Hacker News new | past | comments | ask | show | jobs | submit login

How do you know it doesn't need a consent notice? Anything that tracks people uniquely, via a personal identifier, is in-scope and counts as personal data. Is the assumption here that it counts as 'legitimate interest'?

More on this can be found on the Privacy page: https://www.goatcounter.com/privacy

It would appear that that's how it avoids needing a consent notice. The page says it doesn't track users.

I'm not sure that GoatCounter tracks people uniquely.

There is no "unique personal identifier"; I have some ideas on how to track recurring visits without such an ID, but that's something for the future.

Perhaps I should clarify the README on this a little bit.

The referrer header which is stored may contain a unique personal identifier.

Ahh, cool! Someone else linked to your privacy policy where it's super clear "Visitors are not tracked by using e.g. persistent cookies".

Might be worth clarifying by bringing this line up especially as there are tons of "gdpr compliant" products that get fuzzy on the details pretty quickly.

Guidelines | FAQ | Support | API | Security | Lists | Bookmarklet | Legal | Apply to YC | Contact