Using a middle-man proxy for GA is an interesting idea I've seen. GA can take input from the backend, rather than the frontend, if you wish. So you could do s

Using a middle-man proxy for GA is an interesting idea I've seen. GA can take input from the backend, rather than the frontend, if you wish. So you could do some tokenizing/removal/etc of sensitive data, like IP addresses, but still use GA for it's reporting strengths. Edit: The GA api does allow for things like overriding the geolocation such that if you aren't sending the IP address, there's still relevant geo data to report on.