Logging, Privacy and Data Retention Code Review
Find personal data leaks in logs and storage.
The Open buttons send the prompt text as currently shown below to that site only when you click. Fill in the placeholders first.
Review my logging and storage code for personal data leaks. Language and logging framework: [LANGUAGE_AND_LOGGING]. Log destinations and retention: [LOG_DESTINATIONS_AND_RETENTION]. Code samples (logging statements, error handlers, request middleware): [PASTE_CODE]. Types of personal data the application handles: [DATA_TYPES]. For each logging location, follow this tree: 1. Does it log request or response bodies, headers, query strings, or full objects? IF yes THEN check for credentials, tokens, personal data, and payment data. 2. Does it log identifiers (email, IP address, user ID)? IF yes THEN decide whether necessary; prefer pseudonymous IDs. 3. Are exceptions logged with the full payload? IF yes THEN redact. 4. Are logs sent to third parties? IF yes THEN check the contract and data location. 5. Is retention defined and enforced, and can a user's data be found and deleted? 6. Is access to logs restricted and audited? Output: findings table (location, issue, data at risk, severity, fix with code); a redaction helper in my language; log level guidance; a retention policy proposal; and a test that scans logs for patterns such as emails and tokens. Note that legal duties depend on [JURISDICTION]; verify with a privacy specialist.
Fill in before use
Optional: type your details and the prompt above updates. Nothing is saved or sent.
Replace each bracketed placeholder with your own details, then paste into Any AI or another assistant.