Why we refuse tracking cookies

Most analytics tools drop a dozen cookies on the very first visit, set an advertising identifier and rebuild a profile that follows you from site to site. At Takt, we made a different choice from the first line of code: measure a site’s audience without ever tracking the person visiting it. This is not a setting you toggle in a menu — it is how the product is built.

A single cookie, and it signs you in

The measurement script you embed on your pages sets no cookies. None. The only cookie you will ever meet while using Takt is takt_session, and it appears only on the dashboard — that is, on the publisher’s side, never on your visitors’ devices. It keeps you signed in for thirty days and is strictly necessary for your authentication.

When you sign in through a third-party provider, a second temporary cookie, takt_oauth, secures the exchange for the duration of the procedure and then disappears. Both cookies are set as HttpOnly (out of reach of the page’s JavaScript) and SameSite=Lax (not sent on cross-site requests), and served over HTTPS only. They are never used for tracking or advertising: they are technical cookies, not tracking cookies.

In practice, this means there are no third-party cookies, no advertising identifier and no retargeting pixel anywhere in Takt. We do store a few display preferences, such as the interface language, in your browser’s local storage; that information stays on your device and is never sent to us.

So how do we measure?

The fair question is: if you set no cookie on the measured sites, how do you know a visitor came back, or how many people viewed a page? The answer rests on one principle — we count events, not people.

For each page view, Takt processes non-identifying information: the page URL, the referring site, the country derived from the IP address, plus the device type, browser and operating system. The IP address itself is never stored: it is used only, during processing, to derive a country. None of this data, alone or combined, can identify you.

Above all, we use no persistent identifier and no durable digital fingerprint (the fingerprinting technique that rebuilds a unique signature of your browser). There is therefore no identity inside Takt that could be followed from one day to the next or from one site to another. The figures you read in the dashboard — visitors, page views, traffic sources, geographic breakdown — are aggregates, computed to give you a snapshot of your audience, not to reconstruct an individual’s journey.

Compliance by default, not as an option

This architecture has a direct consequence for your GDPR compliance: because Takt processes no identifying personal data to produce its audience statistics, there is simply nothing to ask consent for, nothing to profile, nothing to erase. The right of access, rectification or deletion has no object over data that does not exist.

It also explains why you do not need to show a cookie banner for the Takt script: it places nothing on your visitors’ devices. The platform’s only cookies, takt_session and takt_oauth, are strictly necessary for the service you request; as such, they are exempt from consent under Article 82 of the French Data Protection Act and the CNIL’s guidelines. We cover this point in a dedicated article about the absence of a banner.

The benefit is twofold. For the publisher, it means compliance by design: no consent module to integrate, maintain and document, and measurements that are not skewed by cookie refusals. For the visitor, it means a page that loads faster, with no intrusive pop-up, and the certainty of not being tracked. Refusing tracking cookies does not mean giving up data: it means measuring what truly matters — the audience — without putting privacy up as collateral.

In short

Takt rests on a simple idea: you can understand your audience without watching people. A single technical cookie to sign you in, no trace on your visitors, no IP address kept, no advertising profile. It is more respectful, it is faster, and it is compliant from the start. Tracking was never necessary to measurement — it was only a habit. We chose a different one.