Live data from Hacker News

Degoogle: Alternatives to Google products, privacy tips, tricks, links

degoogle.jmoore.dev

51–52 of 52 posts

Re: Degoogle: Alternatives to Google products, privacy tips, tricks, links

#51
post #37

Earlier quoted context omitted.

> Insights doesn't use any cookies, so there is no need to put a banner. Doesn't sending requests from users PC to your 3rd party server require consent as it sends the IP address of the visitor?

Does it? I would assume that means every single online interaction needs a consent banner, since sending a request over TCP includes, by it's nature, your IP address. I never dug too deep into GDPR or the like, since my own websites are all for personal use, and I'm not in charge of any of that stuff for work. I kinda assumed that demanding consent before sending a user's IP would be technically impossible, given tha…

I keep forgetting that part of GDPR is the storage aspect. Unless it goes in a log (though it usually does,) it's not counted. A technical argument could be made that going into memory is storage, but at that point the above issue comes full force, so arguing it doesn't seem to make any sense.

Re: Degoogle: Alternatives to Google products, privacy tips, tricks, links

#52
post #37

Earlier quoted context omitted.

> Insights doesn't use any cookies, so there is no need to put a banner. Doesn't sending requests from users PC to your 3rd party server require consent as it sends the IP address of the visitor?

Does it? I would assume that means every single online interaction needs a consent banner, since sending a request over TCP includes, by it's nature, your IP address. I never dug too deep into GDPR or the like, since my own websites are all for personal use, and I'm not in charge of any of that stuff for work. I kinda assumed that demanding consent before sending a user's IP would be technically impossible, given tha…

I wrote a short blog post about this: https://www.uxwizz.com/blog/self-hosted-analytics-gdpr-frien...

This quote from the GDPR law is more relevant to your question:

> If the controller has the legal option to oblige the provider to hand over additional information which enable him to identify the user behind the IP address, this is also personal data. In addition, one must note that personal data need not be objective.

Post reply on HN