Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Umami: Self-hosted open-source alternative to Google Analytics

umami.is

Post reply on HN
Print view View original

181–190 of 235 posts

Re: Umami: Self-hosted open-source alternative to Google Analytics

#181

Post by johncolanduoni »

divbzero wrote: post #163
malisper wrote: post #103

One of the claims of Umami is that it's GDPR compliant: > Umami does not collect any personally identifiable information so it is GDPR and CCPA compliant. No cookie notices are needed because Umami does not use cookies. From auditing the source code, this doesn't seem to be the case. First, it claims it doesn't use cookies, but it clearly uses localStorage to store a "sessionKey"[0]. The other claim, that Umami is GD…

Would randomly generating the session key instead of hashing client IP and other properties satisfy GDPR’s requirement of no PII? The definition in GDPR Art. 4 reads: [1] > ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such…

My understanding is that it counts as an “online identifier”. It’s not all that different from a user ID, except the user didn’t ask you to create it (which certainly doesn’t help under GDPR).

Re: Umami: Self-hosted open-source alternative to Google Analytics

#182

Post by KingOfCoders »

malisper wrote: post #103

One of the claims of Umami is that it's GDPR compliant: > Umami does not collect any personally identifiable information so it is GDPR and CCPA compliant. No cookie notices are needed because Umami does not use cookies. From auditing the source code, this doesn't seem to be the case. First, it claims it doesn't use cookies, but it clearly uses localStorage to store a "sessionKey"[0]. The other claim, that Umami is GD…

I think this problem is still unresolved.

If you do something like Plausible.io with daily changing salts, you know only about daily visitors. This might be GDPR compliant.

If you do something like Fathom with chaining requests, you can see daily uniques, bounce rates and click speed. Not sure this is GDPR compliant though. Would feel better if they run this through an European GDPR watchdog which AFAIK they haven't.

If you do something like SimpleAnalytics with using the referrer to find uniques, you can see daily unique visits but with some statistical errors. Should be GDPR an ePrivacy compliant without your customers needing to declare your usage or have a data processing agreement with you. But gets you the least analytical data (We use SimpleAnalytics).

None of these can do cohorts, the holy grail of VC analytics.

For cohorts I would think you could make something GDPR compliant with Bloom (Cuckoo) filters.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#183

Post by ksec »

modoc wrote: post #135
killerpopiller wrote: post #131

Earlier quoted context omitted.

Matomo (former Piwik) is an alternative imho.

Unsure about Umami's performance, but Piwik was a non-starter for several higher traffic sites I worked with due to performance issues (even after throwing big hardware at it).

Out of the similar alternative, I think Plausible is currently leading in scaling and performance.

I think this is also the reason why they are the most affordable in pricing.

Note: Not affiliate with them, just observation from researching GA alternatives.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#184

Post by ksec »

mcao wrote: post #69

Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…

Are there any reason why you dont use currently available Open Sources solutions and decided to create your own? ( Other than it is fun to do it yourself :D )

I am wondering why in the past 2 years we went form having little to zero GA alternative to all of a sudden having dozens of them.

I am genuinely curious.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#185

Post by ffpip »

XCSme wrote: post #77
vs4vijay wrote: post #23

Looks neat! will explore. Also, I did research on alternatives to GA few days back, might be helpful of someone: https://github.com/Open-Web-Analytics/Open-Web-Analytics https://matomo.org/ https://github.com/matomo-org/matomo https://github.com/usefathom/fathom https://www.goatcounter.com/ https://plausible.io/ https://github.com/PostHog/posthog https://www.usertrack.net/

Thanks for mentioning https://www.userTrack.net , I'm the author and still working full-time on improving it. Let me know if you have any questions/remarks about userTrack.

Hey XCSme. Your product is one of the best I have seen. Very deep insights, with a good interface.

Ps: You probably need a better name. Since your website says it is privacy respecting, 'UserTrack' doesn't exactly convey that. Just something with 'Track' not in the name.

And adblockers like uBlock Origin tend to block everything like track.domain.com.

And just a bug/overlap I noticed when hovering over the delete button - https://i.imgur.com/aBA7cpr.png

Re: Umami: Self-hosted open-source alternative to Google Analytics

#186

Post by predictmktegirl »

malisper wrote: post #122
mcao wrote: post #108

Earlier quoted context omitted.

I am not a lawyer so I cannot say for sure what constitutes PII and what breaches GDPR. I am using the same techniques as Fathom Analytics, Plausible.io and other products. Everything is hashed into a unique session id and none of the actual data like user agent or IP address is actually stored. It is the same data that is found in server log files. In the strictest interpretation of GDPR, I don't think any analytics…

Both Fathom and plausible generate a unique salt every day. By getting rid of the old salts, they've anonymized any data older than a day. From [0]: > We do not attempt to generate a device-persistent identifier because they are considered personal data under GDPR. > Instead, we generate a daily changing identifier using the visitor’s IP address and User Agent. To anonymize these datapoints, we run them through a has…

Doesn’t using the website id in the hash mean the key is no longer PII since it can’t follow you between websites? Or is being identifiable within a single site enough the threshold?

Re: Umami: Self-hosted open-source alternative to Google Analytics

#187

Post by [deleted] »

mcao wrote: post #162
madeofpalk wrote: post #156

Earlier quoted context omitted.

> I am not a lawyer so I cannot say for sure what constitutes PII and what breaches GDPR If you don't feel fit to judge whether something breaches GDPR, then maybe you shouldn't say "so it is GDPR and CCPA compliant".

Fair point. I was simply following the "common practice" from other products making these claims, which is to not store personal user data and only generate an anonymous ids. Maybe that's not fully compliant, I don't know, so I went ahead and removed any mention of GDPR from the website. It's not really my goal anyways. I'm just trying to release free software while they are charging money and making these claims.

[deleted]

Re: Umami: Self-hosted open-source alternative to Google Analytics

#188

Post by mcao »

ksec wrote: post #184
mcao wrote: post #69

Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…

Are there any reason why you dont use currently available Open Sources solutions and decided to create your own? ( Other than it is fun to do it yourself :D ) I am wondering why in the past 2 years we went form having little to zero GA alternative to all of a sudden having dozens of them. I am genuinely curious.

This may just be me, but I'm very particular about my software. I want it to look and flow a certain way. So I wrote Umami mainly for my needs first. Plus it was just a fun project.

I always start side projects so I can learn something new. In this case it was Prisma.io, Chart.js, Next.js authentication, JWT and Postgresql. All of which I didn't know about until this project.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#189

Post by mcao »

nodesocket wrote: post #176
mcao wrote: post #69

Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…

How does a post on HN that has 591 points and on the front page only have 1184 views and 567 visitors in the last 24 hours according to the live demo? Something is not right. Should be seeing lots more page views and users right? EDIT: just noticed the demo is for another site flightphp.com not the landing page umami.is which is sort of weird. That explains it. The demo should really be demoing the metrics for umami.…

I actually am using it to record metrics for umami.is:

https://app.umami.is/share/8rmHaheU/umami.is

I'm using it for all my websites. The reason I went with another site for the demo is because I wanted something with at least 30 days of data so users can play around with the different settings. Once I get enough data, I'll switch it over.

Re: Umami: Self-hosted open-source alternative to Google Analytics

#190

Post by anaganisk »

imedadel wrote: post #117
mcao wrote: post #69

Hi everyone! Author of Umami here. I totally did not expect this response so it looks like you all hugged my little server to death. The demo should be back up now. A little background. This is a side project I started 30 days ago because I was tired of how slow and complicated Google Analytics was. I just wanted something really simple and fast that I could browse quickly without diving through layers of menus. So I…

This is an awesome project. Is Postgres good enough for high traffic or would it be better to switch to Redis?

Tho very rare, why would you use a database that is at risk to be erased completely, and with a limited set of queries as the main DB? Honest question.
Post reply on HN