What Is Statalog
Statalog is a privacy-first web analytics platform built for website owners who want accurate traffic data without compromising their visitors' privacy. It tracks pageviews, sessions, goals, events, revenue, and more — all without using cookies, fingerprinting, or any persistent identifier that follows your visitors across the web.
The core idea
Most analytics platforms work by planting a cookie in a visitor's browser, then using that cookie to recognise the same person on their next visit. This is what makes consent banners legally necessary under GDPR and similar laws — you need permission to store something on someone's device.
Statalog takes a different approach. Each pageview is processed independently. A daily-rotating, server-side salt is combined with a hash of the visitor's IP address and user-agent string using HMAC-SHA256 to produce a temporary visitor identifier. The raw IP address is never stored. The identifier cannot be reversed to reveal who someone is, and it resets every 24 hours, so there is no persistent cross-session tracking. No cookie is ever written to the browser.
The result: full traffic insight, zero consent prompts.
Two editions
Cloud (statalog.com)
The hosted SaaS version. Sign up, add your site, paste one line of code, and your dashboard populates within seconds. Infrastructure, backups, and updates are all handled for you. The Cloud edition runs on dedicated ClickHouse clusters for fast query performance at scale, with no data sampling.
Community (self-hosted, open source)
The Community edition is the same core software, released as open source. You run it on your own server, control your own data, and pay nothing in licensing fees. It is the right choice for organisations with strict data-residency requirements or those who simply want full ownership of the stack.
How Statalog compares
| Feature | Statalog | Google Analytics 4 | Plausible |
|---|---|---|---|
| Cookies | No | Yes | No |
| Consent banner required | No | Yes | No |
| GDPR compliant by default | Yes | Requires configuration | Yes |
| Script size | ~2 KB | 45 KB+ | ~1 KB |
| Data sampling | Never | Yes (free tier) | Never |
| You own your data | Yes (Cloud + OSS) | No (Google owns it) | Cloud: Plausible holds it |
| Open source | Yes | No | Yes |
| Heatmaps | Yes | No (requires add-on) | No |
| Funnels | Yes | Yes | No |
| Revenue tracking | Yes | Yes | No |
| Error tracking | Yes | No | No |
| Real-time visitors | Yes | Yes | Yes |
| Self-host option | Yes | No | Yes |
What you can track
Statalog covers the full analytics stack in a single lightweight script:
Traffic fundamentals — Unique visitors, pageviews, sessions, bounce rate, average session duration, pages per session.
Acquisition — Traffic sources broken down by referrer, UTM campaign, medium, and term. Direct, organic, social, email, and paid traffic are automatically categorised.
Pages — Which URLs get the most traffic, entry pages, exit pages, and scroll depth.
Audience — Countries, cities, browsers, operating systems, device types, and screen sizes — all derived without fingerprinting.
Goals and conversions — URL-based conversion tracking with match types (exact, starts with, contains), revenue values, and per-session deduplication.
Custom events — Track any user action — button clicks, form submissions, file downloads, video plays — using a one-line JavaScript call or a data-event HTML attribute.
Funnels — Define multi-step conversion funnels to see where visitors drop off.
Revenue — Attach monetary values to goals or events to track earnings directly in the dashboard.
Heatmaps — Click and scroll heatmaps per page, no additional script required.
Error tracking — JavaScript errors and unhandled promise rejections are captured automatically and surfaced in a dedicated report.
Performance — Core Web Vitals (LCP, FID/INP, CLS) and page load times, sampled from real users.
Frequently asked questions
Does Statalog use cookies? No. Statalog never reads or writes cookies of any kind. The visitor ID is computed server-side from anonymised signals and discarded after processing.
Do I need a cookie consent banner? No. Because Statalog does not use cookies or any persistent tracking mechanism, it falls outside the scope of ePrivacy Directive consent requirements in the EU. Most Statalog users can remove their analytics-related consent prompt entirely.
Is my data shared with third parties? No. On the Cloud edition, your data lives in Statalog's infrastructure and is never sold, shared, or used for advertising. On the Community edition, your data never leaves your own server.
Does Statalog work without JavaScript?
Mostly, no — the tracker is a JavaScript snippet. However, Statalog provides a pixel endpoint (/api/pixel) that can be embedded as a no-script image fallback for environments where JavaScript is unavailable.
Is Statalog accurate? More accurate than most alternatives. Because Statalog does not rely on cookies, it counts visitors that block third-party cookies — a group that now represents a significant share of web traffic. It also applies bot filtering by default, so crawler traffic does not inflate your numbers.