Imagine a new visitor opens your shop - and the first thing they see is ... nothing. No annoying cookie banner, no click hurdle. Instead, the page loads at lightning speed and you receive valuable analytics data - completely without cookies or personalised storage. This is possible with hash-based tracking!<\/p>\n\n\n\n
Cookie banners can impair the user experience and reduce conversions. With cookie-free hash tracking, consent-free measurements can be carried out under certain conditions - without personal reference, with automatic 24-hour deletion. This guide shows you how Trackboxx works in compliance with data protection regulations.<\/p>\n\n\n\n
Studies show clear effects of cookie banners:<\/p>\n\n\n\n
(Sources: Various industry studies and internal tests 2024-2025)<\/em><\/p>\n\n\n\n Important note:<\/strong> This article does not replace individual legal advice. Data protection law is complex and highly dependent on individual cases.<\/p>\n\n\n\n Hash-based tracking can take place under certain circumstances without consent if no cookies are set, no personal data is stored and hash values are regularly deleted.<\/p>\n\n\n\n Attention:<\/strong> Anyone who invokes exceptions must be able to explain and prove their prerequisites.<\/p>\n\n\n\n Step 1: Hash generation<\/strong><\/p>\n\n\n\n <\/p>\n\n\n\n Step 2: Temporary storage<\/strong><\/p>\n\n\n\n <\/p>\n\n\n\n Step 3: Anonymous data collection<\/strong><\/p>\n\n\n\n Security features:<\/strong><\/p>\n\n\n\n Step 1: Account and domain<\/strong> <\/p>\n\n\n\n Step 2: Script integration<\/strong> <\/p>\n\n\n\n Example script<\/p>\n\n\n This means the code must be inserted between the opening and the closing .<\/p>\n\n\n\n In general, the possibilities of integration are very different depending on the type of website or the use of an appropriate CMS system, such as WordPress.<\/p>\n\n\n\n \"Trackboxx's hash tracking has solved our analytics challenge perfectly. We receive all the important data for our optimisation, but without any personal reference. The automatic 24-hour deletion gives us legal security, and our users appreciate the banner-free experience.\"<\/em><\/p>\n\n\n\n - E-commerce manager of an online shop (anonymised, April 2025)<\/em><\/p>\n\n\n\n Technical improvements:<\/strong><\/p>\n\n\n\n SEO aspects:<\/strong><\/p>\n\n\n\n If properly implemented (no cookies, no personal reference, 24-hour deletion), Section 25 (2) TDDDG may apply. A legal case-by-case examination is nevertheless recommended.<\/p>\n\n<\/div>\n<\/div>\n No, the hash is a one-way encryption. In addition, the signature hash is renewed daily, which makes decryption impossible.<\/p>\n\n<\/div>\n<\/div>\n Only the anonymous hash (max. 24h) and aggregated metrics such as page views, domains of origin, device categories - no IPs, no personal information.<\/p>\n\n<\/div>\n<\/div>\n For most web analytics purposes, yes. You receive visitor numbers, page views, dwell time, origin and device types and many other values. - Without data protection issues.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n\n\n Interested in cookie-free, data protection-compliant analytics?<\/p>\n\n\n\n2 | Legal framework - The basics \u2696\ufe0f<\/h2>\n\n\n\n
Relevant laws:<\/h3>\n\n\n\n
\n
Basic principle:<\/h3>\n\n\n\n
3 | How does hash-based tracking work? ?<\/h2>\n\n\n\n
Trackboxx technology in detail:<\/h3>\n\n\n\n
\n
\n
\n
4 | Hash algorithm in detail ?<\/h2>\n\n\n
User Hash = Hash(Signature Hash + IP + User Agent + SiteID + Current Tag)\nPage Hash = Hash(Signature Hash + IP + User Agent + SiteID + Hostname + Path + Current Tag)<\/code><\/span><\/pre>\n\n\n\n
5 | Requirements for consent-free hash tracking \u2705<\/h2>\n\n\n\n
\n \n
\n \n #<\/th>\n Requirement<\/th>\n Trackboxx realisation<\/th>\n <\/tr>\n <\/thead>\n \n 1<\/td>\n No cookies\/end device storage<\/td>\n \u2705<\/span> 100% cookieless, no local storage<\/td>\n <\/tr>\n \n 2<\/td>\n No personal data<\/td>\n \u2705<\/span> Only anonymous hashes, IP is not saved<\/td>\n <\/tr>\n \n 3<\/td>\n Temporary processing<\/td>\n \u2705<\/span> 24h automatic deletion<\/td>\n <\/tr>\n \n 4<\/td>\n EU data processing<\/td>\n \u2705<\/span> EU hosting, no third country transfer<\/td>\n <\/tr>\n \n 5<\/td>\n Transparency & documentation<\/td>\n \u2705<\/span> Clear privacy policy, processing directory<\/td>\n <\/tr>\n <\/tbody>\n <\/table>\n<\/div>\n\n\n\n Important:<\/strong> A case-by-case review by data protection experts is strongly recommended.<\/pre>\n\n\n\n
\n\n\n\n6 | Setup instructions with Trackboxx ?\ufe0f<\/h2>\n\n\n\n
Implementation time: approx. 5-10 minutes<\/h3>\n\n\n\n
\n
<script<\/span>><\/span>\n (function<\/span>(d, s, id, w, f<\/span>)<\/span>{\n w[f] = w[f] || function<\/span>(<\/span>) <\/span>{\n (w[f].q = w[f].q || []).push(arguments<\/span>)\n };\n var<\/span> js, fjs = d.getElementsByTagName(s)[0<\/span>];\n if<\/span> (d.getElementById(id)){ return<\/span>; }\n js = d.createElement(s); js.id = id;\n js.onload = function<\/span>(<\/span>)<\/span>{\n \/\/ remote script has loaded<\/span>\n };\n js.async = true<\/span>;\n js.src = \"https:\/\/cdn.trackboxx.info\/p\/tracker.js\"<\/span>;\n fjs.parentNode.insertBefore(js, fjs);\n }(document<\/span>, 'script'<\/span>, trackboxx-script'<\/span>, window<\/span>, trackboxx'<\/span>));\n trackboxx('set'<\/span>, siteId'<\/span>, 'TB-XXXXXXX'<\/span>);\n trackboxx(trackPageview'<\/span>);\n<\/span><\/script<\/span>><\/span><\/code><\/span>Code language:<\/span> HTML, XML<\/span> (<\/span>xml<\/span>)<\/span><\/small><\/pre>\n\n\n
Basically, the script must be integrated into the header of your page so that all individual pages contain the tracking script and can therefore be monitored.<\/p>\n\n\n\n
\n\n\n\n7 | Field report from practice ?<\/h2>\n\n\n\n
\n\n\n\n8 | Hash tracking vs. other methods ?<\/h2>\n\n\n\n
\n \n
\n \n Method<\/th>\n Cookies<\/th>\n Personal reference<\/th>\n Long-term tracking<\/th>\n Banner required<\/th>\n <\/tr>\n <\/thead>\n \n Trackboxx Hash<\/strong><\/td>\n \u274c<\/span> None<\/td>\n \u274c<\/span> No<\/td>\n \u274c<\/span> Max. 24h<\/td>\n \u274c<\/span> No<\/td>\n <\/tr>\n \n Google Analytics<\/td>\n \u2705<\/span> Yes<\/td>\n \u2705<\/span> Yes<\/td>\n \u2705<\/span> Yes<\/td>\n \u2705<\/span> Yes<\/td>\n <\/tr>\n \n Server-Side GTM<\/td>\n \u274c<\/span> None<\/td>\n \u26a0\ufe0f<\/span> Possible<\/td>\n \u2705<\/span> Yes<\/td>\n \u26a0\ufe0f<\/span> Mostly<\/td>\n <\/tr>\n \n Fingerprinting<\/td>\n \u274c<\/span> None<\/td>\n \u2705<\/span> Yes<\/td>\n \u2705<\/span> Yes<\/td>\n \u26a0\ufe0f<\/span> Controversial<\/td>\n <\/tr>\n <\/tbody>\n <\/table>\n<\/div>\n\n\n\n
\n\n\n\n9 | Performance and SEO benefits ?<\/h2>\n\n\n\n
\n
\n
\n\n\n\n10 | Legal classification of the hash method ?<\/h2>\n\n\n\n
GDPR aspects:<\/h3>\n\n\n\n
\n
TDDDG aspects:<\/h3>\n\n\n\n
\n
Documentation obligations:<\/h3>\n\n\n\n
\n
11 | FAQ - Important questions answered ?<\/h2>\n\n\n
Is hash tracking really consent-free?<\/strong><\/h3>\n
Can the IP be reconstructed from the hash?<\/h3>\n
What specific data is stored?<\/h3>\n
Is the tracking as accurate as Google Analytics?<\/h3>\n
12 | Next steps ?<\/h2>\n\n\n\n