GDPR by design. Not by banner.
Cookieless, GDPR-friendly product analytics: no cookies, nothing stored in the browser, no IP address or user agent kept, data hosted in the EU.
- No cookies and no localStorage
- IP address and user agent never stored or logged
- Visitors counted with an anonymous hash that changes every day
- Only the page path: no query string, IDs replaced by :id
- Known bots filtered out
- Data hosted in the EU
Questions
Do I need a cookie banner for Shipabase?
No. Shipabase sets no cookies and stores nothing in the browser, so there is no consent to collect for it.
How are visitors counted without cookies?
With a hash of the IP address, the browser and a random salt that changes every day. The IP address and the browser are then discarded, and each daily salt is deleted, so a visitor can't be followed from one day to the next.
Where is my data stored?
In the EU only, on Google Cloud: the API runs in Belgium and the data is stored in EU regions.
Do you store full URLs?
No. Only the path, never the query string or the hash, which often hold tokens or emails. Identifiers in the path are replaced by :id.
What about the country of a visitor?
It is looked up from the IP address on our server, then the IP address is discarded. Only the country is kept.