GA4 Without Cookies?
Obstacles From A Technology & Privacy Perspective
Markus Baersch
GA4 Without
Cookies
Why?
● Cookies are vulnerable
● Using tagging alternatives
● Collect data without consent
● Using short-lived IDs
GA4 <> Anything
Technical Problems
● No gtag rant (again)... but:
browser has control over session
○ starts
○ counting sessions
○ creating ID
■ must be a timestamp!
● A client ID is just not enough
● Engagement measurement
● No Consent Mode rant either! ;)
GA4 <> Anything
Privacy Problems
● “G” stands for “Google”
● Most people want more than just
statistics
● Running a GA4 setup without
consent is… problematic (at least)
GA4 Without
Cookies
How?
● GA4MP
● JENTIS (ok, there might be
cookies but you control every
value)
● “AOE” (German PHP stuff)
● Build your own endpoint
● ssGTM + walker.js FTW?
● Others?
GA4 Without
Cookies
What?
● Recognize session starts - very
hard if server-side!!!
● Build a Session Hash from IP
and UA?
○ Reg. changing salt?
○ Entropy?
● store session ID “somewhere”
● combine session hash with
session ID?
● “engagement” might be a
problem
● make every session_start a
first_visit by design
Server Side GTM
Why it is a challenge
● no consent = no gtag
● Session ID must be a timestamp
● No “session” or (easy)
persistence
○ Use Firestore for hash tables? Rly?
GA4 Reports
Some strange things
GA4 Reports
Some strange things
GA4 Reports
Some strange things
Client ID is Session ID: User Attribution
Client ID is Session ID: Traffic Attribution
Client ID is Session ID: Traffic Attribution (2)
Client ID is a Timestamp: User Attribution
Client ID is a Timestamp: Traffic Attribution
Done ;)
Build!
“Missing Manual”
(focus on ssGTM)
markus-baersch.de/gtmbook
Thank you! :)
Questions?
or feedback?
markus-baersch.de/bsky

GA4 Without Cookies [Measure Camp AMS]