website/homepage/content/pages/deep-dive.md

title: Deep dive | Offen description: What do users know about their data? How can they access it? Do operators benefit from a careful handling of user data? Does Offen work in accordance with GDPR? slug: deep-dive sitemap_priority: 0.7

Deep dive

What is this thing called "my data" and why does seemingly everyone want to get hold of it?

It has a ring, gives a slight spine-chilling sensation and generates a whole lot of clicks: consumer magazines like German "Computer Bild" caution about "Google espionage" ¹ just like the internet has countless tutorials on turning off numerous "data leeches"². Interestingly, diving into these realms will have you accidentally catching the next toolbar, malware infection or even worse ³.

Yet, many internet users still don't know what really is happening to their data. Public relation activities trying to calm the public - as undertaken by Facebook for example ⁴ - end up being rather disturbing instead of creating transparency, or adding real value to the public debate. Denelle Dixon, COO of Mozilla, just publicly warned the European Commission ⁵ about the dangerous effects an opaque apparatus such as Facebook can have on society. Updated Terms and Conditions only parenthetically mention that newly created Google accounts will now hand over real names to third parties for advertising purposes ⁶.

As a regular user of the internet, are you really being spied upon? What exactly is "my data"? Can a website operator see my name when I'm using it? Does it know about my Email address or my phone number? Does it know which other websites I have been visiting, which search query led me to the site in the first place, what I have recently purchased online, or who I am acquainted with?

If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place. ⁷

Eric Schmidt (at this time CEO of Google), 2009

We would like to turn the tables on this much quoted statement and apply it to the operators of services and websites instead of their users. The analytics software Offen transparently and uncompromisingly discloses what data is being collected and what it is being used for to the users.

---

For users

Visiting a website or using a web application that utilizes Offen, the user gains access to and ownership of the usage data collected. The cookie used by Offen allows viewing all of the associated metrics, the users can assert themselves what is being collected and what isn't. Data is being displayed in an accessible and articulate manner and each metric comes with explanations about its usage, relevance and possible privacy implications.

Users can choose to export their data, delete it selectively or in its entirety.

For operators

Operators of small and mid-sized websites and web applications are faced with growing challenges not only since the introduction of GDPR: how do they gain insights into what users are interested in and which of the features offered are being used? Is it possible to showcase transparent and considerate handling of user data - i.e. neither being spy or data leech - without surrendering and abandoning usage metrics altogether?

Choosing Offen, websites and web applications obtain a free, open and robust tool for collecting and analyzing relevant usage data. The insights gained enable continuous improvement of these services while still respecting their user's privacy. Opening up the data to the users does not constitute a disadvantage, but strengthens the relationship with them by being entirely transparent.

Part of the public debate

Transparently handling usage data in the open creates mutual trust while still enabling operators to collect needed usage statistics. Offen is designed to be a mediating agent only, and does not side with either users or operators. Sharing knowledge between the two parties creates opportunities for an open and fact based discussion about user data and privacy. Users gain insights into what data is being collected and what these data points are used for, just like they learn about which kind of data is not part of the collection. They are enabled to reach self-determined decisions about what they consent with and what they disagree with when it comes to privacy on the web, also in other contexts than analytics.

We want to exemplify that it is time to depart the age of "data capitalism" ⁸ and to create technologies and infrastructure that are transparent, open and oriented towards the common good

---

Offen as a technology

At runtime, Offen is just mediating exchange between users and operators. Usage data is collected in conformance to GDPR and with the concept of "Datensparsamkeit" ⁹ in mind. All user data is encrypted in the browser so that it can only be accessed by the users themselves or the matching operator. While being collected in the context of a website or application, neither operators nor third party scripts have any possibilty to access the usage data. Offen itself doesn't have any way of decrypting, processing or even selling the gathered data at any point.

The software itself, as well as all the used tools are open source, project planning and technical specification{: target="_blank"} take place in the open and actively solicit feedback from the general public. The infrastructure the service is deployed to is split into three isolated environments in order to minimize possible attack vectors.

Users and operators are given intuitive and accessibility-focused tools for analyzing and managing their data in the form of a web application and a browser extension. Operators deploy the service using a simple script tag. More sophisticated use cases are covered by a dedicated SDK.

---

Modus Operandi

Developing and running Offen can only work out when it is entirely free of any kind of economic constraints or goals and its only objective is contributing to the common good. Development of a prototype is reliant on public grants or similar funding sources. Long term operation of the software, just like its maintenance and continued development, is tied to resources granted by foundations or being donated by the public.

---

1. Gegen Google-Spionage wehren https://www.computerbild.de/artikel/cb-Ratgeber-Kurse-Wissen-Was-weiss-Google-ueber-Sie-2799009.html ↩︎

2. Datenkrake Windows 10: So schalten Sie auffällige Funktionen ab https://praxistipps.chip.de/datenkrake-windows-10-so-schalten-sie-auffaellige-funktionen-ab_99652 ↩︎

3. Pick a Download, Any Download! https://blog.malwarebytes.com/cybercrime/2012/10/pick-a-download-any-download/ ↩︎

4. Sometimes People Assume Facebook Does Things It Doesn't Do https://www.zeit.de/digital/datenschutz/2019-01/social-media-facebook-mark-zuckerberg-ads-privacy-business-model-transparency ↩︎

5. Mozilla Raises Concerns Over Facebook's Lack of Transparency https://blog.mozilla.org/blog/2019/01/31/mozilla-raises-concerns-over-facebooks-lack-of-transparency/ ↩︎

6. Google Has Quietly Dropped Ban on Personally Identifiable Web Tracking https://www.propublica.org/article/google-has-quietly-dropped-ban-on-personally-identifiable-web-tracking ↩︎

7. Google CEO Eric Schmidt Dismisses the Importance of Privacy https://www.eff.org/de/deeplinks/2009/12/google-ceo-eric-schmidt-dismisses-privacy ↩︎

8. Vielleicht wird in Zukunft auch mit Gewalt um Daten gekämpft https://www.zeit.de/digital/datenschutz/2019-01/datenschutz-nick-couldry-datenkolonialismus-datenhandel/komplettansicht ↩︎

9. Datensparsamkeit https://martinfowler.com/bliki/Datensparsamkeit.html ↩︎