4 ms·

You have open sourced google analytics like tools. eg Piwik. Also just analyzing server logs should be enough in most use cases.

• vkou 7y ago
  > Also just analyzing server logs should be enough in most use cases. That sounds like a fantastic way to play GDPR roulette. Did the guy you hire to spec and build the server log analyzer follow the law, or did he just wing it? Contrast that to just using a SAAS offering, where you have someone to sue...
  • hartator 7y ago
    > Did the guy you hire to spec and build the server log analyzer follow the law, or did he just wing it? Nginx, haproxy, and others log all requests by default. If you are behind a CDN, requests are already anonymized as you get the CDN IPs. Not sure why you'll need a guy to set things up.
    • vkou 7y ago
      Logging isn't the hard part. Turning raw logs into metrics and action items is what requires you to pay that engineer, and what may get you get you in trouble with the GDPR, if they do it wrong.
      • hartator 7y ago
        You have open sourced tools for that. GoAccess for example. If the logs already contain the real IPs, you are already infringing GDPR. And that's all websites.