Analytics is not the same as ad tracking
I’ll take the hit though.
It’s not just pageview logs, but GA has great tools to analyze those logs, do reporting on some decent set of actions and to bring it all together in a simple to use interface.
You can take your server logs and then what will a non technical person do with them? Not much.
That said, you can deploy GA while opting out of behavioral data and ad network features, and even fuzz ip addresses.
Analytics has the stigma of ad networks because they historically existed to validate ad spend. We’re past that point and they are often used with strict first-party intent.
There’s nothing preventing us from imagining all the malicious things any analytics tool could do, and imaginations run wild.
Disclosure: I work for an analytics company that doesn’t want to own your data, but I understand why folks have a knee jerk reaction to analytics of any kind.
At the same time the US is 10 years behind. GDPR is far ahead of anything the US has. Gun control is 50+ years ahead and lets not try to count years in social security nets or healthcare for the non-rich (or health in itself for that matter). In average I'd say the US is behind the curve and falling further by the day, especially now China has become a semi-great soon to be superpower.
https://rsf.org/en/news/romania-tries-use-gdpr-force-journal...
However, they can easily get lots of compromising data from their own servers. Both from standard web server logs, and from their own scripts and tools.
Once you involve third-party analytics, though, there's another party to worry about. And not just about what they do with the data, but also about how carefully they manage it. That's arguably a key thing in GDPR.
How useful is the information without this? If they aren't tracking you then they don't have your profile data, ASL is usually the most useful data but only the L is sort of available.
> You can take your server logs and then what will a non technical person do with them? Not much.
IME this is exactly what usually happens with analytics. It's one of those things that management is convinced they just have to have for it's pretty charts and feeling of empowerment, but when ask them what changes they've made based on the data they won't have a lot of examples.
I'm sure they're valuable in the right hands, but for the vast majority it's just it's a waste of time, similar to most reporting.
you are thinking in term of ads.
If instead what you want to know is, what parts of the sites do visitors stop navigating. Or which pages are seen by recurring visitors vs other pages seen mainly by new visitors. What pages are almost never visited.
Those informations don’t need ASL, the goal is not to target individuals but to profile the site and see what brings value and what might not.
> management is convinced
I think analytics are not a tool for management though, except perhaps in very broad stokes. I see it more for product owners who need a feedback tool so see the impact of what they do or have a vision of how the user uses their product.
It’s like asking management what decisions they make based on NewRelic. None surely. That’s not their job.
I'm thinking in terms of demographics of visitors. Who's visiting, who's not visiting, why are we so big in japan, that sort of thing. My objection to analytics isn't just ads, it's sending information to a a third party behind the backs of users.
> If instead what you want to know is, what parts of the sites do visitors stop navigating. Or which pages are seen by recurring visitors vs other pages seen mainly by new visitors. What pages are almost never visited.
Those examples can be handled just fine by some trivial processing on server logs. Only the first needs a way to identify users (which analytics will also need) and the second 2 don't even need a user id in the logs. I'll give you the benefit of the doubt and assume they were just simple examples and you want a lot more detailed information and in real time and output prettier than graphviz, why aren't you setting up a locally hosted alternative? If the data collected is truly worthwhile then it's surely worth this minimal time investment?
> That’s not their job.
That's kind of what I'm getting at, it will be mandated by someone in management or marketing but IME it's usually no ones job and nothing happens with it. Google is the only winner.
I misread your focus on ads, is it more about user aquisition perhaps ?
Government sites for instance have less of these issues IMO, as they’ll have other means, usually in person or by mail survey, to directly ask why people are not coming to the site (do they know about it ? Do they have a computer ? Can they read in the language etc)
More than anything, these sites have a captive audience so the focus can really be on improving the access to the relevant information.
> processing on server logs
I think it’s overestimating the cost and technical competency of the agency handling these websites, but also the time it would take to reimplement a log parser that surfaces all these informations user session by user session.
It definitely can be done, it’s not trivial in any way though. Compared to what some of the government websites do (they’re basically glorified wordpress sites) building a log analyser + the associated dashboard would cost more than the site itself.
Fuzz how? The IP is known to Google from the very connection ...
> Analytics has the stigma of ad networks
Well... Google with GA is an ad company, isn't it?
I genuinely don't understand. Is it that the majority have some secret pre-existing conditions and are afraid the insurance companies might realize?
Every time I visit a new doctor I need to spend ~ 10 minutes to fill out a long multi page form on paper listing all my medical history which could've been loaded from some database. I want my data to be analyzed and used to derive insights and help future patients.
It's not US specific, the privacy of health information goes back to at least the Hippocratic oath.
> Is it that the majority have some secret pre-existing conditions and are afraid the insurance companies might realize?
A lot of people do. Not just embarrassing conditions but they keep notes on mental health, drinking habits, illicit drug use, etc. If that information leaked out you could expect everyone from future employers to dates to be taking a look.
Can this analysis be done offline? Data collection can be done without third-party accesses, and any analysis on that data can be done offline using separate tools, isn't it? That removes the third-party script surface of attack.
Then you wouldn't need to imagine what else is done with the data. To imagine that your users data is exploited behind your back should not be a stretch of anyone's imagination.
All of this for free. Why?
It is, when analytics infrastructure is provided by an ad company (Google Analytics)
> Where customers use Google Analytics Advertising Features, Google advertising cookies are collected and used to enable features like Remarketing on the Google Display Network.
If you just use GA on a site, without ads, none of the data is funneled into Ad targeting for the user.