Our implementation of the policy primarily consists of making sure our servers only - retain logs for 10 days. In practice, we follow much stricter privacy guidelines + retain logs for 10 days. In practice, we follow much stricter privacy guidelines than the rules laid out in the EFF policy. However, we don't want to define our own complex, ad-hoc privacy policy rather than reusing a sensible one with serious thought put into it by experts.