> For the complete documentation index, see [llms.txt](https://docs.pixeleyes.de/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.pixeleyes.de/anleitungen-instructions/english/documentation-of-our-shopware-6-plugins/log-watch-with-ai-analysis-and-ticket-workflow/data-protection-gdpr.md).

# Data protection gdpr

Error messages can contain personal data, such as email addresses, order/customer numbers, or IP addresses. The plugin protects this data on several levels.

## Automatic masking

**Before storing** and **before sending to the AI**, sensitive content is replaced with placeholders:

| Content                                      | Placeholder        |
| -------------------------------------------- | ------------------ |
| Email addresses                              | `{MAIL}`           |
| Order/customer numbers, long digit sequences | `{NR}`             |
| IP addresses (v4/v6)                         | `{IP}`             |
| Tokens / UUIDs / IDs                         | `{TOKEN}` / `{ID}` |
| Absolute server paths                        | `{PFAD}`           |

The **original log line** is only visible on the detail page for inspection and is **never** transmitted to the AI.

## Switch "Mask personal data before sending to the AI"

* Found under **Configuration → Data protection (GDPR)**.
* **Default: on** (recommended). It ensures the masking is applied on the way to the AI.

## Notice & liability

{% hint style="warning" %}
When the AI analysis is used, the (masked) error message is transmitted to and processed by the selected provider (**Anthropic** or **OpenAI**). Only enable the AI if this is compatible with your data protection requirements. Enabling this is at your own responsibility; we accept **no liability** for the transmission to the AI provider.
{% endhint %}

## Recommendations

* Keep the masking switch enabled.
* Only use the AI for errors whose (masked) content is unproblematic.
* Review the data protection terms of the selected AI provider and, if applicable, conclude a data processing agreement (DPA) with them.