If we block requests to the following script, is it enough to opt out of the analytics tracking?
https://static.cloudflareinsights.com/beacon.min.js

Yep.

I blacklisted their domain earlier, presumably it does much the same, just a bit more harshly.

Some basic questions:

Why was this found to be a necessary addition to the site?

What functionality does it fulfill that could not have been handled in-house?

Will the scope of cloudflare's involvement in GoL slowly expand to eventually prevent those who block it from viewing the site?

Why was this found to be a necessary addition to the site?

So I can get a basic idea of where visitors and referred from, country and so on. Helps us know where to focus.

What functionality does it fulfill that could not have been handled in-house?

Didn't find a self hosted one I liked, and this option is easy to use and doesn't take personal info. Seemed like a good choice.

Will the scope of cloudflare's involvement in GoL slowly expand to eventually prevent those who block it from viewing the site?

No.

Some JavaScript actions, like using the notifications icon on the top-right, or closing banners right below the top menu, are already dependant on the following Cloudflare-hosted script:
https://ajax.cloudflare.com/cdn-cgi/scripts/7089c43e/cloudflare-static/rocket-loader.min.js

We don't depend on it but we do use it to speed up JS loading times.

So if you do not want to rely on Cloudflare, you should actually block all JavaScript from GamingOnLinux or you will end up with broken features, including the ability to post comments.

Posting comments has never and will never depend on JS.

Why was this found to be a necessary addition to the site?

So I can get a basic idea of where visitors and referred from, country and so on. Helps us know where to focus.

What functionality does it fulfill that could not have been handled in-house?

Didn't find a self hosted one I liked, and this option is easy to use and doesn't take personal info. Seemed like a good choice.

Will the scope of cloudflare's involvement in GoL slowly expand to eventually prevent those who block it from viewing the site?

No.

Some JavaScript actions, like using the notifications icon on the top-right, or closing banners right below the top menu, are already dependant on the following Cloudflare-hosted script:
https://ajax.cloudflare.com/cdn-cgi/scripts/7089c43e/cloudflare-static/rocket-loader.min.js

We don't depend on it but we do use it to speed up JS loading times.

Did you have a look at Shynet? It seems pretty neat: https://github.com/milesmcc/shynet

I don't dislike Cloudflare too much, though enough in a way, but always keen on using/supporting smaller orgs/people :)

Last edited by Arehandoro on 30 Mar 2021 at 10:45 pm UTC

So if you do not want to rely on Cloudflare, you should actually block all JavaScript from GamingOnLinux or you will end up with broken features, including the ability to post comments.

Believe it or not, things mostly work okay. I just need to get around to making a handy reference of how to link, quote, insert, etc into comments and to bookmark some key pages.

I've already learned https://www.gamingonlinux.com/usercp.php?module=notifications is important to have ready.

I'd love an option to opt out of this, to be honest!

Mainly because I don't think I like their wording around fingerprinting:

We also don’t “fingerprint” individuals via their IP address, User Agent string, or any other data for the purpose of displaying analytics.

Without having more detail this makes it seem like they still fingerprint us - or at least can save the needed data (such as IP) for their own purposes?

Is there a full privacy policy available for the particular service? (I am assuming the standard cloudflare privacy policy covers it..)

Last edited by nox on 31 Mar 2021 at 11:10 pm UTC

I really don't see this particular change as an issue. I suppose anyone who values their privacy uses uBlock Origin and this script is blocked by this extension.

static.cloudflareinsights.com host is also blocked by Pi-hole or similar (in case your browser does not support extensions).

I'd love an option to opt out of this, to be honest!

No plans, it can be super easily blocked by practically any ad-blocker or privacy plugin.

Without having more detail this makes it seem like they still fingerprint us - or at least can save the needed data (such as IP) for their own purposes?

Cloudflare don't fingerprint people, at all. It's not their business model. You can read more about the approach here https://blog.cloudflare.com/privacy-first-web-analytics/

Somewhat related, there are many interesting articles about online security here: https://ssd.eff.org/