People have brought up IP but that shouldn't be logged either. The point is to do this in a squeaky clean manner, with the source code inspectable so the process is safe, transparent, and verifiable.
But too many projects would never consider this from fear of the rabble hoards coming after them.
This needs to be possible, it's how you get better UX.
By reframing this as "site stats" and not user stats, I hope we can move forward. If there are zero stats "of any kind" about the user collected, maybe we could do this without freaking out?
If there are some hidden user stats collected, then we should remove them. The point is to figure out how to do this safely, not assume it can never be done.
If you have a fediverse account, you can quote this note from your own instance. Search https://social.coop/users/scottjenson/statuses/115946285399075489 on your instance and quote it. (Note that quoting is not supported in Mastodon.)
