51–52 of 52 posts
I've been self-hosting Matomo (née Piwik) for about a decade and really enjoying it, but I do wonder about looking at the alternatives
One warning: the site claims you don't need a "cookie popup" since it doesn't use cookies. That's false. The ePrivacy directive states that reading or writing any data from the user device other than for the purpose of serving the site needs permission. This thing uses the user agent string and IP to identify users, so you need a permission popup. It's great that they put much effort into not storing those things, us…
Spot on. The author acknowledges that cookies are actually more privacy friendly, but then concludes with “it is what it is”. Kind of disappointing. This is my major gripe with all the privacy friendly analytics (disclaimer: I authored two, namely Fathom when it was still open-source and Koko Analytics) tools that submerged over the past few years. Elaborate work went into bypassing cookies, only to make things worse…
Now that the GDPR and ePrivacy are in effect, PII is radioactive. You need containment, handling and disposal procedures, you need to allow users to inspect it at any time and if you accidentally expose anyone to it that's a major emergency incident.