Compliance
Web analytics compliance, explained honestly
For each law: our position, the reasoning behind it, what stays your responsibility, and template text for your privacy policy. Where the law is unsettled, we say so.
Watch: Do you need a cookie banner for website analytics? (2:37)
Do you need a cookie banner for website analytics? Often it's there only because of the analytics tool. How the consent rules work, in plain words.
Transcript
Do you actually need that cookie banner? For a lot of sites, it's there for one reason: the analytics tool they picked.
I'm James, founder of Privatus Analytics. I'm not a lawyer, and this isn't legal advice, but here's how the rules work, in plain words.
Picture a new visitor. They searched, they clicked, they're interested. The first thing they see isn't your headline. It's a grey box asking them to accept cookies. Some click accept. Some click no. Some just leave. Everyone who said no is invisible to you from that moment. For many sites that's a large share of their visitors, gone from every report. So the banner costs you twice. It gets in front of your offer, and it blinds your analytics. Why is it there? In Europe and the UK, consent rules cover two things. Storing or reading things on your visitor's device, like cookies. And personal data, like an IP address tied to a person. Google Analytics sets cookies to recognise a returning browser, so in most of Europe it needs consent first. You didn't choose the banner. Your analytics tool chose it for you.
Privatus Analytics stores nothing on the device. No cookies, no local storage, and no fingerprinting. Your visitor's IP address is used in memory to count the visit and find the country, then it's gone. It's never stored. Several regulators, including France's, exempt audience measurement from consent when it's done this carefully, and that is exactly how this is built. So for most sites, measurement here doesn't need a banner, and every visitor is counted. I'll be straight with you. This is the least settled corner of the law, and your own setup decides your position. Our compliance pages give you our reasoning, law by law, with template text for your privacy policy. One more thing people miss. The banner is about everything on your page. Ads, embedded videos and chat widgets set their own cookies, so switching analytics is the first step, not the last. Visitors who send a Do Not Track or Global Privacy Control signal aren't recorded at all, and any visitor can opt out.
Your analytics no longer needs a banner. The visitors who said no are back in your numbers. And the first thing people see is your site, not a grey box.
Measure your site without asking permission. Start free at privatusanalytics.com.
GDPR
GDPR compliant web analytics, explained: controller and processor roles, lawful basis, data minimization, transfers and your duties with Privatus Analytics.
UK GDPR
How Privatus Analytics approaches the UK GDPR and the Data Protection Act 2018, including transfers from the UK and what stays your responsibility.
ePrivacy and PECR
Our reading of ePrivacy Article 5(3) and PECR Regulation 6 for cookieless analytics, including EDPB Guidelines 2/2023 and what they mean for cookie banners.
CCPA/CPRA and US state laws
How Privatus Analytics fits the CCPA/CPRA and the comprehensive privacy laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states.
LGPD
How Privatus Analytics approaches Brazil's General Data Protection Law (LGPD) for cookieless web analytics, from data minimization to your responsibilities.
PIPEDA
How Privatus Analytics approaches Canada's PIPEDA and provincial privacy laws for cookieless web analytics, from data minimization to your responsibilities.
Swiss FADP
How Privatus Analytics approaches Switzerland's revised Federal Act on Data Protection (FADP) for cookieless web analytics, including transfers to the US.
How the privacy model works
Every field we store, and why.
Where your data lives
US storage and processing, transfer safeguards.
Data Processing Agreement
Article 28 terms with SCCs, included in our terms.
This is general information about how Privatus Analytics works and how we read the law. It is not legal advice. Laws and regulators' guidance change, and your obligations depend on your whole setup, so check your position with your own counsel.