Cookieless analytics: no cookie banner, still the whole story
Cookie banners cost you visitors and data. GhostStat measures without cookies or fingerprinting, keeps your data in the EU, and still shows where people came from, where they got stuck and what they bought.
“Do we need a cookie banner for this?” is usually the first question when a website adds analytics. For GhostStat the answer is no: it is cookieless analytics that sets no cookies, stores nothing in the visitor’s browser and does not fingerprint. This post explains how that works, what you still get, and what you give up compared with cookie-based tools.
Why the cookie banner costs you more than a click
A cookie banner is the price of storing things on a visitor’s device. European rules (Article 5(3) of the ePrivacy Directive) say that storing or reading information on someone’s device needs their consent, unless it is strictly necessary for the service they asked for. Analytics cookies are not strictly necessary, so cookie-based analytics needs a banner and a yes.
That has three costs:
- Missing data. Everyone who clicks “Reject” or ignores the banner is not measured the normal way. Your reports show part of your audience, and you don’t know which part.
- A worse first impression. The first thing a new visitor sees is a legal question instead of your product.
- Work. Someone has to set up a consent tool, keep its cookie list current and connect it to every tag on the site.
How GhostStat does cookieless analytics
GhostStat’s tracker is a small script, about 3 KB compressed, loaded with defer so it never holds up your page. It sends what happened (the page, the referrer, campaign tags, screen size, language and browser) to our servers, and that is all it does in the browser.
- No cookies, and no localStorage or sessionStorage either.
- No fingerprinting. We don’t combine fonts, canvas drawings or other device quirks into an ID.
- IDs are made on our server. Visits and visitors are counted with an identifier that is salted per site and rotates daily, so a visitor can’t be followed from one day to the next or from one site to another.
- The IP address is never stored. It is used in memory to look up an approximate location and network, then dropped. It is never written to the database or to logs.
- Data stays in the EU. GhostStat’s data is stored in Dronten, the Netherlands.
Because nothing is stored on or read from the visitor’s device, you don’t need a cookie banner for GhostStat’s analytics. Our privacy policy lists exactly what is collected. If you run other tools that do set cookies, such as ad pixels or embedded videos, you still need consent for those.
Cookieless analytics vs cookie-based analytics at a glance
| GhostStat | Typical cookie-based tool | |
|---|---|---|
| Stored on the visitor’s device | Nothing | One or more analytics cookies |
| Consent banner for analytics | Not needed for GhostStat | Needed in the EU, the EEA and the UK |
| Visitors who say no | There is nothing to say no to, so every visit counts the same way | Not measured, or estimated |
| Visitor ID | Made on the server, rotates daily | Kept in a cookie, often for months or years |
What you still see without cookies
Cookieless doesn’t mean a page counter. GhostStat starts with the essentials: visitors, visits, pageviews, bounce rate, top pages, sources and campaigns, countries, devices and who is on your site right now. Then it adds the layer most tools leave out, all joined on the same visit:
- Visitor intelligence: intent, friction and attention scored for every visit from behaviour. You see who was ready to buy, who was struggling and what they actually read.
- Heatmaps for clicks, scrolling and movement, per device.
- Session recordings with every form input masked by default.
- Funnels, goals and form analytics to see where people drop out.
- Ecommerce: orders, revenue and products, joined to where the buyer came from.
Every tool is included on every plan, also on Free. See the full list on the features page.
What cookieless analytics can’t do
Honesty helps here, because it tells you whether GhostStat fits:
- Returning visitors over weeks. The daily ID means GhostStat can’t say “this is the same person who came last Tuesday”. Visits and trends are counted correctly; long-term individual journeys are not tracked, by design.
- Ad-platform audiences. GhostStat doesn’t build remarketing lists for ad networks. If your budget runs on Google Ads audiences, keep that tool for that job. Our comparison with Google Analytics 4 goes into the details.
- Exact equality with other tools. Every tool counts visitors its own way. Running GhostStat next to another tool, expect the trends to match, not every number.
Is cookieless analytics GDPR compliant?
Two sets of rules matter. The ePrivacy rules are about the visitor’s device, and that is where GhostStat stores nothing. The GDPR is about personal data, and GhostStat is built to keep as little as possible: no stored IP addresses, no cross-site or cross-day IDs, data in the EU. Rules differ per country and regulators keep refining them, so if your organisation has a privacy officer, show them our privacy policy. This post is an explanation, not legal advice.
Try it on your own site
Create a free account, add your site and paste one line of code (or install the WordPress plugin). Your first visits show up in the real-time view straight away. If you’d rather look first, open the read-only demo account from the home page, or watch anonymous live data from every GhostStat site on GhostStat Global Stats.
Comparing options? Our roundup of the best privacy-first analytics tools sets GhostStat next to Plausible, Fathom, Matomo and others, with every claim sourced.
Sources
- EUR-Lex: Directive 2002/58/EC (ePrivacy Directive), Article 5(3)
- GhostStat: Privacy policy
Frequently asked questions
Does GhostStat use cookies?
No. GhostStat sets no cookies and uses no localStorage, sessionStorage or fingerprinting. Visit and visitor IDs are made on the server and rotate daily.
Do I need a cookie banner for GhostStat?
Not for GhostStat’s own analytics, because nothing is stored on or read from the visitor’s device. Other tools on your site that set cookies still need consent.
Where is GhostStat’s data stored?
In Dronten, the Netherlands, inside the EU. IP addresses are used in memory for a location lookup and never stored. See the privacy policy.
What do I lose without cookies?
Long-term tracking of individual visitors and ad-network audiences. Visits, sources, funnels, heatmaps, recordings and revenue are all still measured.
Is there a free plan?
Yes. The Free plan includes every tool, with a monthly view allowance on plugin pages, and needs no card. Current plans are on the pricing page.
