> The current
> scheme.org server does track IP addresses in the classical sense that it
> keeps an ordinary nginx access log. This is p

...robably good policy in case there are security incidents. We could
decide for how long to keep the logs, though. A year? Two years?