fix/issue-2361-anonymize-pii-analytics

Conversation

@Prateek2007-cmd

Copy link
Copy Markdown
Contributor

Description

Resolves Issue #2361 (Raw IP Storage in Analytics / GDPR Violation).

The track_feedback API endpoint, responsible for collecting user telemetry for the ML recommendation engine, was permanently recording raw user_id strings (which dynamically fallback to raw IP addresses or identifiable session tokens on the frontend) directly into the database. This constituted a severe data compliance liability under GDPR and CCPA.

This PR implements mandatory cryptographic PII anonymization for all telemetry ingestion.

Changes Made

  • Cryptographic Hashing: Imported hashlib and securely wrapped the incoming user_id string through a SHA-256 hashing function.
  • Salted Integrity: Infused the hashing process with the server's SECRET_KEY as a cryptographic salt. This prevents reverse-engineering via rainbow tables while maintaining deterministic consistency for the Faiss Vector index and Collaborative Filtering algorithms.

Type of Change

  • Security & Compliance Fix
  • Privacy Hardening

@vercel

vercel Bot commented Jun 20, 2026

Copy link
Copy Markdown

@Prateek2007-cmd is attempting to deploy a commit to the janavipandole's projects Team on Vercel.

A member of the Team first needs to authorize it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant