> if you derive city, region or country from that it becomes personal data I don't think city itself is a personal data. You could use user's IP address to ge

> if you derive city, region or country from that it becomes personal data I don't think city itself is a personal data. You could use user's IP address to get the city and then discard it and this way you know user's city but don't have to keep their IP address. Google Analytics can be a problem; Google or someone else should make the analytics that doesn't store IP addresses. And I think ISPs should randomly rotate IP addresses of their customers so they cannot be used for identification.