[amichal]

Opt-in via published policy or some silly explicit checkbox?

[kuschku]

Opt-in via an explicit dialog, and, most importantly, you have to give the user the ability to select "no" and still use your website (in which case you aren’t allowed to do any tracking).