Start free

Zero cookies, privacy built in

No cookies or device storage, no stored IP addresses or user agents, daily-rotated visitor IDs, bot filtering, and Do Not Track and Global Privacy Control respected.

Data & privacyFeature page: Zero cookies, privacy built in
Zero cookies, privacy built in: example screenshotZero cookies, privacy built in: example screenshot
Example screenshot with made-up data, not a real customer’s numbers.

What it does

The way quietstats counts: a one-way hash of a daily random salt, your site, the IP address and the user agent, cut to 16 characters. Yesterday’s salt is deleted.

Why it matters

You get useful statistics without tracking people, and without adding cookies a banner would need to cover.

How to use it

  1. Keep data-dnt="true" in your tag so Do Not Track and Global Privacy Control are respected.
  2. Mention quietstats in your privacy notice and offer a simple way to object.
  3. Read How it works and Compliance for the details.
HTML
<script data-host="https://quietstats.co.uk" data-dnt="true" src="https://quietstats.co.uk/js/script.js" id="YOUR_SITE_ID" async defer></script>

Replace YOUR_SITE_ID with the ID shown on your site’s Manage page.

How it works

How one pageview is counted, without cookies1. A page with the quietstats tag loads. The 845-byte script reads the site ID and data-host. 2. Do Not Track or Global Privacy Control is on (with data-dnt="true"). (otherwise: Nothing is sent) 3. The script sends one small message: site ID, page address, referrer and screen size. No cookie, no storage. 4. The collector checks the site exists, the page is on its domain and the browser is not a bot. (otherwise: Dropped: bots, other domains, DNT/GPC headers) 5. Report-link clicks (?qs_preview=1) and your own excluded visits are dropped. (otherwise: Not counted) 6. Visitor code = hash of today’s salt, site, IP address and browser, cut to 16 characters. The IP and user agent are not stored. 7. One row is saved: page path, referrer host, country, region, device, browser, OS, screen size, UTM tags and the visitor code. 8. At UTC midnight the salt is deleted, so codes from different days can’t be linked. 9. Your dashboard reads totals: visitors, pageviews, visits, sources, countries and devices.1A page with the quietstats tagloads. The 845-byte scriptreads the site ID anddata-host.2Do Not Track or Global PrivacyControl is on (withdata-dnt="true").Nothing is sent3The script sends one smallmessage: site ID, pageaddress, referrer and screensize. No cookie, no storage.4The collector checks the siteexists, the page is on itsdomain and the browser is nota bot.Dropped: bots,other domains,DNT/GPC headers5Report-link clicks(?qs_preview=1) and your ownexcluded visits are dropped.Not counted6Visitor code = hash of today’ssalt, site, IP address andbrowser, cut to 16 characters.The IP and user agent are notstored.7One row is saved: page path,referrer host, country,region, device, browser, OS,screen size, UTM tags and thevisitor code.8At UTC midnight the salt isdeleted, so codes fromdifferent days can’t belinked.9Your dashboard reads totals:visitors, pageviews, visits,sources, countries anddevices.
From the tracking script and the collector code. The IP address is only used in memory to make the daily code and look up the country.

Privacy

Limits

Plans

Every plan, including Free. quietstats is free during launch: the Free plan covers 1 site and 5,000 pageviews a month, and no card is needed. See pricing.

Questions

Do I still need a cookie banner?

quietstats adds no cookies, so it adds nothing for a banner to cover. Other tools on your site might.

Where is the data?

On Cloudflare (Workers and D1), with a Western Europe location requested for the database.

Related