Compliance

Cookieless visitor identification: is it more private?

The short answer

Cookieless visitor identification works mainly from the network and business signals of a visit, not from tracking cookies stored on a person's device. Because company-level identification can run without dropping non-essential cookies, it can sit on a cleaner footing than cookie-heavy tracking. It is not automatically "private", but it avoids one of the more contested parts of web tracking.

Cookies and IP are different things

Cookies and IP-based identification are different things. A reverse IP match reads where a visit comes from, it does not need to store a tracker on the visitor's device. That is why some identification can be described as cookieless.

This matters for consent. Non-essential cookies need consent under UK and EU rules. Identification that does not rely on them avoids that specific requirement, though you still need a lawful basis for any personal data.

The honest catch: cookieless does not mean rule-free. You still owe transparency and a lawful basis for personal data. It does mean you can identify companies without the cookie-consent friction that trips up cookie-based tracking. (General information, not legal advice.)

Frequently asked questions

No. Reverse IP reads where a visit comes from. It does not require storing a tracking cookie on the visitor's device.

Identify companies without the cookie-consent friction of cookie-based tracking.

Read: cookie consent