EU GDPR and Firebase Hosting

388 views
Skip to first unread message

ralf.wa...@colenet.de

unread,
Mar 30, 2019, 10:46:00 AM3/30/19
to Firebase Google Group
Hello everyone, 

I know again a GDPR related question.

I am currently investigating the use of Firebase Hosting for a German meetup website, so the hosting falls under the EU/German GDPR.


For Firebase Hosting the Privacy and Security in Firebase page (https://firebase.google.com/support/privacy/) states
  1. Firebase Hosting is U.S. only as of section 'US-only services' .
  2. Under section 'Data processing information'  page 2 it is stated that Firebase Hosting stores the IP address. 
As far as I understood personal data (including non-anonymized IP addresses) must not leave the EU. 
Google Analytics supports this by optionally anoynmizing the IP (before it is send to the U.S).

So my conclusion for now wouId be that a EU citizen can not use Firebase Hosting without violating the GDPR. Is that right?

Kind regards

Ralf

Franziska Oflak

unread,
Apr 1, 2019, 10:58:36 AM4/1/19
to fireba...@googlegroups.com
Hi Ralf,
I think that Google is in general GDPR-compliant. So you can use all of Google's services without legal problems.
But using a German provider (e.g. Hetzner cloud or All-Inkl) wouldn't be a bad idea in my opinion as it would rise the trust of your users. At least, I would prefer that. 😆

Cheers,
Franziska

--
You received this message because you are subscribed to the Google Groups "Firebase Google Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to firebase-tal...@googlegroups.com.
To post to this group, send email to fireba...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/firebase-talk/0d1dd734-ebdb-41de-9154-757321d44854%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Alex Memering

unread,
Apr 1, 2019, 4:13:40 PM4/1/19
to fireba...@googlegroups.com
Firebase Hosting keeps an access/security log of all requests that we handle and serve content for. We only use this to calculate the bandwidth transferred (for billing purposes) and for troubleshooting if any problems arise.  The IP addresses are not stored otherwise and it is not joined with any other data.  The data in this log is only retained for up to 60 days.


Reply all
Reply to author
Forward
0 new messages