Awesome project! Google is definitely fading out for sure. I know many businesses and developers are tired of it. Looking forward to seeing what other inventions will give Google some competition.
Umami: Self-hosted open-source alternative to Google Analytics
221–230 of 235 posts
Re: Umami: Self-hosted open-source alternative to Google Analytics
#222I'd love to use this. But 34 dependencies? I know ~10 of them are React, and there's some in there that make sense. But I haven't got the time to audit them all, and re-audit it every time any of those dependencies update . And escape-string-regexp? Really? it's literally 2 lines of code [0]. Why have I got to give the maintainer of that project commit access to this program that will be seeing potentially sensitive…
Would you also criticize someone for using Apache Commons StringUtils? The fetishization of critiquing npm package choices is hilarious.
yes. And no, it's a major security problem that we're only just beginning to realise is a major security problem.
Re: Umami: Self-hosted open-source alternative to Google Analytics
#223Earlier quoted context omitted.
It doesn't matter if the UA or IP is stored, even using them to fingerprint a user requires GDPR consent.
Consent is only one potential basis for processing under GDPR. There are others such as "legitimate interest" which the controller and/or processor may rely on.
Users have the right to object to Legitimate Interest too. A vendor just declaring LI as a Legal Basis for processing isn't enough (legally).
Re: Umami: Self-hosted open-source alternative to Google Analytics
#224Earlier quoted context omitted.
I actually am using it to record metrics for umami.is: https://app.umami.is/share/8rmHaheU/umami.is I'm using it for all my websites. The reason I went with another site for the demo is because I wanted something with at least 30 days of data so users can play around with the different settings. Once I get enough data, I'll switch it over.
Just FYI, some mobile optimization is needed. https://imgur.com/a/j9MYG9z
Recommend to create an issue on the Github https://github.com/mikecao/umami
Re: Umami: Self-hosted open-source alternative to Google Analytics
#225Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…
I have a feeling this requires the database to be available to collect data. That's a bad pattern. No database can be up all the time and an application like this should not lose data.
Have a look at patterns that resolve this like Snowplow Analytics.
Re: Umami: Self-hosted open-source alternative to Google Analytics
#226Slightly off-topic: Does anyone have recommendations for self-hosted open source analytics that can handle a large volume site (think 500.000.000 impressions per month)? I can't imagine systems with MySQL/PostgreSQL as database can handle this.
Snowplow. 500 million events a month is nothing.
Re: Umami: Self-hosted open-source alternative to Google Analytics
#227Lots of home-grown analytics are very privacy focussed these days and do not use cookies. That's a good thing. For simple sites like blogs, simple low volume ecommerce, etc. But for more "serious" eCommerce, SAAS based applications and sites that are concerned with marketing on email, social and web then then optimizing what you show then and finally generating leads for salespeople to call or actual sales... Cookies…
Exactly, other than very minimal metrics you can't do much of anything without cookies. It's great that there are now many alternative analytics services available, but I feel like they all just do the exact same thing – stick a two-line script on your website, then get some very minimal data about your website. This is probably good enough for most people, but it becomes very hard to actually do anything with this data if you're running a more "serious" project.
But I'm always amazed at how much popularity these projects seem to gather. I myself made a very simple landing page [1] for a similar service (but one that caters more to the saas based applications), and it's managed to gather some interest even though I've barely done any promotion to it.
[1]: https://tinylens.io
Re: Umami: Self-hosted open-source alternative to Google Analytics
#228Earlier quoted context omitted.
I am not a lawyer so I cannot say for sure what constitutes PII and what breaches GDPR. I am using the same techniques as Fathom Analytics, Plausible.io and other products. Everything is hashed into a unique session id and none of the actual data like user agent or IP address is actually stored. It is the same data that is found in server log files. In the strictest interpretation of GDPR, I don't think any analytics…
I've listened to a podcast interview with a lawyer specializing in EU privacy laws and he said that it does not matter if the personal data is hashed or encrypted. It's still personal data. This was about data stored in a database tough, but browser local storage is a database. This was mentioned when the guest spoke about right to be forgotten. The law is really weird, because you need to delete user's data from you…
Without correlating data it really isn't "personal" though. You could delete the User account and related without touching this product and you've complied because this data could then never be correlated. Also, if nothing in the activities leaks the user's own identity, then again wouldn't really be personal.
IANAL
Re: Umami: Self-hosted open-source alternative to Google Analytics
#229Earlier quoted context omitted.
> it does not matter if the personal data is hashed or encrypted That sounds odd. If there is no way to go back from the hash to the data it is no different from a random string of letters and numbers.
Let’s take a hashed IP address.There are 4.3B ipv4 addresses. So a few minutes on an old laptop to generate a rainbow table. With decent hardware it would be seconds. The rainbow table could then be used to identify all the IPs you store. If they are salted, then each IP would need to be brute forced, but still only seconds on good hardware
That would still take collaborative data from another dataset outside this product. Compliance would be up to whoever hosted this, and the collaborative data set to comply with the request anyway.
Re: Umami: Self-hosted open-source alternative to Google Analytics
#230Earlier quoted context omitted.
I am not a lawyer so I cannot say for sure what constitutes PII and what breaches GDPR. I am using the same techniques as Fathom Analytics, Plausible.io and other products. Everything is hashed into a unique session id and none of the actual data like user agent or IP address is actually stored. It is the same data that is found in server log files. In the strictest interpretation of GDPR, I don't think any analytics…
An IP address is considered personally identifiable information in at least Germany. If you're storing that you'll already have to think about the GDPR. This is just another misguided attempt to adhere to the letter of the law while going against its spirit. Is is misguided because it's based on a wrong understand of what the letter of the law actually is. You see this a lot with adtech and analytics companies who tr…
So, effectively, you're saying you aren't allowed to have a server that logs requests?