I'd like to start using an analytics tool (namely Google Analytics) to collect information on how my web app is used, by whom, and what our user's technical capabilities are. As part of the introduction of this tool, I'm going to be asked what the security implications are.
Does using Google Analytics pose any security concerns? Are there any PCI compliance issues that it might introduce? And if there are no unreasonable concerns, how can I document this? I have searched Google Analytics website, and have found a privacy statement, but not a specific statement of what information their tool collects, or how it is stored.