I’m not a lawyer and I can’t give any legal advice.
Koko doesn’t collect any user identifying data. It only counts the total visits to pages and posts.
If configured to do so, Koko may set a cookie to keep track of what pages a user has visited. This cookie doesn’t contain a personal tracking ID, it only contains the IDs of the pages someone visited and results in Koko counting a visit as a unique/first visit or a return visit for that page or post.
So even with the cookie turned on, I would consider that a “functional cookie” that doesn’t attempt to track the user in any way.
Koko analytics keeps all data contained to your own website database and doesn’t send any data off-site / doesn’t share anything with third parties.
The data in your webserver’s log files will be more “private” than what Koko provides as that would include the IP address of visitors. I’ve yet to see a site that asks for consent to store information in server log files.
Hope that helps. If you have any questions, please let me know!`
