4 ms·
It's a very good system for having just enough web analytics for majority of the use cases. Don't need to give up users privacy and force them to download an i
by dragonsh 7y ago
It's a very good system for having just enough web analytics for majority of the use cases.
Don't need to give up users privacy and force them to download an intrusive proprietary JavaScript code on their browser to monitor their behaviors and in some cases pass on private information without their knowledge to third party services.
Hopefully we can go back to old days relying more on these kind of tools to just get anonymized statistics.
- rhizome 7y agoI haven't researched it yet, but I've been guessing/wondering that relying on logfile stats like these removes GDPR cookie notification requirements for your site. I should probably finalize my understanding of that one way or the other. :)
- dragonsh 7y agoProbably you can since you are not setting up any cookie on user's device. But most likely you are using some web fonts or CDN which might set some cookie. So for modern web application it will be really hard unless you host everything yourself and rely on server logs for any analytics. You have to be careful though if you are processing API request and capturing personally identifiable information. Your logs also need to be GDPR compliant.
- viraptor 7y agoGdpr and cookie notifications are different things though. You can still run Pikmin or something similar on your own infra, set cookies from it, and be gdpr compliant as long as you don't collect pii. (And comply with other parts)
- cygned 7y agoIt’s important to point out that IP addresses are considered PII, therefore storing them in log files requires to have a data privacy policy for all affected persons.
- rhizome 7y agoAh, I -- a lame USian -- assumed that essentially default apache logging was "OK." I've been wondering what's the maximum you can log without data privacy rearing its head, so I guess it's a little tighter than I thought!