4 ms·

Lots of information that used to be on government sites was removed. They added Google Analytics everywhere. Even on the pages where you fill in your taxes or

Lots of information that used to be on government sites was removed. They added Google Analytics everywhere. Even on the pages where you fill in your taxes or apply for a passport. Google does not need to know my tax details. Google shouldn't know my tax details. Since Google isn't even a UK company the UK government doesn't even have legal authority over what Google does with the information they now hold about UK citizens taxes.

robin_reala 10y ago
All user data is anonymised before sending to Google. I believe we strip the last two blocks off the IP address before sending it over. We use the analytics to inform choices we make - our 3rd design principle is to ‘design with data’ https://www.gov.uk/design-principles#third https://www.gov.uk/design-principles#third . Finally, on projects where it’s critical that any data doesn’t go out of the UK like Verify we run our own instances of analytics software.
- anon1385 10y ago
  >I believe we strip the last two blocks off the IP address before sending it over. No you don't. You don't "send" anything over to Google. The users browser does because loading a gov.uk page also loads a Google Analytic script straight from google-analytics.com. You don't have the power to prevent the users IP being sent to Google in that situation and it's worrying that you think you do. Additionally, focusing on the IP address seems rather silly when a much more accurate tracking cookie is being used.
DanBC 10y ago
https://www.gov.uk/help/cookies https://www.gov.uk/help/cookies They tell you they're using the cookies. They tell you why they use them. They tell you how to opt out of them. They also say: >> We don’t allow Google to use or share our analytics data.
- mynewtb 10y ago
  It looks like they make their users' browsers request a Google URL.
  - dx034 10y ago
    It seems likely that they have a contract with Google that doesn't allow Google to use analytics data like they would for other clients.
    - zeveb 10y ago
      Legal contracts are no replacement for technical impossibility.
      - vertex-four 10y ago
        Google breaking its contracts over Analytics Premium would severely negatively affect it, given that it's a product a number of very large companies and organisations use.
        mynewtb 10y ago
        The NSA will just install their funnel somewhere new and off you go. Browsing privacy is not just about the intentions of the two parties talking to each other but everyone one holding the wire plus everyone the other sites invites to listen in on your private exchange.
        ascorbic 10y ago
        I don't think the NSA snooping on Google Analytics should really be in your threat model when looking at a UK government site. They could just ask GCHQ.
vertex-four 10y ago
This is the site that is used to apply for a passport: https://passportapplication.service.gov.uk/ips-olc/ https://passportapplication.service.gov.uk/ips-olc/ Where on that site does it use Google Analytics?

robin_reala 10y ago

All user data is anonymised before sending to Google. I believe we strip the last two blocks off the IP address before sending it over. We use the analytics to inform choices we make - our 3rd design principle is to ‘design with data’ https://www.gov.uk/design-principles#third https://www.gov.uk/design-principles#third . Finally, on projects where it’s critical that any data doesn’t go out of the UK like Verify we run our own instances of analytics software.

anon1385 10y ago
>I believe we strip the last two blocks off the IP address before sending it over. No you don't. You don't "send" anything over to Google. The users browser does because loading a gov.uk page also loads a Google Analytic script straight from google-analytics.com. You don't have the power to prevent the users IP being sent to Google in that situation and it's worrying that you think you do. Additionally, focusing on the IP address seems rather silly when a much more accurate tracking cookie is being used.

DanBC 10y ago

https://www.gov.uk/help/cookies https://www.gov.uk/help/cookies They tell you they're using the cookies. They tell you why they use them. They tell you how to opt out of them. They also say: >> We don’t allow Google to use or share our analytics data.

mynewtb 10y ago
It looks like they make their users' browsers request a Google URL.
- dx034 10y ago
  It seems likely that they have a contract with Google that doesn't allow Google to use analytics data like they would for other clients.
  - zeveb 10y ago
    Legal contracts are no replacement for technical impossibility.
    - vertex-four 10y ago
      Google breaking its contracts over Analytics Premium would severely negatively affect it, given that it's a product a number of very large companies and organisations use.
      - mynewtb 10y ago
        The NSA will just install their funnel somewhere new and off you go. Browsing privacy is not just about the intentions of the two parties talking to each other but everyone one holding the wire plus everyone the other sites invites to listen in on your private exchange.
        ascorbic 10y ago
        I don't think the NSA snooping on Google Analytics should really be in your threat model when looking at a UK government site. They could just ask GCHQ.

vertex-four 10y ago

This is the site that is used to apply for a passport: https://passportapplication.service.gov.uk/ips-olc/ https://passportapplication.service.gov.uk/ips-olc/ Where on that site does it use Google Analytics?