[thecatspaw]

> iubenda hosts this content and only collects the Personal Data strictly necessary for it to be provided

> Analytics > Google Analytics > Personal Data: Cookies and Usage Data

Google analytics is not strictly required for your website to work. GDPR requires that everything not absolutely required for operating the website, must be opt-in.

[robbiemitchell]

I disagree that it's this cut and dry. Unless you are stuffing PII into the GA cookie, there's nothing personal there and therefore it doesn't require consent -- at the least, you're not going to get in trouble for skipping it. Furthermore, even if an anonymous user did give consent, then requested a deletion, the company would be hard pressed to verify that person's identity in order to scrub the anonymous data.

[red93]

Ok thanks for reporting, i'll make sure to change it so that user have to opt-in

[fiatjaf]

No! Don't agree! These people are trying to run your life.

[fiatjaf]

Do you say that in every Show HN or just this one?

No, GDPR doesn't require that.