> See how WebSTAT, the Danish analytics platform, tracks visitors, the GDPR and ePrivacy implications, when consent is required and how to deploy it compliantly. > > Canonical: https://www.flowconsent.com/en/services/analytics/webstat Analytics # WebSTAT Analytics WebSTAT is a website analytics and visitor tracking service operated from Denmark and used widely in the Nordic region. It provides traffic statistics, visitor sessions, page popularity, referrer analysis, geolocation by country and city, screen and browser data, search keyword reports and conversion tracking. WebSTAT is positioned as a European, privacy oriented alternative to Google Analytics, with data stored on EU servers, configurable retention and an optional cookieless mode that relies on hashed and truncated IP addresses. It is offered through a freemium model targeting small and mid sized websites and e commerce sites. [Block WebSTAT until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Required - Documented cookies 4 - Third-party domains 4 - Servers Denmark (European Union), with European data centres Overview ## What does WebSTAT do? ## **What WebSTAT is** WebSTAT is one of the oldest European web analytics services, launched in 1999 and operated by a Danish company headquartered near Copenhagen. It targets website owners who want detailed traffic statistics with European hosting, no advertising network entanglements and a transparent pricing structure. The product covers core analytics such as visits, unique visitors, page views, bounce rate, average session duration, traffic sources, search keywords, geolocation, screen resolution and browsers. It also offers a basic e commerce module and integrations with content management systems through plugins. ## **What data and cookies WebSTAT sets** In its default configuration, WebSTAT loads a small JavaScript tracker on each page that creates a first party cookie (typically ws\_session and ws\_visitor) to recognise returning visitors over a configurable retention period. The tracker collects URL, referrer, user agent, screen size, language, country derived from the IP address, time on page and clicks on outbound links. The IP address can be truncated server side. A cookieless mode is available which relies on a daily salted hash of IP and user agent. ## **GDPR and ePrivacy implications** Article 5(3) of the ePrivacy Directive treats analytics cookies as non strictly necessary by default, which means the standard WebSTAT integration requires consent. WebSTAT may be deployed under the legitimate interest basis only if it is configured in cookieless, anonymous mode with IP truncation, short retention and no cross site profiling. Even then, an information notice in the privacy policy remains mandatory and visitors must be able to object. ## **Consent requirements** For the default WebSTAT integration with persistent cookies, ask for prior consent through your consent management platform. Block the tracker until consent is given, and remove cookies on withdrawal. In cookieless mode you can rely on legitimate interest, provided the data is aggregated, IP addresses are truncated and visitors can opt out from your privacy notice. ## **Data transfers** WebSTAT processes visitor data on Danish data centres and does not export raw analytics outside the EEA. There are no Schrems II transfer concerns in the standard configuration. Customers that enable optional connectors (Google Sheets, Slack, email gateways operated by US providers) introduce a controlled transfer that must be declared, contractually covered and risk assessed. ## **Practical compliance steps** Enable IP truncation, shorten the visitor cookie lifetime, choose cookieless mode where possible, sign the WebSTAT data processing agreement, integrate the tracker behind your consent management platform, document the processing in the record of processing activities, list WebSTAT in your cookie policy with cookie names and lifetimes, and review optional integrations that could trigger third country transfers. Compliance ## WebSTAT and the GDPR WebSTAT is classified as “Analytics”. On a site that targets European visitors, it must only load after the visitor consents, and it must be listed in your cookie policy. - Legal basis Consent (Art. 6(1)(a) GDPR) for the default analytics configuration; legitimate interest (Art. 6(1)(f) GDPR) is possible when WebSTAT is run in fully anonymous, cookieless mode with IP truncation - Risk level medium - Applicable regulations GDPR, ePrivacy Directive, Danish Data Protection Act, Schrems II case law ### Impact assessment (DPIA) A full DPIA is not usually required for WebSTAT thanks to EU only hosting and limited data scope, but a short analysis should cover IP address handling, the retention of visitor session histories, fingerprinting risk from screen and browser data, the cookieless mode and any optional third country integrations such as Google Sheets export or Slack alerts. ### Sample text for your banner > We measure traffic on our website with WebSTAT, a Danish analytics provider whose servers are located in the European Union. WebSTAT places cookies on your device to count returning visitors and aggregate usage statistics. We do not share this data with advertising networks. You can refuse these analytics cookies without affecting site functionality. Cookies and trackers ## What WebSTAT sets and contacts - Tracking method Client side JavaScript tracker plus first party cookies; optional server side log analysis - Server location Denmark (European Union), with European data centres - Cookieless mode available Yes ### Cookies set (4) | Name | Type | Duration | Purpose | | ----------- | ------------ | ------------------------ | ------------------------------------------------------------------------------------------------------------------------------------- | | ws\_visitor | first\_party | 13 months (configurable) | Long lived first party cookie used by WebSTAT to recognise returning visitors and aggregate unique visitor counts. | | ws\_session | first\_party | 30 minutes | Short lived first party cookie that ties page views to the current visitor session for bounce rate and session duration calculations. | | ws\_pref | preference | 1 year | Stores the visitor's consent preference for WebSTAT analytics so that the choice persists across page loads. | | ws\_geo | first\_party | session | Caches the country and city derived from the IP address for the duration of the visit to reduce repeated geolocation lookups. | ### Third-party domains contacted (4) - `webstat.com` - `webstat.dk` - `tracker.webstat.com` - `cdn.webstat.com` Questions ## Frequently asked questions about WebSTAT Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does WebSTAT set? By default WebSTAT sets two first party cookies: ws\_visitor, a long lived identifier used to recognise returning visitors and aggregate sessions, and ws\_session, a short lived cookie used to attach page views to the current visit. In cookieless mode no persistent identifier is stored, only a daily salted hash is computed server side. ### Is consent required to use WebSTAT? Yes for the default configuration. Persistent first party analytics cookies are considered non strictly necessary under Article 5(3) of the ePrivacy Directive and require prior opt in consent. Cookieless mode with IP truncation and short retention may rely on legitimate interest with an opt out, in line with several European DPA guidances. ### What is the legal basis for processing? Consent for the standard cookie based mode, legitimate interest only when WebSTAT runs in fully anonymous, cookieless mode with IP truncation, short retention and no cross site profiling. Document the chosen basis in your record of processing activities. ### Does WebSTAT transfer data outside the EU? No, not by default. WebSTAT is operated from Denmark and stores all visitor data within the EU. Transfers may occur only if you enable optional integrations such as Google Sheets export, Slack notifications or US based email gateways, in which case standard transfer mechanisms apply. ### Is a DPIA required for WebSTAT? Usually not, because data scope is limited and hosting is EU only. A short risk note is still recommended covering IP processing, session retention, fingerprinting from browser data and the use of any optional connectors. A full DPIA is only needed for high traffic deployments that combine WebSTAT with other identifying systems. ### How do we implement WebSTAT compliantly? Activate IP truncation, shorten the visitor cookie to 13 months at most, prefer cookieless mode when feature gaps allow it, sign the data processing agreement, integrate the script behind your CMP, document WebSTAT in your privacy notice and cookie policy, and avoid combining the data with personally identifying CRM data. ### What are the alternatives to WebSTAT? EU based alternatives include Matomo (self hosted or Matomo Cloud in Germany), Plausible (Germany), Fathom (Canada with EU option), Piwik PRO and Etracker (Germany). Google Analytics 4 remains popular but raises Schrems II concerns that WebSTAT customers usually want to avoid. ### How should we update the cookie policy? Add a section that names WebSTAT as the analytics provider, lists the ws\_visitor and ws\_session cookies with their purpose and lifetime, states whether IP truncation is enabled, mentions any third party connectors used, indicates the retention period, and provides an opt out link or instructions to manage consent. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [ChurnZero](https://www.flowconsent.com/en/services/analytics/churnzero) [ChurnZero is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. ChurnZero supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, ChurnZero enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/churnzero) [Analytics](https://www.flowconsent.com/en/services/analytics/churnzero) · ### [Pubperf](https://www.flowconsent.com/en/services/analytics/pubperf) [Pubperf is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Pubperf offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Pubperf empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/pubperf) [Analytics](https://www.flowconsent.com/en/services/analytics/pubperf) · ### [Amazon CloudWatch RUM](https://www.flowconsent.com/en/services/analytics/amazon-cloudwatch-rum) [Amazon CloudWatch RUM is a marketing platform that equips businesses with tools to amplify their digital presence and drive customer acquisition. It supports audience segmentation, campaign automation, and cross-channel engagement. Amazon CloudWatch RUM provides real-time analytics and reporting dashboards for performance measurement and strategy optimization. By combining data intelligence with marketing execution, Amazon CloudWatch RUM helps deliver the right message to the right audience at the right time.](https://www.flowconsent.com/en/services/analytics/amazon-cloudwatch-rum) [Analytics](https://www.flowconsent.com/en/services/analytics/amazon-cloudwatch-rum) · ### [Mediahawk](https://www.flowconsent.com/en/services/analytics/mediahawk) [Mediahawk is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Mediahawk supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Mediahawk enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/mediahawk) [Analytics](https://www.flowconsent.com/en/services/analytics/mediahawk) · ### [51Degrees](https://www.flowconsent.com/en/services/analytics/52degrees) [52Degrees is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. 52Degrees offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, 52Degrees empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/52degrees) [Analytics](https://www.flowconsent.com/en/services/analytics/52degrees) · ### [WatchThemLive](https://www.flowconsent.com/en/services/analytics/watchthem) [WatchThem is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. WatchThem offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, WatchThem empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/watchthem) [Analytics](https://www.flowconsent.com/en/services/analytics/watchthem) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)