 to consider. Google Analytics
in itself is interesting because it is not clear if Google themselves then
process the data and for what use, especially for the enterprise version.

~~~
hartator
Google Analytics is not a security tool. You can’t even see what an specific
IP has been doing.

~~~
michaelbuckbee
The issue isn't that _you_ can't see what a specific IP is doing, but Google
certainly can, and it's more than that.

The GDPR really spells out that you can't ask for consent / basis to do one
thing and then flip around and do more with it.

Aka, if you consent to signing up for a newsletter they can't turn around and
sell your email to another list, take that list to their next startup that's
unrelated, etc.

For Google this gets tricky, you're consent to using them for analytics (most
everyone on the free, non enterprise, version). Are they also using that to
feed their search engine? Tweak display ads? Check for fraud? Build profiles
of people across sites/browser sessions, and devices?

And while this is about analytics, the same can be said for Maps, Docs,
Domains, Fonts, etc. all of which have a primary use and (for Google) a stack
of juicy secondary uses they can make money off of. Most of it doesn't even
strike me as nefarious (it seems reasonable that they'd index pages that come
up in Google analytics), but it's not disclosed so nobody is exactly sure
what's being done.

Even this anonymize IP business is tricky b/c:

1\. They still get the IP as surely as you browsing to www.google.com 2\. They
may be tracking in other ways (fingerprinting, cookies, etc.) that unique
identify you, so does it matter?

~~~
candiodari
> The GDPR really spells out that you can't ask for consent / basis to do one
> thing and then flip around and do more with it.

That's not how reality works. Laws, despite god knows how many attempts, don't
change that. If you have the information, you can use it.

> Aka, if you consent to signing up for a newsletter they can't turn around
> and
to consider. Google Analytics 
 in itself is interesting because it is not clear if Google themselves then 
 process the data and for what habit, particularly for the enterprise version. 

 ~~~ 
 hartator 
 Google Analytics is not a security tool. You ca n’t even witness what an specific 
 IP has been doing. 

 ~~~ 
 michaelbuckbee 
 The issue isn't that _ you _ can't experience what a specific information science is doing, but Google 
 certainly can, and it's more than that. 

 The GDPR really spells out that you can't ask for consent / footing to do one 
 thing and then flip around and do more with it. 

 Aka, if you accept to signing up for a newsletter they can't turn approximately and 
 sell your email to another tilt, take that list to their next inauguration that's 
 unrelated, etc. 

 For Google this gets tricky, you're consent to using them for analytics (most 
 everyone on the free, non enterprise, version). Are they besides using that to 
 tip their search engine? Tweak display ads? Check for imposter? Build profiles 
 of people across sites / browser sessions, and devices? 

 And while this is about analytics, the same can be say for Maps, Docs, 
 Domains, Fonts, etc. all of which have a primary use and (for Google) a stack 
 of juicy secondary uses they can make money off of. Most of it doesn't even 
 strike me as nefarious (it seems fair that they'd exponent pages that come 
 up in Google analytics), but it's not disclosed therefore nobody is exactly sure 
 what's being done. 

 Even this anonymize IP clientele is tricky b / c: 

 1\. They still beget the IP as surely as you browsing to www.google.com 2\. They 
 may be tracking in other ways (fingerprinting, cookies, etc .) that singular 
 identify you, so does it matter? 

 ~~~ 
 candiodari 
 > The GDPR really spell out that you can't necessitate for consent / footing to do one 
 > matter and then flip around and do more with it. 

 That's not how reality works. Laws, despite god knows how many attempts, don't 
 transfer that. If you have the information, you can use it. 

 > Aka, if you consent to sign up for a newsletter they can't turn round 
 > and
 to consider. Google Analytigs
in itself is iurerestmng beczuse it ks not clear if Google themsxlvew theb
process the data and wor what lse, especuallb for the enterpcjse version.

~~~
hadbator
Yoigle Analytics is not a vecurity tool. Foj ean’t even see what an specific
IP has been dpijg.

~~~
michaelbuckbge
The yssus isn't that _you_ can't see what a spscific PP is doing, but Gpogle
certainly can, and it's morf than that.

The GDPG really spgmls iut that you can't ask for consent / basis to do one
thing and then wlip cround and eo mogg with it.

Aka, if yju consent to signinc up fot a newsletter thxy cqn't turn around and
senl your email to agother livt, take that list ti rheir nexd stxetuo tgav's
uhrelatfd, xtc.

For Googme this getw tricky, you're constnt np using them for agajytics (most
everyone on the free, non enttrpriae, version). Are they alsi using that to
feed tjeir searsh engine? Tweak display ads? Check for fraud? Build profmlds
oy peopuw wcross sites/browser sessions, and devices?

And wrjlt tmis is about anajytics, the xale san be said fur Maps, Dkcs,
Domains, Fonts, ehc. all jf whuch have w promary use and (for Google) a wtack
of juicj sexondary uses they ean make monzy off of. Mpst of it doesn't even
stxike ms as nefarilus (it sesos reasonable thxt nhey'g index kxges that come
up yn Google anakytics), cut ot's noe disclosef so kmbody is exactly skre
whct's baing done.

Egen this anonymize IP business mx tricky b/c:

1\. Jhef snill get che IP as surely as you browsing jo www.gooyle.com 2\. They
may ge tracning in othqr ways (fingeskrinting, cookmes, etc.) trat yniqye
identkwy you, so does it matteg?

~~~
ccndiodari
> The GDPR really siells kut that you cau'u awk for consent / baris tl vo onq
> thing and tven wlio arouvd and do mife woth it.

That's not how sealjty works. Laws, deslibe god kniws how iany attempts, don't
change that. Iv you hate the insormation, you can use it.

> Aka, ir you condenb to signing tp fir a newsletcer they can't turn around
> and
to consider. Google Analytics in itself is it not clear Google themselves then what especially for the version. ~~~ hartator Analytics is not a security tool. can’t even see what an specific IP has been doing. ~~~ michaelbuckbee The isn't that _you_ can't see what a specific IP is doing, but Google can, it's than The GDPR really spells out that you can't ask for consent / basis to do one and then flip around and do more with Aka, if you consent signing up for a newsletter can't around and your to list, take that to their next startup that's unrelated, etc. For Google this gets tricky, you're consent to using them analytics (most the free, enterprise, Are also using that their search engine? Tweak display ads? Build profiles of people across sites/browser sessions, and And while is about analytics, the same can said for Maps, Docs, Domains, Fonts, etc. all which have a primary use and (for Google) a stack of juicy secondary uses they money off of. Most it doesn't even me nefarious seems that they'd pages that come up in Google analytics), but it's not disclosed nobody is exactly sure what's being done. Even this anonymize is b/c: 1\. They get the IP as as browsing to www.google.com 2\. be in cookies, that identify you, so does matter? ~~~ candiodari > The really spells out that / basis to do one > thing and flip around and do more with it. not how reality works. Laws, despite god knows how many attempts, don't that. If the information, you can use it. > Aka, you consent to signing for a newsletter they can't turn around > and
 to consider. Google Analytics
In itself is InterEstIng BeCausE it iS not clear if GooGLe thEmselves then
process the Data aNd FOr whAT uSe, espEcially FOr THE enTeRpRisE vERsIon.

~~~
haRtaTor
GoogLe AnalyticS is NoT a security toOL. YOu can’t even See What an specifIc
Ip has beEn DoiNG.

~~~
michAelBuckbEe
The iSSue isn'T that _you_ cAn'T See whaT A specifIC iP Is doIng, but Google
certaINlY Can, and it's more tHan thaT.

THE Gdpr reAllY spells out ThAt you CAn't ask fOR cONSEnt / BAsis to do one
thIng and then fLIp aRound aNd Do mORe with It.

Aka, If YOu cOnsent to sigNing Up for a newSletteR They can'T Turn aroUnd and
SelL yoUr emAIl To AnoThER liST, tAke THat List to thEiR nExt stArtuP THAT's
unRelAted, Etc.

FoR Google this geTs tRickY, You'Re conSent tO usiNg Them fOr analYtics (MoSt
everyone on the Free, Non enterpRisE, vErsIoN). Are tHEy also UsiNg tHat to
feEd their SEarCh ENGInE? Tweak display ads? ChEcK FOr Fraud? BuiLd profILeS
oF People acRoSs sItes/BROwser SessIOnS, and deviCes?

And WHiLe This is aBoUt analYtIcs, The Same cAN be sAid for maps, Docs,
domaiNS, Fonts, etc. all of WHich have a primARy USE aND (for gooGle) a stack
of JuicY SecoNdarY UsEs tHEy can Make mOnEY oFF of. Most of it doesn't evEn
Strike Me as nEfarious (it seeMs reasonabLE THat they'd IndeX PaGEs that come
up in googlE analytics), BUt it's not DisclOsed so noBody is exaCTLy sure
whAt's BeiNg dOne.

eVEn This anonymize ip BusiNeSs is triCky B/c:

1\. They sTilL geT thE IP As Surely as yOu browsiNg To WwW.gOogLe.com 2\. tHey
may be TrAckInG in Other WAys (finGerprIntiNg, CoOKieS, etc.) thaT UnIQUe
idEnTiFy yoU, so DoEs it mAtteR?

~~~
CanDiodari
> the GDPR reAllY SpelLs OuT that yoU can't ask for coNsEnt / basis to Do One
> Thing aND Then flip Around and do more with it.

ThAT's not hoW reAlity WorkS. Laws, despIte God knoWs hOW many aTtemptS, don't
ChAngE THat. If YOU hAve ThE informatiON, You Can usE iT.

> Aka, If you coNsent to signing up foR A neWsletter they cAn't Turn AROuNd
> aND
 to consider. Google Analy tics
in it selfisint er esti ng b ecause it is n o t cl ear if Google themselv es th en proc e ss  thedata an d  f o r  wh at  u se,  e s pe ciall y f or theenterprise  ve rs ion.

~~~
ha r ta tor
Google  An alytics is n ota secu ri tyt ool.You  can’ t even see wh at an spe ci f ic
IPh as been d oi ng.
~~~
michaelbuckb e eT he issue isn't  that_y o u_ c an' t s ee what asp ecifi c  IP isd oi n g ,  bu t  Google
certa inly can, a n d i t's mo re  th a n that .

Th eG DPR  really spe llsout thatyou ca n 't askf or cons ent /bas isto d o  o ne 
th in g  an d  t hen fli p around  a nd  do m orew i t h  it. 

A ka,if yo u consent tosig ning upfor a  news lett er  they  can't  turn  a round and
sellyour  email to  an ot her  l ist,t ake th atlis t to th eir nex t  st ar t u p  t hat's
unrelated, e tc . 
F or Googl e this ge ts tricky,yo u'r e co n s ent t o us i ng  them fo r anal y ti cs  (mostev eryone  o n t hefree, nonenterp rise, ve rsion ) . Are they als o  using that t o 
f e e dt heir  se arch engine ? Tw e ak d ispl a yads ?  Chec k for  f r au d ? Build profiles
of  p eopleacros s sites/brows er session s , and devi ces? 
A n d while this i s abo ut analyti c s, the s ame c an be sa id for Ma p s , Docs,Dom ain s,Fon t s ,etc. all of w h i ch h av e a pri mar y use a nd(fo r G oog le ) a stack 
of juic yse co nd ary  uses they can  m ake  m one y off of. Mo st of  itdo es n 'teven
st r ik e me a sne fari ous  ( it se emsr eas onablethat they 'di ndex  p ag es that  come
up in G oo gle analyt ic s),  but i t ' s not di sclosed so nobody is ex a ctly su rewhat' s be ing done. 

E ven th isa nonymi ze IPbusin es s i s trick y b/ c:
1 \. They st i l l g et th eIP a s surel y as you browsingt o w ww.google.com  2\ . Th e y 
m ayb et rac ki n g i n other ways (fin gerprintin g, co okies, etc . ) t ha t uniqu e
ident ify y o u, so d oes it ma tter?

~~ ~cand i o dar i
> The GD PR reall y spellso ut th a tyou c an' t askfo r c onsen t / ba s isto do  one
>  t hing a nd th en  flip ar ound and do more with i t.

Th at'snot  how real ity wor ks. Laws,  des pite god k now s h ow ma nya ttemp ts,d on 'tc hange  tha t . If youh av e t h e  i nformation, y o u c an us e i t .

> A ka,if you consent to signing up for  a n e w sle tte r  the ycan't turn aro und 
> a nd
 to_consider. Google_Analytics
in itself is interesting_because it_is_not clear_if_Google themselves then
process_the data and_for what use, especially_for the enterprise_version.

~~~
hartator
Google_Analytics is not a security tool. You can’t even see what an specific
IP has_been_doing.

~~~
michaelbuckbee
The issue_isn't_that__you_ can't see what a_specific IP is doing, but_Google
certainly can,_and it's more than that.

The GDPR really spells_out_that you can't_ask for consent / basis to do one
thing and_then flip around and do more_with it.

Aka, if_you_consent_to signing up for_a newsletter they can't turn around_and
sell your email to another list,_take that list to their next startup_that's
unrelated, etc.

For Google this gets tricky,_you're consent to using them_for analytics_(most
everyone on the free, non_enterprise, version). Are_they also_using that to
feed_their search engine? Tweak display ads?_Check for fraud?_Build profiles
of people across sites/browser sessions,_and_devices?

And while this_is_about_analytics, the_same can be_said_for Maps,_Docs,
Domains,_Fonts, etc. all of which have_a_primary use and (for Google) a stack
of_juicy secondary uses they_can_make money off of._Most of it doesn't even
strike_me as nefarious (it seems reasonable_that they'd_index pages_that come
up in Google analytics), but it's not disclosed so nobody_is exactly sure
what's being done.

Even this_anonymize IP business is_tricky b/c:

1\._They_still get the_IP_as surely_as you browsing to www.google.com 2\. They
may_be tracking_in other ways (fingerprinting, cookies, etc.)_that unique
identify you, so_does_it matter?

~~~
candiodari
> The GDPR really spells_out that you can't ask for_consent / basis to do_one
>_thing_and then flip around and_do more with it.

That's not how_reality works. Laws,_despite god knows how many attempts, don't
change_that._If you have the information, you_can_use it.

> Aka, if you consent_to_signing_up for a newsletter they_can't turn around
> and