Do you keep access logs? How long do you keep them?

I imagine that if you ever got a request, you’d understandably just give in and hand out the data. Have you thought of a canary?

Thanks for all your work!