as long as they aren't being stored, it shouldn't matter. You could just read user's IP, use that to filter results, then throw it away

Also IP by itself isn't really that much of a privacy problem. It only becomes a problem when it's used in the process of delinkage of more sensitive information