Live data from Hacker News

How we built a GDPR-compliant website analytics platform without using cookies

usefathom.com

31–40 of 129 posts

Re: How we built a GDPR-compliant website analytics platform without using cookies

#31

As a user of the open source version of Fathom, I'm a little concerned by the lag in publishing this update to the community edition. I assumed development work was happening in the open on Github, but I guess that's not the case?

Whole new language & codebase. Old developer left, we don't write Go.

Out of curiosity, which language did you choose to write the new code base?

Re: How we built a GDPR-compliant website analytics platform without using cookies

#32
post #27

Earlier quoted context omitted.

Thanks for the concern here. We are GDPR compliant (and may be exempt from it). See here: https://usefathom.com/data/

You might like to edit the line on that policy page that refers to "the most privacy-focused manor"... while a privacy-focused manor is an interesting idea, I suspect you meant "manner". :)

lolololol

Re: How we built a GDPR-compliant website analytics platform without using cookies

#34
post #4

sorry but, isn't that a (unnecessarily complex) cookie?

Technically no - cookies are stored by the user. If anything it is technically worse in some ways because it moves it to the back end outside of user control.

Re: How we built a GDPR-compliant website analytics platform without using cookies

#37

Earlier quoted context omitted.

So it's not as easy as just pushing the update to the repo. We are still committed to open-source, but we also have a business to run and need to make a living here (we're two dudes who care about privacy, not a huge company with deep pockets) :) The community version is getting a full update soon. We just have to focus on profit a bit (this keeps us in business and able to update the repo).

There's certainly nothing wrong with that. But this sounds a little defensive. And if you're going to promote the "Community Edition"/open-source nature of the codebase, this should probably be made more clear to your users/contributors. (Maybe it is made clear and I'm just not seeing it, though - this is my first time hearing about this product).

I think the defensiveness comes when people put comments such as "I'm a little concerned by the lag in publishing this update". I've never spoken like this in my life to an OS contributor and I use open-source software every day. We're working hard to get the software OS but we were originally planning on keeping the codebases separate (since they were different languages). We only recently pivoted on this after speaking to some wonderful people in the OSS community. Perhaps our communication has been poor, so we'll work on that, but we are working hard at this.

Re: How we built a GDPR-compliant website analytics platform without using cookies

#39

Earlier quoted context omitted.

Thanks for the concern here. We are GDPR compliant (and may be exempt from it). See here: https://usefathom.com/data/

Tell me if I get this correct: Alice visit a site and gets the hash 1234. The analytics data is stored and associated with hash 1234, but soon after, hash 1234 is removed. However the aggregate visitor analytic that was associated with hash 1234 data persists. Then another user (say Alice again) returns and gets hash 5678. Analytic data is tracked, stored with hash 5678 for the 30 minutes (or less), and then hash 567…

That's exactly how it works. The purpose being to make it completely impossible to ever single out a user and see which pages they viewed on a website.

Re: How we built a GDPR-compliant website analytics platform without using cookies

#40

Earlier quoted context omitted.

Whole new language & codebase. Old developer left, we don't write Go.

So it's not as easy as just pushing the update to the repo. We are still committed to open-source, but we also have a business to run and need to make a living here (we're two dudes who care about privacy, not a huge company with deep pockets) :) The community version is getting a full update soon. We just have to focus on profit a bit (this keeps us in business and able to update the repo).

Got it, makes sense. I appreciate the commitment to open source, and I'm really enjoying the product after migrating all of my personal stuff off of GA. Looking forward to trying the new version!
Post reply on HN