Cookie-free analytics can be sufficient for many SMEs if you want to measure page views, sources, popular content, and simple goal actions; however, cookie-free analytics does not replace a legal review. The most important point is: Good website analytics doesn't start with the tool, but with the question of what decision you want to make with the data.
In my work with small and medium-sized enterprises in South Tyrol, I repeatedly see the same pattern: Many businesses want to "finally see some numbers" and then end up with a setup involving cookie banners, consent management, complex dashboards, and 80 key performance indicators (KPIs) that nobody uses regularly. That's tracking overkill. For most owners, managing directors, and small marketing teams, 5 to 8 reliable metrics are more valuable than a mountain of data that only creates uncertainty.
Cookie-free statistics measure website usage without tracking data stored in the browser.CookiesHowever, it is not automatically permitted without consent.
This article provides strategic decision-making support, not legal advice. If you are going live with a specific setup, you should have the legal basis, data processing, privacy policy, potential data processing agreements, and the national interpretation of the GDPR and ePrivacy rules reviewed.
Why cookie-free statistics are often the better start for SMEs
A streamlined website analytics tool primarily answers business questions. The measurement should help you write better content, generate more leads, identify technical issues, and objectively evaluate campaigns. It should not spy on people, create unnecessary profiles, or generate artificial complexity.
For me, it's also a matter of principle. Measurement should create clarity, not manipulate. If a small business wants to improve its website, it doesn't need invasive data collection. The business needs honest signals: Are people finding the right pages? Are they getting the right inquiries? Is the contact form working? Are visitors clicking on the phone number or WhatsApp link?
If you're currently rethinking your website, the measurement concept should already be part of the website strategy and technical implementation . Adding statistics later often leads to a patchwork approach: a tool here, a pixel there, a cookie banner on top, and in the end, nobody knows what decisions are based on the data.
The fundamental strategic question: What decision do you want to make?
Before you use Matomo without CookiesIf you're considering using plausible analytics, server logs, or another cookieless analytics setup, first clarify the decision-making question. A measurement without a decision-making context remains an evaluation without effect.
These questions will help you sort things out:
- Do you want to create better content? Then you need data on entry pages, top content, search intent, dwell time signals, and bounce rates.
- Do you want to get better inquiries? Then you need conversion goals such as contact form submitted, inquiry button clicked, phone click, WhatsApp click or download.
- Do you want to evaluate campaigns? Then you need sources, campaign parameters, landing pages, and simple conversion metrics.
- Do you want to identify technical problems? Then you need server logs, error codes, load time signals, 404 pages and crawling information.
- Do you want to check your positioning? Then you need not only numbers, but also qualitative signals: Which services are requested, which pages inspire trust, which terms do customers really understand?
This is precisely where branding, website, and marketing intersect. A strong brand doesn't measure everything that's technically possible. A strong brand measures what enables better decisions. If you need a structured approach for this, a marketing measurement plan for SMEs is often more useful than the next tool comparison.
Legal classification of cookie-free statistics: GDPR and ePrivacy
Many misunderstandings arise because technical and legal terms are mixed. This distinction is crucial for SMEs:
- Cookie-free statistics This means: The analytics setup does not store any tracking data.Cookies in the visitor's browser.
- Cookie-free statistics This means: The setup reduces Cookies to a minimum, but may utilize technically necessary or functional features. Cookies.
- Cookieless Analytics is the English collective term for web analytics without classic trackingCookiesThe term alone says nothing about the specific GDPR assessment.
- Anonymized This means that data can no longer be associated with any identified or identifiable person. True anonymization is challenging.
- Pseudonymized This means that direct identifiers are replaced or separated, but an assignment may still be possible under certain conditions.
- Consent-free This means that consent is not required for specific processing. This must be legally justified and does not automatically follow from "cookie-free".
The GDPR defines personal data in Article 4, No. 1 as information relating to an identified or identifiable natural person. Article 6, Paragraph 1 lists the possible legal bases for processing, including consent and legitimate interests. For website statistics, this means: As soon as personal data is processed, you need a valid legal basis.
In parallel, Article 5(3) of the ePrivacy Directive regulates the storage of information or access to information on a user's terminal equipment. Therefore, the issue is not only whether the data is "personal or not," but also whether information is stored on or read from the user's device.
The EDPB Guidelines 2/2023 further demonstrate that Article 5(3) of the ePrivacy Directive can also be relevant for new tracking technologies. Therefore, the cautious summary is: cookie-free is good for data minimization, but not automatically a guarantee for GDPR-compliant tracking without consent.
Server logs: robust, sober, and often underestimated
Server logs are generated automatically when a web server processes requests. A log file can show, among other things, which URL was accessed, when the access occurred, which status code was returned, which user agent was involved, and which IP address was processed. Depending on the configuration, IP addresses can be truncated, rotated, or stored for a shorter period.
Server logs are particularly interesting for SMEs if you need technical control:
- Robustness: Server logs do not depend on whether a browser blocks JavaScript.
- Technical diagnostics: Error codes, 404 pages, redirect chains and unusual access patterns become visible.
- General visitor patterns: You can see which pages are frequently requested and whether bots are causing a lot of traffic.
- SEO and AI readability: You can check whether search engines and crawlers are reaching important content.
Server logs have clear limitations. They don't reveal nuanced user paths like a full-fledged web analytics tool. Server logs typically don't provide clean marketing attribution, convenient conversion goals, or a user-friendly interface for small teams. Nevertheless, server logs are a solid foundation if you prioritize technical stability, data minimization, and objective website statistics.
Matomo without CookiesUseful if you need more analysis
Matomo without Cookies Matomo is a sensible option for many SMEs if you need more than just log file analysis but still want to work with minimal data collection. Matomo can be self-hosted, offers many reporting options, and can generally be configured so that no tracking occurs.Cookies should be used.
Matomo documents the option "Force tracking without cookies" under "Privacy > Anonymize data" for Matomo 4 or newer. According to Matomo, this should prevent JavaScript trackers from working. Cookies use and incoming trackingCookies They will be ignored on the server side.
In practice, this does not mean: "Matomo without Cookies "Never needs a cookie banner." This means: Matomo can be set up in a technically data-minimizing way. Additionally, you need to check which data is processed, whether IP anonymization is active, how long data is stored, whether a data processing agreement is necessary, whether the hosting fits your data protection concept, and what legal basis you document.
Matomo is a good fit if you:
- regularly evaluate content and landing pages
- If you want to accurately measure simple conversion goals,
- You need more control over hosting and data storage,
- If you need internal reports for management or marketing,
- are ready to maintain the configuration properly.
If you want to delve deeper into consent, Matomo and GA4, I have explained the basics in more detail in a separate article on GDPR tracking for SMEs.
Plausible analytics and streamlined tools: easy to understand, yet still worth checking.
Plausible Analytics and similar streamlined tools are attractive because they answer many typical SME questions without unnecessary dashboard complexity. You see visitors, page views, sources, top pages, and goals. For many small teams, this very simplicity is the biggest advantage.
Plausible publicly describes its product as a lightweight, cookie-free web analytics tool. In its Plausible Analytics Data Policy, Plausible states that no cookies are used. Cookies or persistent identifiers are used, and unique visitors are calculated using a random string that is reset daily.
Here too, the following applies: Provider claims do not replace your own due diligence. Crucial factors include the provider's setup, server location, data flows, order processing, IP processing, privacy policies, and national interpretation. A tool may be designed to minimize data usage, but you, as the website operator, are still responsible for your specific use of it.
Plausible and similar tools are a good fit if you:
- If you want easily understandable key figures,
- You don't need complex attribution.
- If you're looking for a concise overview of website success,
- If you want less tracking overkill and less dashboard chaos,
- You want to measure conversion goals such as form completions, phone clicks, or downloads.
Which key performance indicators (KPIs) are truly sufficient for SMEs?
In my experience, many small businesses don't need 80 key performance indicators (KPIs). A good starting point is 5 to 8 metrics that you review monthly and link to concrete decisions.
- Visitors: Roughly how many people or visits does your website reach?
- Page views: Which areas are actually being used?
- Entry pages: Where does contact with your company begin?
- Sources: Do visitors come via Google, direct search, recommendations, social media, or campaigns?
- Equipment: Does your website work equally well on smartphones, tablets, and desktops?
- Top content: Which pages generate interest and trust?
- Contact clicks: How often do people click on phone number, email, WhatsApp, or inquiry buttons?
- Form completions: How often is a contact form actually submitted?
- Technical error: Which 404 pages, loading problems, or server errors are hindering visibility and trust?
If you measure these metrics accurately, you often need less data, not more. You can identify which services generate interest, which content builds trust, and where the website is losing leads. This is precisely where marketing analytics becomes valuable for businesses: data isn't collected, but rather translated into better decisions.
Tool selection without a table: Which one fits your scenario?
A tool comparison often appears objective, but is of little help without context. It's better to decide based on your specific scenario.
If you just need guidance
If you want to know which pages are being viewed, where visitors are roughly coming from, and whether inquiries are increasing, a streamlined, cookieless analytics tool or a very minimal Matomo configuration is often sufficient. The important thing is that you don't measure more than you actually use.
When you evaluate campaigns
When evaluating Google Ads, social media, newsletters, or local campaigns, you need clean campaign parameters, landing pages, and conversion goals. Low-cookie analytics may suffice if your requirements are simple. However, as soon as retargeting, detailed user profiles, or cross-channel attribution come into play, the legal and technical complexity increases significantly.
If you need technical inspection
If you want to know whether bots are putting a heavy load on your website, whether search engines are reaching important pages, or whether error codes are preventing requests, server logs are invaluable. Especially for fast, machine-readable websites and AI visibility, technical data often provides insights that traditional marketing dashboards miss.
If you want to systematically control growth
If your website, content, SEO, campaigns, and sales are to work together seamlessly, you need a measurement concept, not just a statistics tool. That's why our strategic consulting doesn't start with the question of which tool to use, but rather with your goals, bottlenecks, data sources, and the next steps.
Cookie banners, consent and consent management: less chaos, more clarity
A cookie banner is not a quality indicator. A cookie banner is an indication that a website allows certain decisions regarding consent, CookiesIt must make device access or data processing transparent. A poor banner doesn't solve any data protection problems. Good consent management documents decisions, correctly blocks unauthorized services, and makes refusal just as easy as consent.
The better question is: Which services do you really need? If a service isn't necessary for your decision, remove it. If a service is necessary, check its purpose, legal basis, data categories, recipients, storage periods, IP anonymization, data processing agreements, and information in the privacy policy.
Cookies These are only part of the issue. Pixels, scripts, fingerprinting techniques, local storage mechanisms, and certain API accesses can also be relevant. Therefore, a "cookie-free website" is a good strategic approach, but not a blanket legal shortcut.
The 90-day roadmap for better website statistics
A good measurement system isn't built in an afternoon. For SMEs, a 90-day roadmap works better than a hectic tool change.
Weeks 1-2: Clarify goals
Define which business decisions you want to improve with data. Is it about more qualified leads, better content, better campaigns, technical stability, or local visibility in South Tyrol? Specify a maximum of three main goals.
Weeks 3–4: Develop a measurement concept
Translate each goal into a key performance indicator (KPI) and a data source. For example: "More direct inquiries" is achieved by submitting a contact form, a phone call, a WhatsApp message, and a click on the inquiry button. At the same time, check which data is truly necessary and which data you don't need for data minimization reasons.
Month 2: Configure the tool properly
Choose between server logs, Matomo without Cookies, plausible analytics or another setup. Configure IP anonymization, retention periods, roles, access, opt-out options, data processing agreements, and privacy notices. Check whether a cookie banner or consent management is required.
Month 3: Evaluate and improve the website
Don't nervously check the data every day, but rather review it systematically on a monthly basis. Then make concrete decisions: Which page needs improvement? Which service needs a clearer explanation? Which contact form is too long? Which campaign generates inquiries and which only clicks?
The value of website statistics is not created by measurement. It comes from the improvements you implement after taking the measurements.
My recommendation for SMEs in South Tyrol
If you run a small business, start deliberately simple. Don't build an analytics infrastructure that's larger than your decision-making needs. For many businesses, clean, cookie-free statistics, technical server logs, and clearly defined conversion goals are perfectly sufficient.
If you manage more marketing, compare campaigns, or regularly optimize content, Matomo can be used without Cookies or a streamlined tool like Plausible Analytics might be useful. Ultimately, the specific configuration and legal review in each individual case remain crucial.
My basic principle after over 20 years working in branding, web development, photography, marketing, and digital systems is simple: Technology should serve people. Website statistics should help you communicate more fairly, clearly, and effectively. Website statistics should not be used to track or manipulate people, or to extract profit from every interaction.
If you want to make your website more data-efficient, faster and easier to understand overall, you will find a suitable in-depth explanation in our article on cookie-free websites for SMEs .
FAQ: Cookie-free statistics for SMEs
Is cookie-free statistics automatically GDPR compliant?
No. Cookie-free statistics are a good step towards greater data minimization, but GDPR compliance depends on the specific data processing, legal basis, information provided, storage periods, and potential recipients. If in doubt, have the setup reviewed by a legal professional.
Do I still need a cookie banner with cookieless analytics?
Perhaps not, but it's impossible to make a general, reliable statement. The crucial factor is whether your setup stores or reads information from the end device, processes personal data, or includes other services requiring consent.
What key performance indicators (KPIs) are sufficient for an SME website?
For many SMEs, visitor numbers, page views, landing pages, sources, top content, devices, contact clicks, and form submissions are sufficient. Technical errors are also important, because a broken page won't generate any inquiries.
Is Google Analytics without Cookies a sensible solution?
For many small businesses, Google Analytics, even with simplified settings, is often more complex than necessary. If you only need guidance and simple conversion goals, server logs and Matomo (without the built-in features) are sufficient. Cookies or streamlined tools like Plausible Analytics are often clearer.
Which is better: Matomo or Plausible?
Matomo is a better fit if you need more detailed analytics, self-hosting, and greater control. Plausible is a better fit if you're looking for simple, easy-to-understand website statistics with minimal bloat.
Which conversion goals should I measure first?
Start with a contact form submission, a phone call, a WhatsApp click, an email click, a download, and a click on the most important inquiry button. These goals will show whether your website is profitable much faster than mere visitor numbers.
Sources
- European Data Protection Board, Guidelines 2/2023 on Technical Scope of Art. 5(3) of ePrivacy Directive — edpb.europa.eu (2024)
- Regulation (EU) 2016/679, Articles 4 and 6 — eur-lex.europa.eu (2016)
- Directive 2002/58/EC, Article 5(3) — eur-lex.europa.eu (2002)
- Matomo FAQ: How do I enforce tracking without cookies — matomo.org
- Plausible Analytics Data Policy — plausible.io
