Website analytics
Google Analytics privacy rating
Google's web and app analytics service (GA4) that measures traffic, events and conversions, and connects with Google Ads for audiences and ad measurement.
Summary
Google Analytics scores 23 out of 100 (grade F) on the website analytics criteria. It meets 2 of 11 criteria: transparency report and tells users about requests. It partly meets independent audit and TLS configuration. It does not meet open source, no trackers or telemetry, no ads or data sales, security headers, no cookies, no personal data and self-hostable. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: SSL Labs grade B and Mozilla HTTP Observatory grade C.
Score 23 out of 100. How scoring works
Criteria
- No
-
No
No trackers or telemetry Weight 3 of 3
Are the website and apps free of third-party trackers, with any analytics anonymous and any telemetry off by default?
Google's websites and the Analytics site use Google's own advertising and analytics cookies.
-
No
No ads or data sales Weight 2 of 3
Is the product funded without advertising, ad targeting or selling user data?
Part of Google's advertising business. Analytics data can be shared with Google for its products and used with Google Ads for audiences and ad personalization.
-
Partial
Independent audit Weight 2 of 3
Has an independent security or privacy audit been published within the last three years?
Google Analytics is covered by Google's ISO 27001 certification, but no full audit report is public.
-
Yes
Transparency report Weight 2 of 3
Does the provider regularly publish how many government and legal requests it receives and how it responds?
Publishes counts of government requests for user data and how often data is disclosed, updated twice a year.
-
Yes
Tells users about requests Weight 1 of 3
Does the provider promise to tell users about requests for their data, unless a court forbids it?
Google emails the user before disclosing information unless legally prohibited or in emergencies.
-
No
No cookies Weight 2 of 3
Does it count visitors without cookies or other identifiers stored on the device?
Uses first-party cookies on websites and app instance IDs in apps to identify users.
-
No
No personal data Weight 3 of 3
Does it avoid storing IP addresses and personal data, and never share data with advertisers?
IP addresses are not stored, but cookie and user identifiers are kept, and data can be used for advertising personalization.
- No
Automated tests
-
Partial
TLS configuration Weight 2 of 3
Does the website pass the Qualys SSL Labs test with a grade of A or better?
Grade B
-
No
Security headers Weight 1 of 3
Does the website pass the Mozilla HTTP Observatory test with a grade of A or better?
Grade C (55/100+)
-
Not tested yet
Modern web standards Weight 1 of 3
Does the website score 90% or higher on the Internet.nl website test?
Not tested yet.