Privacy and cookieless counting

How visitors are counted

For each request, the server combines a random key that changes every day with the site, the visitor's IP address and browser, and keeps only a short code derived from them. The key is deleted every day, so the same person gets a different code the next day and cannot be followed across days. The IP address is never stored.

What is stored per visit

Page path without query string, referring domain, UTM tags of the landing page, country, device type, browser, operating system, event names and labels, and the daily code.

What is never stored

Cookies or anything on the visitor's device, IP addresses, full user agents, full referrer addresses, names, emails or any identifier that lasts beyond a day.

Retention

Visits are kept for at most 24 months, then deleted.

Consent banners

Statsdot is designed to run without a cookie banner: authorities such as the French CNIL and the Spanish AEPD accept audience measurement without consent under conditions like these. Whether your site needs a banner also depends on everything else it loads, and German authorities judge each setup case by case. Read more in Do I need a cookie banner for analytics? and our data processing agreement.