> Matomo formly Piwik have very good support for privacy, special options that
> can be enabled, also by default it strip part of the user IP.
>
> https://matomo.org/privacy/
>
> You can also by default make cookie baner that you can use and enable
> tracking only if user accept. I'm not sure if this is how people implement
> ask permission for cookies nowadays. From what I've seen some time ago that
> are lot of cookies just before I click the banner so clicking no probably
> don't change anything. But with Matomo you can actually make it right and
> don't rack unless user agree.

It certainly looks like a big improvement for privacy over the big
analytics companies: <https://piwik.com>.

Scheme.org needs to have a written privacy policy, and if we allow
embedding scripts from companies, we'd have to separately inspect the
privacy policy for each company to make sure it doesn't track users.

The reality is that it's very hard to get companies to respect users'
privacy for an extended period of time. It's against their commercial
interests, and there is almost nothing users can do if they don't like
tracking. The privacy policies are hard to read, they can change at any
time, and sometimes the companies do not abide by their own policies.

Personally I would find it easiest to have a blanket ban on loading any
scripts (and embedding images/video/audio) from outside scheme.org into
scheme.org, because it's so hard to inspect those things. This is
unfortunate but it's hard to think of a workable alternative.

For our own server we keep standard nginx logs (split so that each
subdomain has a separate log), and there are tools like analog
<https://en.wikipedia.org/wiki/Analog_(program)> to summarize them.
Would this be sufficient for your use case?