What Is Cookieless Web Analytics? A Google Analytics Alternative

Cookieless web analytics measures how people use your website (visits, traffic sources, popular pages, conversions and page speed) without storing cookies or any other identifier on the visitor's device. Instead of recognising a browser by a long-lived ID, the tool counts visits on the server and keeps only aggregated data that doesn't identify anyone. For many websites it is a lighter, more privacy-friendly alternative to Google Analytics, as long as you know what it can and cannot tell you.

What does "cookieless" actually mean?

Traditional analytics tools place a cookie with a random ID in the browser. That ID can stay for months, so the tool recognises the same browser on later visits and can credit today's purchase to a campaign from weeks ago.

A cookieless tool writes nothing to the device: no cookie, no local storage entry, no ID of its own. A common approach:

• When a page loads, a small script sends the page address, the referrer and a few technical details to the analytics server.
• The server builds a one-way hash from the site, the IP address and the browser string, mixed with a random "salt" that changes every day.
• The IP address and the raw browser string are discarded; only the hash and aggregated data are kept.
• Because the salt rotates, the same person gets a different hash the next day and cannot be followed over time.

This is not fingerprinting, a tracking technique that combines many device attributes (fonts, screen, graphics card) to recognise a device over time.

Why consent banners matter

In the EU, the ePrivacy rules require consent before information is stored on, or read from, a user's device, unless it is strictly necessary for the service the user asked for. Analytics cookies are generally not considered strictly necessary, which is why most sites using them show a consent banner. Some regulators allow narrow exemptions for strictly limited audience measurement; conditions vary by country.

Two points are often missed:

• The rule is not only about cookies. Authorities read it broadly: local storage, tracking pixels, fingerprinting and, in some cases, scripts that make the browser send information can be covered too.
• The GDPR applies separately. IP addresses and online identifiers can be personal data. Cookieless measurement reduces what is collected and stored, but it doesn't automatically put you outside the GDPR.

There is a practical side as well: some visitors ignore or reject the banner, so cookie-based analytics only sees part of your traffic. Whether your site needs a banner at all depends on everything else running on it (ad pixels, embedded videos, chat widgets) and on your own legal assessment. This article is general information, not legal advice.

What you can still measure

What you want to know	Without cookies?
Visits, pageviews, top pages	Yes
Traffic sources, referrers and UTM campaigns	Yes
Goals, custom events and revenue	Yes
Funnels and paths within a visit	Yes
Core Web Vitals from real users	Yes
Returning visitors over several weeks	Only with a persistent ID
Cross-device journeys, demographics, ad audiences	No

Campaign reports work as long as your links carry UTM tags, goals such as a signup are sent the moment they happen, and journeys show where people leave. Because Core Web Vitals (LCP, INP and CLS) are measured in the visitor's own browser, you see real-world page speed rather than lab results.

Limitations to accept

• Unique visitors are an estimate. Colleagues behind one office IP with the same browser may merge; someone switching from Wi-Fi to mobile data may count twice.
• No long-term recognition. Returning-visitor and retention reports need an ID that survives between days, which brings consent back into the picture.
• No ad audiences or demographics. Remarketing and interest reports rely on the tracking you are choosing not to do.
• Blockers still exist. Some privacy extensions block analytics scripts regardless of cookies.

How to install cookieless analytics

1. Check where the tool keeps the data, for how long, and whether it is shared with third parties.
2. Add your website and copy the install line containing your site key.
3. Place the line in the head section of every page, directly or via your CMS theme or tag manager.
4. Open your site and confirm the visit appears in the real-time view.
5. Define goals for the actions that matter and exclude your own visits.
6. Update your privacy notice to describe what is measured and why.

How VOLTR does it

VOLTR Analytics is free in every VOLTR account, with fair-use limits. By default it uses no cookies and writes no identifier to the browser. A visitor is counted with a one-way hash of the site, IP address and browser, salted with a value that changes every day; IP addresses and raw browser strings are not stored, and location is kept at country and city level.

The script has no dependencies, is under 6 KB compressed and follows page changes in single-page apps. The same line gives you real-time visitors, sources and UTM campaigns, goals and revenue, funnels, visitor flows, engaged time, clicks, JavaScript errors and Web Vitals from real users. Form field values are never collected, and browsers that send Do Not Track are not counted by default.

Events are kept in your company's own database and are not sold or shared with third parties for advertising. For returning-visitor reports you can turn on an optional persistent visitor mode; in that mode, collecting consent is your responsibility. You add your domain under Analytics → Settings and the installation is verified when the first event arrives.

Frequently asked questions

Is cookieless analytics automatically GDPR compliant?

No tool is compliant on its own. Cookieless measurement collects far less data, which helps, but compliance depends on your whole website, your privacy notice and your legal assessment.

Do I still need a cookie banner?

A cookieless tool in its default mode stores nothing on the device, which removes the most common reason for a banner. Regulators read the consent rule broadly, though, and other tools on your site may still need consent, so check with your legal adviser.

Can I run it alongside Google Analytics?

Yes. The two scripts are independent, so you can compare them for a while before removing one.

Why don't my numbers match Google Analytics?

The tools define visits, sessions and bots differently, and visitors who reject the banner never reach cookie-based tools. Compare trends rather than totals.

Ready to try it? Open your free VOLTR account: Analytics comes ready in it. Explore every feature on the Analytics page, see how data is separated and protected on the Security page and compare the other modules on the Pricing page.