4 ms·
What's wrong with doing something like this? If it contains PII, then I agree, the additional hassle of dealing with everything that comes with handling PII (li
by capableweb 5y ago
What's wrong with doing something like this? If it contains PII, then I agree, the additional hassle of dealing with everything that comes with handling PII (like GDPR) becomes too much, easier to just don't do it. But if it doesn't contain PII, it can be useful to see how many people drop off a form VS submitting it for example.
- Moru 5y agoRecord how many opens the form and compare to how many actually submit the form?
- capableweb 5y agoYeah, I'm not saying this is a silver-bullet that works in all cases, but some use cases do work better with it. For example, if said form shows one question at a time without any backend requests being done between questions, you could do one last try to log which question the user dropped off at. But again, no silver-bullet.
- vntok 5y agoHow many users submitted the form vs how many users reached the form's page won't tell you anything about why they left or how long they struggled before submitting. A beacon sent for each click on links on the form's page will tell you how many users left for this or that other page, which is very useful to know and optimize by removing the link and/or bringing its contents to the page itself. A beacon sent for each form submission attempt will tell you how many users make mistakes while filling in the form, how good the error messages are, and whether the users tend to fix their input or leave. Bonus points for incrementing an "attempt" hidden field on each submit button click so that you can see how many attempts it takes for all fields to be filled correctly. Tracking what works and what doesn't can drive a lot of UX improvements, for the immediate and measurable benefit of the user.
- fivea 5y ago> If it contains PII (...) How can you tell?
- capableweb 5y agoHow you can tell if the data you're collecting is PII? I guess there are many definitions of PII, but I generally base my own understanding on the GDPR definition: > ‘Personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
- fivea 5y ago> How you can tell if the data you're collecting is PII? No. How can you tell, as a user of any random website, that the script your browser is running as part of that page you've opened isn't shipping PII collected from your usage.
- mattlondon 5y agoYou can tell by not entering any PII into the site in the first place. IP is technically PII in some places. Personally I am not worried if a criminal gets "my" IP in the same way that I am not worried if they have my phone number. I would be worried if they had my name address age bank account info etc, but then I don't give that out freely
- fivea 5y ago> You can tell by not entering any PII into the site in the first place. That's not the definition of PII. At best, that covers a small subset of PII. PII means any information that can be used to identify you, either directly or indirectly. When you access a website combined with which link you opened or which search keywords you used can be used to infer who you are. How do you tell if a script is not shipping that info to an undisclosed third-party?
- tantalor 5y agoIP addr & cookies are PII
- capableweb 5y agoIP addresses, yes. Cookies not always, depends on what you store in them. So my point remains, nothing wrong with hoarding data if there is no PII.