[anon1385]

Lots of information that used to be on government sites was removed.

They added Google Analytics everywhere. Even on the pages where you fill in your taxes or apply for a passport. Google does not need to know my tax details. Google shouldn't know my tax details. Since Google isn't even a UK company the UK government doesn't even have legal authority over what Google does with the information they now hold about UK citizens taxes.

[vertex-four]

This is the site that is used to apply for a passport: https://passportapplication.service.gov.uk/ips-olc/

Where on that site does it use Google Analytics?

[DanBC]

https://www.gov.uk/help/cookies

They tell you they're using the cookies. They tell you why they use them. They tell you how to opt out of them.

They also say:

>> We don’t allow Google to use or share our analytics data.

[mynewtb]

It looks like they make their users' browsers request a Google URL.

[dx034]

It seems likely that they have a contract with Google that doesn't allow Google to use analytics data like they would for other clients.

[zeveb]

Legal contracts are no replacement for technical impossibility.

[vertex-four]

Google breaking its contracts over Analytics Premium would severely negatively affect it, given that it's a product a number of very large companies and organisations use.

[mynewtb]

The NSA will just install their funnel somewhere new and off you go.

Browsing privacy is not just about the intentions of the two parties talking to each other but everyone one holding the wire plus everyone the other sites invites to listen in on your private exchange.

[robin_reala]

All user data is anonymised before sending to Google. I believe we strip the last two blocks off the IP address before sending it over. We use the analytics to inform choices we make - our 3rd design principle is to ‘design with data’ https://www.gov.uk/design-principles#third . Finally, on projects where it’s critical that any data doesn’t go out of the UK like Verify we run our own instances of analytics software.

[anon1385]

>I believe we strip the last two blocks off the IP address before sending it over.

No you don't. You don't "send" anything over to Google. The users browser does because loading a gov.uk page also loads a Google Analytic script straight from google-analytics.com. You don't have the power to prevent the users IP being sent to Google in that situation and it's worrying that you think you do.

Additionally, focusing on the IP address seems rather silly when a much more accurate tracking cookie is being used.