https://tutanota.com/blog/posts/google-analytics/
Google Analytics declared illegal in the EU.
The issue at hand is that due to the American CLOUD Act https://en.wikipedia.org/wiki/CLOUD_Act US authorities are able to demand personal data from Google, Facebook and other US providers, even when they are operating outside of the US, so in Europe for instance.
The decisive factor for the legal assessment of the use of Google Analytics is not whether a U.S. intelligence agency actually obtained the data or whether Google actually identified the user. The mere fact that this was theoretically possible already was a violation of the GDPR.