GDPR Considerations

We aren't lawyers and this isn't official advice, but here are some things to consider if you need to comply with GDPR.

User Accounts and Git

If you're version controlling everything (which we usually recommend), you may want to consider excluding your users from version control or storing them in a database as references to user data will persist in a git repository's history even after that user is removed from the application.

Option 1: Gitignore rule

# .gitignore
 
users/*

If you take this approach, your production server will be the single source of truth. You may want to consider having some sort of backup system for the user records. You know, just in case.

Option 2: Store users in a database

Another option would be to store your users in a database so you can remove them without leaving data fragments behind.

Here's an article on how to do just that.

Form Submissions

You may also want to disable form submission storing on any forms, and opt for email-only notifications.

Form submission storage disabled
You can disable storing form submissions on your server.
Docs feedback

Submit improvements, related content, or suggestions through Github.

Betterify this page →