Privacy and GDPR
Varde is built to count visits without tracking people. Here is exactly what is collected and how unique visitors are counted.
How a visitor is counted
For each request, the server computes a hash of a secret daily salt, your site ID, the visitor's IP address and their browser's user agent. Only that hash is stored. The salt is replaced every day and the old one is deleted, so yesterday's hashes can't be recreated and the same person can't be followed from one day to the next.
The IP address is only held in memory while the request is processed. It is never written to the database.
What is stored for each pageview or event
| Field | Example |
|---|---|
| Time and event name | 2026-10-31 14:02, pageview |
| Page (without query string) | example.com/pricing |
| Referring site | google.com |
| UTM tags | newsletter, email, autumn-sale |
| Country | NO |
| Device, browser, OS | mobile, Safari, iOS |
| Daily visitor hash | a 64-bit number |
| Event props you send | plan: pro |
What is not used
- No cookies, and nothing stored on your visitors' devices. The only exception is the opt-out flag you can set in your own browser to exclude your visits.
- No fingerprinting, and no cross-site or cross-day tracking.
- No stored IP addresses or full user agents.
- No selling or sharing of data with advertisers.
Where data lives
Analytics data is stored in the EU, in Stockholm, Sweden. The collection endpoint runs in EU regions.
Do I need a cookie banner?
Not for Varde, because it sets no cookies and stores nothing on the visitor's device. Other tools on your site may still need one. This is general information, not legal advice. Ask your own adviser if you are unsure.
Your responsibilities
- Mention Varde in your privacy policy as a privacy-friendly analytics tool hosted in the EU.
- Don't send personal data such as names or email addresses in event names or props.
Read more on the privacy page.