https://www.mozilla.org/en-US/privacy/websites/
Third party Services We use third party services such as Google Analytics and Optimizely. They use cookies, IP addresses, and online data tools.
I suppose they would argue that's the same but I don't think it is good enough (especially for a site preaching privacy values). It should be down in the footer, or even better they should be using Piwik and skipping GA completely.
To me, this feels like a website built by a pro-privacy team who had some marketing or PR person slap the GA code in there with no comprehension of irony at all.
EDIT: Also to note that mozilla.org uses UA-36116321-1 tracking and shapeoftheweb.mozilla.org uses UA-49796218-22, which indicates to me that they are aware that these are two distinctly different sites.
It's on the same subdomain, and it includes link to mozilla.org which has link to privacy policy which also applies to shapeoftheweb.mozilla.org:
>This privacy notice applies to Mozilla operated websites, which include the domains mozillians.org, mozilla.org, firefox.com, openbadges.org and webmaker.org. This includes, for example, bugzilla.mozilla.org, reps.mozilla.org, careers.mozilla.org, developers.mozilla.org, support.mozilla.org, addons.mozilla.org, and wiki.mozilla.org.