3 ms·

Looks like a great tool! Questions: I think you might be based in the Netherlands(?), how does UXWizz conform to European laws of privacy? I see that it tracks

Looks like a great tool! Questions: I think you might be based in the Netherlands(?), how does UXWizz conform to European laws of privacy? I see that it tracks IP addresses, is that legal? How does it handle cases where people don't respond or opt out of eu cookie consent? Thanks!

XCSme 5y ago
> Looks like a great tool! Thanks! I spent over 8 years working on it, I am still improving it :) There is a page regarding privacy here: https://docs.uxwizz.com/about/personal-data-information https://docs.uxwizz.com/about/personal-data-information > I see that it tracks IP addresses, is that legal My specific instance of UXWizz does not track IP addresses (you can disable that in the tracking settings), but only a hash of the IP+User Agent. As for the privacy laws regarding tracking IP addresses, it's not very clear whether it requires consent or not as the law is ambiguous. The IP itself alone can not be directly considered personally identifiable information (PII) as having an IP address only, can not define which real person is the data associated with. Another thing to consider regarding IP addresses is that by default almost all services/servers/devices have an access log that does store IP addresses in plain text, so even if UXWizz does not store the IP, your OS/server/router/ISP might do. > where people don't respond or opt out of eu cookie consent As explained in the documentation above, UXWizz does not use any cross-session persistent storage on the user's system (not cookies nor localStorage). Also, being self-hosted, no data is shared with/sent to 3rd parties. If you need more detailed answers or want a deeper discussion on this subject you can contact me on Twitter or via the contact form on uxwizz.com.
- wolfhumble 5y ago
  Thanks for feedback, will contact if I have more info. Again it looks great and seems to be super fast.
  - XCSme 5y ago
    > it looks great seems to be super fast Thanks. I tried to optimize it as much as possible (mostly MySQL optimizations). All the data shown in the dashboard is generated on-the-fly in real-time (no archives/cached results). It's hosted on a cheap VPS in Germany (5EUR/month). The performance does degrade a bit when your database reaches 20 million+ sessions tracked, but for the average website receiving <100k monthly visits it should be fast.
- cdrx 5y ago
  > As for the privacy laws regarding tracking IP addresses, it's not very clear whether it requires consent or not as the law is ambiguous. The IP itself alone can not be directly considered personally identifiable information (PII) as having an IP address only, can not define which real person is the data associated with. "PII" has a specific meaning, in American law. Sites with references to it are likely not relevant to you, as you are based in Romania. The GDPR is crystal clear that IP addresses are personal data. There is no ambiguity. Depending on how you derive the hash of the IP and user agent, this could also be an "identifier" that may be personal data. But! There are six different reasons you can legally process personal data. Consent is only one of them. It is quite likely that a website owner would have a valid legitimate interest basis for having analytics. This does not require consent from the user. The only caveat to that; is that if the analytics needs a cookie (or local or session storage item) then you must seek consent for the cookie.

XCSme 5y ago

> Looks like a great tool! Thanks! I spent over 8 years working on it, I am still improving it :) There is a page regarding privacy here: https://docs.uxwizz.com/about/personal-data-information https://docs.uxwizz.com/about/personal-data-information > I see that it tracks IP addresses, is that legal My specific instance of UXWizz does not track IP addresses (you can disable that in the tracking settings), but only a hash of the IP+User Agent. As for the privacy laws regarding tracking IP addresses, it's not very clear whether it requires consent or not as the law is ambiguous. The IP itself alone can not be directly considered personally identifiable information (PII) as having an IP address only, can not define which real person is the data associated with. Another thing to consider regarding IP addresses is that by default almost all services/servers/devices have an access log that does store IP addresses in plain text, so even if UXWizz does not store the IP, your OS/server/router/ISP might do. > where people don't respond or opt out of eu cookie consent As explained in the documentation above, UXWizz does not use any cross-session persistent storage on the user's system (not cookies nor localStorage). Also, being self-hosted, no data is shared with/sent to 3rd parties. If you need more detailed answers or want a deeper discussion on this subject you can contact me on Twitter or via the contact form on uxwizz.com.

wolfhumble 5y ago
Thanks for feedback, will contact if I have more info. Again it looks great and seems to be super fast.
- XCSme 5y ago
  > it looks great seems to be super fast Thanks. I tried to optimize it as much as possible (mostly MySQL optimizations). All the data shown in the dashboard is generated on-the-fly in real-time (no archives/cached results). It's hosted on a cheap VPS in Germany (5EUR/month). The performance does degrade a bit when your database reaches 20 million+ sessions tracked, but for the average website receiving <100k monthly visits it should be fast.
cdrx 5y ago
> As for the privacy laws regarding tracking IP addresses, it's not very clear whether it requires consent or not as the law is ambiguous. The IP itself alone can not be directly considered personally identifiable information (PII) as having an IP address only, can not define which real person is the data associated with. "PII" has a specific meaning, in American law. Sites with references to it are likely not relevant to you, as you are based in Romania. The GDPR is crystal clear that IP addresses are personal data. There is no ambiguity. Depending on how you derive the hash of the IP and user agent, this could also be an "identifier" that may be personal data. But! There are six different reasons you can legally process personal data. Consent is only one of them. It is quite likely that a website owner would have a valid legitimate interest basis for having analytics. This does not require consent from the user. The only caveat to that; is that if the analytics needs a cookie (or local or session storage item) then you must seek consent for the cookie.