Only log that a IP address did a conversion, not what conversion or what file it convereted, there is no association to files and IP address.
After one hour the cache key of that IP address expires. I have gone ahead and updated the privacy policy to make this clear as well.