privacy
A Practical Guide to Digital Sovereignty in Europe
Hosting inside an EU data centre is not sovereignty. Why provider jurisdiction decides access, what the CLOUD Act changes, and how to assess vendors.
β’4 min read
Blog
Insights, tutorials, and updates from the Flowsery team
Latest Posts
guides
Useful context - Marketing GDPR compliance
Direct marketing GDPR compliance needs two checks: a lawful basis under GDPR, and ePrivacy consent for the message itself. Soft opt-in and B2B included.
β’4 min read
guides
A Practical Guide to E-Commerce Analytics
Conversion rate, revenue per visitor, average order value and checkout abandonment: the store metrics worth tracking, and the ones that only add risk.
β’4 min read
guides
A Practical Guide to enterprise web analytics
Multi-brand, multi-country enterprise web analytics fails on governance, not tooling. Set data ownership, residency and event definitions before adding tags.
β’4 min read
privacy
A Practical Guide to Ethical Data Collection
Purpose limitation, minimization, transparency, real choice and retention: why the ethical data collection business opportunity beats a compliance framing.
β’4 min read
industry-insights
A Practical Guide to Ethical Startup Marketing Without
Ethical startup marketing without surveillance drops retargeting pixels, default session replay, fake urgency and dark-pattern banners. What replaces them.
β’4 min read
industry-insights
A Practical Guide to data privacy tools
European privacy friendly business tools are not private just because they are European. How to evaluate cloud, email, analytics and CRM vendors properly.
β’4 min read
tutorials
Explained clearly - Export ga3 data
CSV, the Data API, BigQuery and Sheets compared, so you can export GA3 data and GA4 history before a migration makes the old numbers unreachable.
β’4 min read
privacy
Explained clearly - First party tracking
Owning the cookie does not remove the consent duty. First party tracking is more durable, not more lawful, and cookieless is often simply the better call.
β’4 min read
guides
A practical answer - What is funnel reporting
Steps, completion windows and segments: what is funnel reporting in practice, plus five worked examples and the mistakes that make funnels lie.
β’4 min read
tutorials
A Practical Guide to The GA4 Data Gap
The GA4 data gap missing website traffic leaves behind is biased, not random. Where visits vanish, why consent mode does not close it, and how to check.
β’3 min read
guides
A Practical Guide to gdpr checklist
Data mapping, legal bases, notices, subject rights, security, vendors and transfers: a GDPR checklist you can run as an operational review.
β’4 min read
privacy
Explained clearly - GDPR analytics without consent
A GDPR analytics tool can sometimes run consent-free, but the conditions are narrow. The two questions that decide it: device storage, and personal data.
β’4 min read
privacy
A practical overview - GDPR web analytics
GDPR web analytics needs more than a banner: legal basis, ePrivacy, minimisation and transfers. The safer architecture, plus what actually triggers a DPIA.
β’3 min read
privacy
A Practical Guide to GDPR Consent Requirements Web Analytics
Freely given, specific, informed, unambiguous, withdrawable: the GDPR consent requirements web analytics keeps failing, and where legitimate interest ends.
β’4 min read
guides
A practical overview - Banner cookie GDPR
This GDPR cookie banner guide explains when banners are legally required, what compliant consent looks like, and why cookieless analytics changes the equation.
β’4 min read
privacy
Key insights - Learning from GDPR fines
Learning from GDPR fines means reading how regulators weigh seriousness, intent and mitigation, not the maximum. What gets companies fined, and the fixes.
β’4 min read
industry-insights
Key insights - Learning from GDPR fines
Recent GDPR penalties against Meta, Criteo and dark-pattern banners read like a checklist. Map vendors, test consent, cut identifiers, shorten retention.
β’4 min read
privacy
Explained clearly - Personal sensitive data GDPR
Cookie data turns into personal sensitive data GDPR treats as special category once browsing reveals health, politics or beliefs. How to cut the risk.
β’4 min read
guides
A Practical Guide to GDPR Legal Bases Explained
Consent is rarely the right pick. The GDPR six legal bases processing personal data, when each one genuinely fits, and how the choice changes user rights.
β’4 min read
industry-insights
Explained clearly - Alternatives to Google Analytics GDPR
The alternatives to Google Analytics GDPR authorities accept share one trait: less personal data. Criteria, a migration checklist, and what to ask vendors.
β’4 min read
industry-insights
A clear answer - Is Google Analytics open source or open source
Open code makes a Google Analytics alternative auditable, not automatically private. What self-hosting really costs, and which data is worth migrating.
β’4 min read
privacy
A clear answer - Does using Google Analytics violate CCPA
So does using Google Analytics violate CCPA? It turns on sale-or-share, advertising links and Global Privacy Control. A checklist and a safer setup.
β’4 min read
tutorials
Key insights - Google Analytics cookie consent script
A Google Analytics cookie consent script has to block the tag, not just cover it. Consent Mode, the mistakes that void collection, and cookieless options.
β’3 min read
privacy
A Practical Guide to data privacy issues
Most Google Analytics data retention privacy risks come from where data sits and for how long. What the 2- and 14-month settings really cover, plus fixes.
β’4 min read
tutorials
A Practical Guide to pii identifiers
Whether a Google Analytics user ID GDPR counts as personal data turns on singling out. Client ID, User ID, Signals and app IDs, each assessed in turn.
β’4 min read
privacy
Useful context - Privacy issues with Google Analytics
The real privacy issues with Google Analytics survived the IP-logging change: identifiers, ad integrations, transfers and retention. Plus a config audit.
β’4 min read
tutorials
A practical overview - Google Analytics time on site incorrect
Wondering if the Google Analytics time on site incorrect figure is a bug? It is an inference, not an observation. What it hides, and better questions.
β’4 min read
tutorials
Key insights - Google Analytics enterprise vs free
The Google Analytics enterprise vs free gap is not the invoice. Consent tooling, legal review, tag upkeep and page weight are where the free tier bills you.
β’4 min read
tutorials
Key insights - Tag manager security
GTM does not collect data itself; it decides what else runs. Why tag manager security multiplies consent complexity, and how to audit a container properly.
β’4 min read
privacy
A Practical Guide to online privacy and security
Switching search engines cuts one layer only. Google tracks you even using DuckDuckGo through analytics scripts, embeds, fonts and reCAPTCHA elsewhere.
β’4 min read
guides
A Practical Guide to referral traffic
ChatGPT, Perplexity and Copilot send visitors inconsistently. How to measure those referrals and grow AI search referral traffic with citable content.
β’4 min read
guides
A Practical Guide to HIPAA, CCPA, and GDPR Compared
HIPAA CCPA GDPR privacy frameworks compared on scope, covered parties and rights, plus the website analytics edge cases that quietly trigger each one.
β’4 min read
guides
Useful context - Emr HIPAA compliance checklist
Appointment pages and patient portals leak PHI into analytics long before anyone signs a BAA. Safeguards, vendor agreements and a safe tracking pattern.
β’4 min read
guides
A practical overview - Mental health HIPAA compliance
Psychotherapy notes, safety exceptions, family involvement and website tracking make mental health HIPAA compliance stricter than general practice.
β’4 min read
guides
A practical overview - Privacy-compliant healthcare data
Standard analytics can expose PHI before a form is ever submitted. What HHS says about tracking, and how to keep privacy-compliant healthcare data usable.
β’4 min read
guides
Self-Hosted or Hosted Analytics: Which One Fits Your Team?
This comparison weighs hosted analytics against a self-hosted setup across privacy, maintenance, cost, reliability, and when each one makes more sense.
β’4 min read
privacy
A practical answer - How does gmail monetize user data
Google does not hand out files. How big tech monetizes your personal data is a trade in targeting, measurement and influence, and here is how to cut exposure.
β’3 min read
privacy
Explained clearly - Google Analytics data collection tracker
Every hit from the Google Analytics data collection tracker carries cookies, identifiers, device fields and inferred attributes. What that means for consent.
β’4 min read
privacy
A Practical Guide to Is Google Analytics and GA4 GDPR Compliant
Is GA4 GDPR compliant? Not by default. The risk sits in consent, Google Signals, contracts, transfer basis and the fields you send. The audit checklist.
β’3 min read
guides
A Practical Guide to Make Website Data Black Hole Big
A tag manager added for one campaign becomes a permanent loading dock. How to audit every request, remove ownerless scripts and measure after the cleanup.
β’4 min read
guides
A Practical Guide to Marketing-Analytics-Tools
Acquisition, conversion, funnel, breakdown, retention: the reports marketing analytics tools have to deliver reliably before anything else matters.
β’4 min read
guides
A Practical Guide to marketing funnel optimization
Marketing funnel optimization starts with mapping each step from first visit to conversion, then fixing the biggest drop-off points.
β’4 min read
guides
A practical answer - Can i run analytics without moving data
You lose comparability, not rows. To migrate from Google Analytics without data loss, export the trends stakeholders quote and run both tools in parallel.
β’4 min read
guides
A practical overview - Product analytics without clickstream
Run product analytics without clickstream capture and still answer activation, retention and funnel questions. The minimal event set, plus what to delete.
β’4 min read
guides
A practical overview - Data governance for GDPR
Data governance for GDPR is nine concrete habits, not a policy PDF: map flows, define purposes, minimise, vet processors, control access, plan for DSARs.
β’4 min read
privacy
Turn Online Consumer Data Into Better Privacy Controls
Concern about online consumer data is measurable: 79% of US adults worried, 75% saying trust drives purchases. The figures, sources, and what to change.
β’3 min read
industry-insights
A Practical Guide to open source web analytics
Open source web server analytics improves auditability and control, but hosting, licensing and default data collection still decide your privacy posture.
β’4 min read
privacy
A Practical Guide to privacy business
Names, roles, travel dates and backup contacts leak from routine auto-replies. The out of office email privacy risks worth a policy, and safer templates.
β’4 min read
guides
A Practical Guide to Practical Data Privacy Tips For Businesses
Visibility, restraint and better vendor choices: practical data privacy tips for businesses that strengthen protection without a full-time compliance project.
β’4 min read