[ 
https://issues.apache.org/jira/browse/TAP5-2801?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17921360#comment-17921360
 ] 

Niall Pemberton commented on TAP5-2801:
---------------------------------------

Hi [~ben-ng] 

I've just re-scanned Tapestry website and there are *578 pages* which still are 
using _*Google Analytics*_

*49* pages in {_}*tapestr y/content/*{_}, for example:
 * 
[https://svn.apache.org/repos/infra/websites/production/tapestry/content/articles.html]
 * [https://tapestry.apache.org/articles.html]

*529* pages in {_}*tapestr y/content/tapestry4.1/*{_}, for example:
 * 
[https://svn-master.apache.org/repos/infra/websites/production/tapestry/content/tapestry4.1/changes-report.html]
 * [https://tapestry.apache.org/tapestry4.1/changes-report.html]

I can do some work on this but I was wondering what the best way to fix these 
pages are? Is there a way to re-generate these pages, without GA or would it be 
appropriate for me to provide a patch against the deployed pages here:
 * [https://svn.apache.org/repos/infra/websites/production/tapestry/content/]

Niall

> Remove Google Analytics from the Tapestry Website
> -------------------------------------------------
>
>                 Key: TAP5-2801
>                 URL: https://issues.apache.org/jira/browse/TAP5-2801
>             Project: Tapestry 5
>          Issue Type: Task
>          Components: documentation
>            Reporter: Niall Pemberton
>            Assignee: Ben Weidig
>            Priority: Major
>         Attachments: tapestry-site.patch
>
>
> Hi Tapestry Team
> The ASF {_}*Privacy Policy*{_}[1][2] does not permit the use of _*Google 
> Analytics*_ on any ASF websites and the ASF Infra team will soon enforce a 
> {_}*Content Security Policy*{_}(CSP) that will block access to external 
> trackers:
>  * [https://lists.apache.org/thread/w34sd92v4rz3j28hyddmt5tbprbdq6lc]
> Please could you remove the use of the Google Analytics from the Tapestry 
> website (I am attaching a patch to do that)?
>  * [https://lists.apache.org/thread/scm7x2xxt2ncfwllgky8fvo4290c526o]
> The ASF hosts its own _*Matomo*_ instance to provide projects with analytics 
> and you can request a tracking id for your project by sending a mail to 
> *privacy AT apache.org.*
>  * 
> [https://privacy.apache.org/faq/committers.html#can-i-use-web-analytics-matomo]
> Additionally I would recommend reviewing any external resources loaded by 
> your website. The Content Security Policy will prevent any resources being 
> loaded from 3rd Party providers that the ASF does not have a Data Processing 
> Agreement (DPA) with. On the 1st February Infra will begin a temporary 
> "brownout" when the CSP will be turned on for a short period. This will allow 
> projects to check which parts, if any, of their websites will stop working. 
> The Privacy FAQ answers a number of questions about which external providers 
> are permitted or not:
>  * [https://privacy.apache.org/faq/committers.html]
> Thanks
> Niall
> [1] [https://privacy.apache.org/policies/website-policy.html]
> [2] 
> [https://privacy.apache.org/faq/committers.html#can-i-use-google-analytics]



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to