I'm using Vercel Analytics. It is configured to only use aggregated data that cannot identify individuals. The recorded data points, such as pageviews, are anonymous. I do not collect or store information enabling the reconstruction of a user's browsing session or personal identification. The service identifies visitors using a hash from the incoming request, and visitor session data is discarded after 24 hours. The collected data, minimal in amount, is used for aggregated statistics only. The service operates without third-party cookies, and after enabling, page view data is transmitted to Vercel's servers for tracking both fresh page loads and client-side page transitions.
The following information may be stored with every data point:
If you're in the EU, it's unclear whether I need your concent at all for this kind of data collection as the GDPR and ePrivacy Directive compliance is open to debate and has not yet been challenged in court. If you're outside the EU, I certainly don't.