3 ms·
At least in the EU, you still need consent to go down this path, so you end up rebuilding the existing analytics tools to manage that.
by closewith 1y ago
At least in the EU, you still need consent to go down this path, so you end up rebuilding the existing analytics tools to manage that.
- Fire-Dragon-DoL 1y agoYou don't: the ip, user agent header are necessary for you to serve the request and for you to protect from malicious usage. Both are fine use for gathering data under the current legislation. You can still convert those datasets in analytics.
- closewith 1y agoNo, you're wrong. You need consent to use IP address for analytics, even if lawfully collected for another reason under a different legal basis. Lots of precedent on this and it's clear cut.
- Fire-Dragon-DoL 1y agoBut you don't need to use the ip for analytics. Aggregate the data and throw it away.
- closewith 1y agoYou still need consent for that, as you processed the IP for that purpose and it is explicitly never allowed under other legal bases. Again, this is a completely settled matter in the EU, so you can easily look it up if your don't believe me.
- Fire-Dragon-DoL 1y agoCool, then ignore the ip and just consider the amount of requests to a given endpoint. Counting that should be sufficient