WordPress: Set Koko Analytics to be as data-efficient as possible
At Koko Analytics, “cookieless” is not the same as “unrecognized.” That’s why the tracking method you choose is crucial.
Requirements
You need WordPress administration access and should decide in advance whether unique visitors are even needed.
Three modes
Koko documents cookie tracking, cookieless tracking and a mode without visitor detection. The cookieless mode creates a daily changing hash of the IP address, user agent and secret. According to the manufacturer, the IP and user agent are not saved themselves, but are processed to form a hash.
For maximum data minimization
If unique visitors are not needed: Pageview counting only / no visitor detection select. Then page views are counted without recognizing visitors.
Test
After the change, carry out test calls and check whether the selected mode works without unwanted cookies or permanent visitor recognition.
Dismantling
If required statistics are missing, reset to the previous Koko mode and document and check the resulting recognition again.
If unique visitors are needed
Then transparently document which method is used. A daily rotating hash is significantly more limited than a permanent profile, but remains a form of temporary recognition.
Basics for classification
Don't just pay attention to cookies when evaluating: Cookieless is not automatically tracking-free. If “unique visitors” are recorded, also note Unique visitors without recognition .
Related guides
Sources and verification
This guide is based on multiple current sources. Vendor documentation is not treated as proof that every concrete installation automatically follows the same privacy characteristics.
Important: IP processing is not IP storage
An IP address has to be processed to establish and deliver a network connection. Hosting providers, firewalls or DDoS protection may also process or retain it for a limited time for security purposes. No Logging distinguishes this security layer from unnecessary persistent visitor logging by the website, application and ordinary access logs.