Add Piwik analytics

[oharsta]

New Feature Request

Summary

Investigate whether we can use an analytics tool to keep track of user behaviour in the SURF Access application.
This way we can e.g. track:

• how users navigate through the application
• what users look for in search fields
• which pages are most visited

Proposed Solution

Investigate whether https://surfnl.piwik.pro/ can be used (since it is already used within SURF)

Checklist

To be completed by the developer during implementation.

• Add required changes and feature flags config files
• check for backwards compatibility
• Updated CHANGELOG and other documentation where needed
• Check with privacy coordinator (Arnout)

Testing and QA

Todo

Test Environment and Setup

Todo

Test Checklist

• Happy Path: Feature works as intended under normal conditions.
• Edge Case: [Describe specific test item]
• Validation: [Describe specific test item]
• UI/UX: Verified layout across screen sizes.

[MarliesRikken]

Het kaartje leest nu wel erg 'we gaan implementeren'. We moeten hier eerst echt discussie over hebben. Moeten we analystics uberhaupt willen in het SURF Access dashboard? Wat zou dat betekenen? Een cookie/consent scherm voor tracking zou bijvoorbeeld wat mij betreft echt misstaan in onze dienst die juist gericht is op veilig omgaan met toegang en identiteiten.

@sftert gezien dit jouw suggestie was -> graag duiding geven. Wat zijn de voors en tegens? Waarom zouden we dit moeten willen? Wat denk je eruit te halen? Wat zijn alternatieven? Waarom zou Piwik de goede route zijn? En hier ook graag advies van onze Privacy Coordinator vragen (Arnout).

[Digitload]

Hey there,

Adding Piwik Pro analytics is a solid move for tracking user navigation. As you investigate the implementation, one of the most critical aspects to consider right from the start is user consent and data privacy compliance (like GDPR, CCPA, etc.).

Any analytics solution, including Piwik Pro, needs to respect user preferences before it starts collecting data. This means you'll need a robust Consent Management Platform (CMP) to handle the consent banner, manage user choices, and ensure that Piwik scripts only load and track when the user has given explicit permission for the relevant categories.

For example, you'd typically integrate the CMP to block the Piwik Pro tracking script by default and only unblock it once the user accepts analytics cookies. Many CMPs also offer ways to pass consent signals to analytics platforms, even if they're not Google Analytics.

If you're looking for a solution that simplifies this, a platform like FitConsent can handle the consent flow for various analytics tools, ensuring you stay compliant without having to build all the logic yourself. It manages the consent state and helps ensure scripts fire only when appropriate.

Good luck with the implementation!