GDPR and Homebrew analytics
<p>Homebrew is collecting anonymous GA analytics by default. User have this information during installation of this package manager. To opt-out you need go to the web <a href="https://docs.brew.sh/Analytics.html" rel="nofollow noreferrer">page</a> and choise a way to opt-out (set an envrionment variable or run a command). </p>

<p>Opting-out will prevent analytics to be <em>sent</em>. I don't know if analytics would be <em>collected</em> anyway and sent collected afterwards you opt-in collecting analytics again.</p>

<p>Is this behavior is GDPR-compliant or not?</p>

<p>This is probably GDPR compliant.</p>

<p>First, note that there may actually be no Personal Information collected, even the IP addresses are (supposedly) anonymised by Google and not stored. At least the developers have worked hard in trying so.</p>

<blockquote>
  <p>Homebrew is collecting anonymous GA analytics by default. User have this information during installation of this package manager. To opt-out you need go to the web page and choise a way to opt-out (set an envrionment variable or run a command).</p>
</blockquote>

<p>Thus users are informed of the data collection and are able to easily opt-out. This may not be an explicit consent —depending on the way it appears on the install—, but it may not be needed.</p>

<blockquote>
  <p>Opting-out will prevent analytics to be sent. I don't know if analytics would be collected anyway and sent collected afterwards you opt-in collecting analytics again.</p>
</blockquote>

<p>Looking at their implementation (<a href="https://github.com/Homebrew/brew/blob/master/Library/Homebrew/utils/analytics.rb" rel="nofollow noreferrer">analytics.rb</a>, <a href="https://github.com/Homebrew/brew/blob/master/Library/Homebrew/utils/analytics.sh" rel="nofollow noreferrer">analytics.sh</a>), there is not a separate collection step. When one of the <a href="https://docs.brew.sh/Analytics.html" rel="nofollow noreferrer">events they record</a> happens, it launches a query to Google Analytics (unless disabled by the environment, the configuration variable, or actually not having an internet connection). The event description is not saved anywhere that could be later sent.</p>

gdpr