At least in the EU, you still need consent to go down this path, so you end up rebuilding the existing analytics tools to manage that.

▲

Fire-Dragon-DoL 2 days ago | parent [-]

You don't: the ip, user agent header are necessary for you to serve the request and for you to protect from malicious usage. Both are fine use for gathering data under the current legislation. You can still convert those datasets in analytics.

▲

closewith 2 days ago | parent [-]

No, you're wrong. You need consent to use IP address for analytics, even if lawfully collected for another reason under a different legal basis.

Lots of precedent on this and it's clear cut.

▲

Fire-Dragon-DoL 2 days ago | parent [-]

But you don't need to use the ip for analytics. Aggregate the data and throw it away.

▲

closewith 2 days ago | parent [-]

You still need consent for that, as you processed the IP for that purpose and it is explicitly never allowed under other legal bases.

Again, this is a completely settled matter in the EU, so you can easily look it up if your don't believe me.

	▲	Fire-Dragon-DoL 2 days ago \| parent [-]
		Cool, then ignore the ip and just consider the amount of requests to a given endpoint. Counting that should be sufficient