In fact, we've built a custom analytics system that allows us to track user behaviour on our website without storing any of the user's data.
I recently designed the same thing for BPIP. My system forgets every IP after 24 hours, then it is considered a new visitor. I would be interested in knowing what you are doing.
