Pilot

Analytics — with Bot Recognition

A Big-Tech-independent, cookieless, low-footprint web-analytics tag that tells real humans from bots and AI agents. One small tag, your true traffic — and not a single byte handed to an ad network.

Curious? See how Analytics classifies your own visit →

Free during the pilot

no credit card · one site · paid plans introduced after the pilot

No VAT is charged or shown (§ 19 UStG Kleinunternehmerregelung).

Independent by design

Analytics answers to no platform, no conglomerate, and no cause. It's a small, self-contained tool that counts your traffic — and does nothing else with it.

No Big Tech. Not Google / Google Analytics, not Microsoft / Bing — your visitors are never fed into an ad-tech or surveillance pipeline.
No Big Corpo. No conglomerate owner, no investor growth mandate, no “engagement” upsell — just the numbers you asked for.
No agenda. Analytics is politically neutral — not an activist or advocacy organization (e.g. Proton) with a cause to advance. It asks nothing of you beyond measuring your own site.
Low footprint. One tiny script, no cookies, no consent banner for the essential tag, EU-hosted — light on your page load and on your data exposure.

Privacy-safe by default. Opt in to more when you need it.

The one-line tag ships with a privacy-safe core that measures traffic and classifies bots — and nothing else. Every feature that could conceivably touch a visitor's device or attention is off by default and must be switched on per-site with a query flag on your tag URL. Turn on only what your business genuinely needs; the rest never runs on your visitors' browsers.

Always on — privacy-safe core

No cookies, no cross-site tracking, no ad-tech pipeline
No personal data leaves the browser — visitor IP is hashed server-side, never stored raw
JA3 fingerprints are k-anonymity-floored before display
GeoIP is resolved from server headers only — no client-side geolocation prompt
EU-hosted, ad-network-independent

You decide, per site

&cookies=true — recognise returning visitors via one first-party same-site cookie
&banner=true — drop-in consent banner in equal-prominence Accept / Decline style
&vitals=true — measure Core Web Vitals (LCP, INP, CLS, TTFB) from real visitors, P75-aggregated
&engagement=true — measure engagement depth (visible time on page, deepest scroll %, interaction count) plus an engaged-rate KPI
&outbound=true — measure outbound clicks & downloads (top external destinations, top downloaded file types) with a single delegated click listener

Kitchen-sink example (all opt-ins enabled):
<script src="https://api.loxal.net/analytics.js?siteId=YOUR-ID&cookies=true&banner=true&vitals=true&engagement=true&outbound=true" async></script>

What you get

Bot-aware traffic counts — every visit classified human / suspect / bot, not just a hit.
Agent trust: fuses client runtime signals with server-side IP / ASN / header and TLS-fingerprint (JA3) analysis.
A live dashboard: totals plus a per-day human-vs-bot time series for your site.
Optional Core Web Vitals — opt in with &vitals=true to see P75 LCP / INP / CLS / TTFB measured from your real visitors, colour-coded against Google's field thresholds.
Optional engagement depth — opt in with &engagement=true to see median visible time on page, deepest scroll %, interaction count, and an engaged-rate KPI (share of visits that were genuinely sticky).
Optional outbound clicks & downloads — opt in with &outbound=true to see which external destinations your visitors leave to (top hosts) and which files they download (top file extensions). Only destination host + lowercased extension leave the browser; never the raw href.
One-line embed, no cookies, no consent banner needed for the essential tag.
Keyless to start — the beacon runs anonymously (rate-limited); no signup to evaluate.
Email support, answered within 24h on workdays.

Your site, your key

No account, no login, no BigTech-owned profile. A site starts open and you claim it on your own terms — the key is generated in your browser and never reaches our servers in the clear.

Public to start. Your site ID is a public read key — it ships in the one-line tag, and anyone can see that site's human-vs-bot numbers. No gate, no signup.
Claim it with a self-custodied secret. A one-click site secret is generated in your browser and stored only there. The first time you use it to change a setting it claims the site (trust-on-first-use); from then on only that secret can change its config.
We never hold your secret. The server keeps only a salted hash — a database dump can't recover it — and config changes are proof-of-work gated against abuse, not locked behind a paid account.
Analytics stay public by default — share a link, no login. A private toggle in your dashboard lets you restrict your numbers to your own secret whenever you choose.

Who this is for

Want real numbers

Teams tired of bot-inflated pageviews who want to know how many humans actually visit.

Privacy-conscious

Sites looking for a cookieless, EU-hosted Google Analytics alternative.

Under bot pressure

Pages hit by scrapers, AI crawlers, and automation you want to see and separate out.

Any tech stack

WordPress, Jekyll, a SPA, hand-written HTML — if it runs a script tag, it runs Analytics.

What the pilot does not include

Raw event export

Aggregated stats only for now; per-visit export is a later addition.

Per-site auth

The site id is the dashboard read key during the pilot — keep it private.

Uptime SLA

Best-effort during the pilot; no incident credits yet.

Phone / 24/7

Email support, 24h on workdays.

Many sites

One site per pilot; email us for multi-site scope.

Crypto billing

Not during the pilot (and there is nothing to bill yet anyway).

Pilot terms at a glance

Free during the pilot, no card collected; paid plans introduced afterwards.
Email support answered within 24h on workdays.
Cookieless essential tag; visitor IPs are processed for the verdict and not retained as raw logs.
Governed by our Terms of Service; German law, Munich jurisdiction.
No phone / 24-7 SLAs, no incident-credit guarantees, no crypto payments at pilot stage.

See your real traffic in 60 seconds

No signup, no credit card. Pick a site id, copy the one-line tag, and watch your humans-vs-bots-vs-AI split populate live. Free during the pilot.

Set up Analytics — free Talk to us

The live demo scores your own visit right now and hands you the embed — no account needed. Want a hand wiring it up, a higher quota, or a locked-down dashboard? Email us — 24h reply on workdays.