The Digital Omnibus Wants to Exempt First-Party Analytics From Consent
The EU's November 2025 Digital Omnibus proposes a consent exemption for first-party, internal-use audience measurement. It describes the model cookie-free analytics already runs.
Read more →When Is a Hash Personal Data? The CJEU's SRB Ruling and Analytics Identity
The CJEU's EDPS v SRB judgment made identifiability a relative, contextual test. Here is what that means for hash-based analytics — and why a daily-rotating salted hash survives both the court's reading and the EDPB's stricter one.
Read more →Consent Mode v2 and the June 2026 Google Signals Sunset
On June 15, 2026, ad_storage becomes the sole control over advertising data in Google's stack. Here is what the Google Signals sunset changes for developers — and why the whole machinery is something cookie-free analytics never had to build.
Read more →Storage Limitation Is the 2026 Enforcement Frontier for Analytics
Regulators stopped asking whether you collected data lawfully and started asking when you deleted it. After the CNIL's €42M Free ruling and the EDPB's erasure sweep, analytics retention is the audit target.
Read more →Global Privacy Control Is Now a Binding Opt-Out Signal in Ten States
GPC is no longer advisory. After the Disney settlement and a three-state enforcement sweep, the Sec-GPC header is legally binding across ten US states — and cookie-free analytics has nothing to honor.
Read more →The Cookie Law Is No Longer About Cookies: What Article 5(3) Now Covers
EDPB Guidelines 2/2023 extended ePrivacy consent rules to pixels, URL tracking, and IP-only identification. Recent CNIL and Garante decisions confirm the technology-neutral reading. Here is what changes for developers.
Read more →Inaccessible Consent Banners Now Create Two Legal Liabilities, Not One
The European Accessibility Act made WCAG 2.2 enforceable in June 2025. A banner a screen reader cannot navigate invalidates GDPR consent. Cookie-free analytics sidesteps both problems.
Read more →