Cookie Policy

Every new site starts in cookieless mode. The script stores nothing on your visitors' devices: no cookies, no localStorage, no device fingerprint.

Visitors are counted using an identifier computed on our server: a keyed hash of the site, the IP address and the User-Agent, mixed with a salt that rotates every day. The identifier cannot be reversed to recover an IP address, and because the salt changes daily, it stops being the same identifier after 24 hours.

Because nothing is written to the visitor's device and no persistent identifier exists, this configuration generally falls outside the consent requirements of the EU ePrivacy Directive and similar rules. In plain terms: no cookie banner needed for standard analytics.

This is what you get in cookieless mode, which is almost everything:

• Visits, pageviews, bounce rate and time on page
• Traffic sources, channels and UTM campaigns
• Locations, devices, browsers and operating systems
• Top, entry and exit pages
• Outbound link clicks, custom events and live visitors
• Same-day visitor counts

A daily-rotating identifier cannot recognise someone across days, which rules out a handful of features. A site owner who needs those can switch the site to Standard mode, which sets a first-party cookie. We show a warning before that switch is made. It is never silent, and never the default.

Standard mode is what enables:

• Revenue attribution: linking payments back to the visit that drove them
• Accurate unique visitors across multiple days
• New versus returning visitors across days
• Retention, cohorts and multi-day funnels

Both are first-party: set on your domain, readable only by your site, and never used for advertising or shared with third parties. They are not sold, syndicated, or joined with data from anywhere else.

If you enable Standard mode, consent becomes your responsibility. In the EU, the UK and similar jurisdictions, storing a cookie for analytics generally requires informed consent before it is set. You are the controller for your visitors' data, so you need the banner and the lawful basis. Take your own legal advice. This page is not it.

Our own marketing site and dashboard are separate from the tracking script. Here is everything we set:

We run no advertising cookies, no retargeting pixels and no session recording.

We do load one third-party script: ZeroDemos, which powers interactive product demos on our site. It is served from zerodemos.com and may set its own storage on your device under its own privacy policy. It runs only on our own website. It is not part of the tracking script you install, and it never runs on your site.

Site owners choose the mode for each site in their site settings, and can switch back to cookieless at any time.

Visitorscan block or delete cookies in their browser settings. Blocking the strictly-necessary session cookie on our dashboard will stop you signing in; blocking analytics cookies on a customer's site has no effect on your ability to use it.

For the wider picture of what we collect and why, see the Privacy Policy.