Skip to the content
Documentation
Help Start
Reading in:
  • German: 9,059 of 9,059 pages
About the help in other languages
All help pages

Analytics and visitor statistics

For public bodies measuring use of their site - what Exponential records itself (search statistics, view counts, request logs), what the bcwebsitestatistics extension sends to Google Analytics, consent and privacy…

Download as PDF

Address: https://doc.exponential.earth/exphelp/viewer/help/government/privacy/analytics.md

On this page

Analytics and visitor statistics

This page is for project managers, communication teams and data protection officers. Public bodies need to know which services people use and what they cannot find; they also have to respect visitors' privacy. Exponential offers some statistics of its own; a full analytics service is an extension and a third party (Visitor statistics and analytics).

Note This page describes features and common practice; it is not legal advice. Check the law that applies to your organization with your legal counsel.

Contents

  1. What Exponential records itself
  2. bcwebsitestatistics and Google Analytics
  3. Privacy steps
  4. Related pages

What Exponential records itself

SourceWhatPersonal data
Search statisticsphrases, counts, average results; off by default (LogSearchStats)phrases can contain names
View countspage views per node, counted by the updateviewcount cron part from the access lognone stored per visitor
Request logsnot-found and attack requests, maskedmasked addresses
Audit trailadministration activitystaff data

These answer operational questions; they are not an analytics service.

bcwebsitestatistics and Google Analytics

The extension adds the Google Analytics script to pages and can report shop orders through the ezreceipt workflow type (bcwebsitestatistics). Settings in settings/override/bcwebsitestatistics.ini.append.php; always set Urchin to your own property. Per the project's privacy statement, it has no consent gate of its own.

Privacy steps

  1. Decide the purpose and the legal basis with your DPO.
  2. Load the script only after consent where consent is needed (see "Cookie banners and consent").
  3. Configure the service for minimal data (its own settings, such as address shortening, where it offers them).
  4. Name the service, the data and the recipient in the privacy notice.
  5. Under a Content Security Policy, allow the service's hosts in script-src and connect-src for the public siteaccess, and move any inline snippet into a file.
  6. Reconsider yearly whether the figures are used.

Alternatives: self-hosted analytics, aggregated server logs, and Exponential's own search statistics (reset regularly).

Become an Exponential Partner

Partners share their information, provide funding, contribute back and develop the products with us, and that is how Exponential grows. A partner website and dashboard are planned for mid-2027: please become a partner today to speed up our growth rate and land new features faster.

Something wrong on this page? Report an error

Documentation license

This documentation is free documentation, licensed under the GNU Free Documentation License 1.3 or later.

Exponential Copyright © 1998-2026 Exponential Foundation and 7x