No consent needed · DE/AT-compatible

Web analytics
without cookie banners.

Lawful without consent, even in the strictest EU countries, Germany and Austria. Analyzza Zero measures everything it can, and nothing it shouldn't: no banner, no rejection, no blind spot.

30 days free, no card required · beta

0cookies
0banners
0device data read out
0%data loss
On our own EU server ~1.5 KB tracker No data sharing with third parties Part of the Analyzza family · built by Digital Dynamics
The problem

Why does Analyzza Zero exist?

Because in 2026 the familiar routes to web analytics come with serious trade-offs: you lose either your data or your legal certainty. We built a third way.

30–70%

The cookie banner kills your data

Where you ask for consent, 30–70% of visitors reject or click past, and they vanish from your stats. You make decisions from a fraction of your traffic, and you know nothing about the very people who leave fastest.

Google Analytics is a legal minefield

The Austrian DPA and the French CNIL both found its use unlawful. The measurement requires consent, the data travels to the US, and Google also uses it for its own purposes.

The blind spots of ad blockers

Browser extensions block most trackers en masse, based on the well-known “analytics” and “collect” patterns. Zero uses neutral paths, so even tech-savvy visitors stay visible.

The solution

Recognition, without storage.

Zero puts nothing on the visitor's device and reads nothing from it. Visitors are told apart by the server, with a mathematical identifier that is destroyed every day.

The browser knocks on its own

Every browser sends every website the same things: the page address, the referrer, the language. Zero works only from these. It asks the device nothing, not even the screen size.

An identifier destroyed daily

The server forms an irreversible identifier from a daily random key. At midnight the key is destroyed, and the data becomes permanently anonymous. Ruling out cross-day tracking isn't a policy, it's mathematics.

Only the statistics remain

After deriving the country from the IP, nothing of it is kept; from the browser, only the category. What we store can no longer be linked to anyone, so there is nothing to ask consent for.

identifier = SHA-256( daily_key + website + IP + browser )
// the daily_key is destroyed at midnight → the identifier can't be traced back to anyone
no cookies, no localStorage
no fingerprint, no canvas trick
no stored IP address
no cross-day tracking
no cross-site linking
no data sharing with third parties
Comparison

What does this mean in practice?

We don't collect less for convenience. We collect exactly as much as is lawful without consent. The difference is in the details.

Cookie-based analytics (e.g. Google Analytics)Analyzza Zero
Needs a cookie banner?YesNo, designed for it
Data loss from rejection30–70%Zero
Tracking lengthUp to years1 day, or as you set it, per country
Device data read-outExtensiveNone, only what the browser sends on its own
Where is the data?Third party, US transferOn our own EU server, exclusively
Regulator's viewDSB (AT) & CNIL (FR): unlawfulBuilt for the strictest criteria
Blocked by ad blockers?Yes, en masseNo, neutral paths
Excluding your own trafficComplicatedOne click, reversibly
goodproblematic
Features

Full statistics, no compromise.

Legal cleanliness doesn't mean a crippled dashboard. Everything you'd expect from analytics is here.

Every core metric

Visitors, pageviews, sessions, bounce rate, session length, compared with the previous period.

Where do they come from?

Referrer pages, UTM campaigns, entry and exit pages.

Country and language

Country stats without storing the IP, from a local database. No external geo API.

Devices

Browser, operating system, device type: as categories, without raw data.

Live view

Active visitors and the last 30 minutes' event stream, in real time.

Custom events

Button click, quote request, download: with a single HTML attribute or JS call.

1.5 KB tracker

Doesn't slow the page and tracks SPAs too. Multiple websites on a single dashboard.

Goals and funnels

Conversion goals for a page or event, multi-step funnels with drop-off analysis and a daily trend.

Visitor journeys

A visual path map: in what order they browse the site, and where they leave.

Filters and segments

Click any row and the whole dashboard filters to it. Save combinations and export them to CSV.

Revenue tracking

Attach amounts to events: see revenue per campaign, not just the click.

“Don't count me”

Exclude your own machines' traffic with one click, and your stats stay clean.

Monitoring

Website monitoring included

Uptime monitoring, expiry watch, instant alerts and a shareable status page, with no separate monitoring subscription, in the same tool. None of it touches visitor data.

Uptime monitoring

Minute-precise availability checks with adjustable frequency, expected status code and keyword check, plus the reason for a failure, not just the fact of it.

Instant alerts

About downtime and recovery via email, webhook, Discord or Telegram, plus a weekly summary in your inbox.

SSL and domain guard

Warns before your certificate or domain expires, and notices if a parking page appears where your site should be.

Public status page

A shareable status page with 90-day history, your own color and logo. Your clients can check for themselves that everything works.

Web Vitals

Real visitor loading experience (LCP, CLS, INP), as a daily aggregate only, not linkable to any visitor.

Notable changes

Automatically summarizes each day what moved: trending pages, new sources, visitor spikes.

Error tracking

JavaScript, resource and server-side errors, grouped, as a daily count only, with the query stripped from URLs.

Anomaly alerts

Compares traffic hourly with the same hour last week. You set how big a drop or spike counts.

Heartbeat monitors

Your cron job or backup script pings a URL when it runs. If the signal goes missing, we alert you.

For agencies

Client access, reports, API

Access for your clients and colleagues, automatic reports, and an API for your own systems.

Client and team access

Multiple users with roles: the admin manages everything, the viewer only sees assigned sites and can change nothing. Perfect as a client login.

Monthly client report

An automatic HTML report by email at the start of each month: traffic, top pages, goals, uptime, errors, per site and per user. The client sees what they pay for.

Data import

Bring your old stats over: we import Umami, Plausible, GA4 or Matomo exports (CSV) and recognize the format from the header. No starting from zero.

Open, read-only API

A keyed REST API for the stats, for your own reports and integrations. Documentation with curl examples. It can't write anything, only read.

UTM campaign builder

A built-in URL builder for your ads and newsletters. The tagged campaign shows up in the stats as soon as a click arrives.

Per-site data retention

Set how long we keep the data, and older data is deleted automatically. Less stored data, a stronger data-minimization argument.

Flexibility

Three measurement modes. You decide.

How conservative the measurement is can be set per website. The default is always the strictest.

defaultDE/AT-compatible

Strict mode

Daily recognition window, no storage on the visitor at all. Lawful without consent or a banner, even under the strictest practice. This suits most websites.

advanced · at your own risk

Custom recognition window

A longer window, set globally and per country (e.g. Germany: 1 day, elsewhere: 30). The interface shows the legal risk level for every setting.

consent-based

Opt-in mode

A built-in, unobtrusive consent request. Whoever accepts is measured across days; about whoever doesn't, no data is collected. A technical guarantee instead of a promise.

Compliance

What does legal compliance consist of?

Not in promises, but in architecture. Strict mode rests on three pillars.

01

The cookie rule never even applies

The ePrivacy-based rules (German TDDDG § 25, Austrian TKG § 165) require consent when someone stores data on or reads it from the visitor's device. Zero does neither.

02

GDPR: legitimate interest and immediate anonymization

The request's data (IP, browser) live only in memory, for the seconds of processing. Their legal basis is the recognized legitimate interest of audience measurement. Only anonymous data is ever stored.

03

Forgetting is a mathematical guarantee

Once the daily key is destroyed, the earlier data can't be linked to anyone: not by us, not by an authority, not by an attacker. Not a data-handling promise, but a cryptographic property.

Measure everything. Without asking. Lawfully.

Zero cookies. Zero banners. Zero data loss.