Google Analytics May Be Illegal In Germany
sopssa sends in a TechCrunch story that begins "Several federal and regional government officials in Germany are trying to put a ban on Google Analytics, the search giant's free software product that allows website owners and publishers to get detailed statistics about the number, whereabouts, and search behavior of their visitors (and much more)." Here's Google's translation of the article from Zeit Online (original in German). A German lawyer cited there says that penalties for websites that uses Google Analytics could amount to €50,000 (about $75,000). Reader sopssa adds, "The amount of data Google collects from everywhere on the Internet is indeed huge, and website owners should be using a local open source alternative to keep visitor data private."
Everything is illegal in Germany.
If you come to my website then I, or my designated party, have the right to record the fact that you came to my website. If you don't like it then don't use the web. Is it also against the law to record what customers come in the door of your brick and mortar store in Germany?
At what price learning? At what cost wisdom? The price is a man's peace of mind, and the cost is his life.
I found about google analytics when I started using the NoScript plugin. Its used almost everywhere!
10 Years ago it would have read:
€75,000 (about $50,000)
*sigh*
It's NOT me! It's the meds! I'm on 1000mg of Fukitol.
Is the German government trying to downsize Google by charging premiums who use the service they offer? If this is the case, it isn't a bad idea. (I love Google as much as the next guy, but they really are everywhere, and I'm not sure how long Paul Buchheit's slogan will hold up)
Now only if we could charge the idiots who buy ARM's here in the states...
"The difference between genius and stupidity is that genius has it's limits" - Albert Einstein
"Do, we didn't illegally disclose your data; we open-sourced it!"
Information theory is life. The rest is just the KL divergence.
"The amount of data Google collects from everywhere on the Internet is indeed huge, and website owners should be using a local open source alternative to keep visitor data private." Classic FUD, all that google analytics does is store a simple cookie so that it can differentiate between page loads, unique visits, and return visits. The other data mining google does doesn't involve google analytics.
One convenient locations...in Africa.
Google Analytics
Just behind doubleclick.net
It never makes a noticeable difference to have both disabled so far.
Another reason to avoid Internet Explorer until it gets a no script equivalent (which it never will).
She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
I don't understand people saying that Google knows too much about each of us. Maybe I haven't been paying close enough attention as of late, but has Google ever done wrong by their users? And besides, as an entirely uninteresting person, I don't really care if Google knows my surfing habits. I hear the same argument against the club cards at supermarkets, and the same response applies. I don't care if the supermarket "Man" knows that I buy excessive amounts of phallic vegetables and personal lubricant (unrelated).
Dear Sir or Madam,
this is acutally complete nonsense.
If you choose to publish, you have no right whatsoever to track who is reading your publication for what reason.
Adblock Plus doesn't block anything by default. It does present you with a list of filter subscriptions. Just install EasyPrivacy from the same folks who probably made the subscription you use now (EasyList).
$ make available
Yes, I certainly want my personal data tracked and stored by 200 small-to-medium businesses that don't understand net security rather than one company with the knowledge and resources to do it well. I feel safer already!
When all you have is a hammer, everything looks like a skull.
Government wants to ban a proprietary tool serving obtaining vast amounts of data about the net users by a big corporation, without the users' content. The government suggests an open-source alternative.
Slashdot crowd violently opposes.
brb checking if RMS applied for a job at Microsoft.
45 5F E1 04 22 CA 29 C4 93 3F 95 05 2B 79 2A B2
wtf who modded this funny and what the fuck does this have to do with the price of tea in china?
Well, it makes. For the website author who just wants to have the goddamned statistics presented in a convinient, easy-to-digest format to be able to focus on actual improvements to the website, and not on wrestling with half-arsed local statistics generators that use access logs, 1px images, session cookies and somesuch.
As a website admin, I'd gladly switch to a solution that does not raise such concerns as GA, but there is none of comparable quality and I'm not in position to make my own with an appropriate feature set. Piwik is somewhat close, but it doesn't support PostgreSQL, which is a show-stopper for me - installing a second RDBMS just for a single auxiliary application is out of question. Besides, it's still probably going to be blocked by NoScript and the likes.
So, what other options do I have?
This is Slashdot. Common sense is futile. You will be modded down.
So, what other options do I have?
Logs. In other words, don't rely on the visitors to keep your statistics for you.
If google analytics is banned then most online advertising systems which essentially do the same thing should be banned too.
Is there any person left using the internet who does NOT block the google, doubleclick, etc trackers?
Access logs do not give me the information that a piece of JavaScript does such as the amount of time spent on a website, the amount of clicks that went from one page to another, screen size (so I can optimise my website in the future towards the majority of my surfers), flash version, where they came from, have they been here before, page views per person (since even those behind a proxy are now going to be differentiated from).
Access Logs are NOT the end all be all when attempting to monetize a website and or find out what people like and don't like.
It just keeps statistics on things obvious to the web server when you connect to it. IP address, location, referring page, browser, etc.
But these statistics aren't run local on the webserver itself. They are transmitted to Google.
It's like knowing that a middle-aged white male in a red sweatshirt came in the door.
No.
It's like *telling Big Brother* that a middle-aged white male in a red sweatshirt came in the door of your house.
And asking Big Brother to do some statistics about who comes to your house for you.
Sure from the website's owner point of view, the result is the same : he/she got on who visits the site.
BUT from the *user* point of view it is different : The user accepted the fact that, by entering your house, you'll know the users' age/sex/clothes colour. BUT the user never accepted in the first place that you also send these informations to big brother.
The EU regulate clearly what you can transmit to 3rd party.
Here the problem is not that website are doing *stastistics* (they can the information is trivial).
The problem is that, in order to compute said stats, the websites *forwards* the data to google : a 3rd party which has nothing to do in the first palce.
The solution : Use adblock and/or noscript.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
I hate that google analytics thing. For a lot of sites, the page won't display anything until it's done loading. I guess it gets a lot of traffic, because it's frequently unresponsive. So much so that I have to map it to 127.0.0.1 to get a lot of websites to load at reasonable speed (i.e. less than 2 minutes)
Way to go Germany.
The "Open Source alternative" is Piwik
Piwik is sponsored by OpenX
OpenX is an ad serving company that competes with Adsense
Jon Miller is on the board of OpenX
Jon Miller is CEO of Digital Media at News Corp.
I didn't mean to create a conspiracy out of this, but it's amusing to see how any move against Google is now a move in favor of Rupert Murdoch.
And I want a clear view into the bathroom of that hot chick across the street.
Have you considered that your need for clean statistics does not outweight the peoples right for privacy?
Imagine someone steals your car because he couldn't get to work otherwise. Should it be your problem that he can't get to work?
Should it be my problem that you can't improve your website? When you invade my privacy as means to do so it is my problem.
Moves like this make it clear that there are very fundamental differences between the governments in Europe and the USA.
In the USA, the government exists to help corporations make money.
In Europe, governments exist to help people live enjoyable lives.
have to do this to a lot of other "keeping of data" if they want to "be fair", including advertising (e.g. tracking), logging (each webserver keeps logs of who has accessed what), cookies, preferences, facebook, linkedin, online games, google/yahoo/bing keeping websites ... are they for real?
to code or not to code, that is the question.
Another reason to avoid Internet Explorer until it gets a no script equivalent (which it never will)
Way back in the IE4 days, I used a mixture of the zone system (Trusted Sites for those few where I wanted Javascript) and the hosts file. These days, if you use multiple browsers then privoxy is the better solution because the one configuration will work in all the browsers (yes, including Internet Explorer).
Just checked and Drupal has a reasonably good Piwik module. Good news for me! I'll be switching a site I admin (120k users) to it in the next week. I already disallow google analytics because I've never enabled it via NoScript, but my visitors don't. When I got started, there wasn't really a good alternative to GA for what we were doing short of rolling our own.
Another reason to avoid Internet Explorer until it gets a no script equivalent (which it never will).
http://www.ie7pro.com/
For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
I use Ghostery (the Firefox add-on) that shows you what trackers are loading with the page and lets you block them individually. There are plenty of other options if you want to block tracking cookies.
Before getting too paranoid about google analytics, take a look at the actual cookies it stores. E.G. in Firefox "Tools", "Options", "Show Cookies", search for "__utmz". Whoa, there are a few hundred. Check out the one from Slashdot - in my case: "9273847.1252068577.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)". "9273847" means "slashdot.org". "1252068577" means me, when I go to Slashdot. The rest of the stuff has to do with how I found the site. But now look at __utmz for say, pennyarcade.com: "84531096.1252070740.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)". It's a different web site ID, but it's also a different user ID. There's no correlation between the person who goes to slashdot, and the person who goes to pennyarcade. Google can't tell that they're both me. My ID is different on every single web site that uses Google analytics. The only purpose of the ID is so that, for a single given website, they can tell the difference between one person visiting it a hundred times, or a hundred people each visiting it one time. There's no other personally identifiable information tied to that number. Your analytics cookies on all those sites are not correlated with each other; they're not tracking everything you do.
fyi, if you don't want to be counted by google analytics add a record to your /etc/host or C:\Windows\System32\drivers\etc\hosts file that points the google analytics URL to local host or some other invalid address.
Peace.
So you're one of those douchebags!
Hypertext has no reason to care about my screen size. You have no right to know what it is, and quit trying to optimize for it.
Quit making "websites" that need Flash!
All the other things are in your logs already, aren't they? Except that bit about trying to differentiate people who demonstrate
their desire for privacy by using proxies.
I'll tell you what people don't like: "attempting to monetize a website".
Strange, but in this case I think that the german law is in the right and google should change (and many other sites, such as adsense should too)
Web sites today collect much too much data on users. This data could easily fall into the wrong hands, and you have no control over who collects what, and who stores what. And, for every trick you find for web sites not to track you, new tricks are invented to continue to do so. Once it was enough to turn off cookies. Today you also need noscript, and betterPrivacy. And you lose much of the functions of sites when you enable these addons. If it was the law that you can't collect potentially private data, sites would find ways to have full functionality without tracking the users.
Another point is opt out vs. opt in. It is true that users can "opt out" by doing the above mentioned steps, but it is quite hard to keep yourself informed about all the steps necessary, and the average grandmother will not take them. This tracking should be opt out so that you don't need to be an expert to not be tracked.
A last point is the collection of really private data - cross referencing your browsing habits with your e-mail, and other interactions. Google currently says that they are not doing it, but allow themselves to do it. I think again google should comply and say what type of cross-referencing they will never do.
What are examples where tracking could be harmful? Reading up on certain medical problems on the web, looking for a new job when you don't want your employer to know about it. Obtaining tools to break DRM, or just reading up on how to do that. Expressing your political views on a website (think of how that was misused in nazi germany, the gdr, or during the McCarthy era). How dangerous was it for iranians to browse the web recently? It could have been much worse.
come on Google, do no evil!
And they are storing that cookie everywhere on the internet now a days. Google can build a pretty accurate profile about you (unless you've blocked it, but 'casual' people usually don't)
Google Analytics uses cookies called __utma, __utmb, __utmc, and __utmz (they have different expiry characteristics so GA can distinguish a "visit" from a "visitor"). Hands-on experiment: If you're not one of the people who blocks GA, open up your cookie jar right now and look for "utma". I expected to find a lot in mine, and I'm still surprised by how many are in there.
Have you actually used the Analytics service? It shows very detailed information about visitors, where they are coming from and what they do on the website.
It's pretty darn slick. GA got to be popular on its merits. But now that it's everywhere I worry about the aggregative power available to Google (not the individual GA users). Now that NoScript is gaining ground I occasionally worry that I ought to be doing my tracking locally because I won't know how many people have opted out of GA by declining its cookies.
Given that Indians rarely speak French, German, Swedish, Spanish, Finnish, and so on, the answer is that no, usually they don't.
Indians don't usually speak Finnish, and Finns don't usually speak Hindi or Bengali or Gujarati etc. But that does not stop companies in Finland outsourcing tech support to India. That's the case where I work, for instance. The language used for support is English, sort-of, on both sides. The result is that there are not too many requests for tech support, reducing visible tech support costs quite dramatically. Invisible costs are another matter.
Those who can make you believe absurdities can make you commit atrocities. - Voltaire
Monetizing a website is ok. A website monetizing me is not.
By the way, you do know that Google Analytics heavily relies on session cookies?
USE HOT GRITS WITH STATUE OF NATALIE PORTMAN (NAKED AND PETRIFIED)
Am I the only one who thinks it's funny that they point to a Google translation of a story how Google analytics may be illegal in Germany? ;-)
At least those guy are policemen and/or related to law enforcement/anti terrorism. Whereas for my short stint in the US everybody and their grandma had a weapon. Whether you find the first sobering , or me the second frightening is a question of the culture where youa re born. And FYI, in the french airport they also had french guys with automatic weapons. So it isn't a German things.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Why not use access logs alone? If you really ARE using it "to focus on actual improvements to the website", why can't you use what was asked of on your site? Why must you know that someone did something on YOUR site AND they did something else on ANOTHER site? The existence of other websites doesn't affect the *usability* of yours.
Seems like a blatant troll, but anyway, I'll bite.
No the website has no RIGHT to know about screen size and so on, but that kind of information IS useful to a designer/programmer. If there's no room for a sidebar on 60%+ of my user's screens, then what's the point in having a sidebar. Conversely if 60% of my visitors browse with the browser maximised on a widescreen monitor, then maybe I should give them something to do with all that extra space.
As for proxies... maybe you haven't worked in the real world, but most businesses operate an Internet proxy and many ISP's route their users through one as well.
As for "what people don't like: "attempting to monetize a website""... servers, bandwidth and time aren't free... well not in the real world I inhabit anyway.
Enjoy your free, hobbyist Internet... I'm sure you feel dirty every time you shop online, post on Slashdot, or read anything that isn't someone's shitty two penny blog.
The laugh here about "monetizing" is it's very often congruent with giving your users more of they want and better targeting ads, so your users spend more time on your site and click on a larger number of ads they find interesting.
Way back in the IE4 days, I used a mixture of the zone system (Trusted Sites for those few where I wanted Javascript)
It of course still exists in IE 8, though often overlooked, and MS even made that the default in server versions of Windows starting with Server 2003. It was called something like the IE Enhanced Security Configuration.
The problem (based on your description above) is that Gemany is outlawing SaaS. There is no way a small time web site owner could roll his own and host an analytics platform as useful as Google Analytics.
Absolutely nothing in the EU law forbids a website owner to download and locally install a ready-to-use opensource package (Say, some PHP kit).
As long as said package provably doesn't ring home and send data to external some 3rd party without visitors' prior consent - and opensource nature should make proving this rather easy.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
Looks useful. Someone mod this up. B)
She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
Does anyone know about an open source alternative to Google analytics? Something that gives a more information than just webalizer/awstats etc.
I'm not insane! My mother had me tested.