Does your website use third-party services? Get GDPR compliant in minutes.
Try FlowConsentFree plan · 10-min setup
XZero Analytics is a privacy focused, cookieless web analytics tool that measures traffic and engagement without setting cookies or building persistent visitor profiles. It collects aggregated metrics such as page views, referrers and device type, and is designed to be processed within the European Union. Because it avoids cookies and persistent identifiers, it can often be used without prior consent, although you should confirm its configuration.
XZero Analytics is a lightweight, privacy first web analytics service that reports how many people visit a website and how they navigate it, without the tracking model used by traditional analytics. It loads a small JavaScript snippet that records visits in aggregate rather than identifying individuals. It targets organisations that want useful metrics with a low privacy footprint.
XZero Analytics is designed to be cookieless: it does not set cookies or assign persistent identifiers to visitors. It collects aggregated, non identifying signals such as page URL, referrer, approximate country, browser and device type. Where an IP address is processed, it is typically truncated or hashed and not stored in a way that singles out a person.
Because XZero Analytics does not store or read information on the user device, the cookie consent rule in Article 5(3) of the ePrivacy Directive generally does not apply. Any limited processing of technical data can rest on the legitimate interest of measuring your audience, provided it remains aggregated and proportionate. You must still inform visitors in your privacy notice.
Get GDPR compliant in 10 minutes
Free plan available · No credit card required
In its standard cookieless mode, XZero Analytics can usually run without prior consent, which is one of its main advantages. You should still verify that the configuration does not enable any feature that sets identifiers or shares data, and document why consent is not required. If you add such features, treat them like other tracking and obtain consent.
XZero Analytics is designed to process data within the European Union, so a standard deployment should not involve a transfer to a third country. Confirm the data region offered by your plan and, if any processing occurs outside the EEA, apply the appropriate Chapter V safeguards and document them.
Describe XZero Analytics in your privacy notice as a cookieless, privacy focused analytics tool, state your legal basis and confirm that no cookies are set. Verify the configuration, keep the data within the EU where possible, and review the setup if the vendor introduces features that change the privacy profile. A cookie banner entry is not needed while it remains genuinely cookieless.
Websites using XZero Analytics must obtain user consent under GDPR regulations.
DPIA considerations
XZero Analytics is designed to be cookieless and does not assign persistent identifiers. Key DPIA considerations: (1) the absence of cookies means the rule in Article 5(3) ePrivacy generally does not apply; (2) the data is aggregated and non identifying; (3) the IP address, where processed, is truncated or hashed; (4) processing is designed to stay in the EU. A full DPIA is generally not required for this low privacy footprint tool.
Sample consent text
We use XZero Analytics, a cookieless analytics tool, to measure our audience in aggregate. It does not set cookies or identify visitors individually, and data is processed in the European Union. You can find more details in our privacy notice.
Third-party domains contacted
xzeroanalytics.comcdn.xzeroanalytics.comXZero Analytics collects user analytics data — you legally need a consent banner. Try FlowConsent free.
XZero Analytics is designed to be cookieless and does not set cookies or assign persistent identifiers to visitors. It records aggregated, non identifying metrics instead. This is the main reason it can often be used without a cookie banner, although you should verify the configuration.
Usually not, in its standard cookieless mode. Because it does not store or read information on the device, the consent rule in Article 5(3) of the ePrivacy Directive generally does not apply, so prior consent is not required. If you enable features that set identifiers, you would then need consent.
A standard, cookieless deployment can rely on the legitimate interest of measuring your audience under Article 6(1)(f) GDPR, because the data is aggregated and the privacy impact is low. You should still carry out a brief balancing test and inform visitors in your privacy notice.
In a standard EU deployment, XZero Analytics does not transfer personal data to a third country. Confirm the data region in your plan; if any processing occurs outside the EEA, apply Standard Contractual Clauses or another Chapter V safeguard and document the transfer.
A full DPIA is usually not required for a cookieless, aggregated analytics tool with a low privacy footprint. A short assessment confirming that no persistent identifiers are used and that data stays in the EU is generally enough to demonstrate accountability.
Add the XZero Analytics snippet, confirm it runs in cookieless mode and that no identifiers are set, and describe it in your privacy notice with your legal basis. Because it is genuinely cookieless, it does not need to be gated behind a consent banner, but document your reasoning.
Other privacy focused, cookieless analytics tools include Plausible, Fathom, Simple Analytics and Matomo in its cookieless mode. They share the same advantage of avoiding consent for basic measurement, so the choice often comes down to features, pricing and where the data is hosted.
You do not need a cookie policy entry while XZero Analytics is genuinely cookieless, but you should describe it in your privacy notice as an aggregated, cookieless analytics tool, state the legal basis and confirm the EU data location. Update the notice if the configuration changes.