More in Privacy and security
- Cookieless analytics and consent
- The compliance center explained
- Export your data and handle deletion requests
- How does TapCub count visitors without cookies?
- Do I need a consent banner?
- Does TapCub honor Do Not Track and Global Privacy Control?
- What does the compliance center control?
- How do I set privacy rules per region?
- What does China mode do?
- How do IP truncation and data retention work?
- How do I export my raw data?
- How do I handle a data-subject (DSAR) request?
- How do I delete a site or my whole account?
- How do I keep personal data out of my analytics?
- All guides in this category
Still have a question?
Could not find it? A person reads every message, usually within a few hours on business days.
Chat with usShort answer
Tier 1 is anonymous aggregate (daily salt, no persistent ID), tier 2 is the cookie-free pseudonym default, and tier 3 is identified (a device ID and login may be used). The project default is tier 2; regional rules can lower it.
The three tiers
| Tier | Name | What is collected |
|---|---|---|
| 1 | Anonymous aggregate | Daily rotating salt, no persistent ID of any kind. Autocapture and identity calls are dropped. Pageviews and custom events are stored. |
| 2 | Cookie-free pseudonym | The default. No cookie; visitors separated by HMAC. |
| 3 | Identified | A device ID and a login may be used. Requires identified mode and a plan that includes it. |
Regions can lower the tier
The project default is tier 2. Regional rules can lower the tier for visitors from specific places — the built-in rule for the EEA and the UK is tier 2 with consent required. How to change these is in the compliance center. Heatmaps and autocapture need tier 2 or 3; cross-day funnels need balanced or tier 3.
Did this answer your question?
We use your answers to fix and expand this page.
Couldn’t send. Please try again in a minute.
Thanks for the feedback. We’ll use it to improve this page.You’ve already sent feedback on this page. Thanks.