> What he replied is that he couldn't block the script alone if he was serving it from the same domain, so I proposed to move it to a subdomain, and he was fine

> What he replied is that he couldn't block the script alone if he was serving it from the same domain, so I proposed to move it to a subdomain, and he was fine with that. I have been lucky. Doubly so, since hosting the tracking script on the same domain as your website was a decision that was inevitably going to come back to haunt you at some point.