I log rage clicks and abandoned cameras as events, not as a dossier. If I would not say the log out loud to the user, I should not keep it.
Tags: Privacy, Analytics, Product, UX, unlisted
I want to know that the shutter was opened and cancelled. I do not need a heatmap of their face. I strip PII from notes. I do not record keystrokes in SKU fields that might be personal data.
Retention is short for behavioral events. Product photos follow a different, explained policy.
Tell them
A sentence in the tool: we log crashes and failed lookups to make this faster. If that sentence feels slimy, the log is too fat.
Use it
If I never look at the events, I should not collect them. Curiosity is not a purpose.