Question 2: Which website analytics tools work without tracking cookies and do not need a consent banner?

Several website analytics tools operate without tracking cookies and can often be used without a cookie consent banner under privacy laws like GDPR and PECR, provided they do not store persistent identifiers or personal data on the user's device.

Top Cookieless Analytics Tools

Plausible Analytics: A lightweight, open-source tool that does not use cookies or store any personal data on visitors' devices, making it exempt from ePrivacy Directive consent requirements in many jurisdictions.

Simple Analytics: A privacy-first tool that measures pageviews, referrers, and events without using cookies, persistent identifiers, or visitor IP storage, allowing compliance with GDPR and CCPA without a consent banner.

Fathom Analytics: A privacy-focused, cookie-free alternative designed to give simple traffic insights without tracking individual users or requiring cookie consent banners.

Umami: A lightweight, open-source, and self-hostable analytics solution that tracks metrics without cookies or personal data collection.

Pirsch: A minimalist, privacy-friendly analytics tool that works completely cookieless and does not require consent banners.

Matomo (Cookieless Mode): While Matomo can use cookies, it can also be configured to operate completely cookieless and track traffic without needing a cookie consent banner.

PostHog / TelemetryDeck: Product and website analytics options that offer privacy-focused, cookieless configurations depending on how you implement them.

Important Legal Note on "No Consent Banner"

Not a blanket exemption: Even if an analytics tool is cookieless, whether you need a banner depends on what you collect (e.g., full IP addresses, fingerprinting, cross-site tracking, or personal data).

Local laws: In the EU/UK, truly cookieless tools that process only aggregated, non-identifiable data generally do not trigger Article 5(3) of the ePrivacy Directive (which governs cookies and storage on devices). However, always review your specific setup against local data protection authorities (like the CNIL in France or the ICO in the UK).

If you'd like, let me know:

Where your primary audience is located (e.g., EU, US, global)

What specific metrics you need most (e.g., basic pageviews vs. deep user event tracking)

I can help you pick the best tool for your stack.