Comment

Comment by openplatypus

How do you justify GDPR compliance?

GDPR compliance is not to be confused with privacy.

You don't have Data Protection Officer (even if you have one, you ought to publish their details). Neither does Plausible.

Your privacy policy lacks details, e.g.: where you process data and what is data retention.

You are incorporated in not an Adequate Country, meaning you face challenges becoming GDPR-compliant without additional measures that span beyond SCCs. Similarly to Fathom (BC is not under PIPEDA, hence is not adequate).

Privacy-friendly? Probably. GDPR-compliant? No.

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton