feat: log IP address for pending comments

README.md

@@ -2,7 +2,7 @@
 
 Rust webserver for comments, that you can easily embed in a website.
 
-**Early development, not safe for production yet**
+**Early development, not safe for production yet** ([see milestones](https://git.txmn.tk/tuxmain/webcomment/milestone/1))
 
 ## Features
 
@@ -14,6 +14,7 @@ Rust webserver for comments, that you can easily embed in a website.
 * Comment frequency limit per IP
 * i18n
 * Petnames! (anonymous comment authors get a funny random name)
+* Designed for privacy and moderation
 
 ## Use
 
@@ -36,6 +37,16 @@ If enabled, a message can be sent to a Matrix room (private or public) on every
 
 The account must have joined the room for Webcomment to be able to send messages to it.
 
+## Moderation
+
+New comments are not public before being approved by the administrator (by default).
+
+## Privacy
+
+Uses no cookie, no unique user identifier. At each mutation (i.e. new comment or edition), the client IP address is stored for a limited duration (configurable) only for antispam to work. (antispam can be disabled) The client IP address is also stored for each pending comment, but it is removed as soon as the comment gets approved.
+
+However, keep in mind that if a reverse proxy (or any other intermediate tool) is used, IP addresses and other metadata may be logged somewhere.
+
 ## License
 
 CopyLeft 2022 Pascal Engélibert [(why copyleft?)](https://txmn.tk/blog/why-copyleft/)