Cookieless analytics explained: how to count visitors without tracking them

Why analytics used cookies in the first place

Classic analytics tools put a cookie with a random ID on every visitor's device. Each time the visitor came back, the tool read the ID and knew it was the same person — today, next week and next year, often across many websites.

That makes counting easy, but it also means a long-lived identifier on someone's device, a consent banner on almost every website, and a lot of data that most site owners never look at.

How cookieless analytics counts visitors

Cookieless analytics answers a narrower question: how many different people visited today? It doesn't need to recognise anyone tomorrow to answer that.

For every pageview the server calculates a one-way hash from:

• the visitor's IP address,
• the browser's user agent,
• the website,
• and a random salt that is replaced every day.

Two pageviews from the same browser on the same day produce the same hash, so they are counted as one visitor. The IP address itself is thrown away, and because the salt changes daily (and old salts are deleted), the same person gets a completely unrelated hash tomorrow. Nobody — not even the people running the analytics — can follow a visitor from one day to the next.

What you still get

Almost everything you actually use:

• unique visitors, visits and pageviews,
• bounce rate and visit duration,
• top pages, entry and exit pages,
• referrers, search engines, social networks and AI assistants,
• campaigns (UTM tags), countries, devices, browsers and operating systems,
• goals, conversion rates and revenue.

What you give up

• Returning visitors across days. A person who visits on Monday and Thursday counts as one visitor each day. Over a week this is summed, which is how most privacy-friendly tools report it.
• Cross-device journeys. Phone and laptop are always two visitors. Cookie-based tools mostly can't join them either without a login.

For most websites these are small trade-offs for not tracking people.

Do you still need a cookie banner?

A tool that sets no cookies and stores no personal data doesn't need consent in many countries. Rules differ, though, and other tools on your site (chat widgets, ads, embedded videos) may still need it. Check what your local law requires, and mention your analytics in your privacy policy either way.

The bottom line

Cookieless analytics gives you clear, trustworthy numbers while respecting your visitors. Your pages load faster, your privacy policy gets shorter, and your visitors are not followed around the web.