Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Umami: Self-hosted open-source alternative to Google Analytics

umami.is

Post reply on HN
Print view View original

171–180 of 235 posts

Re: Umami: Self-hosted open-source alternative to Google Analytics

#171

Post by sinsterizme »

Aeolun wrote: post #164
slykar wrote: post #158

Earlier quoted context omitted.

I've listened to a podcast interview with a lawyer specializing in EU privacy laws and he said that it does not matter if the personal data is hashed or encrypted. It's still personal data. This was about data stored in a database tough, but browser local storage is a database. This was mentioned when the guest spoke about right to be forgotten. The law is really weird, because you need to delete user's data from you…

> it does not matter if the personal data is hashed or encrypted That sounds odd. If there is no way to go back from the hash to the data it is no different from a random string of letters and numbers.

Let’s take a hashed IP address.There are 4.3B ipv4 addresses. So a few minutes on an old laptop to generate a rainbow table. With decent hardware it would be seconds. The rainbow table could then be used to identify all the IPs you store. If they are salted, then each IP would need to be brute forced, but still only seconds on good hardware

Re: Umami: Self-hosted open-source alternative to Google Analytics

#172

Post by markl42 »

I'll throw a shoutout for a top tier project - https://github.com/zgoat/goatcounter

Using it for some personal stuff, and does absolutely everything I need it to, and then some.

I love the ethos of the project, and whilst it's open source, there's a hosted option that looks super reasonable too.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#173

Post by Sephr »

mcao wrote: post #162
madeofpalk wrote: post #156

Earlier quoted context omitted.

> I am not a lawyer so I cannot say for sure what constitutes PII and what breaches GDPR If you don't feel fit to judge whether something breaches GDPR, then maybe you shouldn't say "so it is GDPR and CCPA compliant".

Fair point. I was simply following the "common practice" from other products making these claims, which is to not store personal user data and only generate an anonymous ids. Maybe that's not fully compliant, I don't know, so I went ahead and removed any mention of GDPR from the website. It's not really my goal anyways. I'm just trying to release free software while they are charging money and making these claims.

The IDs that you generate aren't anonymous like Plausible.io. You simply need to address that issue and you should be mostly there for GDPR compliance.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#175

Post by awavering »

ggregoire wrote: post #155
lxe wrote: post #130

I've seen a bunch of these simple self-hosted log dashboards here on HN, but I don't think they directly compare with google analytics, which is just a much more powerful and much much more complicated product. Not to say this isn't a great product, but it really isn't an alternative to GA.

Do you know any good resources to learn the intricacies of Google Analytics and its related marketing concepts?

GA's paradigm is based on the Acquisition/Behavior/Conversion model championed by Avinash Kashik. His blog and Google's own courses are great starting points.

https://www.kaushik.net/avinash/

https://www.kaushik.net/avinash/digital-marketing-and-measur...

https://analytics.google.com/analytics/academy/

Re: Umami: Self-hosted open-source alternative to Google Analytics

#176

Post by nodesocket »

mcao wrote: post #69

Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…

How does a post on HN that has 591 points and on the front page only have 1184 views and 567 visitors in the last 24 hours according to the live demo? Something is not right. Should be seeing lots more page views and users right?

EDIT: just noticed the demo is for another site flightphp.com not the landing page umami.is which is sort of weird. That explains it. The demo should really be demoing the metrics for umami.is. Which is a shame, because that would prove how scalable umami.is is. Unfortunately umami.is is not eating its own dog food.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#178

Post by KingOfCoders »

divbzero wrote: post #163
malisper wrote: post #103

One of the claims of Umami is that it's GDPR compliant: > Umami does not collect any personally identifiable information so it is GDPR and CCPA compliant. No cookie notices are needed because Umami does not use cookies. From auditing the source code, this doesn't seem to be the case. First, it claims it doesn't use cookies, but it clearly uses localStorage to store a "sessionKey"[0]. The other claim, that Umami is GD…

Would randomly generating the session key instead of hashing client IP and other properties satisfy GDPR’s requirement of no PII? The definition in GDPR Art. 4 reads: [1] > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such…

What would session key mean? How does the session end? Where do you store the session key?

Re: Umami: Self-hosted open-source alternative to Google Analytics

#179

Post by johncolanduoni »

Aeolun wrote: post #164
slykar wrote: post #158

Earlier quoted context omitted.

I've listened to a podcast interview with a lawyer specializing in EU privacy laws and he said that it does not matter if the personal data is hashed or encrypted. It's still personal data. This was about data stored in a database tough, but browser local storage is a database. This was mentioned when the guest spoke about right to be forgotten. The law is really weird, because you need to delete user's data from you…

> it does not matter if the personal data is hashed or encrypted That sounds odd. If there is no way to go back from the hash to the data it is no different from a random string of letters and numbers.

It’s different because it allows reidentification. It prevents you from coming up with an IP or what have you out of thin air, but you or another party you give it to can effectively use it as a perfect proxy of whatever you hashed.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#180

Post by [deleted] »

nodesocket wrote: post #176
mcao wrote: post #69

Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…

How does a post on HN that has 591 points and on the front page only have 1184 views and 567 visitors in the last 24 hours according to the live demo? Something is not right. Should be seeing lots more page views and users right? EDIT: just noticed the demo is for another site flightphp.com not the landing page umami.is which is sort of weird. That explains it. The demo should really be demoing the metrics for umami.…

[deleted]
Post reply on HN