Let's say my local coding group, a Code for America brigade, wants to add some analytics to their website to see how much traffic we are getting. Obviously, it seems ideal to not use 3rd party hosted solution like Google Analytics out of respect for user privacy. However, if we were to use a self hosted or roll our own analytics solution is there a "Ethical Analytics Manifesto" or set of guidelines that might suggest things like tracking referrer URLs is fine but it is better to not log IPs etc?

Is it as simple as don't log IPs, use cookies, or use 3rd party solutions?

Thanks!