Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Data protection: Hide visitor id in visits log if profile is disabled #18884

Closed
PeteTrombone opened this issue Mar 4, 2022 · 9 comments · Fixed by #19083
Closed

Data protection: Hide visitor id in visits log if profile is disabled #18884

PeteTrombone opened this issue Mar 4, 2022 · 9 comments · Fixed by #19083
Assignees
Labels
Bug For errors / faults / flaws / inconsistencies etc. c: Privacy For issues that impact or improve the privacy.
Milestone

Comments

@PeteTrombone
Copy link

We had to deactivate the visitor profile for data protection reasons.
However, the IP address and the visitor ID are still displayed in the visitor log as a mouseover effect.
image

This is not the case on the Matomo demo page.
image

Matomo-Version: 4.7.1
MySQL-Version: 10.4.21-MariaDB-log
PHP-Version: 7.4.26

@PeteTrombone PeteTrombone added the Potential Bug Something that might be a bug, but needs validation and confirmation it can be reproduced. label Mar 4, 2022
@sgiehl
Copy link
Member

sgiehl commented Mar 5, 2022

Hi @PeteTrombone. Matomo doesn't display this private information for the anonymous user. If you would be logged in on the demo you would see it their as well

@tsteur
Copy link
Member

tsteur commented Mar 7, 2022

@PeteTrombone Matomo can be configured to optionally allow anyone to view the tracked analytics data. This is the case on the demo. When the data is available publicly then this information is hidden.

For the IP if you don't want to show it, then you can either fully or partially anonymise the IP address.

The visitor ID would be always shown when you are logged in and AFAIK it isn't possible to hide it. Do you see an issue with this?

@PeteTrombone
Copy link
Author

@tsteur yes, we have an issue.
Due to privacy laws in Germany (Europe), we had to disable the visitor profiles so that the visitor ID is no longer visible. Unfortunately, the visitor id is still visible in the visitor log as described above. However, we do not want to disable the visits log, because then the ecommerce log, the segmented visits log, the realtime map or the realtime widgets will no longer work.

I also don't understand the function that you can only switch off the visitor profile if you can still see the personal data.

We already anonymize the IP address.

@tsteur tsteur added c: Privacy For issues that impact or improve the privacy. and removed Potential Bug Something that might be a bug, but needs validation and confirmation it can be reproduced. labels Mar 8, 2022
@tsteur tsteur added this to the 4.10.0 milestone Mar 8, 2022
@tsteur
Copy link
Member

tsteur commented Mar 8, 2022

Indeed @PeteTrombone . If the visitor profile is disabled, then the visitor ID should not be shown, and the visitorID segment should be disabled too. It seems like currently this is only happening when visits log and visitor profile is disabled.

@tsteur tsteur added Bug For errors / faults / flaws / inconsistencies etc. Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. and removed Major Indicates the severity or impact or benefit of an issue is much higher than normal but not critical. labels Mar 8, 2022
@sgiehl
Copy link
Member

sgiehl commented Apr 11, 2022

@tsteur It seems the visitorID segment is correctly disabled if (only) the visitor profile is disabled globally. If it's only disabled for a specific site, then the segment remains active when viewing that site.

@tsteur
Copy link
Member

tsteur commented Apr 11, 2022

@sgiehl not fully understanding why that would be the case? We could maybe still disable it even if visits profile is only disabled for a specific site (unless the site is a roll up maybe)? Not sure how trivial it is to implement though

@sgiehl
Copy link
Member

sgiehl commented Apr 11, 2022

@tsteur I guess the problem is that the segment list is cached globally and not site dependent. So if we want that segment being available per site we need to change the caching.

@tsteur
Copy link
Member

tsteur commented Apr 11, 2022

@sgiehl I can't really imagine that as Goals, Dimensions, and other things are site dependent and it works fine. Also looking at the cache it may be siteAware?

@sgiehl
Copy link
Member

sgiehl commented Apr 12, 2022

@tsteur that was just a guess without looking at the code 🙈 But you're right, it's cached site dependent.

@justinvelluppillai justinvelluppillai changed the title Data protection problem after deactivating the visitor profile Data protection: Hide visitor id in visits log if profile is disabled May 8, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug For errors / faults / flaws / inconsistencies etc. c: Privacy For issues that impact or improve the privacy.
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants