Joeylene Rivera

on the atlas — 4

• MTG Developers1 savers
• Andrew Wilkinson on Twitter: "This is a story about how I lost $10,000,000 by doing something stupid. Ten. Million. Dollars. Literally up in smoke. Money bonfire. That’s enough to retire with $250,000+ in annual income. Here’s what happened…" / Twitter1 savers
• Open Source Growing Pains - YouTube1 savers
• Do Things that Don't Scale18 savers

highlights — 2

• I you want to be GDPR compliant and enforce bans, you can implement a 30 days delay after deletion requests. This is what we've done at my company.

  Open Source Growing Pains - YouTube

• GDPR requires you to drop all of the user's personal data. However, you can 1-way hash their email and/or auth provider ID and still be compliant as long as it's not human readable or reversible. When a new account gets created, hash their username and/or auth provider ID to see if it matches any existing ones. You'll also want to normalize the hash (all upper or all lower, and filtering only alpha-numerics to avoid null-character exploits). 513

  Open Source Growing Pains - YouTube