tracking: anonymous / random client id

Author: ewowi

docs/network/sta.md

@@ -14,17 +14,20 @@
 
 MoonLight sends **anonymous** usage data to Google Analytics when it restarts.
 
+You can **opt out** at any time by disabling Track analytics in the settings.
+
 The data collected consists of:
 
 * Country – e.g. France, determined via ip-api.com; only the country field is extracted.
 * Firmware – e.g. esp32-s3-devkitc-1-n16r8v
 * Board model – e.g. QuinLED DigQuad, based on board presets (not yet implemented)
 * MoonLight version – e.g. 0.6.0
 
-No other information is collected or stored.
+No personal data, IP addresses, or identifiers that can trace back to an individual are collected, stored, or shared.
+Each event is sent with a random, anonymous client ID, so usage cannot be linked to a specific device or person.
 
 We use this anonymous data to understand how MoonLight is being used, identify which hardware and versions are most common, and prioritize future development and improvements accordingly.
 
 The data is sent only to Google Analytics, which processes it to provide aggregated usage insights.
 
-You can **opt out** at any time by disabling Track analytics in the settings.
+This data is fully anonymous and handled in a way that meets the principles of the GDPR and other global privacy standards.

lib/framework/WiFiSettingsService.cpp

@@ -197,10 +197,11 @@ bool sendAnalytics() {
 
 //   ESP_LOGI(SVK_TAG, "send Event %s to Google Analytics", eventName.c_str());
 
-  // full 48-bit MAC for client_id
-  uint64_t mac = ESP.getEfuseMac();
-  String client_id = String((uint32_t)(mac >> 32), HEX) + String((uint32_t)mac, HEX);
-  client_id.toLowerCase();
+  String client_id = "";
+  for (int i = 0; i < 16; i++) {
+    uint8_t n = random(0, 16);
+    client_id += String(n, HEX);
+  }
 
   String eventName = BUILD_TARGET;
   eventName.toLowerCase(); // GA4 requires lowercase