Privacy-first web analytics

Everything causalIT does

Seven things worth explaining properly, with the mechanism behind each one.

Cookieless by default

A daily anonymous fingerprint — no cookies, no cross-site tracking, no consent banner required.

Visitors are identified by a hash of a global salt, a per-site salt, the day, the IP and the user agent — computed on our servers.
The IP is used for that hash and never stored. Nothing at all is written to the visitor’s device.
The fingerprint rotates every day and differs per site, so there is no tracking across days and no correlation across sites.

The hash is recomputed daily with a new salt, so yesterday cannot be linked to today.

First-party proxying and server-side tracking keep your numbers accurate where other scripts get blocked.

Serve the tag from your own domain through a two-route proxy, and blockers see an ordinary first-party asset.
Or point a subdomain at us with two DNS records — certificates are issued automatically once you verify.
Server-side tracking never touches the browser at all, so nothing can intercept it.

The request leaves your domain, so a blocker has nothing to match against.

Live visitors, pages, sources, geography and devices — fast, hand-built charts, no bloat.

Events are queryable within seconds of arriving, and the live panel updates while you watch.
Charts are hand-built SVG — no charting library, no megabyte of JavaScript before a number appears.
Every table exports to CSV, and every dashboard exports to PDF.

One hop from the page to a number you can read.

Organizations, roles, client workspaces and white-label branding for the sites you manage.

Organizations with owner, admin and viewer roles, and an invitation flow that expires and can be cancelled.
Agencies get client workspaces they can switch between without logging out.
White-label branding on paid plans covers the dashboard, the emails and the PDF reports.

Track conversions, build funnels, mark campaigns with QR links and measure what matters.

Goals match a path or a custom event, and are counted retroactively over data you already have.
Funnels order several goals and show the drop between each pair of steps.
QR campaign links attribute offline traffic to the campaign that produced it.

Clicks, hovers, scroll reach and attention per block on a map of each page — aggregated by construction, no session replay, no one ever recorded.

The tag aggregates a whole page view locally and sends one beacon at exit: the stored rows carry no visitor id, no session id, no location, and an hour-truncated timestamp.
Elements, not pixels: links, buttons, fields, headings, paragraphs and media are counted as seen, clicked, hovered and read — form values are never read, and anything marked data-causalit-ignore is invisible.
Every rate ships with its sample size and a confidence band, and an insight only fires when a two-proportion test says the difference is real.

IP addresses are never stored, data stays yours, and retention is enforced automatically.

No IP is ever stored, no personal data belongs in paths, and retention is enforced by an automatic purge.
Third-party scripts on your site load only after consent, through a registry you control — and no registry means no banner.
A Global Privacy Control signal is honoured as a refusal when the visitor has not already chosen.

Create your account in under a minute.