[openstreetmap/openstreetmap-website] User account self-deletion allows bad actors to delete and recreate the same account name to "lose" changeset discussion and block history (Issue #4018)

[Hungerburg]

> If a user deletes his account, change the username to a random string like `deleted_234234` and remove the profile-content. This way the profile itself remains clickable and the history and comments can be found and traced but the user-data is gone.

That should be GDPR safe. There is warranted interest, even though the edit history may identify an individual, does it?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/4018#issuecomment-1595340155
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/issues/4018/1595340155 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20230616/4172dd4d/attachment.htm>