Is Fathom Analytics GDPR compliant?

What does Fathom Analytics do?

Cookieless analytics with an EU isolation option that keeps processing inside the Union. It sets nothing on the device, so it avoids the consent question that applies to Google Analytics.

Does Fathom Analytics need consent?

No consent is needed for Fathom Analytics on its own, because it does not store or read anything on the device beyond what is strictly necessary. That is not a free pass: it must still be named in your privacy policy, and the request itself still reveals the visitor's IP address to the provider.

GDPR Art. 13(1)(e)

Does Fathom Analytics send data outside the EEA?

No. Fathom Analytics keeps processing inside the EEA, which removes the third-country question entirely. You still have to name it as a recipient in your privacy policy.

GDPR Art. 44 · GDPR Art. 46

What can I use instead of Fathom Analytics?

How do we detect Fathom Analytics?

We load your page in a real browser as a first-time visitor who clicks nothing, then look at what it contacted. Fathom Analytics is recognised by requests to usefathom.com, and we report whether it merely loaded or actually sent data, and whether it set a cookie before any choice was made.