Basically every website on the Internet uses cookies to preserve your session, to show ads, track you across the web and much more. But, there's a revolution going on. More and more websites are getting rid of it. So, let's join this movement.

Using cookies is helpful to save a user's session or to save settings like a dark mode toggle, for example. There are alternatives to this. You can use local storage, session storage or indexeddb.

Since the EU cookie law, every website using cookies is required to ask consent before saving cookies. Many sites fail to comply to this law. They either just completely ignore it by not asking for consent or they show a cookie wall, which, in fact, is illegal. A user must have a free choice to enter the website without cookies being used and cookie walls block you from viewing content if you don't consent. Note that a cookie wall is different than a cookie notice/banner.

Cookie walls and notices are just straight up garbage, time and resource wasting and annoying. They are just awful. For example. one of the worst ones I ever encountered are from the NPO (Dutch Public Broadcaster). Their notice is huge and requires you to select an option because there's no default option selected.

There's just no upside on cookie notices, besides not having cookies when manually deselecting all boxes. When deselecting the cookies you have to make sure you don't click the Agree to all cookies button. Which is a sneaky trick some cookie notices use. The primary button is the one who agrees to all and the secondary button agrees to the ones you just wasted an entire minute on deselecting.

One of the main concerns of website developers and marketeers are analytics. Maybe it's your job, or you just want to see how many people are looking at the pictures of your face on the about me page of your personal website. No worries, analytics are still possible. In fact, this website is running analytics right now without requiring your consent since it is fully anonymous and is not using a single cookie.

Matomo is a free open-source analytics platform that markets itself as the best free Google Analytics alternative right now. And I agree, it is really similar and is free to use. It is still possible to purchase premium add ons like Heat map functionality, but those are optional and not even included in Google Analytics either.

Installing Matomo is a piece of cake. You can either just upload the files yourself by downloading the archive from the website or use the 1-click installer from Ploi.io (referral link).

When accessing Matomo for the first time, you will be prompted with the installer to configure initial settings. Follow the steps on your screen and you're good to go.

In order to make the entire Matomo instance comply with the GDPR, we're going to configure some system wide settings.

Click the gear icon in the navigation menu and then go to Privacy → Anonymise data in the sidebar. Take a look at the following settings:

Let's walk through these settings so we thoroughly understand them.

Anonymise Visitor's IP addresses
Anonymising IP addresses is a good first step to preserve a visitor's privacy. IP addresses are seen as personal information under the GDPR and thus you require the user to agree on saving those. However, only saving 2 or 1 bytes of the IP address is completely fine because it is not possible to track the user.

There is one downside to this: geolocation accuracy. Matomo has to guess where the user comes from by using its IP address. However, it is accurate enough for most of us.

Anonymise order ID
If you're running a e-commerce website, enabling this option makes sure the order ID is not linked to a person. Otherwise it is seen as a personal information under the GDPR.

Force tracking without cookies
Finally 🎉 there we are. Going cookie-less. It makes sure Matomo does not save cookies and will ignore tracking cookies entirely. Great, isn't it?

So you have now installed and configured Matomo and you're ready to configure your first website. When prompted for a Website or an Intranet website, pick Website. You will now see a form asking for some details. Enter the URL and name and you're good to go. If you run an e-commerce website or want to configure IP whitelists, configure those too. Though most people are good with just the name and URLs.

Now, let's head over to the tracking code. This is what the default tracking code looks like:

<script type="text/javascript">
  var _paq = window._paq = window._paq || [];
  /* tracker methods like "setCustomDimension" should be called before "trackPageView" */
  _paq.push(['trackPageView']);
  _paq.push(['enableLinkTracking']);
  (function() {
    var u="MATOMO_URL";
    _paq.push(['setTrackerUrl', u+'matomo.php']);
    _paq.push(['setSiteId', 'MATOMO_SITE_ID']);
    var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
    g.type='text/javascript'; g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
  })();
</script>

Now, in order to make the tracking script honour DoNotTrack settings in the visitor's browser and disable cookies, add the following above properties to the tracking code snippet, just above the trackPageView property:

  _paq.push(["setDoNotTrack", true]);
  _paq.push(["disableCookies"]);

Congratulations, your website now has working analytics without using cookies. Really, the results are small, but great. The biggest upside of this is you don't have to implement a cookie notice at all. It saves you and your visitor's a shitload of time.

Check out this tweet of mine where I posted my results:

Good luck with your cookie-less website. I hope you liked this blog since it's the first real blog post I wrote besides my introduction.

If you have got any questions, feel free to reach out to me on Twitter 🙌

Well, let's finally get rid of those unnecessary cookies. What about analytics? No worries. This post got you covered.

Where do we even start? Hi! My name is Bjarn, born in The Netherlands in 1998 and nope... I haven't smoked weed ever since I was born :-)

I am not really a person who likes to write about himself. But let's do a very quick introduction!

My work experiences vary... quite a lot. I have been running my own company Realify since July 2016 where I create mobile and web applications. Since I was only 17 years old back then, I felt like I needed some more experience, so I applied to a full-time job too!

In 2018 I started as the first Android developer at a start-up creating a meet-up like social media platform and it was my responsibility to set up the entire app from scratch. I learned a lot, as in, a LOT.

Later next year, I got bored and wanted to work at a bigger company with a larger team. So a friend of mine recommended me to his boss, and I got into a Magento agency as junior back-end developer. I eventually grew to medior and then decided to quit. I... eh... didn't really liked Magento. Maybe I will write about that in the future, no promises made here! ;-)

Earlier this year I started at a company called Lightbase as React Developer, and I love it. I have had the most fun ever since I started doing full-time jobs. I've learned more in the last 5 months than in the last 3 years alone. I am planning to stick around here for quite a while.

Next to my full-time job I create mobile apps and websites with my own company still. I had to take a break for a couple of months from that, of which I will write an article about later. Mental health is important, people!

Since my main profession is React and native Android development, my blogposts will mostly be about those. I will be sharing my latest findings, tips and how-to's on these subjects.

Interested? Subscribe to my newsletter to be one of the first people to read it!

It is nice meeting you! My blog posts will have a unique Bjarn-touch. Easy to read (at least I hope) and some inside jokes here and there, 'cause that's me.

Yes, I know. It is overused. But... I think it is nice to introduce myself on my new personal blog! So, let me introduce myself real quick.

Going cookie-less with Matomo

Blog.