Practical guide · Search topic: cookieless analytics UK law
Cookieless analytics and UK rules: the important distinction
Removing cookies is one design choice, not a complete legal conclusion. UK rules can cover storing information on or accessing information from a device, and UK GDPR may also matter when personal data is processed.
What the query can—and cannot—measure
The ICO’s storage and access guidance explains specific exceptions, including one for statistical purposes subject to conditions. Assess the sole purpose, information provided to people, objection route and retention. Do not assume the exception applies to every analytics configuration or use.
A practical way to do it
Inventory every script, feature and destination on your site. Describe the analytics truthfully in your privacy information and verify that any opt-out works. Seek advice before using analytics for profiling, advertising or decisions about individuals.
A useful checklist
- Read the ICO’s current guidance and exception wording.
- Map the actual data flow and purpose.
- Document notices, objections and retention controls.
Limits to keep in mind
This is not legal advice and does not establish that any site is compliant. The relevant setup and purpose matter.
Questions
Is cookieless analytics automatically exempt?
No. Assess the applicable rules and the specific exception conditions.
Can analytics still process personal data without cookies?
Yes; the absence of browser storage does not answer every data-protection question.
Sources and further reading
Related pages
Compliance: PECR, UK GDPR, sub-processors & retention · quietstats How it works & privacy · quietstats Zero cookies, privacy built in · quietstats cookie-free analytics
Put your traffic in context
Explore the product, its measurement method and pricing before choosing a tool.