Web analytics, cookie law and can Google Analytics work without cookies?
Are you confused about the use of Google Analytics on your website, the cookies and the requirement to show the cookie consent banner to your visitors? This post aims to help you through that process. Let’s get started.
- What are web cookies?
- What do privacy regulations say about cookies?
- Can you get website statistics without cookies?
- Try Plausible Analytics cookie-free stats
What are web cookies?
Web cookies are small pieces of data that websites place on the devices of people browsing the web. Web browsers then store these cookies and can send them back to the website on the next visit.
Cookies can provide essential features such as allowing you to save your session and not need to log in every single visit or to allow you to add an item to a shopping cart in an ecommerce site.
Cookies can also be used for not-so-essential features such as tracking cookies for advertising purposes. It’s these not-so-essential types of cookies that can be a bit troublesome in terms of privacy regulations and the ePrivacy Directive (also known as the Cookie Law).
What do privacy regulations say about cookies?
All the privacy regulations have a say about cookies. PECR is the privacy regulation in the United Kingdom and it stands for Privacy and Electronic Communications Regulations.
PECR requires a website owner to tell their visitors about technologies such as cookies that they use to track personal data and give visitors the choice of whether to accept this or not.
Say what cookies will be set
Explain what the cookies will do
Obtain consent to store cookies on devices
This is how we would sum up different regulations such as the General Data Protection Regulation (GDPR) in Europe and the California Consumer Privacy Act (CCPA) in the United States with regards to the cookies:
If you track, collect, share or sell personal data or personally identifiable information (PII) by using cookies and other technology, you need to inform the visitor in clear and plain language, ask for and get explicit consent before you take that action
Disclaimer: We’re not lawyers. The information in this post is our view on things and it’s here to help give you an introduction to web cookies and how Plausible Analytics is built to help you comply with the cookie laws. We encourage you to discuss specific issues with your lawyer if you have any concerns.
Here are some of the things Google Analytics tracks using cookies:
- Distinguish unique users
- Remember the number and time of previous visits
- Remember traffic source information
- Determine the start and end of a session
On top of the standard analytics, many Google Analytics users also enable the different advertising features such as remarketing, and demographics and interest reporting. In those cases, you’re collecting data for advertising purposes which means that Google Analytics places additional advertising cookies and identifiers.
If a visitor clears or blocks the analytics cookie from their browser, what will happen?
This is another negative aspect of cookie-based web analytics. It’s not a bulletproof solution:
- In case the visitor blocks the Google Analytics that visitor will not be counted in your web statistics.
- In case the visitor clears the cookies from their browser, that visitor will be counted as a new unique visitor next time they visit your site.
- In recent years, mainstream browsers such as Brave and Firefox have blocked Google Analytics trackers.
- On top of this, millions of web users have installed different adblocking browsing extensions such as the uBlock Origin. All these block Google Analytics tracking too.
Can Google Analytics work without cookies?
Google says that in some cases you can replace Google Analytics cookies with your own storage mechanism such as localStorage or a service worker. This is a bit more complicated solution for the average website as you need to send another client ID to Google but here’s a guide from Google themselves on how you can achieve it.
Requirements for the use of Google Analytics
Google has several requirements for your use of Google Analytics:
According to Google: “you must ensure that certain disclosures are given to, and consents obtained from, end users in the European Economic Area along with the UK. If you fail to comply with this policy, we may limit or suspend your use of the Google product and/or terminate your agreement”.
Google states that you “must obtain end users’ legally valid consent” to:
How to implement the Google Analytics cookie consent prompt
Here’s how you can implement the cookie consent prompt on your website if you’re using a cookie-based web analytics platform such as the Google Analytics:
- Remember not to block your visitors from seeing your page with one of those cookie walls that you may have seen on some websites. This is an illegal implementation (links to the official PDF document) of the law and is done by sites that want to “force” the user into accepting their terms.
- Don’t store any cookies on the device of your visitor before that visitor gives you the consent to do so.
- Place the cookie consent prompt somewhere visible on your site such as the bottom left or bottom right of the screen.
- Write in plain language in a similar way that you communicate on the rest of your site. Explain to the visitor what you want to collect and why that is useful to you.
- Ask the visitor to decide whether to give you the consent to do so or not. Make that choice clear with simple “yes” and “no” or “accept” and “decline” options. No dark patterns can be used in order to make the visitor accept. If you need help to do this, there are products such as Metomic that can help you create beautiful and cookie law compliant consent prompts.
Can you get website statistics without cookies?
It means that you are not required to annoy your visitors with a cookie notice if you’re using Plausible Analytics for your website statistics.
By not using cookies you do not need to obtain consent from the visitors to store and retrieve data from their devices. It’s one less thing to worry about and annoy your visitors with.
This is one of the reasons why you should consider Plausible Analytics as a great Google Analytics alternative.
How can Plausible Analytics count unique visitors without cookies?
Since IP addresses are considered personal data under GDPR, we anonymize them using a one-way cryptographic hash function. You can read our data policy with full details on things we do collect, how we do it and how we’ve made our product a GDPR compliant web analytics tool.
But what if the IP address of a visitor gets changed?
If a visitor changes the IP address they will be counted as another new visitor. Similar to if someone blocks or deletes their cookies, they become new visitors too.
In our testing, using IP addresses to count visitors is remarkably accurate when compared to using a cookie. Total unique visitor counts were within 10% error range with IP-based counting usually showing lower numbers.
Overall, we’re happy with this approach because we expected bigger inaccuracy. In some cases, it might even be more accurate than using a cookie because some audiences such as tech-savvy audiences block cookies altogether.
Turns out, counting IP addresses is not much less accurate than using cookies. And not having to show a cookie banner is a worthwhile trade off for many sites.
Try Plausible Analytics cookie-free stats
You can sign up for a free 30-day trial here. By using Plausible Analytics you can keep your website fast loading and your visitor experience free from distractions and annoying prompts.