Campaign Measurement Without Cookies

The floor didn't fall out. It moved.

The cookieless future arrived unevenly. Safari's ITP has capped script-set cookies at 7 days for years. Firefox and Brave block third-party cookies outright. Chrome keeps rescheduling the funeral but ad blockers and consent banners didn't wait: for many European sites, 30-50% of visitors never grant analytics consent at all, and everything they do is invisible to cookie-based tools.

Most of the content about this is written for enterprises, all clean rooms and media mix modeling. Useful if you have a data team. Most marketing teams have three people and a Klaviyo login. So here's the small-team version: what still works when you can't rely on a cookie following anyone around.

Rank your signals by durability

Think of every measurement signal you use and ask: who can take this away from me?

Third-party cookies: gone-ish. Blocked in most browsers, unreliable in the rest. Anything still depending on them is already lying to you.

First-party cookies: 7 days on Safari. Fine for same-week conversions, broken for considered purchases. A SaaS trial that converts on day 20 loses its attribution chain on nearly half of mobile devices, since Safari purges the cookie long before the purchase.

Consent-gated analytics: only sees who opts in. GA4 sees a sample and models the rest. The sample skews, because the people who reject tracking aren't random.

The click on a link you control: nobody can take it. When someone clicks your short link, the redirect happens on your infrastructure. The click gets logged server-side with its UTM context before any browser, consent state or cookie policy gets a vote. No script has to load. Look, nothing even has to persist on the visitor's device. It's a first-party server log, the oldest and most durable measurement primitive on the web.

That last one is the foundation worth rebuilding on. Not because clicks answer everything (they don't), but because they're the signal that survives every privacy change shipped so far and every one still coming.

The small-team stack

Four layers, none requiring a data engineer:

1. Tag and shorten every outbound link. Every campaign link carries UTMs and runs through links you control, so every click is logged at the edge regardless of what happens after. This is your ground truth for volume by channel and campaign.

2. Session analytics as the consenting layer. Keep GA4 or a privacy-friendly alternative for on-site behavior, understanding it describes the visitors who allowed it. Directionally useful, no longer the source of truth.

3. Conversions from the money system. Count revenue in Stripe or Shopify or your CRM, where it's a fact instead of an estimate. Join campaigns to revenue through captured UTMs on forms, which ride the URL and need no cookie at all for the landing-page conversion path.

4. One survey question for the gaps. The "how did you hear about us" field covers the channels clicks can't see. On a cookieless stack it stops being optional.

What you give up: stitching one person's path across weeks and devices. Honestly, that data was already half-fiction under ITP. What you keep: dependable channel and campaign-level answers, which is what the budget meeting actually needs.

Aggregate is the honest altitude

The uncomfortable shift is philosophical. A decade of martech trained everyone to want the person-level story: this person saw this ad, then this email, then bought. That resolution is what privacy changes killed, and no amount of tooling brings it back honestly.

Campaign-level aggregates were always the sturdier product. "The June launch drove 2,400 clicks, 900 sessions and $31K" doesn't need to follow anyone across devices. Every number in that sentence comes from your own links, your own forms and your own payment system. First-party, consent-light, durable.

Teams that rebuilt on that foundation stopped dreading privacy announcements. There's real relief in measurement that doesn't depend on permission from three browser vendors and a consent banner. Start with the links, they're the layer you can fix this afternoon.