4 ms·
Shouldn't it be opt-in, at least in Europe (with GDPR coming)?
by hadrien01 9y ago
Shouldn't it be opt-in, at least in Europe (with GDPR coming)?
- dannyw 9y agoIt can’t be identified back to an user. It is not personal data.
- pdkl95 9y ago> It can’t be identified back to an user. It's trivially associated to your IP. Google, if they chose to, could trivially tie these GA records to your personal profile. > It is not personal data. It's behavioral data that helps Google reconstruct your pattern-of-life. Knowing the tools you use can be very revealing.
- rhencke 9y agoYour first statement is misleading. It is not trivially associated to your IP. See: https://github.com/Homebrew/brew/blob/master/Library/Homebrew/utils/analytics.rb#L27 https://github.com/Homebrew/brew/blob/master/Library/Homebre... https://developers.google.com/analytics/devguides/collection/protocol/v1/parameters#aip https://developers.google.com/analytics/devguides/collection... https://support.google.com/analytics/answer/2763052?hl=en https://support.google.com/analytics/answer/2763052?hl=en Of note: If the IP anonymization method is used, then at no time is the full IP address written to disk as all anonymization happens in memory nearly instantaneously after the request has been received.
- pdkl95 9y agoSee my other post[1]. Yes, they are not storing all of the IP; they are simply storing the most interesting 3/4 of it (including the ASN). The most difficult problem they have to solve is a 1-in-256 guess, if-and-only-if the other 255 neighboring IPs in the same "anonimized" bucket also generate similar types of GA records. In practice, the realities of IP distribution and not-perfectly-uniform host behavior will make this one of the easiest records to correlate. [1] https://news.ycombinator.com/item?id=16787053 https://news.ycombinator.com/item?id=16787053
- dickeytk 9y agonot if there isn't any PII