Hacker News new | ask | show | jobs
by marichards 2809 days ago
I don't appear to have an edit option, I thought comments could be edited.

Thanks for removing MixPanel, I think centralised analytics are by default going to breach privacy as you only need a referer and an IP address to have enough data to put someone's privacy at risk.

Also, third party JavaScript (not protected by code review and SRI) is an access control issue and can violate privacy at anytime as shown by instances of credit card theft and cryptomining this year.

Simply Analytics lies about not being a GDPR concern (which requires consideration for access control and security (loading third party JavaScript) and under GDPR IP address can be considered an identifier.