4 ms·
How do you know it doesn't need a consent notice? Anything that tracks people uniquely, via a personal identifier, is in-scope and counts as personal data. Is
by mrgreenfur 7y ago
How do you know it doesn't need a consent notice? Anything that tracks people uniquely, via a personal identifier, is in-scope and counts as personal data. Is the assumption here that it counts as 'legitimate interest'?
- mumblemumble 7y agoIt would appear that that's how it avoids needing a consent notice. The page says it doesn't track users.
- zachrose 7y agoI'm not sure that GoatCounter tracks people uniquely.
- smartmic 7y agoMore on this can be found on the Privacy page: https://www.goatcounter.com/privacy https://www.goatcounter.com/privacy
- Carpetsmoker 7y agoThere is no "unique personal identifier"; I have some ideas on how to track recurring visits without such an ID, but that's something for the future. Perhaps I should clarify the README on this a little bit.
- mrgreenfur 7y agoAhh, cool! Someone else linked to your privacy policy where it's super clear "Visitors are not tracked by using e.g. persistent cookies". Might be worth clarifying by bringing this line up especially as there are tons of "gdpr compliant" products that get fuzzy on the details pretty quickly.
- pat-leahy 7y agoThe referrer header which is stored may contain a unique personal identifier.