News for hackers. Stuff that matters.

A comment on Plausible and Fathom analytics are not GDPR compliant.

Re:Plausible and Fathom analytics are not GDPR compliant by ellinoora on Wednesday August 19, 2020 @10:21PM (#24219235)
Both Fathom [1] and Plausible [2] claim to be GDPR compliant, but they are not.

They use a technique called "device fingerprinting" by collecting online identifiers, such as IP addresses, and browser characteristics for identification. Thus user consent is needed.

1: https://usefathom.com/gdpr-ccpa-pecr-compliant 2: https://plausible.io/data-policy

[ Parent | on HN ]
Re:Plausible and Fathom analytics are not GDPR compliant by ezekg on Friday August 28, 2020 @05:06PM (#24309926)
Plausible's fingerprinting uses a rotating salt, which is rolled daily and the previous salt is discarded. That means the hash can't be tied to a given user and their IP/browser at a later date. How is that not GDPR compliant? How is Volument better?
[ Parent | on HN ]