Jurisdiction guidance

This page shows the same guidance data that Settings → Privacy uses, and the rules Pipetrace applies to each country. Counting without cookies before consent is offered where the law allows; this page explains the situation for each country.

Much of this guidance concerns the rules on storing or reading information on a visitor's device (in the EU, national laws implementing the ePrivacy Directive), which apply alongside the GDPR. The EDPB (Guidelines 2/2023) considers that a script which makes the browser send information can fall under these rules even when nothing is stored; check this for tier 1 as well as tier 2.

Pre-consent guidance by the owner's country

Anonymous counts is the default pre-consent setting for new sites in every country. The status of Anonymous sessions depends on where you, the site owner, are established. This is information only: you can still choose either setting.

Owner established in	Anonymous counts	Anonymous sessions	Countries and codes
FR, ES, IT, NL	Pipetrace's default	Supported: national guidance exempts first-party aggregate measurement	France (FR), French Guiana (GF), Guadeloupe (GP), Italy (IT), Martinique (MQ), Mayotte (YT), Netherlands (NL), Réunion (RE), Saint Martin (French part) (MF), Spain (ES)
GB	Pipetrace's default	Supported: DUAA 2025 statistical-purposes exemption, in force since 5 Feb 2026	United Kingdom (GB)
DE	Pipetrace's default	Case by case (DSK). The owner accepts the risk	Germany (DE)
PT, IE and other EEA	Pipetrace's default	No national exemption. The owner accepts the risk	Åland Islands (AX), Austria (AT), Belgium (BE), Bulgaria (BG), Croatia (HR), Cyprus (CY), Czechia (CZ), Denmark (DK), Estonia (EE), Finland (FI), Gibraltar (GI), Greece (GR), Guernsey (GG), Hungary (HU), Iceland (IS), Ireland (IE), Isle of Man (IM), Jersey (JE), Latvia (LV), Liechtenstein (LI), Lithuania (LT), Luxembourg (LU), Malta (MT), Norway (NO), Poland (PL), Portugal (PT), Romania (RO), Slovakia (SK), Slovenia (SI), Sweden (SE)
Non-EEA	Pipetrace's default	Supported	Every other country

Switzerland (CH) follow the last row of this table, but owners established there must still ask for consent everywhere (below).

Owners who must ask for consent everywhere

If you are established in one of these places, your data-protection law covers every visitor, wherever the visitor is (GDPR Art. 3(1) or its equivalent). Pipetrace therefore offers you only "Consent required everywhere", and the API rejects the regional mode for your sites.

European Economic Area: Austria (AT), Belgium (BE), Bulgaria (BG), Croatia (HR), Cyprus (CY), Czechia (CZ), Denmark (DK), Estonia (EE), Finland (FI), France (FR), Germany (DE), Greece (GR), Hungary (HU), Iceland (IS), Ireland (IE), Italy (IT), Latvia (LV), Liechtenstein (LI), Lithuania (LT), Luxembourg (LU), Malta (MT), Netherlands (NL), Norway (NO), Poland (PL), Portugal (PT), Romania (RO), Slovakia (SK), Slovenia (SI), Spain (ES), Sweden (SE)
EU territory reported under its own country code: Åland Islands (AX), French Guiana (GF), Guadeloupe (GP), Martinique (MQ), Mayotte (YT), Réunion (RE), Saint Martin (French part) (MF)
United Kingdom and Switzerland: Switzerland (CH), United Kingdom (GB)
Gibraltar and the Crown Dependencies (GDPR-equivalent law): Gibraltar (GI), Guernsey (GG), Isle of Man (IM), Jersey (JE)

Rules that apply in every country

Global Privacy Control stops all collection: nothing is stored from a request that carries it.
Do Not Track keeps the visitor at tier 1 at most, even after the visitor accepts. With Do Not Track and the pre-consent setting Off, nothing is stored before the visitor accepts if the visitor must be asked first (consent required everywhere, or a visitor in a consent region). A Do Not Track visitor who is not asked first (outside the consent regions in regional mode, or on a legacy site) is stored as Anonymous counts.