Don't upload user information to Google Analytics by default

[FrostKiwi]

Telemetry is fine and good, but sending user information by default to Google Analytics is a worrying feature. Telemetry should be opt-in.
Please consider changing https://github.com/apdn7/AnalysisPlatform/blob/master/ap/common/trace_data_log.py to be opt-in.

This makes the service also non-GDPR compliant by default and cannot legally be deployed in Europe as is. The 'terms of service' is not a privacy policy and is thus not in compliance with GDPR.

You list in the readme here:

AnalysisPlatform/about/terms_of_use_en.md

Line 20 in dc4ad90

* Referral sources

that you also upload referral sources. If I deploy that service company internally, it will (indirectly and depending on the setup) leak parts of company internal URL structures and upload them to DENSO's Google Analytics account.
Here is the Google Analytics tracking ID:

AnalysisPlatform/config.py

Line 59 in dc4ad90

GA_TRACKING_ID = 'UA-156244372-2'

[FrostKiwi]

@apdn7 It's been over a year. Please remove user tracking. It's literally illegal for us to deploy this.

[apdn7]

@FrostKiwi Hello, sorry for taking so long.
Currently, we are working on using CookieConsent for CMP and applying consent mode for GA, to ensure that we do not load Google tags until the user interacts with the cookie banner.
We are preparing to release that feature next month.

[FrostKiwi]

to ensure that we do not load Google tags until the user interacts with the cookie banner

You are misunderstanding what a cookie banner is for. If someone self-hosts AnalysisPlatform, it still contains tracking to Google Accounts owned by company Denso.

You can deploy cookie banners for users to consent to data collection if you deploy it, but you can't make users of a completely different company's deployment consent for data to flow to you. Users are consenting on their deployment, not yours. You remain owner of this user data and the deployer cannot delete it. It's a GDPR breach at the very least.

Here are the tracking IDs:

AnalysisPlatform/ap/static/common/js/base.js

Line 4 in 6360a97

const GA_TRACKING_ID = 'G-9DJ9TV72B5';

AnalysisPlatform/config.py

Line 59 in 6360a97

GA_TRACKING_ID = 'G-9DJ9TV72B5'

User tracking and telemetry is ok 👍.
Your tracking IDs on deployements you do not own, is not.
There are no terms and conditions that can fix this, there is no cookie banner that can fix this. Remove the tracking IDs from the source.

[apdn7]

Thank you for your feedback.