Privacy policy

[Wituareard]

As far as I know, the GDPR requires the site to have a privacy policy and some EU countries even require a cookie banner for using Google Analytics.

[joepio]

You're right, we should add this.

[Wituareard]

I'm not sure if only capturing users in the analytics who agreed to a cookie statement makes sense and also cookie banners are annoying, so it might be better to switch to something that doesn't require cookies. The best free alternative I could find is Cloudflare Analytics.

[Wituareard]

Okay, I've spoken to someone who knows this stuff a bit better than me, and analytics seem to require consent in general. You could use Cloudflare Analytics by routing the traffic through Cloudflare, which is fairly straight-forward to set up and also helps with performance. That'd probably still not be legal, but it's not as easy to get sued for (which would be a waste of time and money and was my main motivation for bringing this up). That's because using Cloudflare in general doesn't require consent. Once that's decided, it'd be possible to put together a privacy policy.

[Wituareard]

Audaxly.com seems like a good tool to generate a privacy policy, but it's something you have to do because it needs to contain a postal address etc