Get in touch

Built in-house

BTOP Analytics

Completely cookieless and GDPR compliant by design. A web-analytics platform I built from scratch. It answers everything Google Analytics answers, while storing no personal data, setting no cookies, and requiring no consent banner on your site.

Get in touch How the privacy works
0 Cookies set
0 Personal data stored
0 Third parties
100% Privacy-first

Measurement
without the tax

No consent banner

Cookie banners exist because scripts store things on a visitor’s device. This one stores nothing: no cookies, no local storage, no session storage, so the rule that mandates the banner is never triggered.

Nobody else gets your data

Analytics normally means handing your visitors to a third party. Here nothing is handed anywhere: the whole platform runs on infrastructure I control, and not a single request goes out to an advertising network, a data broker, or a third-party CDN.

Nothing gets sampled away

Every event is kept in full and can be queried directly. No sampling thresholds, no aggregation you cannot see behind, and no retention limit imposed by someone else’s pricing tier.

Built for the questions I actually get asked

Which companies visited. Which page loses people. Which query brings clicks. Which backlink broke. Those are product decisions, not settings in someone else’s tool.

What you can see

The whole journey
end to end

Know where they come from

Search, AI assistants, campaigns and the sites that link to you, separated out, with the visitors each one actually brought. You can see whether ChatGPT is recommending you rather than guess at it.

Know what they do

Every session reconstructed in order: the pages they opened, how long they stayed on each, and the point where they stopped. Nothing is sampled away, so a session worth looking at is one you can actually open.

Know where they go

Outbound clicks, downloads and form submissions, each with its exact destination. When someone leaves for your booking link, that is recorded as an outcome rather than written off as a bounce.

One dashboard,
the whole picture

Audience

  • Traffic & sessions Pageviews, visitors and session timelines you can retrace step by step.
  • Geography Countries, regions and cities, derived at request time and never stored.
  • Company attribution Which organisations visit, not just which countries. The B2B signal most tools miss.

Acquisition

  • Referrals & AI Which sites send people your way, and which AI assistants do.
  • Campaigns UTM source, medium and campaign, attributed across the whole session.
  • Backlinks Referring domains, anchors, spam scores and a gained-versus-lost trend.
  • Search Console Clicks, impressions, CTR and position, mapped query to page.

Behaviour

  • Funnels & journeys Per-step drop-off, and the paths visitors actually take.
  • Custom events Downloads, outbound clicks and form submissions, captured automatically.
  • Real-time A live event stream of the last 30 minutes.

Health

  • Core Web Vitals LCP, INP, CLS, FCP and TTFB, per page, with p75.
  • JavaScript errors Client-side errors and 404s from real visits, before anyone reports them.

The IP never
touches the disk

Cookieless analytics is easy to claim and harder to do. Here is the entire identity mechanism, start to finish.

  1. The request arrives

    A visitor loads a page. Their IP address arrives with the request, as it must for any web request to work at all.

  2. It is used in memory

    The IP is read to derive an approximate location, the organisation behind the network, and a hash salted with a key that changes daily.

  3. Then it is gone

    The raw IP is discarded and never written to disk. Because the salt rotates every day, yesterday’s hash cannot be matched to today’s visitor.

The result: sessions can be counted accurately within a day, and nobody, including me, can reconstruct who a visitor was afterwards.

Cookieless, and
GDPR compliant by design

Not compliant because of a setting you have to remember to switch on, compliant because the data that creates the obligation is never collected in the first place.

  • No cookie banner required

    Consent banners are mandated by the ePrivacy rule on storing or reading information on a visitor’s device. This platform writes nothing: no cookies, no local storage, no session storage, so the obligation never arises.

  • No personal data retained

    IP addresses are processed in memory and discarded, never written to disk. With no identifiers stored, there is nothing to export, rectify or erase on request, and nothing to lose in a breach.

  • No transfers, no sub-processors

    Your analytics data is never shared with an advertising network or a third-party provider. It stays on infrastructure you control, which removes the international-transfer question entirely.

  • You hold the data

    Everything lives in a database you own, with no retention limit dictated by someone else’s pricing tier and no vendor standing between you and your own numbers.

Worth saying plainly: software can remove the hard part, but compliance also depends on your own privacy notice and how you use the data. This platform is built so the technical side is not the thing standing in your way.

What this means for you

You get the answers,
not another login

Most analytics ends with a dashboard nobody opens. The platform is the instrument. The useful part is somebody actually reading it. That is the part I do.

  1. It measures, continuously

    Nothing sampled away, so the month is complete before I look at it.

  2. I read it, every month

    Plain language, not a dashboard export with a logo on it.

  3. You get a short list of actions

    Ranked by what they are worth against what they cost to fix.

Monthly report March

What moved

Organic sessions
+18%
Checkout completion
−6%
Mobile LCP
1.9s

Worth doing next

  • Rewrite the title on /pricing High 20 min
  • Fix the form error on Safari High 1 hr
  • Redirect three dead pages Medium 15 min

The gaps I go looking for

Every month, against your actual numbers, not a generic checklist.

  • Pages that lose people

    High exits, short visits, funnel steps where visitors quietly disappear, the specific page and step, not a site-wide bounce rate.

  • Speed that costs you rankings

    Core Web Vitals measured on real visits, per page. A slow template hurts both conversion and search position, and it rarely shows up on your own fast connection.

  • Journeys quietly breaking

    JavaScript errors and 404s captured from actual sessions. A form failing on one browser is invisible until someone reports it, which mostly they do not.

  • Search you are nearly winning

    Queries with impressions but few clicks, or sitting just off page one. Usually the cheapest wins available: a title and description rewrite on a page that already ranks.

  • Pages Google will not index

    Crawled-but-not-indexed URLs and sitemap errors, so pages you paid to produce are not sitting invisible.

  • Link equity leaking away

    Dead pages on your own site that still attract backlinks. A redirect recovers authority you already earned and are currently throwing away.

  • Campaign spend going nowhere

    UTM sources bringing traffic that never converts, attributed across the whole session rather than just the landing page.

  • Businesses worth following up

    Which organisations visited, how often, and what they read: a warm list for B2B, from a signal most analytics never surfaces.

The dashboard is still there if you want it. Nothing depends on you opening it.

Want this running
on your site?

BTOP Analytics runs on this very website. The numbers behind this page come from it. If you want measurement you own outright, tell me about your setup.

Get in touch See all services