I coded up this site myself, so I have control over the fullstack. As a result, no ads are served, there is no tracking. There are no invisible elements reporting anymore. At the moment I'm writing this, there aren't even any cookies (since nothing requires logging in). I won't preclude the use of cookies in the future for projects that might need them. I am strongly disinclined to have any sort of ads for as long as possible.
I gather analytics using GoAccess. It's hosted locally and relies on the logs of the server everything is hosted on. It does collect IP addresses, referring sites, and (I think) referring Google searches. It's all information that's parseable out of the server logs. I mostly have it because it tells me when people are trying to attack my server, but it's also interesting information about where people are coming from.