The verdict in three sentences
A B2B site relying only on Google Analytics 4 behind a cookie banner loses 45 to 60 % of its visits in reports in 2026, which distorts campaign and SEO decisions. Consent-exempt, privacy-first analytics, as the Dutch Autoriteit Persoonsgegevens and the French CNIL frame it, recovers a near-complete view of traffic with a properly configured tool (Matomo or Piwik PRO) for EUR 2,000 to 6,000 of setup and a 3 to 6 week project. It does not replace everything: ad tracking and retargeting still require consent, hence a two-tier architecture.
What regulators allow without consent
The ePrivacy rules transposed in the Dutch Telecommunicatiewet allow analytics cookies with little privacy impact without consent, provided they only produce statistics for the site owner. The French CNIL publishes the most detailed conditions, widely used as a European benchmark:
| Condition | Technical implication | Common pitfall |
|---|---|---|
| Purpose strictly limited to measurement | No advertising use, no CRM matching | Connecting the tool to the email platform |
| Aggregated data, no cross-site tracking | No sharing with a third party for its own purposes | Using a tool that reuses data |
| Truncated or anonymised IP address | Mask at least the last 2 bytes | Full IP left in logs |
| Tracker lifetime capped at 13 months | Cookie setting or cookieless mode | Default value of 24 months |
| Data retention capped at 25 months | Scheduled automatic purge | Unlimited history |
| Information and right to object | Mention in cookie policy and opt-out link | No objection mechanism |
Google Analytics 4 does not fit this framework, because Google processes the data for its own purposes. Matomo (self-hosted or cloud) and Piwik PRO are among the tools regulators consider configurable in exempt mode.
Tools and 2026 costs for a B2B website
| Option | Setup (EUR, excl. VAT) | Monthly licence or hosting | Data recovered | Timeline |
|---|---|---|---|---|
| Self-hosted Matomo, exempt | 2,000-4,000 | EUR 20-80 of server | 90-95 % of visits | 3-4 weeks |
| Matomo Cloud, exempt | 2,000-3,500 | EUR 30-400 by volume | 90-95 % | 3 weeks |
| Piwik PRO Core, exempt | 2,500-5,000 | EUR 0 up to 500,000 actions | 90-95 % | 3-5 weeks |
| Server-side tracking (collection proxy) | 3,000-8,000 | EUR 50-200 | Improves reliability of both tiers | 4-6 weeks |
| GA4 only with banner | 500-1,500 | EUR 0 | 40-55 % of visits | 1-2 weeks |
| Exempt setup + consented GA4 | 4,000-8,000 | EUR 50-400 | 90-95 % + ad data | 4-6 weeks |
The two-tier setup is the most common among B2B software vendors: exempt analytics drives steering (traffic, sources, pages, form conversions), while GA4 and ad pixels only fire after consent to optimise campaigns.
Regulatory risk in figures
Since 2020, European regulators have issued cookie-related fines ranging from EUR 50,000 to several hundred million euros for the largest platforms, and they regularly audit mid-size websites. The most sanctioned breaches: trackers set before consent, refusing harder than accepting, missing information. A badly configured exempt setup (IP not anonymised, data sent to the marketing tool) loses the exemption and carries the same risk.
Mini case study
Lars, marketing manager at an HR software vendor in Amsterdam, sees 18,000 sessions a month in GA4 while server logs show about 38,000. He cannot attribute his 120 monthly demo requests properly. He deploys Matomo Cloud in exempt mode (EUR 3,000 setup, EUR 90 a month) and keeps GA4 behind consent. After 6 weeks, he measures 35,500 sessions and finds that SEO drives 46 % of demo requests, versus 28 % previously estimated. He moves EUR 2,500 a month from Google Ads into content. First-year cost: EUR 4,080, recovered within two months of reallocation.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
FAQ
Can we remove the cookie banner entirely?
Only if no consent-based tracker is used: no GA4, no ad pixel, no standard embedded YouTube video. Most B2B sites keep a banner, but exempt analytics runs from the very first visit.
Is exempt data as rich as GA4?
Nearly, for steering: sources, pages, goals, simple funnels. You lose ad audience matching and individual tracking, which are not allowed under this framework.
Self-hosted or cloud Matomo?
Self-hosting costs EUR 20 to 80 of server a month but requires maintenance and updates. Cloud, from EUR 30 a month, suits teams without in-house technical resources.
Does server-side tracking make everything exempt?
No, it makes collection more reliable and limits blocking, but purpose rules stay the same. Sending data to Google through a server still requires consent.
How long can we keep the data?
The CNIL benchmark is 25 months maximum for exempt analytics data and 13 months for tracker lifetime. Schedule an automatic purge from day one.
Let's scope your project. We scope your privacy-first analytics (tool choice, compliant configuration, two-tier setup with GA4, dashboards) with an indicative budget and a 3 to 6 week rollout. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
