Tracking and Analytics

At Agile Collective we take data privacy very seriously, and understand that there is an important conversation to have around what data is needed to maintain our clients’ websites to the highest standards.

Tldr

  1. Cookie rules: All cookies and trackers (eg. pixels) should be optional unless specifically required for hosting.
  2. Recommended banner: Civic Cookie Control or Klaro.
  3. Customisation: Clients can choose otherwise, but we need to have fully informed them prior to implementation.

This is what we would recommend to all our clients, although changes to this can certainly be discussed, especially if the site doesn’t really apply to certain countries.

There are 2 cookie banner options we tend to recommend on our projects:

Analytics Providers

The 2 concerns

  1. Legal : There are several different laws across the world that may apply, and trying to work with them all can be time consuming, especially as they all differ in some way.
  2. Social : Users do not appreciate their data being used, some more than others, with over 50% feeling they’ve become a product. We want our clients’ users to trust our clients when they visit the sites, so need to show this by first not tracking without consent.

What can I include as “required” cookies?

This is ONLY something that would otherwise cause the site to be unusable for all users, and consent is unequivocally implied by accessing the site. For example shopping carts or server/security tooling for load balancers or performance (eg. Cloudflare is allowed), or IF this is a video distribution site then YouTube would be allowed.

At the very least, unless the site is specifically only for a single country AND that country allows 3rd party trackers, then you probably need to consider using youtube-nocookie.com as the domain. YouTube (and google) have privacy settings, but only if the user knows where they are, and in most cases, they probably don’t.

But I anonymise all my data, surely I can still send to google analytics?

If you are working on a global website, then you probably still shouldn’t, although we can reduce as much as possible to make it less of a concern on what is shared.

A lot can be done to mitigate concerns though, such as turning off location/demographics/signals in GA4, then only a minimum of personal data is collected.

There are too many to list here, but a few key ones we are aware of are:

Last updated: