Cookieless analytics on Cloudflare, without storing anything on the device

Dataflare can count visitors without storing anything on their device: no cookies, no local storage.

<script defer src="https://glass.<you>.workers.dev/s.js" data-project="my-app" data-persistence="cookieless"></script>

#How it works

The Worker derives a visitor id from a secret salt that changes every day, your project, the IP address and the user agent. It hashes them with SHA-256 and keeps only the hash. Because the salt changes daily, ids can't be linked across days or turned back into an IP address. IP addresses are never stored. Sessions are 30-minute windows of that id.

Because Dataflare runs in your Cloudflare account, the hash is computed in your Worker, and nothing goes to a third party.

#What you get, and what you don't

Cookieless mode is enough for web analytics: visitors, page views, sessions, bounce rate, sources, campaigns, countries, devices, errors and Core Web Vitals.

It isn't enough for anything that needs to recognise someone on another day: funnels across days, retention, experiments and session replay. For those, ask for consent, then switch to a persistent id:

glass.consent(true);  // after the user agrees
glass.consent(false); // delete stored ids and go back to cookieless

#Do you still need a cookie banner?

That depends on your jurisdiction and on everything else your site loads, so it's a question for your own legal advice. What Dataflare can tell you is exactly what it stores: see Privacy.

#Related

• Delete everything about a person with one command
• Keep data in the EU with dataflare init --eu