> any network request is going to send an IP address Yup, that's my point. > If that alone is enough to make a service illegal then third-party analytics is g

> any network request is going to send an IP address Yup, that's my point. > If that alone is enough to make a service illegal then third-party analytics is going to be just flat out impossible for everyone. Yup, that's my point. EU court rulings say it's illegal to transfer data to Google, because Google is subject to the CLOUD Act in the United States. IP Address is personal data, and is considered transferred just by having the user's client connect to Google's servers. Google's description of what they will or will not do with the IP Address is legally invalid, because the CLOUD Act can compel them to break their promises. This ruling, while unfortunate, is correct. Third-party analytics in general are not illegal. What's illegal is third-party analytics (or third-party anything) hosted by a US company subject to the CLOUD Act. Even then, it's possible to make it legal by running it through a self-hosted proxy which anonymizes the data before sending it over to Google. But a direct connection from the user-agent to Google servers is illegal.