markosaric

10 ms·

1. 61.▲
   by markosaric 6y ago

   We generate a daily changing identifier using the visitor’s IP address and User Agent. To anonymize these datapoints, we run them through a hash function with a rotating salt. hash(daily_salt + website_domain + ip_address + user_agent) This
2. 62.▲
   by markosaric 6y ago

   Everything is isolated. There's no way for us nor for our customers to get visitor history across days, across websites or across devices. See https://plausible.io/privacy-focused-web-analytics
3. 63.▲
   by markosaric 6y ago

   Old salts are deleted to avoid the possibility of linking visitor information from one day to the next. See https://plausible.io/data-policy
4. 64.▲
   by markosaric 6y ago

   We never store IP addresses in our database or logs. See the full details of our data policy: https://plausible.io/data-policy
5. 65.▲
   Cloudflare Analytics review(markosaric.com)

   163 points by markosaric 6y ago|52 comments
6. 66.▲
   Cloudflare Analytics review(markosaric.com)

   3 points by markosaric 6y ago|0 comments
7. 67.▲
   by markosaric 6y ago

   Do you have any examples of projects doing this? Thanks!
8. 68.▲
   by markosaric 6y ago

   thanks! that's a good point and makes sense to do!
9. 69.▲
   by markosaric 6y ago

   we'll keep the script itself on MIT just to avoid any possible confusion in the future.
10. 70.▲
    by markosaric 6y ago

    thanks, good point! we'll make that change just to avoid any possible confusion in the future.
11. 71.▲
    by markosaric 6y ago

    For now we just changed to AGPL as a defensive move to avoid these threats. It was an unplanned move that we didn't even think about few days ago. Next step is really to consider what we want to do in the future and if necessary add a
12. 72.▲
    by markosaric 6y ago

    yep, we know now! first time involved in an open source project and perhaps naively we thought that these things don't happen!
13. 73.▲
    by markosaric 6y ago

    Yeah, seems like we got on the radar of some corporations recently. One company was promoting a proprietary, privacy first alternative to GA, we checked it out and several features/elements looked pretty much exact replicas of Plausibl
14. 74.▲
    by markosaric 6y ago

    thank you! the easy / "obvious" choice was to close source but this was not really something we wanted to consider. we're in the privacy first space and we want to stay fully open source. AGPL should hopefully protect us
15. 75.▲
    by markosaric 6y ago

    thank you! i guess you can say that we were a bit naive about this whole permissive license thing so it now feels better to have some of the protection that AGPL brings
16. 76.▲
    Why we’re changing to the AGPL license(plausible.io)

    286 points by markosaric 6y ago|254 comments
17. 77.▲
    by markosaric 6y ago

    It's crazy what we need to do these days just to surf the web! I do this: VPN on at all times Firefox as the main browser Firefox enhanced tracking protection set to Strict Firefox containers enabled to isolate specific sites when I do
18. 78.▲
    by markosaric 6y ago

    Some thoughts: * Habit: GA is so ingrained into the web development / marketing so it's the safe / default choice that not many will question * Data: GA collects everything imaginable people don't need but it's stil
19. 79.▲
    by markosaric 6y ago

    i guess the whole web moved in that direction over the years. from keep it simple, self-host everything and reduce all dependencies, to use the cloud and third-party services as much as possible. just check any of the mainstream websites an
20. 80.▲
    by markosaric 6y ago

    that's the one that's linked to in this post :)
21. 81.▲
    by markosaric 6y ago

    thanks! we're big fans of open source so wanted as permissive licence as possible. one of the things we spend a lot of time thinking about is how to make our project sustainable while still being as open as possible in everything we do
22. 82.▲
    by markosaric 6y ago

    depends on what study you look at, Google Analytics is installed on everywhere from 50% to 85% of all websites on the web. that may not be a big issue if Google wasn't also the largest advertising company on the web. a blog post that h
23. 83.▲
    by markosaric 6y ago

    thank you! what would you like improved in the UI?
24. 84.▲
    by markosaric 6y ago

    :)
25. 85.▲
    by markosaric 6y ago

    yeah all the privacy regulations make it difficult to do all the tracking that some businesses are used to. it's clear from testing that if they actually enforced things such as GDPR and asked for consent, majority of visitors will sa
26. 86.▲
    by markosaric 6y ago

    hmm that's weird! just checked and seems to work all fine. no HN hug of death today :) do you perhaps run any adblocker or something like that? the link is: https://plausible.io/self-hosted-web-analytics
27. 87.▲
    by markosaric 6y ago

    thanks! from our experience and testing, most website visitors say no to give tracking consent / storing cookies (up to 90+%) so this was a good balance between making something that's compliant with regulations and that's pr
28. 88.▲
    by markosaric 6y ago

    from what i know, Posthog is focused more on app/product analytics while we're focused on web analytics.
29. 89.▲
    by markosaric 6y ago

    Thanks! Depends really on the perspective you look at it from. That post is from the visitor privacy / privacy regulations perspective. If you use GA full on, you will get some advantages such as storing cookies on devices but if you e
30. 90.▲
    by markosaric 6y ago

    yep, we've added that. instructions are here: https://docs.plausible.io/hash-based-routing/