The expectation is that most short URLs will be created by readers/logged out users, and I don't think we want to be logging what would effectively be IP address -> article they were reading, whether it be in Special:Log or in some server-side log.

I do understand that we need some form of logging for abuse prevention, so I'm interested in suggestions on how we can do it in a privacy-friendly way.

In T221072#5128385, @Legoktm wrote:

The expectation is that most short URLs will be created by readers/logged out users, and I don't think we want to be logging what would effectively be IP address -> article they were reading, whether it be in Special:Log or in some server-side log.

I should clarify, I don't want to do this for logged-in users either (account name -> article they were reading).

Something like: https://meta.wikimedia.org/wiki/Special:UrlShortener was shortened to w.wiki/4e [show user]
And make it only available for stewards (?) because they can only remove the short url's too.

Well it should be to "a permission" that certainly stewards could have, though the meta-wiki oversighters may be able to handle these a well (need a community discussion first since this went live prior to getting one made)

If stewards or oversighters can see it that means it's stored somewhere in the database - and I don't want that whatsoever. Ideally, no one, including sysadmins, should be able to look up what articles were being read. Unfortunately URL shortening is just a really strong correlation to what was being read.

T228779: Create a special page to list all short URLs provides an alternative (without leak of private data).