Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
Stetic is a privacy friendly web analytics service made and hosted in Germany that measures traffic without cookies, using a short time window to recognise sessions instead of persistent identifiers.
Stetic is a privacy friendly web analytics service offered as an alternative to Google Analytics, operated by Stetic GmbH and made and hosted in Germany. It provides traffic statistics such as page views, referrers and visitor counts through a small JavaScript tag added to a website. The service is built around the goal of measuring audiences without intrusive tracking. For European websites it positions itself as a tool that can run without a cookie banner when configured correctly.
In its standard mode Stetic does not set tracking cookies in the visitor browser. Instead it relies on request data such as the page visited, the referrer and the user agent, and it uses a short time window to recognise that several page views belong to the same visit. The IP address is processed transiently to enable this session recognition rather than stored as a stable identifier. This cookieless approach keeps the collected data pseudonymous and aggregated.
Art. 5(3) of the ePrivacy Directive only requires consent when information is stored on or read from the visitor device. Because Stetic in cookieless mode does not store identifiers on the device, the core trigger for consent is generally not met. The processing of pseudonymous request data still falls under the GDPR and needs a legal basis, which for privacy friendly aggregated measurement can be legitimate interest under Art. 6(1)(f). The low intrusiveness of the design supports that balancing test.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
When Stetic is used in its cookieless configuration, a consent banner is generally not required because no non essential storage takes place. You should still inform visitors in your privacy notice that aggregated analytics are carried out and explain how to object. If you enable any optional feature that would store an identifier on the device, the consent requirement would return and you would need prior opt in. Verifying the active configuration is therefore an important step.
Stetic is hosted in Germany and processes data within the European Union, so in its standard setup there is no transfer to the United States or other third countries. This keeps the data within the protection of the European Economic Area and removes the need for Standard Contractual Clauses or a transfer impact assessment. You should still confirm the hosting arrangements with the provider and record them. Keeping data inside the European Union is one of the main compliance advantages of this service.
Confirm that the cookieless mode is active and that no optional identifier storage is switched on. Mention Stetic in your privacy notice, state the legitimate interest basis and explain the right to object. Conclude a data processing agreement with Stetic GmbH and document that the data stays in Germany. Review the configuration periodically so the consent free status remains accurate.
Websites using Stetic Analytics must obtain user consent under GDPR regulations.
DPIA considerations
Because Stetic is cookieless, hosted in the European Union and designed to avoid persistent identifiers, the residual privacy risk is low and a full data protection impact assessment is usually not triggered. A short screening should still confirm that the cookieless configuration is active, that the IP address is only used transiently and that no extra identifiers are enabled. Keep the configuration documented so the low risk assessment remains defensible.
Sample consent text
We use Stetic, a cookieless web analytics service hosted in Germany, to measure aggregated website usage without identifying you individually. Because no tracking cookies are set and no data leaves the European Union, this measurement relies on our legitimate interest and you can object at any time.
Third-party domains contacted
stetic.comcdn.stetic.comStetic Analytics collects user analytics data — you legally need a consent banner. Try FlowConsent free.
In its standard cookieless mode Stetic does not set tracking cookies in the visitor browser. It recognises sessions through a short time window applied to request data rather than through a persistent identifier on the device. If no optional storage feature is enabled, there are no analytics cookies to disclose.
Generally no, when Stetic runs in its cookieless configuration, because Art. 5(3) ePrivacy is not triggered without storage on the device. You still need a privacy notice and a legal basis for the pseudonymous processing. Consent would only become necessary if you switched on a feature that stores an identifier on the device.
Privacy friendly, aggregated audience measurement with Stetic can usually rely on legitimate interest under Art. 6(1)(f) GDPR. The low intrusiveness, the absence of cookies and the European hosting all strengthen the balancing test in favour of the controller. You should still document the assessment and offer a right to object.
No. Stetic is made and hosted in Germany and processes data within the European Union, so in its standard setup there is no transfer to the United States or other third countries. This avoids the need for Standard Contractual Clauses or a transfer impact assessment. Confirm the hosting terms with the provider and keep the record.
A full data protection impact assessment is usually not required because the processing is cookieless, pseudonymous, low risk and kept within the European Union. A brief screening is still good practice to confirm the configuration and the absence of high risk factors. Document the outcome so the low risk conclusion is evidenced.
Verify that the cookieless mode is active and that no optional identifier storage is enabled, then add the tag site wide. Describe the analytics in your privacy notice, state the legitimate interest basis and explain how to object. Sign a data processing agreement with Stetic GmbH and record that the data stays in Germany.
Yes. Other privacy first analytics tools such as Matomo, Plausible, Pirsch and etracker offer similar cookieless measurement, and several are also hosted in the European Union. Stetic is already on the privacy friendly end of the market, so a switch would mostly be a matter of features or hosting preference rather than risk reduction.
Because Stetic in cookieless mode sets no cookies, your cookie table will usually not need a Stetic entry. Instead, describe the analytics in the broader privacy notice, note that it is cookieless and hosted in Germany, and explain the legitimate interest basis and the right to object. Revisit this if you ever enable an optional storage feature.