Setting Google Analytics to not use cookies

http://stackoverflow.com/questions/10668292/is-there-a-setting-on-google-analytics-to-suppress-use-of-cookies-for-users-who

by robin_reala • 14 years ago

60 32 14 years ago

stackoverflow.com

mibbitier2• 14 years ago

> "So, my only option seems to be that I should not embed Google tag code at all if the user has not explicitly given consent."

The other option is to ignore the directive, which is what most websites will do.

luriel• 14 years ago

As Ian Clarke (original designer of Freenet) put it:

"It is the responsibility of every citizen to ignore dumb laws."

And I would add that the whole world would crawl to a halt and descend into total chaos if everyone followed every law in the books. Too many laws are plain incoherent, inconsistent and impossible to follow.

mibbitier2• 14 years ago

Also, laws only 'matter' if they're actually enforced. There's no indication this will actually be enforced at all.

Paul_S2• 14 years ago

I put google-analytics (among thousands of other useless tracking websites) in my hosts file. Probably the most useful text file you'll ever download:

http://someonewhocares.org/hosts/

twelvechairs• 14 years ago

The line for google analytics in this hosts file is commented out, with the comment "breaks some sites".

If only getting rid of spy cookies/tracking was so easy...

Paul_S2• 14 years ago

The list is very conservative this way, but I add a bunch of sites myself and uncommenting google-analytics and other tracking sties is perfectly safe and doesn't break anything - even google. And for cookies there's cookie monster.

pomysl• 14 years ago

How about just using Ghostery plugin in your browser? http://www.ghostery.com/

It's more user friendly and easier to modify websites that shouldn't be blocked than big hosts file.

yahelc• 14 years ago

Author of the accepted answer here. You can block GA without breaking sites by using the GA Opt Out plugin in this specific case https://tools.google.com/dlpage/gaoptout

The reason is that blocking the domain in your hosts file will prevent the functions from ever loading, and so something like this (the standard code for doing cross-domain tracking):

    <a href="http://thirdpartycheckoutsite.com" onclick="_gaq.push(["_link"]); return false"></a>

Will cause _gaq to simply add an array with a single element, a string that says "_link", and then return false, preventing the site from completing the default action. This is because ga.js never loads, so it never executes the queue of functions and never converts gaq.push into a non-native function. So, you'll click the link, and nothing happens.

(I actually abhor the practice of doing this this way, because it's so easily breakable, but this is the "recommended" way of faciltating cross domain tracking)

If you use one of the "official" Google opt-out plugins, it'll load ga.js, but it'll block any information from being sent about you to Google, it'll block Google Analytics cookies from being sent, and it won't break any site functionality.

Will simply

kingofspain• 14 years ago

Does anyone know of a decent and up to date guide on what is/is not allowed? The official guidance is typically not much help and my searches reveal a lot of stuff out of date and other sites that are more interested in selling me cookie analysis - so I'm taking their advice with a grain of salt.

Angostura• 14 years ago

The interpretation of the law is up to the individual countries. I've only been watching what's been happening in the UK. Until last week the guidance from the Information Commissions' office has been 'you need explicit opt-in' if you want to set cookies that aren't vital to your site's work (example, cookies set when a user is shopping and puttnig items into their cart are deemed vital, Google Analytics is not).

However last week the ICO issued new guidance saying that implied consent is OK

News article here:

http://www.guardian.co.uk/technology/2012/may/26/cookies-law...

The UK formal advice here (PDF)

http://www.ico.gov.uk/for_organisations/privacy_and_electron...

A rather handy site that has an easily integratable tool for implementing Directive-compliant opt-out on your site

http://www.civicuk.com/home

and the Drupal module: http://drupal.org/project/cookiecontrol

mjwalshe2• 14 years ago

I would argue that analytics is vital - if you cant work out what your site is doing then you can not work out how to improve the site which costs money and indirectly jobs.

I look forward to each individual shop/business making us sign a waiver when we enter a shop with CCTV ie 95% of UK shops

jamiecurle2• 14 years ago

If left to owners/managers/developers to implement the opt-in we risk having a variety of ways for doing the same thing. Some good, some not so good and some just bad.

A less painful solution would be to try and solve this at the browser level where the experience for end users would at least be consistant. Like a blend of DNT & private browsing mode that had extremely restrictive criteria for cookie usage - if any.

Something like [Ghostery][0] would be a nice starting point.

Of course the better solution would be to erase Article 5(3) and start again. Good intentions, bad directive.

[0] http://www.ghostery.com/

copypasteweb• 14 years ago

https://addons.mozilla.org/en-US/firefox/addon/cookie-monste...

jamiecurle2• 14 years ago

Nice one, that's the kind of `thing` I was referring to.

grn• 14 years ago

Note that EU directives don't apply to website owners. They bind the member states to implement them in some form. The laws of individual member states contain guidelines that you should adhere to.

orblivion• 14 years ago

I was going to ask this. What exactly would happen if I (as a US citizen) ignored this? Would the EU block my website?

estel• 14 years ago

No, at worst an EU state might block your website.

But that won't happen either: it's a law that applies to EU companies with a website. Your company might have to worry a little if they chose to incorporate in Europe.

rmc3• 14 years ago

The EU doesn't make (much) real law per se. Unlike the USA, the EU doesn't really have a criminal system, or federal laws etc. The EU makes member states (which are countries and states) implement a law. This law would only apply to owners of websites. They don't block websites.

TazeTSchnitzel• 14 years ago

It's a bit of a pain for website owners, but I think the EU directive is a good thing.

Why? It will make people better aware of what cookies they have, and how they are used. Which is probably a good thing.

TomGullen• 14 years ago

There are better ways to achieve those goals without writing these laws

yaix• 14 years ago

It's a terrible thing, good only for lawyers. Nobody understands what cookies are anyway, most people think they are tiny little programs that steal their privacy in some magical way.

And nobody cares about that level of technical detail either, and why would they?

If the gov't is so keen on regulating Web stuff, they should have a regulatory body that reviews and audits Facebook's and Google's internal handling of user data, to make sure thay actually don't abuse them secretly.

This cookie thing doesn't make any difference for privacy protection at all.

eloisius2• 14 years ago

Definitely, it is not. Users already "opt-in" by configuring their client to accept cookies. Users could be more aware of that and use their clients appropriately if they don't wish to be tracked, but instead there will be this new layer of complexity by which a users opts in. Users (much like they have with their browser security settings) will grow accustomed to blindly opting in like they always have because it makes the thing they're trying to use work. Only now, we have an extra bit of work to do.

rmc3• 14 years ago

Users already "opt-in" by configuring their client to accept cookies.

I highly doubt that is the interpretation of "opt in" that the various Data Protection agencies will take.

mjhall• 14 years ago

I hope it will raise awareness, but my cynical expectation is that the "Accept" button will become one people press habitually to get rid of an annoying banner. Sites abusing the Facebook Like button as a gateway to content are a proof of concept that this might happen.

Considering web browsers already have cookie controls built in it seems a bit silly incur such an enormous cost in implementing a completely redundant feature.

I think the effort would be better spent on publishing transparent descriptions of what data collected and what it is used for than for designers to each create their own non-standard dialog boxes. The cookie issue could be "fixed" (to the extent possible with pointless legislation) with a link to an EU-published HOWTO on configuring a web browser.

philjones88• 14 years ago

Most people don't understand the difference between "Google" and a "Browser" [1], cynically, I don't hold much hope people will care what browser cookies are.

I've already had to explain to my parents that cookies aren't evil, the sites they visit (BBC/Google etc) are mainstream and fine.

As an EU resident and webmaster of several sites for myself and clients. I see little benefit to my visitors other than causing me a lot of grief over trying to follow guidelines and hoping my implementation doesn't break them.

I was speaking to a client about it today, he hasn't seen anything about it and I doubt many small business owners have seen (or cared) much about it.

[1] http://www.youtube.com/watch?v=o4MwTvtyrUQ

mp3geek• 14 years ago

If you're that concerned about Tracking, using Adblock is the best option ..

https://secure.fanboy.co.nz/filters.html

Setting Google Analytics to not use cookies

Related Stories