News for hackers. Stuff that matters.
Re:Open source Google Analytics replacement by closewith on Wednesday May 07, 2025 @06:18PM (#43921091)
However, if you do this, you will still need to comply with all relevant privacy laws.

For example, in the EU, you need user consent to use server logs that include IP addresses for analytics. You also need to provide post-consent opt-outs and privacy statements and audit logs and all off a sudden you're building another analytics tool.

Re:Open source Google Analytics replacement by cortesoft on Wednesday May 07, 2025 @07:11PM (#43921426)
How exactly does that work? You need consent for server logs? Am I able to run fail2ban without consent?
Re:Open source Google Analytics replacement by closewith on Wednesday May 07, 2025 @07:41PM (#43921596)
In the EU, IP addresses are personal data and you need a legal basis for each form of processing. You could make an argument that Fail2Ban falls under legitimate interest, but there is now precedent that analytics must have user consent and another legal basis will not be accepted.
Re:Open source Google Analytics replacement by cccbbbaaa on Thursday May 08, 2025 @04:55AM (#43924368)
No, logs don't require consent in that case, see recital 49.