What is Server-side tracking?
Server-side tracking sends analytics events from your own server instead of from the visitor's browser. Because there is no third-party request from the page, ad blockers and browser protections do not intercept it. It changes where the data is collected, not what is collected — the privacy obligations follow the data, not the transport.
What it changes
| Client-side | Server-side | |
|---|---|---|
| Where the event originates | The visitor’s browser | Your server |
| Blocked by ad blockers | Often | Rarely |
| Sees client details (screen, referrer) | Yes | Only what you forward |
| Page weight cost | A script download | None |
| Setup | A script tag | Real engineering |
The completeness gain is genuine. Client-side measurement misses every visitor running a blocker, and that share is large and not randomly distributed — it skews technical, which is exactly the audience many products care most about.
What it does not change
Two things people expect it to fix, and it does not:
Legal position. Privacy law follows the data. Collecting an IP address on your server rather than in the browser leaves it personal data. Setting an identifier from the server still counts as storage on the device under ePrivacy. Server-side collection used specifically to evade browser privacy controls has drawn regulator attention on exactly these grounds.
Data quality, automatically. The server sees requests, not people. Bots, prefetches and health checks all arrive as traffic and have to be filtered deliberately — filtering the browser used to do for you, badly but for free.
The honest positions
There are two defensible reasons to run server-side, and one that is not:
- Completeness — you genuinely need to count visitors that client-side measurement misses. Legitimate.
- Performance — no script on the page at all. Legitimate, and increasingly attractive.
- Evading privacy controls — routing third-party trackers through your own domain so they survive protections the visitor deliberately enabled. That is the use regulators have criticised, and it is a different activity wearing the same name.