Analytics without a cookie banner
How you can measure visitors without asking for consent: legally, accurately and without a banner.
Cookie banners are a symptom of the wrong measurement method, not a solution. govanalytics provides a cookieless mode in which no personal data is processed. In that configuration, consent is not legally required.
Why cookie banners do not solve the problem
Consent distorts your data
When 30 to 60% of visitors decline consent, you miss a significant portion of your visitor data. The insights you do receive are structurally biased.
A banner is not a legal basis
A cookie banner implements a consent requirement, but does not resolve the underlying architectural problem. As long as you process personal data, the obligation remains.
Consent Mode compensates, but is not an alternative
Google Consent Mode v2 models missing data via machine learning. That is a statistical estimate, not a measurement. For government reporting purposes, that is insufficient justification.
How cookieless measurement works
In cookieless mode, govanalytics recognises sessions based on aggregated signals: without cookies, without IP storage, without individual profiles. Technically, it works as follows:
-
No identifying data
IP addresses are not stored. No device fingerprints are created. There is no link possible to an individual visitor.
-
Aggregated session recognition
In cookieless mode, repeat visits within a session are recognised via a combination of timestamp and technical characteristics, without creating a persistent identifier.
-
No processing of personal data
Because no personal data is processed, no legal basis is required for the measurement itself. The cookie banner is therefore legally unnecessary.
-
Fully compliant with Consent Mode v2
govanalytics also supports Google Consent Mode v2 for organisations that want to maintain a traditional cookie setup alongside cookieless measurement.
GDPR, DPIA and the cookie banner: the legal questions
- Is measuring without consent GDPR-compliant?
- Yes, provided no personal data is processed. In govanalytics' cookieless mode no cookies are placed, no IP addresses are stored and no individual profiles are built. Without processing of personal data, no legal basis for consent is required and the measurement is GDPR-compliant by design.
- Is a DPIA required for cookieless analytics?
- A DPIA is mandatory for processing with a high privacy risk. Because cookieless measurement processes no personal data, the DPIA is short and defensible: the data categories, storage location and retention periods can be described in full. govanalytics provides a DPIA template and a data processing agreement that your data protection officer can assess directly.
- Is measuring without a cookie banner allowed under cookie legislation?
- Yes. The obligation to ask for consent applies to placing and reading cookies and similar techniques that are not strictly necessary. In cookieless mode govanalytics places no cookies and uses no device identification, so the consent requirement does not apply and no cookie banner is needed for the analytics.
- What documentation is available for my DPO?
- govanalytics provides a DPIA template, a data processing agreement under Dutch law and a record of processing activities. This allows your organisation to independently assess the measurement setup against the GDPR and its own information security frameworks such as the Dutch BIO.
Want to know more about cookieless measurement?
Read how govanalytics recognises sessions without cookies and what that means for the reliability of your data.
Technical documentation →Measuring without a banner is not a compromise
We show you what that looks like in practice for your organisation.