Clickport Blog

Thoughts on web analytics, privacy, and building a Google Analytics alternative. From the founder of Clickport.


A screenshot of the Google Analytics 4 Explorations report builder in light theme, showing the Variables panel with Segments, Dimensions and Metrics lists, and the Tab Settings panel with empty Rows, Columns, Values and Filters drop zones over a blank canvas. Three red editorial annotations overlay the canvas. One pointing at the empty dimension and metric drop zones reads 'All this just to count your top pages.' A second pointing at the left report menu tree reads 'Where is the simple report?' A third banner across the top reads 'GA4 makes a basic question take 6+ clicks. It shouldn't.'
GA Problems Last updated: 14 Jun 2026

GA4 Is Too Complicated: Why You're Not the Problem

GA4 is too complicated, and it isn't your fault. The basics are buried several menus deep behind events, renamed metrics, and a report builder, and reading your own numbers even has its own certification exam. Here is the click-by-click proof, and what those answers look like on one screen instead.

A printed invoice on a dark surface, headed 'INVOICE: Google Analytics, Standard plan'. The software line reads $0.00. Below it are five line items labelled Setup and learning time, Cookie consent banner, Compliance exposure, Lost and blurred data, and GA360 paywall, each with the amount column reading 'see attached' instead of a number. The bold TOTAL row at the bottom reads 'more than you think' where the figure should be. A red 'PAST DUE' style stamp sits across the corner.
GA Problems Last updated: 13 Jun 2026

The Hidden Cost of Free Google Analytics

Google Analytics is free to install, not free to use. Here is the real invoice a normal website pays for free GA4: setup and learning hours, a cookie banner that deletes your own visitors, live compliance exposure, data that is blocked, sampled, hidden and expired on a timer, and a $50,000 ceiling the moment you need depth. Itemized, sourced, then zeroed.

A Google Analytics 4 Traffic acquisition report in the light theme with the standard GA4 chrome: left navigation rail, top property bar, and a Session default channel group table. The table lists rows for Organic Search, Direct, Referral, Paid Search, and Organic Social, with a new AI Assistants row inserted among them. Four red callout rectangles overlay the canvas: one around the AI Assistants row reading 'new May 2026: medium = ai-assistant', one around the Direct row reading 'no-referrer AI hides here', one around the Referral row reading 'Perplexity still lands here', and one around the Organic Search row reading 'Google AI Overviews bundled in here, invisible'.
GA Problems Last updated: 12 Jun 2026

GA4 Finally Added an AI Traffic Channel. Here's What It Still Can't See.

GA4 just added a native AI Assistants channel that auto-tags ChatGPT and Gemini with no setup. It sounds like the AI attribution problem is solved. It is not. The channel only fires on a referrer it recognizes, so it still misses the no-referrer visit, Perplexity, and Google's own AI Overviews.

A pixel-perfect screenshot of the Google Analytics 4 Key events report in the light theme, with the full GA4 chrome: the left navigation showing Engagement expanded and Key events highlighted, the top search bar, and a Last 28 days date selector. The data table has two columns, Key event and Event count, with rows form_submit 312, generate_lead 47, sign_up 19, file_download 8, and contact 5, and the form_submit row highlighted in pale blue. Red editorial annotations are overlaid: a banner across the top reads BOT FORM FILLS ARE COUNTING AS CONVERSIONS; a red callout with an arrow to the 312 count reads 'Every bot that submits your form is counted here as a Key Event'; and a red callout with an arrow to the form_submit row reads 'You marked form_submit as a Key Event, so GA4 counts it as a conversion. No setting un-counts it.'
GA Problems Last updated: 11 Jun 2026

Bot Form Fills Are Counting as Conversions in GA4. Here's Why You Can't Filter Them Out.

A spam bot fills your contact form, fires form_submit, and because you marked form_submit as a Key Event, GA4 writes a permanent fake conversion into your count. Then that junk conversion trains Google Ads to chase more of the same. Here's why no GA4 setting un-counts it, and what scores the visitor before it can count.

A screenshot of a Google Analytics 4 Traffic acquisition report with three red editorial annotations overlaid. A banner across the top reads 'GA4 ONLY EVER UNDERCOUNTS REAL PEOPLE. Typically you see 70 to 90 percent of your actual traffic.' An annotation pointing at the Direct channel row reads 'Direct is where the bots GA4 cannot filter and the visitors it lost pile up. About 20 percent of traffic is bots, and 57 percent slip past GA4.' A third annotation reads 'Switch on a cookie consent banner and GA4 can lose up to 55.6 percent of real visitors. No setting fixes this.'
GA Problems Last updated: 8 Jun 2026

Is GA4 Accurate? What You Can Fix and What You Can't

Is GA4 accurate? No, and it only ever undercounts. I went through the data: GA4 typically misses 10 to 30 percent of your traffic, and up to 55 percent once a consent banner is on the page. Here is the split between the accuracy problems you can fix yourself and the ones baked so deep into GA4 that no setting will save you.

A screenshot of the Clickport dashboard Journeys panel. The top half is a four-step conversion funnel bar chart: Visited pricing at 100 percent with 4,200 visitors, Started signup at 57.81 percent with 2,428 visitors, Created account at 21.90 percent with 920 visitors, and Upgraded plan at 11.60 percent with 487 visitors, with dashed drop-off areas above each shorter bar. The bottom half lists the most common multi-step paths as rows of page chips joined by arrows: slash to slash pricing to slash signup at 6.3 percent over 3 steps; slash blog google analytics alternative to slash features to slash pricing at 3.8 percent; and slash to slash features to slash docs installation at 5.4 percent. A caption reads Top 3 paths out of 8,200 multi-step sessions.
GA Problems Last updated: 8 Jun 2026

How to Track User Journeys on Your Website (2026)

Your visitors don't move through your site in a straight line. Here's how to track real user journeys, find the paths that lead to signups, and measure them with flows and funnels, all without a cookie banner or GA4's Explore-section setup.

A screenshot of a Google Ads Campaigns report with three red editorial annotations overlaid. Two campaigns show over a thousand clicks each and zero conversions. A banner across the top reads 'CLICKS BUT NO CONVERSIONS. Before you rebuild your landing page, find out how many of these clicks were even human.' An annotation pointing at the zero in the Conversions column reads 'GA4 cannot show you the bot-versus-human split, so you cannot tell a broken funnel from a bot-diluted one.' A third annotation reads 'Paid clicks cost money. That is exactly why bots target them and ignore your organic visits.'
GA Problems Last updated: 31 May 2026

Clicks But No Conversions: Is It Bots or Your Funnel?

Clicks but no conversions? Most of the time it really is your funnel, only about 8.5 percent of paid clicks are invalid, so roughly 11 in 12 are human. The problem is you cannot prove that in GA4, because it will not show you how many of those clicks were people. Here is how to tell a broken funnel from a bot-diluted one, and the order to check things in.

A side-by-side screenshot of a WooCommerce Orders admin screen on the left and a Google Analytics 4 ecommerce purchases report on the right for the same week, with three editorial annotations marked on top. WooCommerce shows 50 paid orders worth EUR 6,480. GA4 shows 32 purchases worth EUR 4,150. Order rows visible on the WooCommerce side include #4812 paid by PayPal, #4811 paid by Klarna, #4809 paid by card, #4808 paid by PayPal. A caption at the top reads 'Same store. Same week. WooCommerce counted 50 paid orders. GA4 saw 32. The 18 missing orders all went through a payment redirect or a blocked browser.' One annotation reads '50 vs 32 orders, an 18-order gap. The order is paid and shipped. GA4 never saw it.' Another reads 'The purchase event fires once, in the browser, on the thank-you page. Miss that page and the sale is invisible.' A third reads 'Across 75 audited stores, 100 percent that ran GA4 tracked purchases from the browser only, with no server-side fallback.'
Ecommerce Analytics Last updated: 31 May 2026

WooCommerce Sales Not Tracking in GA4? We Audited 75 Stores

WooCommerce orders go missing in GA4 because the purchase event fires once, in the browser, on a page many buyers never see. I audited 75 live WooCommerce stores: every one running GA4 or Tag Manager tracked purchases client-side only, with no server-side fallback. Here is why orders vanish, why server-side GTM doesn't fix it, and the one hook that does.

A screenshot of the ChatGPT web app answering 'What are the best CRMs for startups?' in a conversation under the account David Karpik (Plus). The numbered response lists 1. HubSpot CRM, 2. Pipedrive, 3. Salesforce Starter, 4. Zoho CRM, 5. Close, each with a one-line description. An annotation reads 'Ask ChatGPT for the best CRMs and you get a clean ranked list. It looks authoritative and definitive.' A second annotation reads 'SparkToro tested 2,961 queries across 600 volunteers. Less than a 1 in 100 chance ChatGPT gives the same list twice. Ask again and this ranking changes.'
AI Traffic Last updated: 28 May 2026

The New Vanity Metrics: Why AI Visibility Scores Are the Klout of 2026

A growing industry sells AI visibility scores built on synthetic prompts, panel estimates, and proprietary formulas. SparkToro found less than a 1% chance AI gives the same brand list twice. Here's why these scores buy you nothing, and what to measure instead.

Google Analytics 4 report showing 48,200 views beside a 14-second average engagement time
GA Problems Last updated: 28 May 2026

Beyond Pageviews: The Engagement Metrics That Actually Matter

53% of visitors bounce after a single page. Average engaged time: 28 seconds. Pageviews tell you someone arrived. Engagement data tells you whether you answered their question. Here's how to measure what actually matters.

Cloudflare Web Analytics dashboard with a sampled-data banner and a 15-row top-pages cap
Comparisons Last updated: 28 May 2026

Clickport vs Cloudflare Web Analytics in 2026

Cloudflare Web Analytics is free, cookieless, and one click away if you're already on Cloudflare. It also samples your data, shows the top 15 of everything and nothing else, and counts every entry to your site as a new visitor.

Google Analytics 4 export menu showing one-report-at-a-time PDF and CSV downloads
GA Problems Last updated: 28 May 2026

How to Send Your Client an Analytics Report in 60 Seconds

Manual client reports take 3-5 hours each in GA4. There's a faster way: one click, a 3-page PDF, and your client has everything they need.

A screenshot of the Google Analytics 4 Admin Account Details page showing the Data Sharing Settings section. Four checkboxes are all checked: Google products and services, Modeling contributions and business insights, Technical support, and Account specialists, each with a description of how Google may use the data. An annotation points at the first checkbox and reads 'This checkbox alone breaks Article 88a. Your analytics data improves Google products. That is not data held solely for your own use.' A second annotation reads 'Article 88a requires the controller to keep audience-measurement data solely for its own use. GA4 shares it with Google products, modeling, support staff, and sales specialists by default.' A third annotation reads 'There is no configuration of this page that makes GA4 qualify. The data is processed on Google infrastructure either way.'
GA Legal Status Last updated: 28 May 2026

The EU Digital Omnibus Act: What It Means for Your Analytics (and Whether GA4 Qualifies)

The EU is rewriting the cookie rules. A new consent exemption for analytics could eliminate cookie banners for qualifying tools. Google Analytics doesn't qualify. Here's everything you need to know about Article 88a and what it means for your website.

Meta Ads Manager showing 3,500 link clicks but only 2,010 landing page views and no invalid-clicks column
Bot Traffic Last updated: 28 May 2026

Facebook Ads Bot Traffic: Why Your Conversion Rate Is a Lie

652 link clicks. 47 real sessions. Zero sales. That Reddit post got 125+ upvotes because hundreds of advertisers recognized the pattern. Meta earned $16 billion from scam-adjacent ads in 2024. Their terms say they are 'not responsible for click fraud.' Your analytics is the only thing that can show you the truth.

A screenshot of the Google Analytics 4 Admin Data Retention page. The Event data retention dropdown is open, showing 2 months currently selected (with a checkmark) and 14 months as the other option. A helper line reads Applies to Explorations only, Standard reports are unaffected, and a Reset user data on new activity toggle is on. An annotation reads 'The default is 2 months. Not 14. If you never opened this screen, GA4 has deleted your Exploration data every 60 days since setup.' A second annotation reads '14 months is the maximum on free GA4. Changing it is not retroactive. The window starts the day you change it.' A third annotation reads 'This only affects Explorations: funnels, paths, cohorts, segments. Standard reports keep aggregated data regardless.'
GA Problems Last updated: 28 May 2026

Your GA4 Data Disappears After 14 Months. Here's What Google Won't Tell You.

GA4 deletes your event-level data after 14 months. The default is 2 months. The official workaround requires SQL skills and a Google Cloud account. Every other analytics tool keeps your data forever.

A screenshot of the Google Analytics 4 Realtime overview report. A card reads USERS IN LAST 30 MINUTES with the number 28 and a per-minute bar chart. Cards below show Users by Country (United States 11, Germany 6, United Kingdom 4, France 3, Canada 2), Views by Page title, and Event count by Event name (page_view 64, scroll 22, session_start 28, user_engagement 18). An annotation reads 'Real-time shows 28 users right now. Your tag IS firing. The tracking works.' A second annotation reads 'But Traffic Acquisition and Engagement reports stay empty for 24 to 48 hours. That is batch processing, not a bug. An empty standard report with a working real-time view is the single most common false alarm.' A third annotation reads 'If real-time is ALSO empty, compare the measurement ID character by character. One wrong character sends data to a different property.'
GA Problems Last updated: 28 May 2026

GA4 Not Showing Data? Every Fix (and Why It Keeps Happening)

Your GA4 dashboard is empty. Here's how to fix it, why it happens, and why some of the data loss is permanent.

Google Analytics 4 Landing page report split by source, the same page showing 38%, 87% and 22% bounce rates
GA Problems Last updated: 28 May 2026

How to analyze landing pages: the four signals beyond bounce rate

Most landing-page reports lead with bounce rate. I looked at 1,007 landing pages across our customer sites: 1 in 5 high-bounce pages had visitors who actually scrolled and stayed. Here are the four signals to read first.

Chrome DevTools Network panel showing Google's gtag.js at 139 KB next to a 2.8 KB privacy-first tracker
WordPress Analytics Last updated: 28 May 2026

Lightweight WordPress Analytics: I Measured Them All

I downloaded eight WordPress analytics tools and weighed every byte. The smallest tracker belongs to Plausible. The heaviest plugin is 27.8 MB. Here is what 'lightweight' actually means once you measure all four dimensions.

A screenshot of the Google Analytics 4 Landing page report over the last 28 days. The data table is sorted by Sessions: / at 8,412, then (not set) at 3,847 sessions (red-tinted row) with only 488 engaged sessions and a 0m 09s average engagement time, then real pages /blog/getting-started, /pricing, /features, /blog/comparison-guide, /contact. An annotation reads '(not set) is not a page. It is sessions that started with no page_view event. GA4 has no landing page to show.' A second annotation reads '18% of all sessions. A healthy property stays under 5%. Above 20% means GTM tag-firing order or consent timing is broken.' A third annotation reads '9-second average engagement. These are mostly session-timeout re-engagements and consent-delayed page loads, not real landings.'
GA Problems Last updated: 28 May 2026

(Not Set) in GA4: What It Means and How to Fix It

Every GA4 property has (not set) in its reports. Some of it is fixable. Some of it is architectural. Here's how to tell which is which.

Google Analytics 4 install instructions screen with the gtag.js snippet and Tag Manager setup
GA Problems Last updated: 28 May 2026

How to Switch from GA4 to Clickport Analytics

A practical guide to switching from Google Analytics 4 to Clickport. No fluff, no stats dump. Just the step-by-step: how to set up, where to find your data, and how every GA4 feature maps to Clickport.

Conceptual illustration of a lone website behind rows of tollbooth gates representing online middlemen
GA Problems Last updated: 28 May 2026

The Internet's Broken Promise

The internet was supposed to eliminate the middleman. Instead, it created the most powerful middlemen in human history.

A screenshot of the Google Tag Manager Trigger Configuration screen editing a trigger named 404 Page View. The trigger type is Page View, set to fire on Some Page Views, with the condition JS - Page Title contains 404. A note reads that JS - Page Title is a custom JavaScript variable reading document.title. An annotation reads 'The recipe every GA4 tutorial recommends. Fire when the page title contains 404 or not found.' A second annotation reads 'We tested this trigger against 87 popular sites. It missed 39 percent. Soft 404s return HTTP 200, non-English titles do not contain the word 404, and empty titles match nothing.' A third annotation reads 'Title-based matching only. The trigger never sees the HTTP status code, so it cannot tell a real 404 from a normal page.'
GA Problems Last updated: 28 May 2026

Track 404 Pages in GA4: Why 39% Get Missed Silently

Every GA4 tutorial recommends the same Tag Manager trigger: fire when the page title contains '404' or 'not found.' We tested that recipe against 87 popular websites. It missed 39%. Here's what's broken, and what actually works.

Google Analytics 4 Traffic acquisition report with a swollen Direct channel and no AI Search channel
AI Traffic Last updated: 28 May 2026

How to Track AI Search Traffic (ChatGPT, Perplexity, Claude) in 2026

AI referral traffic converts at 5x the rate of organic search. But 70.6% of it lands as 'Direct' in your analytics. On EU sites with consent banners, only 10-15% of AI traffic is correctly attributed. Your fastest-growing traffic source is also your least visible one.

A screenshot of Visual Studio Code with the file assignment.js open in a tab. The editor shows the getVariant function from line 1 to line 18: a comment '// 20-line A/B test variant assignment', the function definition that uses localStorage.getItem and localStorage.setItem, a try/catch block handling Safari private browsing, and a final call site 'var v = getVariant("hero_cta", ["control", "treatment"]);'. The left file tree shows assignment.js highlighted with sibling files index.html, styles.css, tracking.js, package.json, README.md. An annotation reads 'The entire A/B testing engine. 15 lines of vanilla JavaScript. No SDK, no build step, no vendor account.' A second annotation reads 'Handles Safari private browsing where localStorage.setItem throws SecurityError. Visitor gets a random variant per page load. Rounding error over a 14-day test.' A third annotation reads 'One function call. Returns control or treatment. Persisted to localStorage for return visits.'
GA Problems Last updated: 27 May 2026

How to A/B Test Your Website Without Paying for Tools

Google Optimize is dead. The replacements cost $299-$113,000/year. But a simple A/B test is just 20 lines of JavaScript and an analytics tool that tracks custom events. Here's the full implementation, the statistics you need, and how to read the results.

A screenshot of the Google Analytics 4 Attribution settings page. The Reporting attribution model dropdown is open and shows only two options: 'Data-driven (default)' selected and 'Last click'. A subline reads 'First-click, Linear, Time-decay, and Position-based attribution were retired in September 2023.' A yellow info card warns about low-volume fallback to last-click logic. Two lookback dropdowns show 30 days (acquisition events) and 90 days (all others) with their respective maximums. An annotation reads '2 models left. Google retired First-click, Linear, Time-decay, and Position-based in September 2023.' A second annotation reads 'Data-driven silently falls back to last-click when conversion volume is too low. Most small sites are running on last-click while thinking they have AI attribution.' A third annotation reads 'Lookback capped at 90 days. Any touchpoint older than 90 days is excluded entirely. B2B awareness touchpoints disappear from the model.'
GA Problems Last updated: 27 May 2026

Attribution Modeling Explained: Every Model, The Math, and What Actually Works in 2026

GA4 removed 4 of its 6 attribution models, and the remaining 'data-driven' model is a black box that silently falls back to last-click. Every model explained with actual math, plus what works in a privacy-first world.

A screenshot of the Google Analytics 4 Pages and screens standard report with a yellow Data thresholding applied warning banner and four red editorial annotations. The data table shows 5 page paths visible (/, /blog, /pricing, /about, and a red-dashed-bordered '(other)' row with 18,492 views) followed by a footer reading '5 of 1,247 page paths shown. 1,242 page paths grouped into (other) due to data thresholding.' One annotation reads 'GA4 hides your data when traffic is low.' A second reads '1,242 of your 1,247 pages collapsed into one row. You cannot see which pages got the 18,492 views.' A third reads '14-month retention cap. Want year-over-year? Pay for BigQuery.' A footnote reads '81% of GA4 setups contain errors that compromise data accuracy. SR Analytics audit, 200+ properties.'
GA Problems Last updated: 27 May 2026

Best Google Analytics Alternatives in 2026: 15 Compared

Every 'best GA alternatives' article is written by an analytics company that ranks itself #1. This one is too. But I'll tell you when GA4 is actually the right choice, and when another tool is a better fit than mine.

A screenshot of a Stack Overflow question page titled 'How do I parse JSON from a string in JavaScript?' with the top-voted answer's code block visible and a Copy code button in the upper-right corner of the code block, with two red editorial annotations. The code block contains a JSON.parse() example. The answer card shows 4,217 upvotes and a green accepted-answer checkmark. The answer is attributed to user ParsleyDev, answered Aug 12, 2018 at 9:42. One annotation reads 'Stack Overflow built this button after their 2021 internal study found 25% of question-page visitors copy something within 5 minutes.' A second reads 'Highest-intent engagement signal on the page. Visible to Stack Overflow's analytics. Invisible to almost every other analytics tool.' A footnote reads 'Stack Overflow's 2021 internal analysis. Reported in their developer-survey methodology notes.'
GA Problems Last updated: 27 May 2026

Content Engagement Metrics: The Signals That Prove Visitors Actually Read Your Content

On Stack Overflow, 25% of visitors copy something within five minutes. On most sites, nobody tracks this. The result: a massive blind spot between 'someone visited' and 'someone found something worth keeping.'

A screenshot of the Google Analytics 4 Reports > Acquisition > Traffic acquisition page with the Direct row red-dashed-bordered showing collapsed engagement metrics, with three red editorial annotations. The bar chart above the table shows 30 days of session counts with a visible mid-range spike. The data table lists 7 channel groups with Direct dominating at 38,247 sessions (66.2% of all sessions), 0m 14s avg engagement time, 1.14 engaged sessions per user, 65.0% bounce rate, 142 conversions, collapsed against healthier channels (Organic Search 1m 34s, Email 2m 11s, Referral 1m 12s). One annotation reads '65% bounce, 0:14 average duration. Engagement collapses against every other channel.' A second reads 'The spike that brought you here. The question is what's inside it.' A third reads 'Direct is a residual bucket, not a source. 66.2% of sessions classified by absence of attribution.' A footnote reads 'GA4 classifies a session as Direct when no Referer header, no UTM parameters, and no auto-tagged ad click identifier are present at session_start.'
Bot Traffic Last updated: 27 May 2026

Sudden Spike in Direct Traffic: Is It Bots? (2026 Study)

On one of the biggest sites we monitor, 76% of sessions show as Direct, even after ingestion-layer bot filtering. Most of what ends up there is bots, dark social, or referrer loss. Here is how to tell which one is hitting you.

A screenshot of the WordPress admin with the MonsterInsights plugin open at Reports > Forms. Seven of eight report tabs (Traffic, Publishers, Search Console, Real-Time, eCommerce, Forms, Dimensions) carry a PRO badge; only Overview is unlocked. A centered upgrade modal reads 'Forms Tracking Requires MonsterInsights Pro' with a green 'Upgrade to Pro from $199.50/year' button and 'Annual billing only. Renews at $399/year.' below it. An annotation reads '7 of 8 report tabs paywalled. Overview is the only free one.' A second annotation reads 'MonsterInsights Lite has 3 million installs. Most users hit this paywall instead of seeing their own data.' A third annotation reads 'Your data already lives in GA4. This plugin only displays it. Uninstall the plugin, your data stays.'
WordPress Analytics Last updated: 27 May 2026

Do You Need MonsterInsights? Probably Not

MonsterInsights has 3 million installs. Most of them don't need it. Here's what it actually does, what it costs after year one, and what GA4 already handles for free.

An editorial reconstruction of a CIPA demand letter on Coastal Privacy Litigation Group LLP letterhead, addressed VIA U.S. CERTIFIED MAIL to a redacted San Francisco company, with three red editorial annotations. The Re line cites 'Notice of Violation of the California Invasion of Privacy Act, Cal. Penal Code §631 and §638.51.' The letter is signed by Sarah J. Whitman, Esq., California State Bar No. 287654, and dated May 14, 2026. The body paragraphs name Google Analytics, Meta Pixel, and Hotjar session-replay code as the intercepting technologies and demand $25,000.00 settlement within thirty (30) days. A footer reads CONFIDENTIAL SETTLEMENT COMMUNICATION - PROTECTED UNDER CAL. EVID. CODE §1152. One annotation reads 'The demand amount. $15K to $40K is the typical range, calibrated to be cheaper than fighting it.' A second reads 'Short deadline by design. Decisions made in panic tend to be expensive.' A third reads 'Same 1967 phone-tapping statute, two theories. Wiretapping for content. Pen register for metadata.'
GA Legal Status Last updated: 27 May 2026

Is Your Analytics Script a Wiretap Under California Law?

2,341 lawsuits filed. $5,000 per violation. No proof of actual harm required. A 1967 phone-tapping law is now the biggest legal threat to anyone running Google Analytics, Meta Pixel, or a chatbot on their website. Here's what you need to know.

A screenshot of a generic Danish news site homepage with a cookie consent banner modal overlay, with five red editorial annotations. The cookie banner has three buttons rendered as a traffic-light pattern: a small grey 'Tilpas' button, a medium red 'Kun nødvendige' button, and a large bright green 'Accepter alle' button. Annotations include 'JP/POLITIKENS HUS REPRIMANDED 2021,' 'Grey + small = hidden choice,' 'Red = subconscious warning against declining,' 'Bright green = nudge toward consent,' and 'Datatilsynet: this color coding is impermissible nudging. The consent is invalid.' The Danish news site behind the modal shows the AVISEN wordmark and Danish nav links (Forsiden, Politik, Erhverv, Sport, Kultur, Vejret) with headlines 'Klimapolitikken splitter Folketinget' and 'Banker advarer om højere renter.'
GA Legal Status Last updated: 27 May 2026

Is Google Analytics Legal in Denmark? Cookie Consent, 84% Non-Compliant, and What's Coming

84% of Danish websites violate cookie consent rules. 70% fire tracking cookies before asking permission. Datatilsynet just made cookie enforcement a 2026 priority.

A screenshot of a Finnish online pharmacy homepage with the APTEEKKI wordmark and a Bowl of Hygieia emblem, in Finnish-language UI, with three red editorial annotations overlaid. One annotation reads 'EUR 1.1 M' with a smaller line beneath reading 'Yliopiston Apteekki. 4 June 2025.' A second annotation reads 'Article 9 health data on every product page' with an arrow pointing at a prescription-product card. A third annotation reads '5 trackers loaded BEFORE this banner was clicked. GA + GTM + Maps + Fonts + Meta Pixel.' with an arrow pointing at the green 'Hyväksy kaikki' button on a cookie consent banner pinned at the bottom of the page. The hero banner headline reads 'Reseptilääkkeet kotiin toimitettuna.' Product cards list Parasetamoli, Ibuprofeeni, D-vitamiini, and Silmätipat.
GA Legal Status Last updated: 27 May 2026

Is Google Analytics Legal in Finland? The EUR 1.1M Pharmacy Fine and Three Rulings

Finland's largest GDPR fine is EUR 1.1 million. The pharmacy that paid it was running Google Analytics. Two earlier rulings already named GA. The country's privacy regulator runs no analytics. The cookie regulator runs Matomo. Here is what the rules actually say.

A screenshot of the uodo.gov.pl press release page in Polish UI announcing the EUR 6.4 million administrative fine against Poczta Polska on 26 March 2025, with two red editorial annotations. The headline reads 'Kara administracyjna 27,1 mln złotych dla Poczty Polskiej za nielegalne przetwarzanie danych z rejestru PESEL.' The lead paragraph names Prezes UODO Mirosław Wróblewski, the 27,109,000 PLN fine, and the unlawful processing of approximately 30 million citizens' PESEL register data tied to the 2020 postal election. The right INFORMACJE O DECYZJI sidebar lists Data decyzji 26.3.2025, Sygnatura DKN.5131.2.2024, Adresat Poczta Polska S.A., Kara 27 109 000 PLN, Równowartość EUR ok. 6 400 000 EUR, and Status Prawomocna. A Powiązane decyzje 2025 card lists ING Bank Śląski 19,5 mln PLN, McDonald's Polska 17,8 mln PLN, and DPD Polska 11,5 mln PLN. One annotation reads 'Largest UODO fine of 2025. The era of inaction ended on 26 March 2025.' A second reads 'PESEL data of approximately 30 million citizens. The 2020 postal-election scandal that the previous UODO president dismissed as unfounded.'
GA Legal Status Last updated: 27 May 2026

Is Google Analytics Legal in Poland? Cookie Consent, Opera's Impact, and What's Missing

Poland was the world's #1 country for ad blocker usage. Opera, with its built-in tracker blocker, holds 21% of Polish desktops. UODO has received 53 noyb complaints and issued zero decisions. And the Pegasus spyware scandal showed what happens when surveillance goes unchecked.

A screenshot of a generic Spanish travel-booking site homepage with a non-compliant cookie consent banner overlay, with four red editorial annotations. The travel site shows the VIAJES wordmark, Spanish nav (Vuelos, Hoteles, Coches, Paquetes, Ofertas), a hero headline 'Encuentra tu próximo viaje en España,' a search form, and three featured offers (Madrid-Barcelona, Mallorca, Andalucía). The cookie banner titled 'Uso de cookies' has only two buttons: a small 'Configurar' and a large dark-blue 'Aceptar todas,' deliberately missing the equal-prominence Reject button that AEPD's July 2023 guidance requires. Annotations read 'MISSING: Reject button with equal prominence,' 'Bright + large = AEPD-flagged design nudge,' 'Implicit consent. Rejected by AEPD since July 2023,' and a footnote '46% of major Spanish websites still load Google Analytics before consent. Telefónica Tech, 2024.'
GA Legal Status Last updated: 27 May 2026

Is Google Analytics Legal in Spain? Cookie Consent, 900 Fines, and Two Opposite Rulings

Spain's data protection authority has issued more GDPR fines than every other EU country. Over a thousand of them. And 72% landed on small businesses and freelancers. But Spain also offers something most EU countries don't: an analytics cookie exemption. If your tool qualifies, you don't need consent. If it doesn't, you need a very good cookie banner.

A screenshot of the Google Analytics 4 Reports > Engagement > Events page with the form_submit row highlighted and its parameters drawer expanded. form_submit shows 287 events from 142 users over the last 30 days. The drawer below shows form_id, form_name, and form_destination all at 'Unique values: (not set)'. An annotation reads '287 form_submit events in 30 days. The site has 4 contact forms. None of them have HTML id or name attributes.' A second annotation reads '100% of events have no form ID.' A third annotation reads '100% of events have no form name. GA4 cannot tell which form was submitted.'
GA Problems Last updated: 27 May 2026

How to Track Form Submissions Without Google Analytics

GA4's form tracking is its weakest feature. It misses AJAX forms, can't tell your forms apart, and loses 50-70% of EU data to consent banners. Here's how to track every form submission with zero configuration, no cookies, and no Tag Manager.

A screenshot of the Google Analytics 4 Reports > Engagement > Events page with the click event row highlighted in red and an Event details drawer expanded below, with three red editorial annotations. The Custom parameters panel inside the drawer lists link_url, link_domain, link_classes, link_id, outbound, page_location, and page_referrer all marked captured, with link_text highlighted in red strikethrough as NOT CAPTURED for outbound clicks. The Top destinations panel shows mailto:info@example.com, tel:+1234567890, and javascript:void(0) all highlighted in pale red as false positives alongside legitimate destinations amazon.com, youtube.com, twitter.com, github.com, and linkedin.com. One annotation reads 'link_text deliberately omitted. The anchor visitors actually read is invisible.' A second reads 'False positives: mailto, tel, javascript:void all counted as outbound clicks.' A third reads 'There is no dedicated outbound links report. This drawer is the closest you get.' A footnote reads 'link_text parameter exists in GA4's schema but is never populated for the click event in Enhanced Measurement.'
GA Problems Last updated: 27 May 2026

How to Track Outbound Links in GA4 (And the Easier Way)

GA4 tracks outbound clicks automatically, but strips the link text, inflates counts with mailto: links, and hides the report. Here's how to fix it.

A screenshot of the Google Analytics 4 Engagement overview report with four KPI scorecards (Average engagement time 0m 42s, Engaged sessions per user 1.18, Average engagement time per session 0m 38s, Engagement rate 54.2%) and three red editorial annotations. A stacked area chart shows engaged versus bounced sessions over 28 days. A Pages and screens table lists five page paths with engagement rate and bounce rate columns; /blog/post-2 is highlighted in pale red showing 1:12 engaged time but 51.9% bounce, the paradox the 10-second threshold causes. One annotation reads 'Bounce rate = 100% - this number. GA4 defines it backwards.' A second reads '1:12 engaged time, 51.9% bounce. The 10-second threshold misses fast readers who scroll deep and leave.' A third reads 'GA4 hid bounce rate from default reports for two years. Added back July 2022.' A footer reads 'Engagement criteria: session lasted 10+ seconds OR had a key event OR included 2+ pageviews. Adjustable to 60 seconds in Data Stream settings.'
GA Problems Last updated: 27 May 2026

What Is Bounce Rate? Your Analytics Tool Is Probably Measuring It Wrong

Bounce rate is the most misunderstood metric in web analytics. Three different tools will give you three different numbers for the same traffic. Here's everything you need to know: how it's calculated, what the benchmarks actually are, whether it affects SEO, and why your bounce rate is probably wrong.

A screenshot of a Transparency and Consent Framework v2.3 cookie banner overlay on a European news publisher's homepage, with four red editorial annotations overlaid. A top-left annotation reads 'EUR 250,000 fine. 80% of Europe's cookie banners run on this framework.' A top-right annotation pointing at the bright green Accept All button reads 'Bright, dominant. The path of least resistance.' A center-right annotation reads 'The TC String is personal data. Belgian DPA ruling, Feb 2022. CJEU confirmed Mar 2024 (C-604/22).' A bottom-left annotation reads 'Reject hidden behind a second layer. 53% of CMPs lacked equally-easy consent withdrawal (2025 audit).'
GA Legal Status Last updated: 26 May 2026

Is Google Analytics Legal in Belgium? Cookie Consent, the IAB Ruling, and What It Means

Belgium has the strictest analytics cookie rules in Europe. No exemption for first-party analytics, no exemption for audience measurement. Seven industry associations lobbied the DPA to change this. The DPA said no. Belgium also produced the most consequential cookie ruling in European history: declaring the IAB's consent framework non-compliant.

A screenshot of an editorial map of Germany with the 16 federal states outlined and colour-coded by data protection authority enforcement activity. The four most active state DPAs (Bayern, Hamburg, Niedersachsen, Nordrhein-Westfalen) are shaded red; moderately active states amber; quieter states grey. A top-left annotation reads 'Eighteen independent data protection authorities. No other EU country is structured this way.' A top-right annotation reads '200,000 Google Analytics cases pending nationwide.' A center-right annotation reads 'DSK guidance is not legally binding. Each DPA can interpret TDDDG Section 25 differently.' A bottom-left annotation reads 'Baden-Württemberg says server-side analytics may be consent-free. Bavaria requires consent for Matomo. The DSK refuses to settle the question.'
GA Legal Status Last updated: 26 May 2026

Is Google Analytics Legal in Germany? Cookie Consent, 18 DPAs, and Why It's Complicated

Germany has the strictest cookie consent rules in Europe and the most ways to get sued for violating them. 18 data protection authorities, four separate enforcement vectors, no analytics exemption, and a court system that just made your analytics provider personally liable. Cookie-based analytics see 10-20% of actual German traffic.

A screenshot of an editorial horizontal timeline titled 'Norway and the Data Privacy Framework — Sixteen days, then twelve months.' Five markers in order: 10 July 2023 (EU adopts the DPF), 26 July 2023 (Datatilsynet's Telenor ruling, 16 days later), a shaded August 2023 to June 2024 gap when Norway is not covered, 6 July 2024 (EEA Decision 169/2024 incorporates the DPF), and 26 February 2025 (Datatilsynet guidance). A top-left annotation reads 'The Telenor GA ruling landed 16 days after the EU adopted the DPF. Datatilsynet would have ruled GA illegal but for that window.' A center annotation reads 'Norway is EEA, not EU. Norwegian companies had no DPF cover for 12 months.' A bottom-right annotation reads 'Datatilsynet now warns Norwegian businesses to have an exit strategy.'
GA Legal Status Last updated: 26 May 2026

Is Google Analytics Legal in Norway? Cookie Consent, the New Law, and What Changed

Until January 2025, Norway had the weakest cookie consent standard in the entire EEA. Browser settings counted as valid consent. That loophole is closed, the new law is in force, and Datatilsynet is already sanctioning sites.

A diagram of the server-side tracking architecture with three red editorial annotations overlaid. A header reads 'SERVER-SIDE TRACKING IS A RELAY' with the subtitle 'A relay cannot relay what was never sent.' One annotation reads 'CHECKOUT FLIPS TO shop.app. 51.9% of audited DTC Shopify stores. Merchant JS context ends before payment.' A second annotation reads 'CONSENT REJECTED. ~40% of EU visitors. Request never leaves the browser.' A third reads 'iOS ATT DENIED. 50% global opt-in (AppsFlyer, April 2025). IDFA never transmitted at the hardware layer.' A footnote reads 'Audit: 27 top DTC Shopify brands, April 2026. 1 of 27 had any server-side pipe installed.'
Ecommerce Analytics Last updated: 26 May 2026

Server-Side Tracking: What It Fixes and What It Doesn't

Server-side tracking is pitched as the fix for every modern ecommerce data problem. In our April 2026 re-audit of 27 top DTC Shopify brands, one of them uses any server-side pipe. In more than half the sample, it wouldn't have closed the main gap anyway. Here is what server-side tracking actually fixes, what it cannot touch, and the real 2026 pricing math for the rescue ecosystem.

A screenshot of the Google Analytics 4 Admin Web stream details page with the Enhanced Measurement card visible and the 'Scrolls' row highlighted with a red dashed border, with two red editorial annotations overlaid. One annotation reads 'ONE EVENT. ONE THRESHOLD. 90%.' A second annotation reads 'No 25%. No 50%. No 75%. No per-page averages.' A footnote below the card reads 'This is the entire scroll-tracking feature in GA4.' The Scrolls description visible on the row reads 'Captures the scroll event each time a visitor reaches the bottom of a page (90% vertical depth).'
GA Problems Last updated: 26 May 2026

GA4 Scroll Depth Tracking: The 90% Problem (And How to Fix It)

GA4 fires one scroll event at one threshold: 90%. No 25%. No 50%. No 75%. No per-page averages. The tool that tracks your visitors' screen resolution has no idea whether anyone read past your headline.

A screenshot of the WordPress Plugins admin page after installing MonsterInsights, with five Awesome Motive plugins active and two red editorial annotations overlaid. An annotation on the left reads 'The user installed ONE plugin: MonsterInsights. The setup wizard's step 5 has four pre-checked toggles that install OptinMonster, WPForms Lite, All in One SEO, and UserFeedback Lite before they click Save.' An annotation on the right reads 'Combined: 76 security vulnerabilities. Roughly 24 database tables. About 1.31 seconds added to every page load. All from installing an analytics plugin.'
WordPress Analytics Last updated: 22 May 2026

The Best WordPress Analytics in 2026 Isn't a Plugin

Every WordPress analytics plugin adds PHP overhead, database tables, and security vulnerabilities. The best WordPress analytics in 2026 installs nothing in WordPress at all.

A screenshot of GA4's Reports Engagement overview page for a 28-day window, with three red editorial annotations overlaid. The property selector is blurred. Four KPI tiles show Average engagement time per active user 1m 23s, Average engagement time per session 0m 34s, Engaged sessions per active user 1.7, and Engagement rate 58.2%. A User activity over time chart and a Views by Page title table follow. An annotation reads 'The headline metric divides total engagement time by ACTIVE USERS, not sessions. A returning visitor with 5 visits and 10 minutes total shows as one user with 10 minutes, not 5 sessions of 2 minutes each. The number inflates as your date range widens.' Another reads '58.2% of sessions lasted MORE THAN 10 SECONDS. That is the entire definition. A visitor who stared at a loading spinner for 11 seconds counts as engaged. A reader who found your phone number in 8 seconds and called does not.' A third reads 'GA4 underreports actual reading time by 54.7% on average per a 28-day controlled comparison study. The denominator includes non-engaged sessions that contributed zero time, mechanically halving the average. Some pages were off by 80.2%.'
GA Problems Last updated: 22 May 2026

Everything Wrong with GA4's Engagement Overview (With Data)

GA4's engagement rate takes a binary 10-second threshold, inverts it, and calls the result 'engagement.' A visitor who stares at your loading spinner for 11 seconds is 'engaged.' Here is everything wrong with GA4's engagement metrics, backed by data.

A screenshot of a Google Analytics 4 User acquisition report for the last 30 days, with three red editorial annotations overlaid. The property selector at the top is blurred. KPI tiles show 1,247,392 total users, 982,051 new users, 1,830,604 sessions, and 58.2% engagement rate. An annotation reads '57% of these sessions are bots GA4 cannot see. The default Exclude known bots and spiders filter checks user-agent strings against the IAB list and nothing else. Your real human count is smaller than this.' Another reads 'Across Clickport customer sites in a 30-day audit, the median site saw 20% bot share. Range 2% to 82%. Direct traffic growing without brand-search growth is one of the strongest bot signals.' A third reads 'The IAB list costs USD 5,000 to USD 15,000 per year. Google's docs confirm you cannot see how much was filtered. AI training crawlers (GPTBot up 305% YoY) are not on the list and land here as real visitors.'
Bot Traffic Last updated: 22 May 2026

Is My Website Traffic Real or Bots? (2026 Data)

In April 2026, we audited bot activity across our customer sites for 30 days. The median site saw 20% of incoming traffic flagged as bots, range 2% to 82%. And 57% of those bots would have passed GA4's default filter because the detection required signals GA4 doesn't check.

A screenshot of a German-language cookie banner on a generic Austrian news site with three red editorial annotations overlaid. The site brand area is cropped and blurred; a dark blue 'Alle akzeptieren' button visually dominates a near-invisible pale grey 'Ablehnen' link. An annotation reads 'DSB order, October 2024: ORF was forced to redesign this banner. Dark blue Accept versus pale grey Reject fails the 3:1 contrast ratio per ISO 9241.' Another annotation reads 'Cookies were already set before any user interaction. TKG 2021 Section 165(3) violation.' A third annotation reads 'Austria has no analytics exemption. Every analytics cookie needs prior opt-in consent. The DSB FAQ is unambiguous.'
GA Legal Status Last updated: 22 May 2026

Is Google Analytics Legal in Austria? Cookie Consent, the GA Ban, and Your Alternatives

Austria was the first EU country to rule Google Analytics illegal. Unlike France, there is no consent exemption for analytics cookies. 34% of Austrian websites dropped GA after the ruling. The remaining 66% need consent that most visitors reject.

A screenshot of a generic French e-commerce site with a cookie banner showing the asymmetric accept/reject pattern that drives CNIL's largest cookie fines. The site brand is cropped and blurred; a dominant green 'Tout accepter' button overwhelms a pale grey 'Tout refuser' link buried on the left. Three red editorial annotations overlaid. An annotation reads 'This is the dark pattern CNIL fines most aggressively. Shein EUR 150 million. Microsoft EUR 60 million. TikTok EUR 5 million. CNIL guidelines: Reject must be as visible and one-click as Accept.' Another reads 'CNIL October 2020 guidelines: rejecting cookies must take the same number of clicks as accepting. A buried grey link does not meet that bar.' A third reads 'Scrolling, swiping, or ignoring the banner does not count as consent. Absence of action equals refusal under Article 82 of the Loi Informatique et Libertés.'
GA Legal Status Last updated: 22 May 2026

Is Google Analytics Legal in France? Cookie Consent, the CNIL Exemption, and Who's Exempt

CNIL has issued nearly 900 million euros in cookie fines since 2020. Fewer than 25% of French visitors accept cookies. And there's a consent exemption most French websites don't know about.

A screenshot of a generic Italian e-commerce site with a cookie banner missing the X-button-in-upper-right that Italian law requires. The site brand is cropped and blurred. A dominant green 'Accetta tutti' button overwhelms a pale grey 'Rifiuta tutti' link buried on the left. An annotation reads 'Garante 2021 guidelines: every Italian cookie banner must include an X button in the upper-right that closes the banner WITHOUT activating any non-essential cookies. This banner has no X button. Violation of Article 122 of the Codice Privacy.' Another reads 'Garante 2021 guidelines: Accept and Reject must be identical in size, color weight, and prominence. A buried grey Rifiuta tutti link does not meet that bar.' A third reads 'Ediscom SpA was fined EUR 300,000 for this exact dark pattern in February 2023. First EU DPA to formally sanction dark patterns as a standalone GDPR violation. The Aarhus study found 76% of Italian sites have banners; only 23% actually comply.'
GA Legal Status Last updated: 22 May 2026

Is Google Analytics Legal in Italy? Cookie Consent, the Garante's Exemption, and Who Qualifies

82% of Italian websites still ran Google Analytics after the Garante ruled it illegal. Italy also has a consent exemption for analytics that most website owners have never configured.

A screenshot of a Google Analytics 4 Traffic Acquisition report covering the last 12 months for a sample property. A line chart at the top tracks the Session default channel group, with Direct climbing to the top. Below it, a Session source / medium table includes (direct) / (none) at the top with an annotation that reads 'growing 22% YoY'. Further down, the row for chatgpt.com / referral is highlighted by an orange callout rectangle with an annotation that reads 'no AI channel: lands in Referral'.
AI Traffic Last updated: 21 May 2026

Why ChatGPT Traffic Shows as Direct in GA4 (2026)

Most of your ChatGPT traffic isn't invisible in GA4. It's sitting in Referral, alongside every blog link and directory mention, because GA4 has no native AI channel. A smaller third lands in Direct: the visits with no referrer and no UTM. Both buckets hide AI. Each one hides it differently.

A screenshot of the Clickport analytics dashboard in dark mode, showing every key metric on a single page. A green badge reads '27 online'. A row of eight KPI tiles covers visitors, pageviews, views per visit, bounce, conversions, conversion rate, duration, and scroll. A two-line chart below tracks visitors and conversion rate across the last 30 days. An annotation pinned to the chart near 06 March reads 'Redesigned pricing page. Based on scroll data: only 38% reached the CTA. Moved pricing table above fold.' Sources and Pages panels sit below the chart.
Comparisons Last updated: 21 May 2026

Clickport vs Google Analytics: Cookieless vs GA4

75% of SEOs are unhappy with GA4. But every comparison article tells you to switch without admitting what you lose. Here's the full version: where GA4 wins, where it fails, what it actually costs, and why I built an alternative.

A conceptual architecture diagram on a near-black background, split into two paths. The left path, tinted amber and labelled 'MySQL + archiving', is a three-step vertical stack connected by downward arrows: a box 'Raw events (MySQL, row-oriented)', then 'Archiving cron job, runs hourly', then 'Pre-computed report (yesterday data)' marked with a clock icon and a grey 'stale' tag. The right path, tinted blue and labelled 'ClickHouse columnar', is shorter: a box 'Raw events (ClickHouse, columnar)' with one arrow straight into 'Live query', and a glowing blue tag 'milliseconds'. The visual contrast shows the MySQL path as long and multi-step and the ClickHouse path as short and direct.
Comparisons Last updated: 21 May 2026

Why I Chose to Build Clickport Instead of Using Matomo

Matomo is the most respected open-source analytics project in the world. I considered using it. Then I looked at the MySQL archiving cron job, the 12-step GDPR configuration, and the 217 WordPress database tables. This is the story of what I found.

A screenshot of the Marlow Roasters homepage with a cookie consent banner overlaying the bottom of the screen. A caption at the top reads 'The same violation pattern CNIL fined Google EUR 150 million for in January 2022.' The banner is titled 'We value your privacy' and shows three pre-checked boxes (Preferences, Statistics, Marketing) plus a prominent 'Accept All' button. No 'Reject All' button is visible. Three red annotations point at the violations. One reads '1 click to accept everything.' Another reads 'Reject path: 3 clicks deep, hidden in a settings menu.' A third reads 'Pre-checked is not valid consent. Planet49 CJEU ruling, 2019.'
GA Legal Status Last updated: 21 May 2026

Do I Need a Cookie Banner on My Website? (2026)

43% of websites set tracking cookies without valid consent. Only 15% of cookie banners actually meet minimum GDPR requirements. Most site owners either have a banner they don't need, or don't have one they do need. This flowchart settles it.

A screenshot of the Google Analytics 4 Traffic Acquisition report for a test property called bot-test-site over Mar 3 to Mar 7, 2026, the test window. A banner across the top reads '1,000 BOTS COUNTED AS REAL VISITORS. 0 filtered. 0 flagged. 0 removable. 5 rounds, all visible in this report.' The Session source / medium table shows the four spam-referrer domains from Round 4 (best-seo-offer.com, buttons-for-website.com, free-social-buttons.com, get-free-traffic-now.com) listed with high bounce rates. One red annotation reads 'Rounds 2, 3, and 5 bucketed: 640 bot sessions. Cloud servers, headless Chrome, and stealth residential bots all funnel into Direct.' Another reads 'Round 4: 200 sessions of referrer spam. GA4 unwanted-referrals only renames them, never removes them.'
GA Problems Last updated: 21 May 2026

We Sent 1,000 Fake Visitors to a Site Running GA4 and Clickport. Here's What Each Tool Counted.

We used Puppeteer to send 1,000 bot sessions to a test site running both GA4 and Clickport. Five scenarios, from obvious bot signatures to stealth headless browsers on residential proxies. GA4 counted every single bot as a real visitor. Clickport blocked 800 of 1,000. Here are the full results.

A screenshot of a Google Analytics 4 dashboard with three red editorial annotations overlaid. A banner across the top reads 'RULED ILLEGAL IN 7 EU COUNTRIES. Austria, France, Italy, Denmark, Finland, Sweden, Norway. December 2021 to June 2023.' A right-margin annotation reads 'EU visitor data crosses the Atlantic in milliseconds. FISA 702 gives US intelligence access the moment it lands.' A lower-left annotation reads 'Data Privacy Framework keeping this legal in 2026 faces a CJEU appeal, an active Schrems III challenge, and a PCLOB that has been below quorum since January 2025.'
GA Legal Status Last updated: 21 May 2026

Is Google Analytics Legal in 2026? EU Rulings, US Lawsuits

Seven EU countries have ruled Google Analytics illegal. 2,341 US wiretapping lawsuits have been filed. The legal bridge keeping GA4 alive in Europe is cracking. And Google just turned your analytics into an AI advertising tool. Here's the full picture for 2026.

A screenshot of a generic Swedish-language online store with a cookie consent banner overlaying the page. The site's header brand area is cropped out of frame. The hero shows seasonal autumn items with the headline 'Höstens favoriter' and 'Fri frakt över 500 kr'. The banner is titled 'Vi värdesätter din integritet' and shows three pre-checked categories (Funktionella, Statistik incl. Google Analytics, Marknadsföring incl. Meta Pixel), a buried 'Anpassa inställningar' text link, and a prominent green 'Acceptera alla' button. No 'Avvisa alla' button is visible. A caption above the banner reads 'The same dark patterns IMY reprimanded three companies for in April 2025 (ATG, Aller Media, Warner Music Sweden).' Three red annotations point at the violations. One reads 'Pre-checked is not valid consent under LEK Chapter 9 Section 28. Same pattern Tele2 was fined SEK 12 million for. Stockholm Court of Appeal upheld, October 2025.' Another reads 'Aller Media reprimand, April 2025: rejecting cookies requires a multi-step settings flow.' A third reads 'ATG reprimand, April 2025: green-and-prominent accept versus grey-and-buried reject is a dark pattern.'
GA Legal Status Last updated: 21 May 2026

Is Google Analytics Legal in Sweden? Cookie Consent, the IMY Fine, and What the Court Said

Seven EU countries declared Google Analytics illegal. Only one put a price tag on it. Sweden fined Tele2 SEK 12 million, and the Stockholm Court of Appeal upheld every krona. And the Stockholm Court of Appeal upheld every krona.

A screenshot of a UK homeware online store with a cookie consent banner overlaying the page and three editorial annotations marked up on top. The banner has all three categories (Functional, Analytics, Marketing) pre-checked, a buried 'Manage settings' link, a prominent green 'Accept All' button, and no 'Reject All' button. A caption at the top reads 'The same dark patterns the ICO and CMA flagged in their August 2023 harmful-design paper. 134 of the top 200 UK websites failed exactly this compliance check in January 2025.' One annotation reads 'Pre-checked categories are not valid consent under PECR Regulation 6. Sky Betting (Bonne Terre Ltd) was reprimanded by the ICO in September 2024 for exactly this pattern: cookies fired before any user interaction.' Another reads 'ICO and CMA harmful design paper, August 2023: reject must be equally prominent. A buried text link versus a green Accept All button is the textbook dark pattern.' A third reads 'No Reject All on the first layer. PECR maximum fine raised from £500,000 to £17.5 million on 5 February 2026 under the Data Use and Access Act.'
GA Legal Status Last updated: 21 May 2026

Is Google Analytics Legal in the UK? Cookie Consent, the DUAA, and the New Opt-Out Rule

Everything UK website owners thought they knew about cookie consent changed on 5 February 2026. The Data Use and Access Act introduced an analytics exception that shifts from opt-in to opt-out. Google Analytics doesn't qualify. Here's what does.

A side-by-side screenshot of a Shopify admin Orders page on the left and a Google Analytics 4 Ecommerce purchases report on the right for the same 14-day window, with three editorial annotations marked up on top. Shopify shows 247 total orders worth $42,180.30 with an average order value of $170.77. GA4 shows 188 purchases worth $33,860.20 with an average revenue per purchase of $180.11. Order rows visible on the Shopify side include #SH1247 Sarah K. Shop Pay paid $156.40, #SH1246 James M. Apple Pay paid $89.20, #SH1245 Lina T. Shop Pay paid $312.00, #SH1244 Marc P. PayPal Express paid $74.80. A caption at the top reads 'Same 14-day window. Same store. Shopify counted 247 orders worth $42,180. GA4 saw 188 purchases worth $33,860. The 59 missing orders are the express-checkout gap.' One annotation reads '247 vs 188 orders. The 24% gap is the express-checkout signal loss. Littledata's February 2025 benchmark says 20 of every 100 Shopify orders fail to appear in GA4 on average.' Another reads 'Shop Pay alone was 41% of Shopify's Q4 2024 gross payment volume. Its express path completes on shop.app or pay.shopify.com, where the merchant's GA4 tag does not execute.' A third reads '$8,320 in missing revenue across the 14-day window. The gap follows Shop Pay, Apple Pay, and PayPal usage patterns, not random.'
Ecommerce Analytics Last updated: 21 May 2026

Shop Pay, Apple Pay, PayPal: Why GA4 Misses Revenue

Shop Pay drives 41% of Shopify's payment volume. In our April 2026 audit of 27 top DTC brands, 78% route checkout through domains where the merchant's analytics cannot execute. Here is why GA4 misses revenue, why the $450-a-month server-side pipe barely moves the numbers, and the architecture that actually closes the gap.

A screenshot of a Google PageSpeed Insights result panel split into a before/after side-by-side comparison of the same WordPress site, with three editorial annotations marked up on top. The left panel labelled 'Before — Google Site Kit active' shows a red mobile score of 31 with First Contentful Paint 4.2 s, Largest Contentful Paint 8.1 s, Total Blocking Time 1,240 ms, and a Diagnose section flagging gtag.js (134 KB) and gtm.js (109 KiB) as render-blocking. The right panel labelled 'After — Site Kit deactivated' shows a green score of 88 with FCP 1.4 s, LCP 2.2 s, TBT 90 ms, and a single minor 'Properly size images' diagnostic. A caption at the top reads 'The same WordPress site, tested 60 seconds apart. The only change between the two tests was deactivating Google Site Kit.' One annotation reads 'PageSpeed mobile dropped from 88 to 31 with Site Kit active. One WordPress.org user reported a drop from 86 to 19. Another from 94 to 47.' Another reads 'gtag.js is 134 KB compressed, 6.7x larger than the old Universal Analytics script. Addy Osmani's mobile JS budget is 170 KB total.' A third reads '60 seconds of deactivation recovered 57 points. The plugin Google built to measure PageSpeed is the largest single thing dragging it down.'
WordPress Analytics Last updated: 21 May 2026

Google Site Kit Dropped My PageSpeed by 40 Points. Here's What I Did.

Site Kit users report PageSpeed drops of 20 to 67 points. Google's own plugin loads 134 KB of tracking JavaScript, adds 1 MiB of PHP overhead, and hurts the very scores it measures.

A screenshot of the Google Tag Manager Tags list for a workspace called mywebsite.com, container GTM-PQR4K8N. Eight tag rows are visible, each a GA4 Event tag named for one button (Subscribe Button Click, Add to Cart Click, Pricing CTA Click, Book a Demo Click, Get Started CTA, Newsletter Signup, Download Brochure, plus a base GA4 Configuration tag). A banner across the top reads '14 STEPS TO TRACK ONE BUTTON. Repeat steps 3 through 9 for every additional button.' Three red annotations point at the workflow friction. One reads 'Step 9: re-test required after every change. Reconnect Tag Assistant each time.' Another reads 'Step 10: publish. Step 13: wait 24 to 48 hours before data appears in reports.' A third reads 'Each tag also requires its own trigger, parameters, and test cycle. None are reusable.'
GA Problems Last updated: 21 May 2026

Track Button Clicks in GA4: The 14-Step Problem (And the 1-Line Fix)

GA4 does not track button clicks. Not your signup CTA. Not your Add to Cart. To track a single button, you need 14 steps across 3 platforms and a 48-hour wait. Here's the full process, every pitfall, and a 1-line alternative.

Perplexity AI web interface showing an active conversation with the query 'What's the best way to track AI search traffic?'. The answer is structured as four paragraphs with inline citation markers [1] [2] [3] [4]. The Sources section below lists four cited cards: Clickport (How to Track AI Search Traffic), Search Engine Journal (GEO vs SEO: The 2026 State of Play), Ahrefs Blog (AI Citation Tracking for SEO Teams), and Backlinko (Generative Engine Optimization Guide).
GA Problems Last updated: 20 May 2026

Whatever You Call It, AI Search Traffic Engages More Than Any Other Channel

There is a loud debate on LinkedIn right now about whether GEO is a real discipline or just SEO renamed. I am not picking a side. But on the Clickport platform, AI search visitors score the highest engagement of any traffic channel, by a wide margin, and the most consistent. Here are the numbers.

Google Analytics 4 User Acquisition report for Marlow Apparel Store showing the 'Sessions by Session default channel group' bar chart with Direct as the dominant channel at 47,283 sessions, dwarfing Organic Search (14,920), Paid Search (5,847), Organic Social (2,142), Email (1,389), Referral (982), and Unassigned (891). No AI Search channel exists in the default GA4 channel groups list.
AI Traffic Last updated: 20 May 2026

AI Traffic Revenue Attribution: The Setup Gap Nobody Fixed Yet

AI visitors convert at 14.2% vs 2.8% for organic search. But 70.6% of AI traffic lands as 'Direct' in GA4 with no referrer, no channel, and no revenue data. The attribution gap isn't a tooling problem. It's a setup problem.

Google Analytics 4 Admin showing the Data Filters page on a sample property. The Data Filters table has only two rows: Internal Traffic in Testing state and Developer Traffic in Active state. A help text block below the table reads: 'Only Internal Traffic and Developer Traffic filter types are available. Other types of filtering, such as bot exclusion, are applied automatically using the IAB/ABC International Spiders and Bots List. There is no setting to enable, disable, or tune the bot filter.' This is GA4's entire bot configuration surface.
Bot Traffic Last updated: 20 May 2026

How Bot Detection Actually Works in Web Analytics (2026)

51% of web traffic is bots. GA4 filters them with a single list. No behavioral analysis, no IP checks, no transparency. Here is how bot detection actually works, from tracker-side hard stops to fingerprint velocity analysis, and why most analytics tools get it wrong.

Marlow Apparel e-commerce homepage with a cookie consent banner overlaying the bottom half of the screen. The banner heading reads 'We value your privacy' with a paragraph of consent copy and three controls: a 'Cookie Settings' text link, a 'Reject all' button with a thin border, and a solid black 'Accept all' button. A small 'Powered by ConsentLab' attribution sits at the bottom. The 'Autumn essentials' storefront with a folded beige knit sweater photo is dimmed and partially visible above the banner.
GA Legal Status Last updated: 20 May 2026

What Using Cookie-Banner-Free Analytics Actually Means for Your Site

The UK's privacy regulator lost 90.8% of its tracked traffic after implementing a proper consent banner. That's the system working as intended. Here's what actually changes when your analytics don't need a cookie banner: from data accuracy and page speed to mobile UX, legal risk, and visitor trust.

Modern home office workspace with a MacBook on a wooden desk displaying the Chrome browser with open tabs from four European technology companies (Hetzner Cloud, Proton Mail, Mistral Le Chat, DeepL Translator). A classical European cityscape is visible through a window in the background, with a ceramic coffee mug and reading glasses on a leather notebook on the desk.
GA Legal Status Last updated: 20 May 2026

50+ European Alternatives to US Tech: The Privacy-First Business Stack

The only guide that covers 50+ European tools across 10 categories with real pricing, clear trade-offs, and migration difficulty ratings. Built from firsthand experience running a business on a fully European stack.

A CookieYes compliance scan result for a redacted Dutch sample site, marked NOT COMPLIANT, with 23 cookies detected including five Google Analytics cookies (_ga, _ga_*, _gid, _gat, _gcl_au) all set before any user consent action. The summary panel lists 18 cookies fired before consent, 11 third-party trackers, and 3 Telecommunicatiewet violations. Four issues are surfaced: cookies before consent (Article 11.7a violation), no Reject button at top level, pre-ticked non-essential categories (the pattern Coolblue was fined EUR 40,000 for), and third-party data shared with Google that disqualifies Google Analytics from the Dutch first-party analytics exemption.
GA Legal Status Last updated: 20 May 2026

Is Google Analytics Legal in the Netherlands? Cookie Consent, 10,000 Sites Scanned, and the Exemption

715,000 Dutch websites use Google Analytics. The AP monitors 10,000 a year for cookie compliance and says GA doesn't qualify for the Dutch analytics exemption. Yet the AP's only GA enforcement was a reprimand that was never made public. Here's what the rules actually say.

Chrome DevTools Network panel on a sample e-commerce page during initial page load, with the brand logo blurred for privacy. Eighteen requests are visible in the waterfall, including the typical marketing-and-analytics stack: Google Tag Manager (gtm.js, 87 KB), Google Analytics (gtag/js, 104 KB), Cookiebot consent script (consent.cookiebot.com/uc.js, 157 KB), Facebook Pixel (fbevents.js, 88 KB), and Hotjar (61 KB), with collect endpoints to google-analytics.com, doubleclick.net, facebook.com/tr, LinkedIn ads, and Twitter ads. The five heavy third-party scripts are highlighted in light yellow. A red annotation banner reads '5 third-party scripts = 488 KB of JavaScript before any product image loads'. A Coverage tooltip in the corner reports 'Unused JS bytes: 387 KB (76% of total)'.
GA Legal Status Last updated: 20 May 2026

Privacy-Friendly Analytics: The Complete Guide for 2026

Research shows 34-47% of European visitors actively reject analytics cookies, and only 25% accept all. Your Google Analytics data is a fraction of reality. Here's the complete guide to privacy-friendly analytics: how cookieless tracking works, the legal landscape in 2026, and how to switch.

Laptop on a wooden desk displaying the Shopify homepage with a 'Start selling with Shopify today' headline and a green call-to-action button.
Ecommerce Analytics Last updated: 20 May 2026

Shopify Analytics: The Store Owner's Guide to Better Data

Shopify's built-in analytics miss 30-50% of EU visitors, misattribute much of your traffic as 'Direct,' and lock custom reports behind a $399/month plan. Here's what store owners need to know, and what better data actually looks like.

The Swedish Authority for Privacy Protection (IMY) news page from 30 June 2023 announcing that CDON, Coop, Dagens Industri, and Tele2 must stop using Google Analytics. A highlighted callout notes the SEK 12,000,000 (approximately EUR 1 million) administrative fine on Tele2 for GDPR violations relating to data transfers to the United States. The page references complaints from NOYB and concludes that Google's technical safeguards including IP anonymization do not sufficiently protect personal data from US intelligence services under FISA Section 702.
GA Problems Last updated: 20 May 2026

Why You Should Stop Using Google Analytics in 2026

Google Analytics is illegal in 8 European countries, classified as a wiretap in California, blocked by a quarter of all browsers, and costs $5,000 to $18,000 in hidden expenses. Here's every data point I could find.