Volumio lacks tons of private information into the debug log, uploads it to the volumio server without consent and afaics without possibility to delete.
This is a no-no go and I’m pretty pissed about this.
Volumio Version: 2.917
Steps to Reproduce
- Follow this guide.
What types of private information is shown? I know that sensitive information such as passwords is redacted before appearing in the log.
Especially this part
General Policy of User Data
By cancelling your account, your data will be permanently deleted instantly
We will not sell, share or grant access to your data to anyone.
You will be able to download a file containing all your aforementioned data (except those that might result in a security issue)
As far as I can tell, the only personal information appearing in these logs are the paths of the most recently played tracks. This seems pretty minor to me, or is there anything else you had in mind?