946705 - [Privacy] Google Analytics anonymize Ip

Status: RESOLVED FIXED

(Websites :: Web Analytics, task)

Description

[sjw]

I propose to anonymize the IPs, that are sent to Google.

Comment 1

[Chris More [:cmore]]

More info here too:

https://support.google.com/analytics/answer/2905384?hl=en

We don't have access to IPs in GA to start and this would only reduce geo accuracy some. When we are doing A/B testing and funnel analysis, we are usually at the country level for geography.

Comment 2

[sjw]

Of course it's a goal conflict, but I think we should prefer the privacy.

Comment 3

[Chris More [:cmore]]

Gareth: Can you check to see if this anonymizer function works with Universal Analytics and the GA tag manager?

Comment 4

[Gareth Cull [:garethc]]

Chris: Yes. There is an anonymizer function in Universal Analytics. More details available here:
https://developers.google.com/analytics/devguides/collection/analyticsjs/advanced#anonymizeip

Also, there is a setting available in GTM here: https://support.google.com/tagmanager/answer/3281077?hl=en

Comment 5

[Chris More [:cmore]]

Users can also totally opt-out of GA via an add-on:

http://www.mozilla.org/en-US/privacy/policies/websites/#opt-out

Comment 6

[sjw]

(In reply to Chris More [:cmore] from comment #5)
> Users can also totally opt-out of GA via an add-on:
> 
> http://www.mozilla.org/en-US/privacy/policies/websites/#opt-out

An Add-On would just be a workaround. You could use NoScript, too or disable JavaScript. But I think Mozilla should also do something on their own to protect users privacy and this is a way to get still the statistics.

Comment 7

[sjw]

Also note that in some states (e.g. Germany) you *have to* use this snippet.

Comment 8

[sjw]

This week was the #DPD14. It would be a good time to enable this feature. :)

Comment 9

[Chris More [:cmore]]

(In reply to Gareth Cull [:garethc] from comment #4)
> Chris: Yes. There is an anonymizer function in Universal Analytics. More
> details available here:
> https://developers.google.com/analytics/devguides/collection/analyticsjs/
> advanced#anonymizeip
> 
> Also, there is a setting available in GTM here:
> https://support.google.com/tagmanager/answer/3281077?hl=en

Gareth: Can you put the classic analytics tags here with the anonymizeIp so that we can get a PR done?

Comment 10

[Gareth Cull [:garethc]]

Here you go. We need to add _gaq.push (['_gat._anonymizeIp']); prior to _trackPageview in the GA Snippet:

var _gaq = _gaq || [];
_gaq.push (['_setAccount', 'UA-XXXXXXX-YY']);
_gaq.push (['_gat._anonymizeIp']);
_gaq.push (['_trackPageview']);

https://developers.google.com/analytics/devguides/collection/gajs/methods/gaJSApi_gat#_gat._anonymizeIp

Comment 11

[Chris More [:cmore]]

(In reply to Gareth Cull [:garethc] from comment #10)
> Here you go. We need to add _gaq.push (['_gat._anonymizeIp']); prior to
> _trackPageview in the GA Snippet:
> 
> var _gaq = _gaq || [];
> _gaq.push (['_setAccount', 'UA-XXXXXXX-YY']);
> _gaq.push (['_gat._anonymizeIp']);
> _gaq.push (['_trackPageview']);
> 
> https://developers.google.com/analytics/devguides/collection/gajs/methods/
> gaJSApi_gat#_gat._anonymizeIp

Ok, so the complete tag should be:

<script>
var _gaq = _gaq || [];
var pluginUrl = '//www.google-analytics.com/plugins/ga/inpage_linkid.js';
_gaq.push(['_require', 'inpage_linkid', pluginUrl]);
_gaq.push(['_setAccount', 'UA-36116321-1']);
_gaq.push(['_setAllowLinker', true]);
_gaq.push(['_setAllowAnchor', true]);
_gaq.push(['_gat._anonymizeIp']);
_gaq.push(['_trackPageview']);

(function() {
    var ga = document.createElement('script');
    ga.type = 'text/javascript';
    ga.async = true;

    var prefix = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www');
    ga.src = prefix + '.google-analytics.com/ga.js';

    var s = document.getElementsByTagName('script')[0];
    s.parentNode.insertBefore(ga, s);
})();
</script>

right?

Comment 12

[Gareth Cull [:garethc]]

Looks good Chris.

Comment 13

[Chris More [:cmore]]

Gareth: can you review this PR?

https://github.com/mozilla/bedrock/pull/1686

Comment 14

[[github robot]]

Commits pushed to master at https://github.com/mozilla/bedrock

https://github.com/mozilla/bedrock/commit/895bc7ce7ad2709b2a677ac2196c04c8619665fd
Bug 946705: Add anonymize tag to GA

https://github.com/mozilla/bedrock/commit/51b40b563c327e5865fd519264d05cba771f022e
Merge pull request #1686 from chrismore/anonymize-ga-ips-bug-946705

Bug 946705: Add anonymize tag to GA

Comment 15

[sjw]

Yay, thanks for making this decision!
Before you launch the new script to the sites I'll push bug 946697, which could be included in this small update.

Comment 16

[raymond [:retornam] (inactive)]

fixed on stage www.allizom.org

Comment 17

[sjw]

https://github.com/mozilla/nocturnal/pull/26
https://github.com/mozilla/mozillians/pull/961

See https://bugzilla.mozilla.org/show_bug.cgi?id=946697#c9

Comment 18

[[github robot]]

Commit pushed to master at https://github.com/mozilla/mozillians

https://github.com/mozilla/mozillians/commit/554a27309a2f1d8a0049695fc0d7bc248c400560
[bug 946705] Anonymize IPs that are send to Google.

Comment 19

[[github robot]]

Commit pushed to master at https://github.com/mozilla/remo

https://github.com/mozilla/remo/commit/4ea92884bd0649073235d3622325bf5ad8345953
[bug 946705] Update Google Analytics options.

* Mask IPs that are send to Google.
* setAllowLinker == true
* setAllowAnchor == true

Comment 20

[[github robot]]

Commit pushed to master at https://github.com/mozilla/nocturnal

https://github.com/mozilla/nocturnal/commit/af405d7351a722ae9343e9a5ebf74c01e0e5c437
Update index.html

See bug 946705, bug 946697 
Updated URLS to https
Corrected Facebook URL