Quanta
Quanta is a privacy first digital analytics platform designed to give product, marketing and editorial teams a measurement layer that respects European data protection law. Quanta avoids persistent identifiers, restricts data retention and hosts the processing in the European Union, which lets compliant deployments fall within the CNIL audience measurement exemption and operate without a cookie banner.
What does Quanta do?
What Quanta is and how it works
Quanta is a digital analytics platform built to comply with European data protection law by design. The product targets controllers who want to measure audiences and conversions without relying on persistent identifiers or cross site tracking. The collection layer runs either as a lightweight JavaScript snippet or as a server side script that pushes events to the Quanta API. Behind the API, the service aggregates the data, anonymises it and produces dashboards that resemble the reports of mainstream tools without the privacy footprint of Google Analytics.
Cookies and personal data collected
By default Quanta does not write any cookie. Returning visitors are recognised through a daily rotating salt combined with the truncated IP address and the user agent, generating a fingerprint that resets every twenty four hours. Page views, events, page titles, referrers and screen properties are stored in the European Union. Quanta does not collect names, emails or any directly identifying data unless the controller explicitly sends them as custom dimensions, which the controller should avoid in the cookieless configuration.
GDPR and ePrivacy implications
The CNIL recommendation of 13 January 2022 lists the conditions under which audience measurement tools fall outside the consent requirement of Article 5(3) ePrivacy: no persistent identifier shared across sites, IP truncation, limited retention, no data sharing and use restricted to audience measurement. A Quanta deployment that respects these conditions can be loaded without consent. Activating persistent identifiers, fingerprinting beyond the daily salt or sharing data with advertising partners forces the deployment back into the consent regime.
International data transfers
Quanta is operated within the European Union, so there is no transfer to the United States or to another third country in the standard configuration. Customers should still ask for the list of sub processors and confirm in the Data Processing Agreement that customer support, monitoring and backups remain within the European Economic Area. Reference the EU hosting in your record of processing activities and in your privacy notice.
Compliance steps for an exempt deployment
Use the cookieless configuration, avoid sending personal identifiers as custom dimensions, set the retention period to a maximum of thirteen months, do not share data with advertising partners or other publishers, sign a Data Processing Agreement and document the configuration in the record of processing. Even when no consent is required, mention Quanta in the privacy notice with a link to the data subject rights and provide an easy opt out mechanism.
Quanta and the GDPR
- Legal basis
- When deployed in cookieless mode and aligned with the CNIL audience measurement exemption (no cross site tracking, IP truncation, restricted retention and no data sharing), Quanta can rely on legitimate interest under Article 6(1)(f) GDPR or fall under the strictly necessary exemption of Article 5(3) ePrivacy. Any feature that activates persistent identifiers requires consent.
- Risk level
- low
- Applicable regulations
- GDPR, ePrivacy Directive (2002/58/EC), CNIL recommendation on audience measurement of 13 January 2022, German DSK guidance on telemetry, Spanish AEPD analytics guidance, EDPB Guidelines 03/2022 on consent
Impact assessment (DPIA)
A standard cookieless deployment of Quanta is generally low risk and rarely requires a DPIA. A DPIA becomes appropriate when the controller adds custom dimensions that store user attributes, when retention is extended, or when integrations with CRM or advertising platforms are activated. Document the configuration parameters, confirm that the deployment matches the CNIL exemption criteria and review the Data Processing Agreement.
Sample text for your banner
We use Quanta to measure audience without persistent identifiers, IP addresses are truncated and data is hosted in the European Union. The processing falls under the CNIL audience measurement exemption when no cross site tracking is performed, so it is operated on the basis of our legitimate interest. You can object at any time through the cookie preferences link.
What Quanta sets and contacts
- Tracking method
- JavaScript or server side measurement library that aggregates page views and events. Identification of returning visitors is based on a daily rotating salt rather than persistent identifiers, which keeps the design close to the CNIL exempt analytics requirements.
- Server location
- European Union (commonly France or Germany), depending on the offer chosen by the customer.
- Cookieless mode available
- Yes
Cookies set (1)
| Name | Type | Duration | Purpose |
|---|---|---|---|
| No cookies | none | n/a | Quanta is a cookieless analytics platform for mobile and web apps. It uses anonymised event ingestion without persistent client identifiers, so no cookies or localStorage values are written on the visitor device. |
Third-party domains contacted (3)
quanta.toolsapp.quanta.toolscollect.quanta.tools
Frequently asked questions about Quanta
Can't find your question? Write to us, we answer fast.
Does Quanta write any cookie?
In the default cookieless configuration Quanta does not write any persistent cookie. Returning visitors are reconciled through a daily rotating salt combined with the truncated IP and the user agent, which resets every twenty four hours. Custom configurations may activate a session cookie if the controller chooses to.
Do I need consent to use Quanta on my website?
When configured to match the CNIL audience measurement exemption (no persistent identifier shared across sites, IP truncation, limited retention, no data sharing) Quanta can be loaded without consent. As soon as persistent identifiers, fingerprinting beyond the daily salt or data sharing with advertising partners are activated, consent is required.
What is the legal basis for processing data through Quanta?
Cookieless audience measurement aligned with the CNIL exemption rests on legitimate interest under Article 6(1)(f) GDPR, with a balancing test that weighs the very limited data set against the user expectations. Configurations involving identifiers or cross site tracking require consent under Article 6(1)(a).
Are data transferred to the United States or another third country?
No. Quanta is operated in the European Union, so there is no transfer to the United States or to another third country in the standard configuration. Confirm the sub processor list with the editor and document the EU hosting in your record of processing activities.
Do I need a DPIA for a Quanta deployment?
For a standard cookieless deployment a DPIA is rarely mandatory because the data set is limited and the processing is aligned with the CNIL exemption. A DPIA becomes appropriate when the controller adds custom dimensions with user attributes, extends retention or activates marketing integrations.
How do I implement Quanta in a fully compliant way?
Use the cookieless configuration, avoid sending personal identifiers, set retention to thirteen months at most, do not share data with advertising partners, sign a Data Processing Agreement, document the configuration and provide an opt out link in the privacy notice.
What are the alternatives to Quanta?
Comparable privacy first analytics tools include Plausible Analytics, Matomo Analytics in cloud or self hosted mode, Fathom Analytics, Simple Analytics, Pirsch and Piwik PRO. Each has different feature sets, integrations and prices, so map your use case before switching.
How should I update my cookie policy when I deploy Quanta?
In a cookieless deployment you do not need a cookie banner for Quanta, but the privacy notice must list it, describe the data collected, the legal basis (legitimate interest), the retention period and the European hosting. Provide an easy opt out link and document any change in configuration that would trigger a consent requirement.
Black Book
Black Book is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Black Book supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Black Book enables informed decisions that improve experience and drive results.
Raaft
Raaft is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Raaft supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Raaft enables informed decisions that improve experience and drive results.
Simon
Simon is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Simon supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Simon enables informed decisions that improve experience and drive results.
Session Rewind
Session Rewind is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Session Rewind offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Session Rewind empowers organizations to optimize strategy and maximize return on investment.
Google Search Console
Google Search Console is a versatile web technology that supports digital platforms with specialized functionality and enhanced capabilities. It provides robust tools and services that integrate with modern websites and applications seamlessly. Google Search Console is designed to improve operational efficiency, user experience, and digital performance. Trusted by developers and businesses alike, Google Search Console offers reliable solutions that scale with organizational needs and evolving web standards.
Mint
Mint is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mint supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mint enables informed decisions that improve experience and drive results.
Make your site compliant today.
Free up to 25,000 sessions a month. No credit card, no commitment.