How to Track Website Traffic for Free: A Small Business Setup Guide (2026)
A practical stack for owners and developers who want honest traffic numbers without a monthly bill or a cookie banner.
On this page 9 sections
To track website traffic for free, combine three tools: Google Search Console for search visibility, Cloudflare Web Analytics or a self-hosted tool like Umami or Matomo for visits, and your server logs as a backup. Together they cover visitors, sources, and top pages without a monthly bill or a cookie banner.
Backtrace covers the tools engineers and small teams rely on, and website analytics belongs on that list. This guide is for owners of small business sites and the developers who help them. It shows how to track website traffic for free, which setups hold up, and where free tools fall short.
What Can You Learn From Free Website Traffic Tracking?
You can learn nearly everything a small business needs. Free tools report visitors, page views, top pages, referral sources, countries, devices, and the search queries that bring people in. What they limit is depth, such as long data history, custom funnels, and support.
Most small sites ask four questions. Who is visiting? Which pages do they read? Where did they come from? What did they do next? Every option in this guide answers the first three. The fourth, user behavior, usually needs event tracking, which takes more setup.
Write down your questions before you pick a tool. A bakery that wants to know if the new catering page gets read needs page views by URL. A consultant who wants leads needs to track form submissions. The question decides the tool.
How Do You Use Google Search Console to Track Search Traffic?
Verify your site in Google Search Console, then open the Performance report. It shows clicks, impressions, average position, and the queries that led to your pages. Google describes Search Console as a free service for monitoring your presence in Google Search results.
Setup takes about ten minutes. Add your domain, then prove you own it with a DNS record or an HTML file. DNS verification is the better choice because it covers every subdomain and survives a site redesign.
Search Console only measures traffic from Google Search. It cannot see visits from email, social media, or someone typing your address directly. It also reports impressions and clicks, not sessions, so the numbers will not match a visit counter exactly.
Bing runs the same service. Bing Webmaster Tools is free and takes a few minutes to set up. It also feeds search data to other engines, so it is worth adding once Google is working.
In our experience at Backtrace, Search Console is the one free tool that nearly every site should install on day one. It starts collecting data the moment you verify, and you cannot go back and recover history you did not capture.
Which Free Analytics Tool Counts Your Visitors?
Three free options handle visit counting well: Google Analytics 4, Cloudflare Web Analytics, and self-hosted open-source tools. Google Analytics is the most capable and the most invasive. Cloudflare is the simplest. Self-hosting gives you the most control and the most work.
| Option | Cost | Setup effort | Cookies | Best for |
|---|---|---|---|---|
| Google Analytics 4 | Free | Medium | Yes | Marketing and conversion reports |
| Cloudflare Web Analytics | Free | Low | No | Simple visit counts |
| Umami (self-hosted) | Server cost | High | No | Privacy and custom events |
| Matomo On-Premise | Server cost | High | Configurable | Full-featured replacement |
| GoAccess on server logs | Free | Medium | None | Script-free counting |
The table shows why no single tool wins. A shop owner with no technical help should start with Cloudflare or Google Analytics. A developer who manages a server can run the open-source options. Pick the row that matches the person who will maintain it.
How Does Cloudflare Web Analytics Work Without Cookies?
Cloudflare Web Analytics measures visits with a small script or, for sites already proxied through Cloudflare, with no script at all. It does not use cookies or track individuals across sites. The Cloudflare setup guide walks through both methods.
The result is a clean dashboard with visitors, page views, top pages, referrers, and performance data. It is limited. You cannot define goals or build funnels, and the history is shorter than a paid product keeps.
The privacy benefit is real. Without cookies, you usually do not need a consent banner for this kind of measurement, though you should confirm that against the rules where your customers live. A banner that appears on every visit also hurts the experience of a small site.
Use this option when you want to know whether traffic is rising or falling and which pages matter. Skip it if you need to know which campaign produced a sale.
Should You Self-Host Umami or Matomo?
Self-host only if someone on your team can maintain a server. You trade a subscription fee for patching, backups, and uptime. The software is free. The time is not.
Umami is an open-source analytics platform with a light script and a clean interface. It runs on a small virtual server with a database. Matomo On-Premise is free to download and install on your own servers, and it offers far more reports, which also means more to configure.
Plan the maintenance before you install. A self-hosted analytics server is another internet-facing service. It needs updates, a database backup, and a TLS certificate. If you run it in containers, keep the host current, as covered in our guide to upgrading Docker Engine and its security fixes. If you automate deployment, pinning every workflow dependency keeps the analytics stack from changing under you.
Self-hosting is a poor fit for a one-person shop with no technical help. A neglected analytics server is worse than none.
Can Server Logs Replace an Analytics Script?
Yes, for basic counts. Your web server already writes a line for every request. A log analyzer turns those lines into a report, with no script on your pages and nothing for visitors to block. The GoAccess project describes its tool as an open-source, real-time log analyzer that runs in a terminal or produces an HTML report.
Logs have a different bias than scripts. They count bots and crawlers along with people, so raw numbers run higher than a script-based tool reports. They also miss visits served from a cache or CDN unless you collect logs there too.
That gap is useful. When your script-based numbers and your logs disagree by a large margin, something is wrong. The cause could be a broken tag, a traffic spike from bots, or a page that fails to load the script.
Managed hosting often hides logs. Check your hosting panel before you plan around them. If you cannot get logs, rely on one of the script-based options above.
What Should You Watch for When You Add a Tracking Script?
Every third-party script runs with the full privileges of your page. If the provider is compromised, the attacker runs code in your visitors' browsers. That risk is small for a reputable provider, but it is not zero, and it grows with every extra tag.
The supply chain is a live concern. Attacks on package registries have shown how one trusted publisher can reach thousands of downstream users, as we explained in our breakdown of the npm SlugFest trusted publishing flaw. Marketing tags work the same way, because you load someone else's code and trust it.
Keep your tag list short. Load one analytics script, not four. Remove tags you no longer use, and review the list every quarter. Backtrace editors treat each added script as a dependency that needs an owner.
Also protect the accounts. Turn on two-factor authentication for Google, Cloudflare, and your hosting login. Anyone who controls your tag manager controls the code on your site.
How Do You Set Up a Free Tracking Stack in One Afternoon?
Start with Search Console, add one visit counter, and check your logs once a month. This stack costs nothing and covers most small business questions. Follow the steps in order.
- Verify your domain in Google Search Console with a DNS record.
- Submit your sitemap so Google finds new pages quickly.
- Install one visit counter, such as Cloudflare Web Analytics or Google Analytics 4.
- Test that it works by visiting your site and watching for the hit.
- Write down your baseline numbers for visitors, top pages, and sources.
- Set a monthly reminder to review the data and your tag list.
The baseline matters more than any single tool. A month of data lets you spot a drop after a site change. Without it, you are guessing.
Limits are part of the deal. Free tools keep a limited history, so export key numbers each quarter. Search Console is the main exception worth noting. Its data window is shorter than a year and a half, so a yearly comparison needs your own saved copy.
Conclusion
You do not need to pay to understand your traffic. Search Console shows how people find you, one visit counter shows what they do, and your logs keep both honest. Start with those, keep the script count low, and revisit the stack when your questions outgrow it. If you want a next step, open Search Console today and verify your domain, because history only starts the day you do.
