About GhostlyX

Privacy-first web analytics,
built without compromise

GhostlyX is a cookieless web analytics platform that gives you accurate, actionable data without storing personal information, setting cookies, or requiring a consent banner. GDPR compliant by design, not by configuration.

What is GhostlyX?

GhostlyX is a privacy-first web analytics platform that measures pageviews, sessions, referrers, countries, devices, and custom events without using cookies or storing personal data. It is built and operated by Varsuite Media Group Ltd, a company registered in England and Wales. The tracking script is under 2 kB gzipped, loads asynchronously, and has no impact on Core Web Vitals.

Unlike Google Analytics, GhostlyX does not identify individuals, does not track users across sites, and does not transfer data to advertising networks. Every metric you see in the dashboard is derived from aggregate, anonymous data.

Why we built a privacy-first analytics platform

Most analytics tools track users across the web, store personal data indefinitely, and require cookie consent banners that interrupt the browsing experience. They were designed for a world where advertising revenue depended on surveillance.

GhostlyX was built on a different premise: that understanding your website's audience should not come at the cost of your visitors' privacy. You get accurate data on pageviews, referrers, countries, devices, and custom events without any personal information ever entering the system.

No cookies. No fingerprinting. No cross-site tracking. Just the metrics you need, delivered cleanly.

No cookies, ever

The GhostlyX tracking script stores nothing in the browser. No cookie consent banner is required under PECR, GDPR, or UK GDPR.

GDPR compliant by design

GhostlyX processes no personal data, so analytics activity requires no legal basis under GDPR Article 6. There is nothing to delete, nothing to export, and no data subject requests to fulfil.

Under 2 kB, zero performance impact

The tracking script is under 2 kB gzipped and loads asynchronously. It does not block rendering and has no measurable impact on Core Web Vitals or Lighthouse scores.

No cross-site tracking

GhostlyX does not share data with advertising networks and does not identify visitors across different websites. Analytics data belongs to you and is never sold or used for targeting.

How cookieless analytics works in GhostlyX

GhostlyX uses a daily-rotating, one-way hash to count unique visitors without storing personal data. Here is what happens when a pageview is recorded.

Script fires

The sub-2 kB tracking script sends a pageview request to GhostlyX servers. No cookies are read or set.

Hash computed

A one-way hash is derived from the IP address, user-agent, and site ID. The raw IP is used only at this step and never written to disk.

Geo derived

The IP address is mapped to a country and region. The full address is then discarded immediately.

Hash rotates daily

The hash resets every 24 hours. It cannot be reversed to identify any individual and is not stored across days.

Aggregate stored

Only anonymised, aggregate metrics are written to the database: page, referrer, country, device type, and custom event data.

Dashboard updated

Your real-time dashboard reflects the pageview instantly. No personal data is ever stored, displayed, or exportable.

Global privacy compliance without configuration

Because GhostlyX never processes personal data, compliance with the major privacy regulations is a product-level guarantee rather than a setting you need to configure.

The tracking script reads the Global Privacy Control (GPC) and Do Not Track (DNT) browser signals. If either is set, no analytics data is collected for that visitor.

GhostlyX does not require a data processing agreement for analytics data because no personal data is transferred. You remain fully in control of your compliance posture.

GDPR

European Union

No personal data processed. No legal basis required.

UK GDPR

United Kingdom

Same standard as EU GDPR. Fully compliant post-Brexit.

PECR

United Kingdom

No cookies set. No consent banner required.

CCPA

California, USA

No personal information sold or shared with third parties.

ePrivacy

European Union

No cookies or tracking technologies requiring consent.

PIPEDA

Canada

No personal information collected or stored.

Built for teams who value simplicity and trust

GhostlyX is built by a small team with a single focus: making web analytics simple, fast, and respectful of users. No bloat, no surveillance, no dark patterns.

We built GhostlyX because we were unhappy with the existing options. Every analytics product we tried was either invasive, slow, or too complex to be useful. So we built the tool we wanted to use ourselves.

Get in touch

Frequently asked questions

What is GhostlyX?

GhostlyX is a privacy-first web analytics platform that measures pageviews, sessions, referrers, countries, devices, and custom events without using cookies or storing personal data. It is built and operated by Varsuite Media Group Ltd, registered in England and Wales.

Who built GhostlyX?

GhostlyX is built and operated by Varsuite Media Group Ltd (company number 14243978), registered in England and Wales. The registered address is Mentor House, Ainsworth St, Blackburn, Lancashire, BB1 6AY, United Kingdom.

Is GhostlyX GDPR compliant?

Yes. GhostlyX does not collect or store personal data, so analytics activity does not require a legal basis under GDPR Article 6. No data processing agreement is needed for the analytics data itself, and no cookie consent banner is required.

Does GhostlyX use cookies?

No. GhostlyX sets no cookies of any kind. The tracking script stores nothing in the browser, which means sites using GhostlyX do not need a cookie consent banner for analytics under PECR, GDPR, or UK GDPR.

How does GhostlyX identify unique visitors without cookies?

GhostlyX uses a daily-rotating, one-way hash derived from the IP address, user-agent string, and site identifier. This hash resets every 24 hours, cannot be reversed to identify an individual, and raw IP addresses are never stored.

Does GhostlyX use device fingerprinting?

No. GhostlyX does not collect canvas data, font lists, screen characteristics, WebGL output, or any other fingerprinting vector. Visitor uniqueness is determined using a short-lived, non-reversible daily hash only.

Where is GhostlyX analytics data stored?

GhostlyX processes and stores analytics data on servers in the European Union. No personal data is written to disk. Raw IP addresses are used only to derive country-level geo data at the point of collection and are discarded immediately.

Is GhostlyX suitable for sites with EU or UK visitors?

Yes. Because GhostlyX is cookieless and collects no personal data, it is suitable for any site with European audiences under GDPR and UK GDPR without requiring a consent mechanism for analytics.