Here’s my obligatory take on GDPR notices. I have crafted a sample GDPR notice for basic analytics:
This website utilizes Google Analytics to get aggregate metrics on website usage. You can control the information Google uses to show you ads. These settings apply when you’re signed into Google services.
You can also turn off ads personalization for the Google ads you see when you are on one of the 2+ million websites that partner with Google and for 100+ other online ad networks.
Google Analytics Opt-out Browser Add-on.
This website also use Google Demographic and Interest reports to gather anonymous summary demographic information about website visitors such as gender, age range, and areas of interest for adults over the age of 18. You can prevent your data from being collected and used by Google Analytics by installing the Google Analytics opt-out browser add-on.
To keep your username, profile pic, and implied endorsements out of the Shared Endorsements ad system, log in to your Google account and go to the Shared Endorsements settings page. Scroll to the bottom and make sure that the following box is unchecked: “Based upon my activity, Google may show my name and profile photo in shared endorsements that appear in ads.”
AboutAds.info is a configuration page that lets you opt out of interest-based advertising tracking cookies from companies other than Google, provided that they participate in its self-regulating program.
Here’s more resources regarding opting out of various tracking services:
Also, here’s a nice privacy and data sharing breakdown from Mozilla:
Note that this is just a sample and should not be used on a production site without consulting a GDPR specialist.