Our commitment to donor privacy at Tor

Thanks for the reply! Really nice. I commented as well, let’s continue that discussion on Gitlab. :flexed_biceps:

Other note regarding this post: When a user donates and the form gets sent to CiviCrm we log the ip-address: donationInfo["ip"] = get_client_ip(request.META) (line 156 in repository.py).

There is a valid reason to log this, and I understand it’s necessary. The impact on privacy is also limited because when paying with Paypal/Credit card there already is zero anonymity. But maybe we should clarify in the FAQ what exactly we log, and make sure it’s clear for visitors that donations through Paypal/credit card is NOT anonymously. Maybe by a small warning note.