News for hackers. Stuff that matters.
Re:No Cookie for You by Wowfunhappy on Thursday December 17, 2020 @01:08PM (#25458317)
Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites? Or which costs less than ~$10 per year.

I have a basic Github Pages site, and I currently don't know whether anyone is looking at it, beyond the very few who take the time to email me. I don't need (or want) to know anything about my visitors, but it would be nice to know that I'm not simply tossing stuff into the ether.

Re:No Cookie for You by amzans on Thursday December 17, 2020 @06:21PM (#25461820)
> Does anyone happen to know of a service like this that is free (not self hosted) for non-commercial, low-traffic sites?

Panelbear is privacy-friendly, and has a free plan with 5,000 page views per month. Commercial use is allowed.

https://panelbear.com

Full-disclosure: I’m running this service. Feel free to ask me anything :)

Re:No Cookie for You by trungdq88 on Thursday December 17, 2020 @07:11PM (#25462241)
Panelbear is great, I'm using it. I have a small website with < 1000 page views a month and the free plan of planelbear is perfect!

Thank you for providing this service.

Re:No Cookie for You by wussboy on Thursday December 17, 2020 @08:51PM (#25462914)
Exactly what I was looking for. Thank you.
Re:No Cookie for You by bbellini on Thursday December 17, 2020 @01:46PM (#25458787)
I would recommend GoatCounter.

https://www.goatcounter.com/

Re:No Cookie for You by mattowen_uk on Friday December 18, 2020 @04:59AM (#25465569)
And there was me hoping for one of those old-school page-counter.gifs, but with numbers made out of goats...
Re:No Cookie for You by alexchamberlain on Thursday December 17, 2020 @02:15PM (#25459143)
I thought that tracking cookies needed permissions regardless of whether they were first party or 3rd party?
Re:No Cookie for You by cuu508 on Thursday December 17, 2020 @02:52PM (#25459586)
Parent commenter says:

> I currently don't know whether anyone is looking at it

You don't need tracking cookies to track simple metrics like pageview numbers.

Re:No Cookie for You by mattowen_uk on Friday December 18, 2020 @05:03AM (#25465593)
EU law states that you have to disclose you are using ANY cookies that are NOT REQUIRED for the correct functioning of the site (for the end user).

So yes, use of tracking cookies, first or third party, would require a Cookie Consent Banner.

Re:No Cookie for You by oauea on Thursday December 17, 2020 @02:01PM (#25458965)
> not self hosted

you'll need a cookie banner then

Re:No Cookie for You by ghego1 on Thursday December 17, 2020 @02:39PM (#25459439)
Not necessarily. Only if personal data is collected by the third party.
Re:No Cookie for You by cameronh90 on Thursday December 17, 2020 @09:04PM (#25462979)
I thought that with the recent changes to PECR they that clarified any non-essential cookie-like technology needs permission, irrespective of whether it's first party or pseudonymous. And additionally that analytics does not count as strictly necessary.

That seems to be the advice of the UK ICO: https://ico.org.uk/for-organisations/guide-to-pecr/cookies-a...

Re:No Cookie for You by M2Ys4U on Friday December 18, 2020 @05:48AM (#25465861)
You need to notify users, and give them an opt-out, if the cookies are not strictly necessary for the provision of the service.

Analytics cookies are not strictly necessary.

Re:No Cookie for You by Wowfunhappy on Friday December 18, 2020 @08:06AM (#25466651)
All I want to see are pageviews. That shouldn’t require cookies/fingerprints.
Re:No Cookie for You by oauea on Saturday December 19, 2020 @01:53PM (#25480015)
It shouldn't, but nowadays it always does.

Alternatively your pagecount will shoot to the millions if you have someone holding f5.

Re:No Cookie for You by ljm on Thursday December 17, 2020 @02:53PM (#25459593)
To be fair, most of them probably do. It's not like the introduction of GDPR in Europe 2 years ago suddenly made all of the shit a marketing dept shoves into Google Tag Manager completely legit and above board.

These third parties will take what you give them and _also_ take what they can get from your browser if you're embedding their script. Are you going to proxy those scripts as well to stop them getting the user's IP address and then geolocating it to grab even more info?

The cookie warning banner is bullshit only in the sense that it achieves nothing. Accept it or deny it, it won't change a thing. Same with the tracking consent popups: despite the law saying they should be opt-in by default, they're still treated as opt-out by default, meaning that all of these sites _still_ collect your data because you're blacklisting individual sites from tracking, as opposed to whitelisting them. You need to set a cookie to say that you don't want tracking and not thousands of cookies to say you do want it?

That's being tracked... it's all wrong. Literally everything you offer as information, or don't offer, is another node in their graph.

Re:No Cookie for You by nullsense on Thursday December 17, 2020 @03:53PM (#25460268)
It really shits me that a lot of them you can't even deny it. They just have a button like "I understand".

WTF is that...

Re:No Cookie for You by ryukafalz on Thursday December 17, 2020 @06:45PM (#25462016)
Or they treat continuing to use the site as consent. Some of them are really passive-aggressive about it too. I've seen cookie banners with wording like "We use cookies, because duh, who doesn't in 2020? Click here or keep using the site to accept."

Completely at odds with the whole "informed consent" thing.

Re:No Cookie for You by ljm on Friday December 18, 2020 @11:04AM (#25468366)
And then they wonder why we use things like uBlock, which are pretty much the only tools we can rely on to genuinely revoke consent. Or revoke as much of it as possible.
Re:No Cookie for You by ignoramous on Thursday December 17, 2020 @02:29PM (#25459336)
Re:No Cookie for You by blaisio on Thursday December 17, 2020 @02:38PM (#25459432)
I have nothing directly against cloudflare but I think it would be better to try to support one of the smaller analytics companies if possible. They are the ones who made products that got big companies like cloudflare interested in the space.
Re:No Cookie for You by mixmastamyk on Thursday December 17, 2020 @03:41PM (#25460132)
An analytics service designed to add value to another product and does not need to be profitable in itself sounds like the best kind to me.
Re:No Cookie for You by fs111 on Thursday December 17, 2020 @03:37PM (#25460072)
"We are democratizing web-analytics" wow, really? Well the people have voted and they want no analytics at all. Thank you very much.
Re:No Cookie for You by Wowfunhappy on Thursday December 17, 2020 @02:41PM (#25459463)
Oh, this is perfect, thank you!
Re:No Cookie for You by krlx on Thursday December 17, 2020 @05:05PM (#25461129)
I developed for myself krlx.fr/feu-analytics/ for exactly the same scenario.

It is self-hosted but on firebase and taking advantage of the free tier. Of course there is no personal data collected at any point.

There are still improvement to do, but as it works perfectly for me I have not be able to gather enough motivation to do that.

Re:No Cookie for You by dfreire on Thursday December 17, 2020 @01:22PM (#25458485)
Re:No Cookie for You by MarekKnapek on Thursday December 17, 2020 @01:24PM (#25458506)
Few years back I created some HelloWorld application on Google's AppEngine (requires Java, Python or Go) and was positively surprised about its statistics on theirs dashboard.
Re:No Cookie for You by type0 on Thursday December 17, 2020 @02:23PM (#25459261)
I was also surprised but the number of different dumb bots that had tried to brute-force our app engine site on /wp-login.php

and it wasn't even running on wordpress

Re:No Cookie for You by neilparikh on Thursday December 17, 2020 @03:55PM (#25460288)
I get requests to /wp-login.php (and the like) on my simple Haskell web app hosted on my university's servers. They're quite persistent and I'm not even sure how found the URL to my app in the first place (the format is something like universityname.com/~userid/projectname, and I haven't linked it anywhere).
Re:No Cookie for You by camkego on Thursday December 17, 2020 @03:18PM (#25459845)
https://simpleanalytics.com/ Says this on their homepage: We don't use cookies or collect any personal data. So no cookie banners, GDPR, CCPA, or PECR to worry about.

Seems like a cool company/project to me.

But, it's not free :( $19/mo Still thought it's worth pointing out.

Re:No Cookie for You by hydroxideOH- on Thursday December 17, 2020 @04:14PM (#25460510)
Netlify Analytics is $9/mo
Re:No Cookie for You by Wowfunhappy on Thursday December 17, 2020 @08:58PM (#25462945)
My approximate budget was $10 per year, not month! :)
Re:No Cookie for You by hydroxideOH- on Sunday December 20, 2020 @07:59PM (#25491082)
Fair enough! Probably not going to happen without self hosting.
Re:No Cookie for You by elliekelly on Thursday December 17, 2020 @03:25PM (#25459917)
Make the visitor counter great again!