Use this page to understand how mandera measures website activity without cookies, personal data or visitor profiles.
mandera counts what happens on your website without cookies and without anything that can identify a person. A small script, under 1 KB, sits on your pages and reports only a handful of signals the browser already exposes. Nothing is saved to a visitor’s device, so there is no consent banner to show.
How a visit is counted
The script reads two things when a page opens: which page it is, and where the visitor arrived from, the referrer. mandera decides whether a visit is new from that referrer, not from a stored identifier. Clicking around your own pages stays a single visit, while coming in from another site, or with no referrer at all, begins a new one. No cookie, no IP and no fingerprint is ever used to recognize someone.
Because nothing is stored to recognize a returning person, someone who closes the tab and comes back later counts as a new visit. That is the privacy trade-off, and we think it is the right one.
Visits that last only an instant are read as noise and left out of your visit count, so what you see reflects people who actually engaged.
What mandera reads
- the page that was opened
- the source, taken from the referrer or from campaign parameters such as utm_source when a link carries them
- the country, derived from the browser timezone, never from an IP address
- the language, from the browser setting
- the size of the screen and the browser window
- engagement, such as time on the page, clicks and scroll depth
- the device, browser and operating system, read from the user agent and stored only in shortened form, enough to group visitors by device but not to single anyone out
What mandera never touches
- no cookies and no local storage
- no IP addresses, the address is dropped on arrival and never stored or processed
- no names, emails or other personal data
- no device fingerprints and no tracking across sites
- no full URLs: tracked addresses are stripped to the path, query strings are dropped
The full list
| mandera keeps | Where it comes from |
|---|---|
| Page views | The opened page. |
| Traffic source | The referrer or campaign parameters such as utm_source. |
| Country | The browser timezone. |
| Language | The browser setting. |
| Device, browser, OS | The user agent, shortened. |
| Screen and window size | The browser. |
| Engagement | Time on page, clicks and scroll depth. |
Not collected: cookies, IP addresses, personal data, fingerprints, cross-site profiles.
Because nothing is stored that points to a person, there is nothing for your visitors to consent to. For data location, the legal basis and a DPA, see Privacy & Compliance.
Related
Installation
Core concepts
Analytics Suite
Privacy & Compliance
Help
Last updated: 12 June 2026