Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Require consent in order to use userID feature #15431

Open
tsteur opened this issue Jan 21, 2020 · 4 comments
Open

Require consent in order to use userID feature #15431

tsteur opened this issue Jan 21, 2020 · 4 comments
Labels
c: Privacy For issues that impact or improve the privacy.
Milestone
For Prioritization

Comments

@tsteur
Copy link
Member

tsteur commented Jan 21, 2020

In Matomo tracker we already have a method that can be called that a user has given consent to be tracked. We also already attach a tracking URL parameter consent=1 when consent was given.

I think by default, Matomo should record a raw (unhashed) User ID only if a user consented to it.

This is to protect user privacy. And User ID certainly can be considered personal data and therefore we should require by default our users to ask for consent in order to use this feature.
@tsteur tsteur added the c: Privacy For issues that impact or improve the privacy. label Jan 21, 2020
@tsteur tsteur mentioned this issue Jan 21, 2020
Open
@Findus23
Copy link
Member

I would just keep in mind that for most User ID use cases it doesn't really matter if one stores a hashed or unhashed ID as it can be reversed trivially (e.g. hash e-mail of all registered users)

@tsteur
Copy link
Member Author

tsteur commented Jan 21, 2020

Yep true. Probably in all cases it should require consent.

@voarsh2
Copy link

voarsh2 commented Feb 4, 2020

I think by default, Matomo should record a raw (unhashed) User ID only if a user consented to it.

I heavily DISAGREE with this

@Findus23
Copy link
Member

Findus23 commented Feb 4, 2020

@voarsh2 Why do you think this shouldn't be the default (not suggesting removing this option)?
I'm genuinely interesting in hearing other peoples opinion in the new ideas for privacy features in Matomo.

@mattab mattab mentioned this issue Feb 5, 2020
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
c: Privacy For issues that impact or improve the privacy.
Projects
None yet
Milestone
For Prioritization
Development

No branches or pull requests
4 participants
@tsteur @Findus23 @voarsh2 @innocraft-automation