SECRET CONSTRAINTS: WHAT DATA DOES GOOGLE ANALYTICS PROHIBIT WEBSITES FROM COLLECTING?