Preview

Analytics — with Bot Recognition

A Big-Tech-independent, cookieless, low-footprint web-analytics tag that tells real humans from bots and AI agents. One small tag, your true traffic — and not a single byte handed to an ad network.

Curious? See how Analytics classifies your own visit →

Free plan

no credit card · one site

No VAT is charged or shown (§ 19 UStG Kleinunternehmerregelung).

Independent by design

Analytics answers to no platform, no conglomerate, and no cause. It's a small, self-contained tool that counts your traffic — and does nothing else with it.

No Big Tech. Not Google / Google Analytics, not Microsoft / Bing — your visitors are never fed into an ad-tech or surveillance pipeline.
No Big Corpo. No conglomerate owner, no investor growth mandate, no “engagement” upsell — just the numbers you asked for.
No agenda. Analytics is politically neutral — not an activist or advocacy organization (e.g. Proton) with a cause to advance. It asks nothing of you beyond measuring your own site.
Low footprint. One tiny script, no cookies, no consent banner for the essential tag, EU-hosted — light on your page load and on your data exposure.

Privacy-safe by default. Opt in to more when you need it.

The one-line tag ships with a privacy-safe core that measures traffic and classifies bots — and nothing else. Every feature that could conceivably touch a visitor's device or attention is off by default and must be switched on per-site with a query flag on your tag URL. Turn on only what your business genuinely needs; the rest never runs on your visitors' browsers.

Always on — privacy-safe core

No cookies, no cross-site tracking, no ad-tech pipeline
No personal data leaves the browser — visitor IP is hashed server-side, never stored raw
JA3 fingerprints are k-anonymity-floored before display
GeoIP is resolved from server headers only — no client-side geolocation prompt
EU-hosted, ad-network-independent

You decide, per site

&cookies=true — recognise returning visitors via one first-party same-site cookie
&banner=true — drop-in consent banner in equal-prominence Accept / Decline style
&vitals=true — measure Core Web Vitals (LCP, INP, CLS, TTFB) from real visitors, P75-aggregated
&engagement=true — measure engagement depth (visible time on page, deepest scroll %, interaction count) plus an engaged-rate KPI
&outbound=true — measure outbound clicks & downloads (top external destinations, top downloaded file types) with a single delegated click listener

Kitchen-sink example (all opt-ins enabled):
<script src="https://api.lifub.com/analytics.js?siteId=YOUR-ID&cookies=true&banner=true&vitals=true&engagement=true&outbound=true" async></script>

What you get

Bot-aware traffic counts — every visit classified human / suspect / bot, not just a hit.
Agent trust: fuses client runtime signals with server-side IP / ASN / header and TLS-fingerprint (JA3) analysis.
A live dashboard: totals plus a per-day human-vs-bot time series for your site.
Optional Core Web Vitals — opt in with &vitals=true to see P75 LCP / INP / CLS / TTFB measured from your real visitors, colour-coded against Google's field thresholds.
Optional engagement depth — opt in with &engagement=true to see median visible time on page, deepest scroll %, interaction count, and an engaged-rate KPI (share of visits that were genuinely sticky).
Optional outbound clicks & downloads — opt in with &outbound=true to see which external destinations your visitors leave to (top hosts) and which files they download (top file extensions). Only destination host + lowercased extension leave the browser; never the raw href.
One-line embed, no cookies, no consent banner needed for the essential tag.
Keyless to start — the beacon runs anonymously (rate-limited); no signup to evaluate.
Email support, answered within 24h on workdays.

Your site, your key

No account, no login, no BigTech-owned profile. A site starts open and you claim it on your own terms — the key is generated in your browser and never reaches our servers in the clear.

Public to start. Your site ID is a public read key — it ships in the one-line tag, and anyone can see that site's human-vs-bot numbers. No gate, no signup.
Claim it with a self-custodied secret. A one-click site secret is generated in your browser and stored only there. The first time you use it to change a setting it claims the site (trust-on-first-use); from then on only that secret can change its config.
We never hold your secret. The server keeps only a salted hash — a database dump can't recover it — and config changes are proof-of-work gated against abuse, not locked behind a paid account.
Analytics stay public by default — share a link, no login. A private toggle in your dashboard lets you restrict your numbers to your own secret whenever you choose.

Who this is for

Want real numbers

Teams tired of bot-inflated pageviews who want to know how many humans actually visit.

Privacy-conscious

Sites looking for a cookieless, EU-hosted Google Analytics alternative.

Under bot pressure

Pages hit by scrapers, AI crawlers, and automation you want to see and separate out.

Any tech stack

WordPress, Jekyll, a SPA, hand-written HTML — if it runs a script tag, it runs Analytics.

What Analytics does not include

Raw event export

Aggregated stats only for now; per-visit export is a later addition.

Per-site auth

The site id is the dashboard read key — keep it private.

Uptime SLA

Best-effort service; no incident credits.

Phone / 24/7

Email support, 24h on workdays.

Many sites

The Free plan covers one site; email us for multi-site scope.

Crypto billing

Crypto billing is not supported.

Plan terms at a glance

Free plan, with no card required.
Email support answered within 24h on workdays.
Cookieless essential tag; visitor IPs are processed for the verdict and not retained as raw logs.
Governed by our Terms of Service; German law, Munich jurisdiction.
No phone / 24-7 SLAs, incident-credit guarantees, or crypto payments at this service level.

Analytics — Pricing

A privacy-first web-analytics tag whose differentiator is agent trust: it tells real humans from bots and AI agents on every visit, fusing client runtime signals with the server-side IP / ASN / header / TLS-fingerprint (JA3) analysis Lifub already runs. Cookieless by default, no cross-site tracking — a Google Analytics alternative with bot recognition built in. Try the live demo & one-tag setup or open your dashboard.

Two modes, one tag. Privacy mode (free, the default) — anonymous reach: every visit counted and real humans told from bots & AI agents, with no cookie and no consent banner. Loyalty mode (Pro, opt-in) — recognised retention: adds a consent-gated first-party cookie so you also see new vs returning visitors and loyalty over time. Same one-line tag; you choose the mode.

Before you measure who visits, grade what they see: the free Site Audit checks your security headers, TLS, and technical SEO in seconds — no signup, every finding explained.

Privacy-safe by default. Opt in to more when you need it.

Every plan ships the same privacy-safe core: no cookies, no cross-site tracking, no personal data, visitor IPs hashed server-side, JA3 fingerprints k-anonymity-floored, GeoIP resolved from server headers only. Anything that could touch a visitor's device or attention is off by default and switched on per-site with a query flag on your tag URL: &cookies=true for returning-visitor detection, &banner=true for the equal-prominence consent UI, &vitals=true for Core Web Vitals (LCP / INP / CLS / TTFB, P75-aggregated), &engagement=true for engagement depth (time on page, scroll %, interaction count) plus an engaged-rate KPI, &outbound=true for outbound clicks & downloads (top external destinations and top downloaded file types). Every opt-in is off unless you flip it on, per site.

Plan Overview
	Free	Pro	Enterprise
Price	€ 0	€ 14 _{/ month}	contact us
Visits / month	100,000 no credit card	generous default; cap set per customer — discuss	custom volume
Tracked properties	1	up to 10	unlimited
Data retention	30 days	12 months	custom
Human / bot / AI-agent verdict (the differentiator)
Live dashboard (humans vs bots, daily time series)
Top pages & referrers
New vs returning visitors (Loyalty mode — opt-in cookie)	— Privacy mode
TLS-fingerprint (JA3) signal
Dashboard read access	Site ID (UUID) is the read key	Site ID (UUID) is the read key	Site ID (UUID) is the read key
Raw event export	—	on request
Support	community	e-mail, 24h on workdays	priority e-mail, 24h on workdays
SLA	—	99.9% monthly availability	99.9% monthly availability + status page
Price	free	€ 14.00 _{/ month}	contact us

All listed amounts are total prices. Lifub operates under the small-business scheme of § 19 UStG (Kleinunternehmerregelung) and therefore does not charge or separately show VAT; the price you see is the final price you pay.

Cookieless by default, no cross-site tracking. Out of the box Analytics sets no cookies and assigns no cross-site identifier (Pro can optionally add one consent-gated first-party cookie to tell new visitors from returning). For bot detection it processes server-side request fingerprints — IP, ASN, User-Agent and TLS fingerprints (JA3) — alongside the verdict, page path, referrer host and country; the raw IP is never retained, only a pseudonymous hash.

Set up Analytics

Data attribution: IP Geolocation by DB-IP (DB-IP Lite database, CC BY 4.0). Bot / AI-agent recognition is computed by Lifub.

See your real traffic in 60 seconds

No signup, no credit card. Pick a site id, copy the one-line tag, and watch your humans-vs-bots-vs-AI split populate live on the Free plan.

Set up Analytics — free

Support indie, corporate-free software! Buy me a coffee!

The live demo scores your own visit right now and hands you the embed — no account needed. Want a hand wiring it up, a higher quota, or a locked-down dashboard? Email info@lifub.com — 24h reply on workdays.