Choose cookieless or cookie tracking per site

Every site now picks its own tracking mode when you add it, and you can see which mode a site is on at any time.

Cookieless, the default

No cookies and no cross-site identifiers on your site. A visitor is identified by a hash that is computed on our server from a rotating daily secret, which is thrown away after it expires.

That means the same person gets a new identity every day, and nobody can work backwards from an old hash to a person. It also means you do not need a cookie banner for XPmetric.

The trade-off is honest: anything that needs to recognise a visitor across days is out of reach. Multi-day funnels, returning-visitor counts and delayed attribution cannot work on a rotating identity, and we would rather say so than quietly report a wrong number.

Cookie mode

If you need cross-day identity and you are already running a consent banner for other reasons, cookie mode gives you the full picture. It is a deliberate choice per site, with a confirmation step, not a default we slipped past you.

The details, including exactly what is stored and what is not, are in the cookieless and GDPR guide.