12 ms·

Can someone tell me if this is even true? Plausible doesn't save any GDPR related data as far as I know? https://plausible.io/privacy-focused-web-analytics#no-

by zeusly 5y ago

Can someone tell me if this is even true? Plausible doesn't save any GDPR related data as far as I know? https://plausible.io/privacy-focused-web-analytics#no-personal-data-is-collected https://plausible.io/privacy-focused-web-analytics#no-person... And the backend is hosted @ Hetzner in Germany

sebsebsn 5y ago
That's written on their site, but isn't true: https://imgur.com/a/9wEanqD https://imgur.com/a/9wEanqD
- markosaric 5y ago
  All site data plausible.io stores on behalf of the customers is hosted in Germany on servers owned by Hetzner, a European-owned company. Previously it was hosted by Digital Ocean in Germany but the move to Hetzner was made last year.
cdrx 5y ago
By its very nature, an analytics product must process personal data. Personal data is "any information relating to an identifiable individual" (see GDPR art 4(1). Your IP address, browser and OS (via user agent), the website you visited, the pages you visited, time of visit, the site you came from (via referrer) are all personal data. If Plausible have put a US owned cloud provider in-front of their Hetzner infrastructure, even if for a legitimate purpose (CDN, DDoS prevention) then that is likely an unlawful transfer of personal data to the USA.
- donohoe 5y ago
  >> Your IP address, browser and OS (via user agent), the website you visited, the pages you visited, time of visit, the site you came from (via referrer) are all personal data. No. These are all not considered PII. Only the IP address in this list definitely is. All other information with a wholly anonymized user would be considered by most interpretations to be ok. Often it depends on the context and presence of other meta-data on whether something is PII or not.
  - cdrx 5y ago
    “PII” is not a term the EU or UK GDPR recognises. It may have a specific meaning in American law; but the GDPR definition of personal data is significantly broader. It certainly includes the items I listed; particularly when linked to an identifier like an IP address.
markosaric 5y ago
All site data plausible.io stores on behalf of the customers is hosted in Germany on servers owned by Hetzner, a European-owned company. Previously it was hosted by Digital Ocean in Germany but the move to Hetzner was made last year.

by zeusly 5y ago

sebsebsn 5y ago

That's written on their site, but isn't true: https://imgur.com/a/9wEanqD https://imgur.com/a/9wEanqD

markosaric 5y ago
All site data plausible.io stores on behalf of the customers is hosted in Germany on servers owned by Hetzner, a European-owned company. Previously it was hosted by Digital Ocean in Germany but the move to Hetzner was made last year.

cdrx 5y ago

By its very nature, an analytics product must process personal data. Personal data is "any information relating to an identifiable individual" (see GDPR art 4(1). Your IP address, browser and OS (via user agent), the website you visited, the pages you visited, time of visit, the site you came from (via referrer) are all personal data. If Plausible have put a US owned cloud provider in-front of their Hetzner infrastructure, even if for a legitimate purpose (CDN, DDoS prevention) then that is likely an unlawful transfer of personal data to the USA.

donohoe 5y ago
>> Your IP address, browser and OS (via user agent), the website you visited, the pages you visited, time of visit, the site you came from (via referrer) are all personal data. No. These are all not considered PII. Only the IP address in this list definitely is. All other information with a wholly anonymized user would be considered by most interpretations to be ok. Often it depends on the context and presence of other meta-data on whether something is PII or not.
- cdrx 5y ago
  “PII” is not a term the EU or UK GDPR recognises. It may have a specific meaning in American law; but the GDPR definition of personal data is significantly broader. It certainly includes the items I listed; particularly when linked to an identifier like an IP address.

markosaric 5y ago

All site data plausible.io stores on behalf of the customers is hosted in Germany on servers owned by Hetzner, a European-owned company. Previously it was hosted by Digital Ocean in Germany but the move to Hetzner was made last year.