I work as a developer at a German library and privacy is taken very seriously here. We're not allowed to store full IP addresses in the logs (they have to be tr

I work as a developer at a German library and privacy is taken very seriously here. We're not allowed to store full IP addresses in the logs (they have to be truncated to /16). Google Analytics is out of the question (we have to use self-hosted Piwik), as are direct social media buttons, we have to use wrappers that only load the JS after a user clicks on it, and even that has to be approved by the "Datenschutzbeauftragter". Even external links have to be explicitly marked as such so users know when their Referral information is leaked to other websites.