Hacker News Reader

Right now, I store their data in redis and delete their session when they refresh or close the page.

The first questions I'd ask myself is probably, is that data properly encrypted? And is it properly anonymized?