A privacy-first web-analytics tag whose differentiator is agent trust: it tells real humans from bots and AI agents on every visit, fusing client runtime signals with the server-side IP / ASN / header / TLS-fingerprint (JA3) analysis voyk already runs. Cookieless by default, no cross-site tracking — a Google Analytics alternative with bot recognition built in. Try the live demo & one-tag setup or open your dashboard.
Two modes, one tag. Privacy mode (free, the default) — anonymous reach: every visit counted and real humans told from bots & AI agents, with no cookie and no consent banner. Loyalty mode (Pro, opt-in) — recognised retention: adds a consent-gated first-party cookie so you also see new vs returning visitors and loyalty over time. Same one-line tag; you choose the mode.
| Free | Pro pilot | Enterprise | |
| Price | € 0 | € 14 / month (pilot price for first customers) |
contact us |
| Visits / month | 100,000 no credit card |
generous default; cap set per customer — discuss | custom volume |
| Tracked properties | 1 | up to 10 | unlimited |
| Data retention | 30 days | 12 months | custom |
| Human / bot / AI-agent verdict (the differentiator) |
|||
| Live dashboard (humans vs bots, daily time series) |
|||
| Top pages & referrers | |||
| New vs returning visitors (Loyalty mode — opt-in cookie) |
— Privacy mode |
||
| TLS-fingerprint (JA3) signal | |||
| Dashboard read access | Site ID (UUID) is the read key | Site ID (UUID) is the read key | Site ID (UUID) is the read key |
| Raw event export | — | on request | |
| Support | community | e-mail, 24h on workdays | priority e-mail, 24h on workdays |
| SLA | — | 99.9% monthly availability | 99.9% monthly availability + status page |
| Price | free | € 14.00 / month | contact us |
All listed amounts are total prices. loxal operates under the small-business scheme of § 19 UStG (Kleinunternehmerregelung) and therefore does not charge or separately show VAT; the price you see is the final price you pay.
Cookieless by default, no cross-site tracking. Out of the box Analytics sets no cookies and assigns no cross-site identifier (Pro can optionally add one consent-gated first-party cookie to tell new visitors from returning). For bot detection it processes server-side request fingerprints — IP, ASN, User-Agent and TLS fingerprints (JA3) — alongside the verdict, page path, referrer host and country; the raw IP is never retained, only a pseudonymous hash.
Data attribution: IP Geolocation by DB-IP (DB-IP Lite database, CC BY 4.0). Bot / AI-agent recognition is computed by voyk.