Home » Analytics » How to Measure Website Traffic When Visitors Decline Cookies

How to Measure Website Traffic When Visitors Decline Cookies

Ben Swofford
Published: October 15, 2026
Analytics

Table of Contents

Add a header to begin generating the table of contents

This content was originally published in 2023. It was substantively updated by Leah Hart on 10/15/2026.

In an age where digital privacy is prioritized, navigating website analytics has become increasingly complex.

With the implementation of General Data Protection Regulation (GDPR) and the ubiquitous presence of cookie consent banners, it has become more difficult to accurately track your incoming website data in Google Analytics. Even for marketers who want to respect user privacy expectations as much as possible (which hopefully applies to most!), it is still important to have strong, reliable, and clear metrics that allow us to monitor performance and help tie digital strategies to true impact.

Cookie consent banners are a particular challenge for digital marketers. When your organization implements an opt-in approach for Google Analytics tracking, is there anything you can do to keep your website data usable?

Yes. You can keep your data usable after a cookie banner by combining three methods: a historical traffic estimate, Google Consent Mode, and GA4 behavioral modeling.

You don’t have to accept the blind spot, and you don’t have to rebuild your analytics setup to deal with it. This guide explains what each method does, what it needs, and where it falls short.

How does Google Analytics use cookies?

GA4 uses first-party cookies to recognize returning visitors and tie their activity into sessions. If a visitor declines those cookies, GA4 can’t connect that visitor’s activity.

Google Analytics is a powerful tool website owners use to track and report website traffic. A significant part of how it works is through cookies, small text files that are stored on a user’s computer when they visit a site.

These cookies play a crucial role in allowing websites to function correctly, such as by remembering that you are logged in. They also allow GA to track website traffic and user behavior, providing insights into metrics such as user demographics, session duration, bounce rates, and more.

How Do Cookies Work?

Cookies are text files stored on your computer by websites you visit, allowing these sites to relate your website behavior over time. This can range from your login information to items in your shopping cart, or in the case of Google Analytics, your interactions with a website.

The short video below provides a quick overview. If you want a video with a bit more detail, check out this 6-minute explainer.

It’s important to keep in mind, however, that Google transitioned all Analytics properties to the Google Analytics 4 (GA4) system which is designed with privacy in mind. For this reason, GA4 provides some features that assist with tracking even when users have denied cookies. More on this below.

GA4 sets two cookies of its own, listed in Google’s GA4 cookie documentation. When a visitor declines, neither is set, and GA4 can’t link that visitor’s visits together.

Cookie	Lifespan	What it does
_ga	2 years	Distinguishes one user from another
_ga_<container-id>	2 years	Keeps session state

For the settings that control what GA4 collects, see our guide to GA4 settings and built-in reports.

How do GDPR and cookie consent banners affect Google Analytics?

The GDPR set strict consent rules for collecting data from people in the EU. Cookie consent banners became the common way to meet those rules.

In 2018, the European Union began enforcing the GDPR to protect citizens’ privacy rights, introducing significant implications for the use of cookies. Now, many websites must clearly inform users about the cookies they use and obtain their consent before using them. This led to the dramatic increase in cookie consent banners that you may have noticed circa 2019.

The GDPR can also apply to sites based outside the EU. That happens when a site offers goods or services to people in the EU or monitors their behavior. Cookie banners are most common for companies that operate in the EU.

These developments have had a profound impact on Google Analytics tracking for the simple reason that if a user does not consent to cookies, their actions cannot be tracked, leading to gaps in data collection and potential inaccuracies in data interpretation.

If you’re not sure the GDPR applies to you, ask your legal counsel. For the bigger picture, see our take on data ethics in marketing.

How can you measure traffic that declines cookies?

Use three tactics: estimate total traffic from historical data, set up Google Consent Mode, and let GA4 model the gaps. Each one fills a different part of the picture.

Curious what strategies can be used to mitigate the impact of cookie consent banners? There are several options, all with varying degrees of difficulty and reliability.

Tactic	What it does	What it needs
Historical estimate	Compares GA4 and Search Console data from before and after your banner launched to estimate total traffic	Data from before the banner, plus Search Console access
Google Consent Mode	Adjusts how Google tags behave based on each visitor’s consent choice	A consent banner or widget, ideally connected through a CMP
GA4 behavioral modeling	Estimates the activity of visitors who decline analytics cookies	Consent Mode, plus enough daily events and users to qualify
Privacy-focused alternatives	Replace or supplement GA4 with a tool built around privacy	A new tool, with its own cost and setup

Estimate Your Total Traffic Using Historical Data

Compare your tracked Google organic traffic from before and after the banner went live against Search Console clicks to estimate what you can’t see. It’s an estimate, not a user-level count, but it’s often enough to report on trends.

One of the most cost-effective ways we have handled this situation is to create an estimate of total traffic using a combination of GA data from before and after the cookie banner implementation and Google Search Console data.

This tactic works because Search Console data is not impacted by cookies. So, by setting up a system that compares GA traffic from the “google / organic” source/medium both before and after the cookie banner went into effect, you can create a fairly reliable estimate of how many clicks are turning into “unconsented” and untracked sessions on the website.

Here’s a simple way to do it:

Pick a window before the banner launched and a window of the same length after. Match seasons and campaigns where you can.
In GA4, pull sessions from the “google / organic” source/medium for both windows. In Search Console, pull Google clicks for the same windows.
Divide GA4 sessions by Search Console clicks for each window. The ratio after, divided by the ratio before, is roughly the share of traffic you can still track.
Divide your tracked sessions by that share to estimate total traffic, and report it next to your tracked numbers.

The two tools count differently, so use this to track direction and rough size, not exact numbers.

For example, we estimated that one client was “losing” about 40% of traffic after the cookie banner implementation. In other words, about 40% of users were denying cookies and not being tracked in GA. Another was losing closer to 60% of traffic.

Using more advanced tracking and reporting systems, we have set this up as an ongoing tracking and reporting strategy for clients in this situation. If you are interested in implementing a similar solution for your company, reach out to our team.

Are you ready to take your analytics to the next level?

What is Google Consent Mode?

Google Consent Mode tells your Google tags what each visitor agreed to, so the tags can adjust. When a visitor says no, tags stop setting cookies and, in advanced mode, send minimal cookieless signals to Google instead.

To navigate the challenges posed by GDPR, Google introduced a specific feature called Consent Mode. This is a tool that helps you manage how Google tags behave before and after user consent. It’s a solution that can help businesses align their Google Analytics use with GDPR compliance and continue tracking valuable user data.

This is one potential solution for those seeking to mitigate analytics issues related to cookie denials, however it does require that you already have a consent banner or widget, and seems to work best if you integrate with a consent management platform (CMP).

When visitors deny consent, instead of storing cookies, tags send pings to Google. If you are using Google Analytics 4 [with Consent Mode], Google fills the data collection gaps with conversion modeling and behavioral modeling.

Google

A CMP is the tool that runs your banner and records each visitor’s choice. Consent Mode has two setups:

• Basic: Google tags are blocked until a visitor consents, so no data is collected before then.

• Advanced: Google tags load right away. If a visitor denies consent, tags skip the cookies and send minimal, cookieless pings that GA4 can use for modeling.

In November 2023, Google added two consent settings for advertising, ad_user_data and ad_personalization. If you run Paid Ads, ask your CMP provider whether both are set up.

How does GA4 model unconsented traffic?

GA4 uses behavioral modeling to estimate the activity of visitors who deny analytics cookies. It works only if Consent Mode is set up and your property has enough data.

GA4 uses machine learning and statistical modeling to automatically approximate the complete data picture for your website. The model learns from visitors who consent and applies those patterns to visitors who don’t. Your property needs to meet two thresholds:

• At least 1,000 events per day with analytics storage denied, for 7 or more days in a row.
• At least 1,000 daily users sending events with analytics storage granted, on at least 7 of the previous 28 days.

Google notes it can take more than 7 days of meeting those thresholds to train the model. Modeling turns on automatically once your property qualifies. Smaller sites may not reach these numbers, which is why the historical estimate above still matters.

The image below illustrates how this works when modeling “consented” and “unconsented” conversions from Google Ads.

Source: Google Help

Google signals is a separate feature. It adds cross-device and demographic data for signed-in users who have turned on Ads Personalization. Those visitors have opted in, so Google signals does not fill in for visitors who decline cookies.

To check that Consent Mode is working, use the Consent Overview in Google Tag Manager.

Check out the “Modeled data” section of this Search Engine Land guide on GA4 attribution for additional details about how all of this works. It is fascinating!

What other tools can help?

There are other strategies that can help you work around the limitations of cookie consent.

Using IP-lookup solutions can identify users’ locations, potentially allowing you to offer different user experiences based on geography. For non-EU users, who are not subject to GDPR, you might not need to offer the same cookie consent options, helping to ensure more complete tracking coverage. Some third-party tools offer this tactic as a feature, such as HubSpot and the cookie compliance tool CookiePro.

Other privacy laws, including state laws in the US, may still apply to those visitors, so check with your legal counsel first.

There are also several alternative tracking solutions you may want to explore. SimpleAnalytics bills itself as “the privacy-first Google Analytics alternative,” and Matomo (formerly known as Piwik) offers a privacy-focused alternative that is also free and open-source. However, these options come with their own sets of considerations, such as affordability, ease of use/setup, and giving up some features you may be used to in GA.

Taking the Next Step

You don’t have to solve this all at once. Start with the historical estimate, then add Consent Mode and modeling as your setup allows.

As GDPR responses have become commonplace and as user privacy continues to be a concern for website users and businesses alike, digital tracking will continue to be a challenge. But there are many strategies you can consider to ensure your metrics are as reliable as possible, from creating your own estimates to relying on Google or introducing a third-party.

For any of these approaches, FourFront’s analytics solutions may provide you with the expertise and guidance you need. In addition to ongoing reporting and the management of Google Analytics and Google Tag Manager, we can consult on how to ensure you collect the most accurate and privacy-considerate traffic data possible. We can also facilitate deciding on the most sustainable strategy for your needs and implement and manage the solution.

Explore what our analytics can do for your business.

Additionally, we have deep experience in using not only web analytics but data from internal and external data sources to predict future outcomes and help your team plan ahead. Check out our predictive analytics services to learn more.

Frequently Asked Questions

What are cookies and how do they work in tracking website traffic?

Cookies are small text files stored on your computer by the websites you visit. They help these sites remember information about your visit, such as your preferences, to provide a more personalized experience. In terms of tracking website traffic, cookies are used to collect data about users’ behavior on the site, including pages visited, time spent on the site, and the user’s path through the site.

Check out this 6-minute video for a more in-depth explanation.

Does GA work if cookies are disabled?

If cookies are disabled, Google Analytics will not be able to track user behavior in the same detailed way. While some basic information may still be collected, such as cookieless pings when Consent Mode is in advanced mode, the comprehensive user behavior data that cookies provide will be missing.

The exception is if you turn on features such as Consent Mode, which can fill part of the gap with behavioral modeling. See the sections above for more information.

What are the risks associated with violating GDPR?

Violating GDPR can result in severe penalties, including fines of up to 20 million Euros or 4% of a company’s global annual revenue, whichever is higher. Moreover, non-compliance can lead to reputational damage and loss of consumer trust.

For example, in 2021 Luxembourg’s data protection authority fined Amazon €746 million, and a Luxembourg court upheld the fine in March 2025. This is not legal advice, so talk with your legal counsel about your own risk.

What is Google Consent Mode and how can it help with GDPR compliance?

Google Consent Mode is a tool that allows website owners to determine how Google’s services should behave before and after obtaining users’ consent. This helps businesses balance their analytics and advertising requirements with their users’ privacy preferences, thus aiding in GDPR compliance. . Consent Mode v2 added ad_user_data and ad_personalization in November 2023.

How can I set up Google Tag Manager to work with a cookie consent banner?

Google Tag Manager can be configured to work with a cookie consent banner by setting up tags to fire only when consent has been given. This involves setting up triggers and variables based on user consent, a process detailed in Google Tag Manager’s official documentation.

What are some alternatives to Google Analytics for tracking website traffic?

There are now many privacy-centric alternatives to Google Analytics that offer various features such as cookieless tracking options. You may want to explore SimpleAnalytics, Matomo, Fathom, or others. These platforms vary in terms of cost, features, and ease of use, so be sure to consider your specific needs when making a selection.