Live data from Hacker News

RybbitL Open source Google Analytics replacement

github.com

131–140 of 173 posts

Re: RybbitL Open source Google Analytics replacement

#131

Earlier quoted context omitted.

As a founder in this space, it not as bad as you think. There are niches in this crowded yet broad space. Plausible - good for self-hosting, but their SaaS is very expensive and FOSS vs SaaS offering differ. Ahrefs - they will use your traffic to improve your competitor research, you really should use them cautiously. Matomo - feature rich but can be overwhelming. Posthog - its SaaS is US based so dismissed early by…

> Posthog - its SaaS is US based so dismissed early by EU customers. Posthog has had an EU server for years. I'm not sure what you mean by this.

Niche markets always allow good products to survive.

Re: RybbitL Open source Google Analytics replacement

#132
post #93

Is there anything that can work with the request logs instead of the usual transparent pixels and/or script inclusions?

I'm going to develop server-side SDKs in the future. But many existing platforms like posthog already support this, though I don't know if they support processing raw request logs literally.

It'd be great. Posthog is a bit too heavy for just that.

Re: RybbitL Open source Google Analytics replacement

#134
post #40
post #28

Earlier quoted context omitted.

Is sharing your data with a startup or small company any better than sharing it with a big corporation?

Potentially yes, but depends very much on the privacy policy and data handling promises being made. I think the instinct to distrust big companies is at least partly because many of them have already proven not to be good stewards of data which when combined with their scale has more worrisome implications. With a smaller/newer player, at least there’s some hope that they’re not capable of the same harms at a smaller…

Startup have high chance being acquired. The new owner will get all your data, no matter you trust them or not.

Re: RybbitL Open source Google Analytics replacement

#135

Earlier quoted context omitted.

However, if you do this, you will still need to comply with all relevant privacy laws. For example, in the EU, you need user consent to use server logs that include IP addresses for analytics. You also need to provide post-consent opt-outs and privacy statements and audit logs and all off a sudden you're building another analytics tool.

How exactly does that work? You need consent for server logs? Am I able to run fail2ban without consent?

No, logs don't require consent in that case, see recital 49.

Re: RybbitL Open source Google Analytics replacement

#136
post #112

The documentation states that rybbit does not use cookies and is compliant with the GDPR. The first part is true but, looking at the code (very nice to have it available), the tracking is done by IP address, trading one piece of tracking data for another. I realize that this is probably the only way it could work but it is not clear to me that tracking by IP address (even over a single session and shredding the data…

The jury is out on ip address vs GDPR. Hashed IP address is not anonymous, nor is last digit anonymization anonymous. So, let's not bother with it. I can say all IP address are located in earth and someone would be offended because now we are invading their privacy by knowing which planet they are from. GDPR is not clear on IP address or IP address derived metadata. There is no case law for it, nor acceptable methodo…

> GDPR is not clear on IP address or IP address derived metadata. There is no case law for it,

There is, see C-582/14 which concludes that IP address, even dynamic, are personal data.

Re: RybbitL Open source Google Analytics replacement

#137
post #42

Earlier quoted context omitted.

I deal with GDPR daily and the truth is that GDPR enforcement doesn't understand what is acceptable from a GDPR standpoint and that is likely why they are in the process of revamping it. You can also anonymize data and that is no longer considered personal data under GDPR so it is possible to hash an IP address and that be acceptable.

So IP is considered personal information?

Yes, that is what case C-582/14 concluded.

Re: RybbitL Open source Google Analytics replacement

#138
I keep recommending it, but you can check out https://european-alternatives.eu/category/web-analytics-serv... for a more complete list of EU based web analytic services.

I'm one of the co-founders of Pirsch, and a bit worried because the space is getting really crowded :D

Re: RybbitL Open source Google Analytics replacement

#140

Earlier quoted context omitted.

As a founder in this space, it not as bad as you think. There are niches in this crowded yet broad space. Plausible - good for self-hosting, but their SaaS is very expensive and FOSS vs SaaS offering differ. Ahrefs - they will use your traffic to improve your competitor research, you really should use them cautiously. Matomo - feature rich but can be overwhelming. Posthog - its SaaS is US based so dismissed early by…

> Posthog - its SaaS is US based so dismissed early by EU customers. Posthog has had an EU server for years. I'm not sure what you mean by this.

An EU server isn't enough. Those EU servers should be operated and maintained by an EU subsidy that licenses the tech from the US company. In other words, even if the US company wanted the data served by the EU company, they couldn't get to it.
Post reply on HN