GoatCounter: no cookies, no IP or user-agent stored, EU-hosted. count.js is vendored into public/ so no file loads from a foreign origin — only the count request itself leaves. The /count endpoint is documented as staying compatible, so the copy does not go stale.