No cookie and no address

Each visitor is a daily visitor hash: SHA-256 of the IP address, user agent and Accept-Language, with a random salt that changes every day (UTC). The salt lives in memory only, so a hash cannot be traced back to an address or linked to the same visitor on another day. A restart makes a new salt, so a visitor seen before and after it counts twice that day.

The referrer is kept as its host only. The query string is left out unless LogQueryString is on, since it may hold personal data.