No cookies · No consent banner · GDPR-safe
Analytics your visitors would actually consent to.
One script tag. No cookies, no fingerprinting, no consent banner. A dashboard that fits on one screen and tells you what actually happened.
Free up to 3,000 pageviews / month, forever.
northwind.studio
Live — click to explore4,208
Visitors
11,940
Pageviews
38%
Bounce rate
2m 14s
Avg. duration
Why teams switch
Everything you need, nothing you have to configure away.
No cookies, no banner
Nothing is stored in the visitor's browser, so there's no consent banner to show and no cookie policy to write.
Under 1kb, async
The tracking script is smaller than most tracking pixels and never blocks page render.
GDPR / CCPA safe by design
Visitor IDs are a daily-rotating hash, never a raw IP. There's nothing personally identifying to request, export, or delete.
One screen, not fifty reports
Visitors, pageviews, top pages, top referrers, devices. The numbers that actually change what you do next — nothing else.
Real-time enough
A new pageview shows up in your dashboard within seconds of landing, not after an overnight processing job.
Public stats, if you want them
Share a live dashboard link — the same trust signal 'view our stats' pages give SaaS landing pages.
How it works
Live in under two minutes.
Add your site
Just a domain — no verification email, no DNS record to prove ownership.
Paste one script tag
One line, in the head of your site. Works with anything that renders HTML.
Watch it live
The install page confirms your first pageview the moment it lands.
Simple pricing
Free to start. Cheap to stay.
No per-seat pricing, no locked-down "enterprise" tier for basic features.
See pricingQuestions
FAQ
Why not just use Google Analytics?+
GA is free but it isn't cookieless, which means a consent banner (and the visitor drop-off that comes with it). It's also built for teams who want fifty reports — Glassbox is built for the ten seconds you actually spend looking at analytics between other things.
Is this actually GDPR-compliant?+
No cookies are set and no raw IP address is ever stored — the visitor identifier is a one-way hash that changes every day, so it can't be tied back to a person or used to track someone across days. Most legal guidance treats that as outside the scope of cookie-consent requirements, but you should still confirm with your own counsel for your specific case.
Does it work with single-page apps?+
The script fires on load. For client-side route changes without a full page reload, you'd call the same collect endpoint on each route change — a small SPA adapter is on the roadmap.
What happens if I go over my plan's pageview limit?+
You'll get a heads-up by email at 80%. Nothing gets cut off mid-month — we ask you to upgrade before the next billing cycle instead.