FTC: Web analytics firm collected credit card, other personal info