Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🐛 Bug Report: GPDR violation in self-hosted Console by monitoring through Sentry without consent or transparency #1169

Open
2 tasks done
ttrinidad opened this issue Jun 30, 2024 · 3 comments
Assignees
Labels
bug Something isn't working

Comments

@ttrinidad
Copy link

👟 Reproduction steps

Using self-hosted Appwrite Console in production environment we can see see it pings back to Sentry without consent and without clear option to disable it (other than not using ENV.PROD) which a major privacy concern and legally against GPDR and other similar online privacy and data protection legislation.

👍 Expected behavior

To cease violation of GPDR and similar legislation and treat user private data with "Lawfulness, fairness and transparency", as well as having the common courtesy expected of not leaking private information without consent or at least telling people about it.

👎 Actual Behavior

Attempting to contact Sentry always, because of:

dsn: 'https://[email protected]/4504158071422976',

🎲 Appwrite version

Version 1.5.x

💻 Operating system

Linux

🧱 Your Environment

Version 1.5.7
Installed using Coolify

👀 Have you spent some time to check if this issue has been raised before?

  • I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

@ttrinidad ttrinidad added the bug Something isn't working label Jun 30, 2024
@Meldiron
Copy link
Contributor

Meldiron commented Jul 2, 2024

Thanks for reporting this 🙌 Regarding GDPR, that could possibly be a problem for Cloud users too. Not a legal expert, but I believe collecting anonymous data is considered GDPR-safe.

With that said, this implementation was meant for usage on Cloud domains only, as an experiment to ensure it provides value. Later we planned to support it on self-hosting if we see good insights - with ability to customize DSN.

For now, Arman can make a quick PR to avoid Sentry.init() on self-hosted instances.

@TorstenDittmann
Copy link
Contributor

@ttrinidad This has been removed in the 5.0.0 version of the console and will be released with 1.6.x of https://github.com/appwrite/appwrite 🙏🏻

@ArmanNik
Copy link
Member

ArmanNik commented Oct 3, 2024

@stnguyen90 I think this one can be closed now that 1.6.x is out

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: Todo
Development

No branches or pull requests

4 participants