citare
Product · Web Analytics

Cookieless first-party web analytics, inside the SEO suite

Zero cookies on your visitors. Zero GA4 dependency. Zero cookie banner. 1.5KB snippet. The same dashboard that tracks your AIO citations and Brand Radar surface rate now also tracks pageviews, sources, devices, and countries — privacy-clean by default. Free forever on Citare’s free tier (1 property, 30-day retention).

What you get

Zero cookies, zero localStorage, zero fingerprinting

The snippet sets nothing on the visitor's browser. Visitor identity is a daily-rotating SHA-256 hash that expires every 24 hours — same person on day 2 is mathematically a different visitor. No GDPR cookie banner required because we don't use cookies.

1.5 KB minified, sub-50ms beacon

The snippet is one defer-loaded script with no dependencies, no fetch polyfill, no SPA framework requirement. navigator.sendBeacon with fetch fallback. p99 ingest latency under 50ms on the Cloudflare Workers edge — closest of 330+ data centers.

Plausible-style top-of-funnel metrics

Unique visitors, pageviews, sessions (30-min window), bounce rate, top pages, top sources, by device, by country. Aggregated daily into Citare's standard time-series so it sits next to your SEO + AI search dashboards — same UI, same date range, same dashboard.

DNT + Sec-GPC respected automatically

Do Not Track and Global Privacy Control browser signals stop the beacon at the client before it fires — no opt-in handshake required. Plus a one-click opt-out at wa.citare.ai/wa-opt-out covers every Citare-tracked site for one year.

Built into the SEO + AI search platform

Visitor data lives in the same dashboard as your Rank Tracker, Brand Radar, Site Audit, and GSC Insights. Cross-reference an AIO citation against pageview spikes from that AI engine. No swivel-chairing between Plausible + Ahrefs + Profound + GA4.

Per-property tier-driven retention

Free tier keeps 30 days, Pulse 90, Pro 365, Agency + Enterprise 365+. Real-time view (last-30-min visitors) unlocks on Pulse+. Custom events (window.citare('event', {...})) also Pulse+.

Install

Sign up free → add your domain in /settings/web-analytics → paste the generated snippet inside your site’s <head>. The first pageview auto-verifies the property. Data appears in the dashboard within seconds (real-time view) or on the next daily rollup (full breakdown).

<script defer src="https://wa.citare.ai/wa.js" data-property="wa_<your_property_id>"></script>

Replace wa_<your_property_id> with the property ID Citare generates for your domain after signup. The snippet auto-handles SPA navigation, DNT, Sec-GPC, and the cross-origin opt-out flow.

Compared with GA4, Plausible, and Cloudflare Web Analytics

 CitareGA4PlausibleCF WA
Visitor cookiesZeroMultiple (analytics, advertising)ZeroZero
Visitor IP storedNo — only ISO2 countryCoarse-grained, varies by regionNoNo
Cookie banner requiredNoYes in EU/UKNoNo
Integrated with SEO + AI searchYes — same dashboardNoNoNo
Free tier1 property, 30-day retentionUnlimited30-day trial onlyUnlimited (CF-hosted sites)
Snippet size~1.5KB~46KB (gtag.js)~1KB~5KB (beacon.min.js)
Real-time viewPulse+ ($35/₹2,999)FreeFreeFree

Comparison reflects publicly documented product behavior as of May 2026. CF Web Analytics is free for sites that route through a Cloudflare zone; Citare Web Analytics works on any host with no CF dependency on the customer side.

Frequently asked questions

How is Citare Web Analytics different from Plausible or Fathom?

Same privacy posture (zero cookies, first-party, GDPR-clean), but the data lives inside the Citare SEO + AI search dashboard alongside Rank Tracker, Brand Radar, GSC Insights, and Site Audit. You can pivot from 'AIO citation surge on /pricing' to 'pageview spike from chatgpt.com referral' in the same product. Plausible-class privacy + Ahrefs-class platform integration.

Does Citare Web Analytics replace Google Analytics 4?

For most SEO-driven sites — yes. We cover the metrics that actually matter for SEO programs: visitors, pageviews, sources, devices, countries, top pages. We don't try to replicate GA4's e-commerce, custom funnels, BigQuery export, or paid-ads attribution — if you need those, keep GA4 and use Citare alongside.

How do you measure unique visitors without cookies?

Server-side SHA-256 hash of (daily-rotating salt || IP || User-Agent || property_id), truncated to 64 bits. The salt rotates every UTC midnight via a KV-stored value, so the same visitor on day 2 produces a mathematically different hash and cannot be tracked across days. The visitor IP itself is never written to storage — only the hash + the ISO2 country code from Cloudflare's edge.

What happens when a visitor has DNT or Global Privacy Control enabled?

The snippet checks navigator.doNotTrack and navigator.globalPrivacyControl on every page load. If either is set, the beacon never fires — no event written, no AE row, nothing. Honored automatically with no per-site config required.

Where does the data physically live, and what's the retention policy?

Beacon events land in Cloudflare Analytics Engine (citare_wa_events dataset) for daily aggregation; the aggregated daily metrics live in Citare's Postgres database (region ap-south-1 / Mumbai). Per-property retention is enforced by daily cron — 30 days on Free, 90 on Pulse, 365 on Pro+, custom on Enterprise. AE raw event retention is Cloudflare's platform default (90 days) but the visitor hash is already daily-rotated so cross-day visitor tracking is mathematically impossible regardless.

Can my visitors opt out of being measured?

Yes. Direct them to https://wa.citare.ai/wa-opt-out and one click sets a wa_opt_out cookie scoped to the beacon subdomain (1-year lifetime). Every beacon from that browser to any Citare-tracked site silently returns 204 without writing anything to AE. One opt-out, all Citare-tracked sites.

Free forever tier — start in 60 seconds

1 property, 30-day retention, full daily-rollup dashboard. Real-time view + custom events unlock at Pulse $35/₹2,999.