Privacy is not optional,
it's the default

No cookies, ever

Kipstats does not use cookies, localStorage, or any form of persistent browser storage. We don't need cookie consent banners because we simply don't use cookies. Your visitors are never tracked across sessions or websites.

No personal data collection

We don't collect IP addresses, names, email addresses, or any personally identifiable information from your visitors. Visitor identification uses a daily-rotating hash that makes it impossible to track individuals across days or sites.

The salt rotates every 24 hours, making it impossible to correlate visitors across days.

GDPR, CCPA & PECR compliant

Because we don't collect personal data or use cookies, Kipstats is fully compliant with GDPR (EU), CCPA (California), PECR (UK), and other privacy regulations. You don't need to show cookie consent banners or update your privacy policy when using Kipstats.

Lightweight & transparent

Our tracking script is under 1KB gzipped and fully open-source. You can inspect exactly what data is being collected. We use the sendBeacon API for non-blocking data transmission with no impact on your site's performance.

What we collect

We only collect the minimum data needed to provide useful analytics:

• Page URL — which pages are visited (query parameters stripped)
• Referrer — where visitors come from
• Browser & OS — derived from User-Agent (not stored raw)
• Country & city — derived from IP via local GeoIP database (IP is never stored)
• Screen size — viewport dimensions for device type classification
• UTM parameters — campaign tracking data you explicitly add to URLs

What we don't collect

• IP addresses (used for geo lookup, then discarded)
• Cookies or local storage data
• Personal information (names, emails, etc.)
• Cross-site tracking or fingerprinting
• Data sold to third parties

Your data, your control

Kipstats is self-hosted. Your analytics data lives on your own infrastructure. You have full control over your data — you can export it, delete it, or shut down the instance at any time. We never have access to your analytics data.