Editorial notebook · evidence · analysis
Better decisions begin
when the evidence
survives questions.
Research on data quality, attribution, privacy regulation and analytics AI. Written for teams that have to defend the number, not merely report it.
Lead stories
Three arguments.
One standard of evidence.
Research on data quality, attribution, privacy regulation and analytics AI. Written for teams that have to defend the number, not merely report it.
Data breach: France Travail fined €5 million – Lessons in Security and Privacy
Learn why France Travail was fined €5 million for a data breach and how technical security, access controls, and cookieless analytics mitigate GDPR risks.
FTC Seeks Comment on Enforcement Policy Statement Regarding Personalized Pricing: A Guide for eCommerce Brands
Explore the implications of the FTC's latest stance on personalized pricing and how cookieless, privacy-first analytics can mitigate regulatory risks.
Self-Service Analytics for Marketing Teams: How Sealmetrics Does It
A marketing team gets a correct answer without opening a ticket. 100% of traffic measured without consent, 47 named read-only tools instead of raw SQL, and BYOK or an isolated private AI instance.
Complete archive
Every analysis.
Nothing ranked by hype.
50 published essays across 13 editorial beats.
- 04
Comparisons
The Best Web Analytics Tool: 12 Requirements That Decide It
Not a vendor list. The 12 technical requirements a web analytics platform must meet — pixel weight, real time, 100% of the data, API, MCP — and how to test each one.
- 05
Regulation
Is Matomo GDPR Compliant?
Matomo can run banner-free in France under the CNIL criteria, with cookies still on. The six conditions, what the exempt configuration costs you in attribution, and why it does not travel to Germany.
- 06
Regulation
Is Adobe Analytics GDPR Compliant?
Adobe Analytics can be deployed compliantly under GDPR — consent, a DPA, a transfer assessment and deliberate configuration. What that costs you is not legal, it is 40–60% of your EU visitors.
- 07
Regulation
GDPR Analytics in Spain: 7 Questions Online Stores Ask
Does a Spanish online store need a cookie banner for analytics? Is GA4 legal in Spain? What does the AEPD allow, and what does LSSI non-compliance cost? Direct answers, one per question.
- 08
Regulation
Is Your Analytics Actually GDPR-Compliant? A Legal Assessment
GDPR and ePrivacy are two different laws, and analytics has to clear both to run without a consent banner. The legal test, plus a per-tool verdict for GA4, Matomo, Plausible, Piwik PRO and Sealmetrics.
- 09
AI & Analytics
How Sealmetrics Enables Self-Service Analytics With LENS AI
Point an LLM at incomplete GA4 data and it invents answers. How complete cookieless data plus the Sealmetrics MCP let teams query their own analytics — no analyst in the loop.
- 10
eCommerce
Cookieless Analytics for eCommerce: The 2026 Guide
How European eCommerce teams measure revenue, attribution and conversion without cookies or consent banners. Shopify, WooCommerce and Magento reconciliation patterns.
- 11
Hotels
Cookieless Analytics for Hotels: Direct-Booking Attribution in 2026
How hotel groups measure direct bookings, meta-search revenue and multi-property portfolios without cookies. PMS reconciliation patterns for Mews, Cloudbeds, Opera.
- 12
SaaS
Cookieless Analytics for SaaS: PLG Without Consent Banners
How European SaaS teams measure trial-to-paid, PQLs and self-serve funnels without cookies. Works alongside Mixpanel/Amplitude, exports to BigQuery.
- 13
eCommerce
Consentless Analytics for DTC: What It Is and Why It Matters in 2026
Consentless analytics captures 100% of DTC traffic without a cookie banner. How it works under GDPR/ePrivacy, and what European DTC teams get from it.
- 14
Comparisons
8 Best Enterprise Analytics Platforms in 2026
Ranked comparison of GA4, GA360, Adobe Analytics, Piwik PRO, Sealmetrics, Amplitude, Mixpanel, and Matomo for enterprise teams.
- 15
Data Quality
Why GA4 Shows 13% of Your EU Traffic
GA4 loses data at three levels: consent rejection, ad blockers, and browser restrictions. The result is roughly 13% of real EU traffic. Here is the math.
- 16
Privacy
Every Cookie Set by Every Major Analytics Tool, Cataloged
We cataloged every cookie from 9 analytics tools using vendor docs and DevTools. GA4 sets 2 first-party cookies. Adobe sets 6. Sealmetrics sets 0.
- 17
Privacy
Your Analytics Tool Contacts 7 Domains. Here Is Why That Matters.
Every external domain is a DNS lookup, a privacy risk, and a GDPR liability. We mapped every domain contacted by 9 analytics tools.
- 18
Data Quality
When Your Analytics Starts Guessing: Data Sampling Thresholds Compared
GA4 starts sampling at 10M events in Explorations. Adobe varies by contract. Piwik PRO: optional. Sealmetrics: never. We documented every threshold.
- 19
Performance
The Hidden Conversion Killer: How Analytics Scripts Are Costing You Sales
Heavy analytics scripts slow your site, consent banners hide visitors, and ad blockers erase data. The compound effect is costing you conversions.
- 20
Performance
We Measured Every Analytics Script. Here Is What We Found.
We measured major analytics scripts from production CDNs. GA4 was 132x heavier than Sealmetrics, the lightest of the ten tools tested.
- 21
Regulation
UK Analytics Exemption Is Now Live: Our PECR Self-Assessment
The DUAA 2025 exempts certain analytics from consent requirements in the UK. We published our self-assessment showing how Sealmetrics qualifies.
- 22
Data Quality
GA4 Data Sampling: Why Your Traffic Numbers Are Wrong
GA4 applies data sampling when traffic exceeds certain thresholds. Here is how it works, why it matters, and what you can do about it.
- 23
Regulation
The EU Digital Omnibus: What It Means for Cookie Banners and Analytics
The European Commission proposed the biggest change to EU data law since GDPR. Cookie consent moves to GDPR, and first-party analytics may not require consent.
- 24
Regulation
The EU Digital Omnibus Explained: What Every Marketer Needs to Know in 2026
Cookie banners could vanish for 60% of websites. First-party analytics gets explicit legal authorization. A deep dive into COM(2025) 837 and what to do now.
- 25
Regulation
We Published Our CNIL Self-Assessment
The French CNIL allows certain analytics tools to operate without cookie banners. We documented how Sealmetrics meets all 14 technical criteria.
- 26
Technology
Cookieless Analytics Explained: How to Measure Without Cookies
Cookies are disappearing. Learn how cookieless analytics works, why it captures more data, and what it means for GDPR compliance.
- 27
Data Quality
How Consent Banners Destroy Your Analytics Data
35% of EU visitors reject cookies. That means 35% of your traffic is invisible. Here is the real impact on attribution, conversions, and revenue reporting.
- 28
AI & Analytics
AI Agent Traffic: The Invisible Channel Your Analytics Miss
GPT, Claude, Perplexity, and Google AI Overviews are sending traffic to your site. Traditional analytics cannot see it. Here is why it matters.
- 29
Attribution
Why Multi-Touch Attribution Fails Without Complete Data
Your attribution model is only as good as the data feeding it. When 87% of touchpoints are missing, every attribution conclusion is wrong.
- 30
Technology
What Is Cookieless Tracking? A Complete Guide for 2026
Cookieless tracking captures visitor behavior without browser cookies. Learn how it works, why it matters for GDPR compliance, and how it compares to traditional analytics.
- 31
Data Quality
What Is Data Loss in Analytics? Causes, Impact, and Solutions
Analytics data loss is the gap between real traffic and reported traffic. Learn the four causes, quantify the impact, and understand how to eliminate it.
- 32
Comparisons
7 GA4 Alternatives for eCommerce Teams in 2026
Compare 7 GA4 alternatives for eCommerce: pricing, data capture rates, EU compliance, and eCommerce features. From GA360 to cookieless platforms.
- 33
Regulation
GDPR-Compliant Analytics Without Consent Banners: How It Works
Consent banners are not always required for analytics. Learn the legal basis, technical requirements, and which analytics tools qualify under GDPR and ePrivacy.
- 34
Privacy
Residency Is Not Sovereignty: The Question to Ask Your AI Analytics Vendor
A European datacenter does not make your AI vendor European. The US CLOUD Act follows the company, not the server. How to tell the difference — and why it decides where your data can be reached.
- 35
AI
The Best LLM for Data Analytics Isn't the One With the Highest Benchmark
We ran 162 live queries across three open models against real analytics data to pick the AI inside Sealmetrics. What decided it wasn't MMLU — it was tool-calling, grounding, and a security flaw that only showed up in one language.
- 36
Product
Meet Seal AI: The Analytics Assistant That Never Sends Your Data to the US
Ask your analytics questions in plain language and get grounded answers — with inference that runs in the EU only, retains nothing, and trains no one's model. How Seal AI works and why it's private by architecture, not by promise.
- 37
Privacy
How to Audit Whether Your Analytics AI Is Really Private (5-Question Checklist)
Five questions that separate a private AI vendor from one that just has a European datacenter — with what a good answer and an evasive answer look like for each.
- 38
Regulation
What Happens to Your Analytics if the EU-US Data Privacy Framework Falls
Safe Harbor fell. Privacy Shield fell. The Data Privacy Framework is under appeal at the CJEU with a fresh challenge announced. Which analytics setups would need re-papering overnight — and which are structurally immune.
- 39
Privacy
The Prompt Is Born Clean: Why Consentless Analytics Makes Private AI Simple
Most privacy work for AI is damage limitation, because the data was personal to begin with. If your analytics never collects IPs, cookies or visitor identifiers, there is nothing personal to send to the model in the first place.
- 40
Regulation
The EU AI Act for Marketers, Without the Jargon
What actually lands on a marketing team using AI analytics: provider vs deployer, the Article 50 transparency duty from 2 August 2026, and why open-weight models are easier to audit than a closed API that can change silently.
- 41
AI
We Changed Our AI Model Twice in Three Weeks — And That's the Point
Gemma 4 looped. Mistral Small refused things it shouldn't. gpt-oss-120b held. The full lineage of how we picked the model inside Sealmetrics, including the two picks we got wrong.
- 42
AI
How We Benchmark Our Own AI (And Why We Publish the Runs We Threw Away)
A methodology you can copy: test on the real stack, compute ground truth from your database, grade deterministically before you let any model judge, and archive the runs you discard. A benchmark that hides those is a demo.
- 43
AI
Our AI Got It Wrong in Production — And Our Own Test Caught It
A model asked for a comparison returned a chart with two y-axis keys instead of one. Strict validation rejected it and the whole answer died with it. Three rules for anyone shipping LLM structured output.
- 44
AI
The Security Flaw That Only Appears When You Test Your AI in Two Languages
The same injected instruction was ignored in every Spanish run and obeyed in English. Safety alignment is trained unevenly across languages — and a monolingual evaluation will certify a vulnerable model as safe.
- 45
AI
Why We Let a Rival Model Grade Our AI Benchmark
LLM judges favour their own family. So we gave the scoring pen to our winner's direct competitor, kept it away from anything objective, and published the limitation we couldn't fix.
- 46
AI
Public LLM Benchmarks Won't Tell You Which Model to Ship
MMLU measures knowledge in a vacuum. Your product needs tool-calling, grounding and latency under real tool loops. How to read agentic benchmarks' footnotes — and a five-step method to evaluate a model yourself.
- 47
AI
Grounding: Why a Good Analytics AI Shouldn't 'Know' Anything
A general chatbot answers from memory. An analytics assistant must answer only from data fetched at query time. Why the model we ship scores badly on world knowledge — and why that is exactly right.
- 48
AI
Open Weights as an Exit Strategy: Never Be Hostage to an AI Vendor
With a closed API you rent behaviour you cannot inspect, that can change under you silently, at prices set unilaterally. With open weights you can pin the version, move hosts, or run it yourself.
- 49
Product
Seal AI vs Bring-Your-Own-Key: When to Use Each
Seal AI is the default so privacy doesn't depend on a checkbox. But you can bring your own OpenAI, Anthropic, Gemini or DeepSeek key. An honest guide to what each option costs you — including the data-transfer analysis you inherit.
- 50
Product
Three Questions to Ask Your Analytics AI Today
A period comparison, a drill-down with reasoning, and an engagement check — what to ask, what happens under the hood, and how to verify the answer came from your data.
From reading to evidence
Test the argument
on your own traffic.
The essays explain where measurement fails. A 30-minute review shows where it happens in your own stack.