Should one consider data being collected by Google Analytics when writing a privacy policy for a website using GA?

I lean towards no because that data is technically being collected and stored by Google, but I'm not sure.

  • 1
    While I do not believe there is a specific requirement (within the U.S. at least) it is recommended that any cookie including third-party cookies be accounted for. You do not have to echo how others use these cookies, but it does help to link to the privacy policies of the sites that implement the cookie. For example, example.com may not use cookies for itself. It would be best to mention that example.com uses GA and for performance analysis. It would also be best to link to Google's privacy policy for the benefit of the user. This can be a brief and simple paragraph with no complexities. – closetnoc Jan 27 '15 at 17:44

The Google Analytics terms of service actually require you to do that:

You must post a Privacy Policy and that Privacy Policy must provide notice of Your use of cookies that are used to collect data. You must disclose the use of Google Analytics, and how it collects and processes data.

  • 1
    Seems like that requirement should be more prominent on GA. – Brent Washburne Jan 31 '15 at 0:36

I agree with closetnoc, full disclosure is the best policy (but keep it brief). The fact that you include GA on your site means that you are intending to use the data it collects, not to mention that Google gets to look at the data too. The privacy policy has to do with the users of your website, not where their private data is stored. Their data is being collected.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.