7 ms·

Show HN: Trackless - A GDPR-Friendly Google Analytics Opt-In Button

49 points by ascorbic 8y ago

neetso 8y ago
Don’t think you need this if you’re just using Google Analytics and have set it to only log anonymous IPs. You do need to have a cookie policy on your website such as this one on the ECB’s website: https://www.ecb.europa.eu/home/data-protection/html/index.en.html https://www.ecb.europa.eu/home/data-protection/html/index.en...
Sir_Cmpwn 8y ago
Instead, consider simply removing Google Analytifs from your website entirely.
- nicbou 8y ago
  There are legitimate reasons to need to know how your website is being used.
  - Sir_Cmpwn 8y ago
    You can find them out without Google Analytics. Careful study of your HTTP logs or tools like Piwik are also suitable.
lazyjones 8y ago
DNT is already opt-out functionality. Why force users to press extra buttons and provide localstorage? Does this even work in private browsing mode?
- ascorbic 8y ago
  Most people have never heard of DNT. This is an easy way to opt out in one click. If you're using private browsing you're probably also using an ad blocker, so you're fine anyway.
- weinzierl 8y ago
  This is actually what the (hopefully) upcoming ePrivacy Regulation (not to be confused with the existing ePrivacy Directive) suggests [1]: > Simpler rules on cookies: the cookie provision, which has resulted in an overload of consent requests for internet users, will be streamlined. The new rule will be more user-friendly as browser settings will provide for an easy way to accept or refuse tracking cookies and other identifiers. [1] https://ec.europa.eu/digital-single-market/en/proposal-eprivacy-regulation https://ec.europa.eu/digital-single-market/en/proposal-epriv...
  - kodablah 8y ago
    Ug, legislation requesting/suggesting browser features now? Or am I misreading? I wish they'd just leave people alone.
deleted 8y ago
[deleted]
galadran 8y ago
> Consent requires a positive opt-in. Don’t use pre-ticked boxes or any other method of default consent. [...] > You must ask people to actively opt in. Don’t use pre-ticked boxes, opt-out boxes or other default settings. Source: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/ https://ico.org.uk/for-organisations/guide-to-the-general-da...
- ascorbic 8y ago
  I address this in the FAQ. You can easily choose whether it's opt in or opt out.
  - Tomte 8y ago
    So, a „GDPR-hostile Google Analytics Opt-Out button, unless you change the defaults“ Yes, I see why your marketing sense told you to choose the untruthful version.
    - ascorbic 8y ago
      I'm using it in opt-in mode myself, and I'd hope most people would too. You'll see I recommend that in the docs too. The first step is getting site owners to give any opt-in or out facility at all, which is why I didn't make that the default. I'm sorry if you think that's untruthful. I'll probably change the default based on the feedback here.
  - hnarn 8y ago
    If opt-in is the only legal option, why do you default to opt-out?
    - ascorbic 8y ago
      The feedback here is pretty clear that I choose the wrong option, so I'll probably change it. The default is obviously to not install it, which gives no opt in or out at all.
dtx1 8y ago
> GDPR-Friendly > Opt-Out I don't think thats how it works
- merinowool 8y ago
  It is also missing "Delete my data" and "Download my data" options.
  - shabble 8y ago
    A good point! How do you access data that's held about you by/in Google Analytics, anyway?
    - butz 8y ago
      Not sure about accessing collected data, but you can delete user data from Google Analytics using User Deletion API (https://developers.google.com/analytics/devguides/config/userdeletion/v3/ https://developers.google.com/analytics/devguides/config/use...)
StavrosK 8y ago
This is a good idea (even though it's actually not GDPR compliant by default), but I think it would be much more useful if it were a "click here to install AdBlock Origin" button. Also, who in their right mind would click "enable Google analytics" in opt-in mode?
- ascorbic 8y ago
  I'm planning on adding to one of my sites in opt-in mode. I can write a post on what that does to the analytics after it's been up for a month or so.
  - StavrosK 8y ago
    I would be extremely interested to read the results.
- zerostar07 8y ago
  .. or any kind of privacy-related opt-in, if the opt out is readily available. Currently websites try to work around this by placing a "manage" link with countless options which makes it work to opt out, but that doesn't seem like something that will be allowed for long by the regulators. Privacy opt ins are effectively donation buttons, and we know how well these work.
weinzierl 8y ago
Matomo (formerly Piwik) offers an iframe you can insert in your privacy policy to handle the opt-out and opt-in. Furthermore if the ePrivacy Regulation (ePR)[2], which was supposed to enter into force along-side the GDPR on May 2018 but was delayed, should be adopted in it's current form first party analytics like Matomo will not require consent. See [3]: > The proposal also clarifies that no consent is needed for non-privacy intrusive cookies improving internet experience (e.g. to remember shopping cart history) or cookies used by a website to count the number of visitors. [1] https://matomo.org/faq/general/faq_20000/ https://matomo.org/faq/general/faq_20000/ [2] https://en.wikipedia.org/wiki/EPrivacy_Regulation_(European_Union) https://en.wikipedia.org/wiki/EPrivacy_Regulation_(European_... [3] https://ec.europa.eu/digital-single-market/en/proposal-eprivacy-regulation https://ec.europa.eu/digital-single-market/en/proposal-epriv...
elizabeth058 8y ago
I lost my job few months back before i notice my wife started giving me attitudes, she changed passwords to every account that she has, plus put a pin lock on her phone, i have been searching for ways to retrieve her text messages without installing any software on her phone or having access to it, so far i am not having any luck. I was introduced to this wonderful hacker and he helped me hack and let me gain access to my wife's phone with just her phone number only. He help me hack into her phone and i get to know she's cheating and all. I was so sad and had to file for divorce, All thanks to this great hacker that helped me get my cheating wife. To all you cheating partners, The God's eye is here for you all, contact him on his email or text him only, His services are cheap, legit and affordable. Email:CYBERFILES.HACKER@GMAIL.COM or +1 510-858-1305
polote 8y ago
Why would you want to opt out from Google Analytics seriously ? They just record on what you click, and have no (and will never have) idea of who you are.
- butz 8y ago
  If Advertising features in Google Analytics are enabled, then your data might be used for remarketing, also collected data might be shared with Google for benchmarking, tech. support and account specialists. You can disable this, though https://support.google.com/analytics/answer/1011397 https://support.google.com/analytics/answer/1011397
- yoz-y 8y ago
  Google Anlytics provides only aggregate data to the site owners. But I think that Google themselves use it to improve their ad targeting algorithms, because why wouldn’t they?
  - ascorbic 8y ago
    Yes, exactly this. Even if site has enabled IP anonimity, Google still has the tracking cookies.
    - dbbk 8y ago
      Yeah IPs are only used for determining location I believe.
- dbbk 8y ago
  Not necessarily true, they have a User ID feature that can tie your site's user accounts to their Google Analytics behaviour.
czardoz 8y ago
Great, another button I've to click (apart from the annoying cookie notices) before getting to the website content. If this becomes popular, I'd think about creating a browser extension that automatically opts out of this.
FabianBeiner 8y ago
Why not just use what Google already provides? https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable https://developers.google.com/analytics/devguides/collection...

49 points by ascorbic 8y ago

Don’t think you need this if you’re just using Google Analytics and have set it to only log anonymous IPs. You do need to have a cookie policy on your website such as this one on the ECB’s website: https://www.ecb.europa.eu/home/data-protection/html/index.en.html https://www.ecb.europa.eu/home/data-protection/html/index.en...

Sir_Cmpwn 8y ago

Instead, consider simply removing Google Analytifs from your website entirely.

nicbou 8y ago
There are legitimate reasons to need to know how your website is being used.
- Sir_Cmpwn 8y ago
  You can find them out without Google Analytics. Careful study of your HTTP logs or tools like Piwik are also suitable.

lazyjones 8y ago

DNT is already opt-out functionality. Why force users to press extra buttons and provide localstorage? Does this even work in private browsing mode?

ascorbic 8y ago
Most people have never heard of DNT. This is an easy way to opt out in one click. If you're using private browsing you're probably also using an ad blocker, so you're fine anyway.
weinzierl 8y ago
This is actually what the (hopefully) upcoming ePrivacy Regulation (not to be confused with the existing ePrivacy Directive) suggests [1]: > Simpler rules on cookies: the cookie provision, which has resulted in an overload of consent requests for internet users, will be streamlined. The new rule will be more user-friendly as browser settings will provide for an easy way to accept or refuse tracking cookies and other identifiers. [1] https://ec.europa.eu/digital-single-market/en/proposal-eprivacy-regulation https://ec.europa.eu/digital-single-market/en/proposal-epriv...
- kodablah 8y ago
  Ug, legislation requesting/suggesting browser features now? Or am I misreading? I wish they'd just leave people alone.

deleted 8y ago

[deleted]

galadran 8y ago

> Consent requires a positive opt-in. Don’t use pre-ticked boxes or any other method of default consent. [...] > You must ask people to actively opt in. Don’t use pre-ticked boxes, opt-out boxes or other default settings. Source: https://ico.org.uk/for-organisations/guide-to-the-general-data-protection-regulation-gdpr/lawful-basis-for-processing/consent/ https://ico.org.uk/for-organisations/guide-to-the-general-da...

ascorbic 8y ago
I address this in the FAQ. You can easily choose whether it's opt in or opt out.
- Tomte 8y ago
  So, a „GDPR-hostile Google Analytics Opt-Out button, unless you change the defaults“ Yes, I see why your marketing sense told you to choose the untruthful version.
  - ascorbic 8y ago
    I'm using it in opt-in mode myself, and I'd hope most people would too. You'll see I recommend that in the docs too. The first step is getting site owners to give any opt-in or out facility at all, which is why I didn't make that the default. I'm sorry if you think that's untruthful. I'll probably change the default based on the feedback here.
- hnarn 8y ago
  If opt-in is the only legal option, why do you default to opt-out?
  - ascorbic 8y ago
    The feedback here is pretty clear that I choose the wrong option, so I'll probably change it. The default is obviously to not install it, which gives no opt in or out at all.

dtx1 8y ago

> GDPR-Friendly > Opt-Out I don't think thats how it works

merinowool 8y ago
It is also missing "Delete my data" and "Download my data" options.
- shabble 8y ago
  A good point! How do you access data that's held about you by/in Google Analytics, anyway?
  - butz 8y ago
    Not sure about accessing collected data, but you can delete user data from Google Analytics using User Deletion API (https://developers.google.com/analytics/devguides/config/userdeletion/v3/ https://developers.google.com/analytics/devguides/config/use...)

StavrosK 8y ago

This is a good idea (even though it's actually not GDPR compliant by default), but I think it would be much more useful if it were a "click here to install AdBlock Origin" button. Also, who in their right mind would click "enable Google analytics" in opt-in mode?

ascorbic 8y ago
I'm planning on adding to one of my sites in opt-in mode. I can write a post on what that does to the analytics after it's been up for a month or so.
- StavrosK 8y ago
  I would be extremely interested to read the results.
zerostar07 8y ago
.. or any kind of privacy-related opt-in, if the opt out is readily available. Currently websites try to work around this by placing a "manage" link with countless options which makes it work to opt out, but that doesn't seem like something that will be allowed for long by the regulators. Privacy opt ins are effectively donation buttons, and we know how well these work.

weinzierl 8y ago

Matomo (formerly Piwik) offers an iframe you can insert in your privacy policy to handle the opt-out and opt-in. Furthermore if the ePrivacy Regulation (ePR)[2], which was supposed to enter into force along-side the GDPR on May 2018 but was delayed, should be adopted in it's current form first party analytics like Matomo will not require consent. See [3]: > The proposal also clarifies that no consent is needed for non-privacy intrusive cookies improving internet experience (e.g. to remember shopping cart history) or cookies used by a website to count the number of visitors. [1] https://matomo.org/faq/general/faq_20000/ https://matomo.org/faq/general/faq_20000/ [2] https://en.wikipedia.org/wiki/EPrivacy_Regulation_(European_Union) https://en.wikipedia.org/wiki/EPrivacy_Regulation_(European_... [3] https://ec.europa.eu/digital-single-market/en/proposal-eprivacy-regulation https://ec.europa.eu/digital-single-market/en/proposal-epriv...

elizabeth058 8y ago

I lost my job few months back before i notice my wife started giving me attitudes, she changed passwords to every account that she has, plus put a pin lock on her phone, i have been searching for ways to retrieve her text messages without installing any software on her phone or having access to it, so far i am not having any luck. I was introduced to this wonderful hacker and he helped me hack and let me gain access to my wife's phone with just her phone number only. He help me hack into her phone and i get to know she's cheating and all. I was so sad and had to file for divorce, All thanks to this great hacker that helped me get my cheating wife. To all you cheating partners, The God's eye is here for you all, contact him on his email or text him only, His services are cheap, legit and affordable. Email:CYBERFILES.HACKER@GMAIL.COM or +1 510-858-1305

polote 8y ago

Why would you want to opt out from Google Analytics seriously ? They just record on what you click, and have no (and will never have) idea of who you are.

butz 8y ago
If Advertising features in Google Analytics are enabled, then your data might be used for remarketing, also collected data might be shared with Google for benchmarking, tech. support and account specialists. You can disable this, though https://support.google.com/analytics/answer/1011397 https://support.google.com/analytics/answer/1011397
yoz-y 8y ago
Google Anlytics provides only aggregate data to the site owners. But I think that Google themselves use it to improve their ad targeting algorithms, because why wouldn’t they?
- ascorbic 8y ago
  Yes, exactly this. Even if site has enabled IP anonimity, Google still has the tracking cookies.
  - dbbk 8y ago
    Yeah IPs are only used for determining location I believe.
dbbk 8y ago
Not necessarily true, they have a User ID feature that can tie your site's user accounts to their Google Analytics behaviour.

czardoz 8y ago

Great, another button I've to click (apart from the annoying cookie notices) before getting to the website content. If this becomes popular, I'd think about creating a browser extension that automatically opts out of this.

FabianBeiner 8y ago

Why not just use what Google already provides? https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable https://developers.google.com/analytics/devguides/collection...