arguman/arguman.org

Hardcoded Google Analytics tracking

Closed this issue · 1 comments

I didn't find this discussed anywhere before - if I missed something, please let me know.

argüman seems to include hardcoded Google Analytics code:

<script>
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-55983865-1', 'auto');
ga('send', 'pageview');
</script>

While this might be okay for a publicly hosted instance, making everyone hosting their own instance "phone home" to your(?) Google Analytics account really isn't nice.

This should arguably be opt-in, but at the very least, there should be a way to disable it (and maybe to customize the ID).

disclaimer: I've not self-hosted argüman before - this was noticed in a (non-public) mailinglist conversation, and the solution taken there was running a custom fork of the project removing the tracking code.