4 ms·

GDPR compliance. GDPR is the European privacy law. It protects European citizens so it applies not only to European companies but any company that does busines

GDPR compliance. GDPR is the European privacy law. It protects European citizens so it applies not only to European companies but any company that does business in Europe (having offices or advertising/selling there). Google does not give much assurance regarding their GDPR compliance... their text on that subject is mostly CYA and then they make it your responsibility to decide how to use it in compliance (if at all possible). The GDPR gives you a small window to count visitors through cookies as long as all private information (even IP) is anonymized... OR you can go do a more traditional tracking with their explicit agreement. This last use case is completely useless in terms of visitor statistics, but analytics companies sometimes dare suggest it (as in "this is the way to do things right... so our product is compliant and it's not our responsibility if you break the law"). That aside, I run international non-profit sites and GA is a bad look... and with good reason: Using social network sharing buttons, GA, CDNs, etc. gives too much power to track people to a few companies.

tannhaeuser 6y ago
> GA is a bad look Totally agree, but are there "acceptable" CDNs, like unpkg? What about Google Fonts? > The GDPR gives you a small window to count visitors through cookies as long as all private information (even IP) is anonymized. If it's not too much to ask, could you expand on that a bit, or share a link? I guess you mean it's ok to send a browser fingerprint for unique visitor stats without having to ask for permission, but I'm not aware of any legal debate let alone court decision with respect to that. Edit: obviously I can't read ("through cookies"), but cookies for unique visitor counts aren't "functional" are they, so my interpretation is that those cookies need consent; I'd love to hear otherwise though
M2Ys4U 6y ago
>GDPR is the European privacy law. It protects European citizens The GDPR does not discriminate based on citizenship. It applies if the organisation providing the service is in the EU/EEA* OR if the user of the service is in the EU/EEA* (to the extent that the data reference their activity in the EU/EEA). And the UK, but thanks to brexit there's a parallel UK GDPR in place so... take that in to account.

tannhaeuser 6y ago

> GA is a bad look Totally agree, but are there "acceptable" CDNs, like unpkg? What about Google Fonts? > The GDPR gives you a small window to count visitors through cookies as long as all private information (even IP) is anonymized. If it's not too much to ask, could you expand on that a bit, or share a link? I guess you mean it's ok to send a browser fingerprint for unique visitor stats without having to ask for permission, but I'm not aware of any legal debate let alone court decision with respect to that. Edit: obviously I can't read ("through cookies"), but cookies for unique visitor counts aren't "functional" are they, so my interpretation is that those cookies need consent; I'd love to hear otherwise though

M2Ys4U 6y ago

>GDPR is the European privacy law. It protects European citizens The GDPR does not discriminate based on citizenship. It applies if the organisation providing the service is in the EU/EEA* OR if the user of the service is in the EU/EEA* (to the extent that the data reference their activity in the EU/EEA). And the UK, but thanks to brexit there's a parallel UK GDPR in place so... take that in to account.