Speaking with my e-commerce vendor hat on, server logs (apache, mail,
application audit logs) and other information about visitors
(especially those who have conducted a purchase transaction with
us, or signed up to our newsletter) never stop having a business
purpose - it's called referential integrity.
We want to use them to track the behaviour fraudulent users