Analytics with no cookie banner, honestly costed
Cookieless analytics needs no consent banner because it stores nothing on the device. What you keep, what you genuinely give up, and why a decline should still be counted.
Cookieless analytics measures visits without storing anything on the device, so it needs no consent banner under GDPR or PECR. You keep almost everything that matters and give up one specific thing: recognising the same person across days.
Why does it need no banner?
Because the consent rule is about storing or reading information on someone's device, not about analytics as an activity. Store nothing and the requirement does not apply.
A visit can be held together with a value that dies when the tab closes, and different people can be counted with a hash that regenerates daily and cannot be reversed.
What do you actually give up?
Cross-day identity. Returning visitors, multi-day attribution and any journey spanning more than one session all need something durable, and that is the cookie.
For most marketing sites that is a smaller loss than it sounds. For a considered B2B purchase with a long research cycle, it is a real one, and worth taking a cookie for with consent.
Is a banner not just easier?
It is easier and it costs you data. Every visitor who declines disappears from a cookie-based tool, so the numbers describe the subset who agreed rather than the traffic you had.
The better shape is measuring everyone anonymously by default and adding identity only after a yes. A decline then costs you memory, not the visit.
Can I default the banner to accepted?
Not in the EU, Ireland or the UK. ePrivacy requires consent before a non-essential cookie is set, so opt-out, pre-ticked boxes and implied consent from continued browsing are not valid.
The US is largely an opt-out regime, so a US-only site has more room. A site selling into all three should assume the strictest rule.
Questions
Is cookieless analytics accurate?
For counting visits, pages and behaviour, yes, and often more accurate than a cookie tool, because it counts the people who declined instead of dropping them.
Does it still work with ad blockers?
Better than the big platforms, since most blocklists target specific well-known endpoints rather than analytics generally. No client-side tool is immune.
Do I still need a privacy policy?
Yes. Consent and disclosure are different obligations. You still have to say what you collect and who processes it, even when no consent is required to collect it.
Find out where you stand on your own domain: the free AI visibility check asks all four engines about you, and the content scorer scores any page against the published rubric. Neither needs an account. The full background is what answer engine optimization is.