Website Visitor Tracking: Why No Two Tools Show the Same Number
GA4, server logs and company identification each lose a different slice of your visitors. Here is which, and why.
Website visitor tracking is three jobs under one name: counting visits, watching on-page behaviour and identifying the companies behind visits. Each misses different visitors: logs count bots, GA4 loses people who refuse cookies or block scripts, and identification tools name organisations, not people. So their numbers never agree.
In short
- Server logs and hit counters run high because Imperva found bots made up more than 53% of web traffic in 2025.
- GA4 runs low in the UK because visitors who reject cookies send limited pings at most, and blocked scripts send nothing.
- GA4 only models missing visitors once a site has at least 1,000 consented daily users, a bar many specialist B2B sites never reach.
- Comparing Search Console clicks with GA4 organic sessions for the same dates gives a quick estimate of how much GA4 is missing.
- The ICO's statistical purposes exception covers aggregate counting, not recordings of individuals or profiling visitors by IP address.
Website visitor tracking is three jobs sold under one name: counting visits, watching behaviour on pages and identifying the companies behind visits. Each loses a different slice of your audience, so GA4, server logs and identification tools never agree. In the UK, cookie consent decides the biggest slice GA4 never sees.
What does website visitor tracking actually measure?
The top search results do not agree on what the phrase means. Clay defines it as identifying the companies visiting your site from their IP address1. Siteimprove defines it as logging how visitors engage with your site and visualising that behaviour2. Both are right, and that is the problem: when a marketing manager and a sales director each ask for "visitor tracking", they usually want different things.
A working definition: website visitor tracking is any method of recording visits to your website, whether to count them, to watch what people do or to work out which organisation they came from. In practice that covers four kinds of tool:
- Raw counters and server logs record every request to your site, human or not. The old website visitor counter on a homepage belongs here.
- Analytics tags such as GA4 record users, sessions, pages and traffic sources through a small script in the visitor's browser.
- Behaviour tools such as Microsoft Clarity show heatmaps and session recordings.
- Company identification tools use a reverse IP lookup (matching the visitor's internet address to the organisation that uses it) to name the business behind a visit.
Why do my website visitor numbers never match?
Each method has a different blind spot, and they push in opposite directions.
Raw counts run high. Imperva's 2026 Bad Bot Report found that automated traffic made up more than 53% of all web traffic in 2025, with human activity down to 47%3. A hit counter or log file counts most of those machines. Analytics tools filter out the obvious ones but not all of them, as our piece on ghost visits from AI crawlers explains.
Analytics counts run low. GA4 only records a full visit when its script loads and the visitor allows it. Some visitors block the script from loading at all4. Anyone who clicks "Reject all" sends GA4, at most, limited "cookieless pings" with no user identifier and no link between one page and the next4.
Identification counts something else again: organisations, not people. A visit from an office network can often be matched to a company. A visit from home broadband usually resolves to the internet provider rather than the employer, which is why internet providers show up as website visitors.
So the same Tuesday might show 900 hits in the logs, 310 users in GA4 and 40 identified companies. None of those figures is wrong. They answer different questions.
Does GA4 fill in the visitors who reject cookies?
Only if your site is big enough, and the bar is higher than most people assume.
Google's answer to consent loss is behavioural modelling: GA4 studies the visitors who said yes and estimates what the others probably did. Google sets entry requirements. Your property must collect at least 1,000 events a day from visitors who refused analytics cookies for at least 7 days. It must also have at least 1,000 daily users who accepted, on at least 7 of the previous 28 days5. Google adds that meeting those thresholds does not guarantee eligibility5.
Now run the numbers for a specialist B2B site. Plausible uses a simple illustration in which 60 of 100 visitors consent and 40 do not4. Apply that split to a site with 500 visitors a day and you get 300 consented users daily, under a third of what Google needs. With no model, the people who refused are not estimated at all. As Plausible puts it, the report shows the consented activity "and nothing from the 40 untracked users"4.
The upshot for a UK B2B team: your GA4 user count is a floor, not an estimate. Trends inside GA4 are still useful while your banner stays the same. Comparing GA4 totals with anything else, such as an identification tool or last year's figures under a different banner, is where people go wrong.
How can I see how many people look at my website?
There is no single true number, but you can bracket it in ten minutes with two Google tools you probably already have.
Search Console reports clicks on Google's own results pages, counted at Google's end before anyone reaches your cookie banner. GA4 only sees that same visit if its script runs and is permitted. So compare them:
- In Search Console, open the Performance report for the last 28 days and note total clicks.
- In GA4, open the Traffic acquisition report for the same dates and note sessions from google / organic.
- Divide the GA4 figure by the Search Console figure.
Say Search Console shows 1,000 clicks and GA4 shows 550 organic sessions. GA4 is then seeing roughly 55% of your Google visitors. The two never match exactly, because a click and a session are defined differently, but a large gap usually points to the two losses above: refused consent and blocked scripts. Use the ratio as a rough correction when someone asks how many people really visit.
Is website visitor tracking legal in the UK?
Yes, but the rules depend on which of the three jobs you are doing.
For counting, the ICO's updated guidance on PECR (the Privacy and Electronic Communications Regulations, which govern cookies and similar technology) now includes a "statistical purposes" exception. You do not need consent for storage or access whose sole purpose is aggregate statistics about how your site is used, with a view to improving it. You must still give clear information and a simple, free way to object, and any third-party provider may only use the data to help you improve your site6.
The ICO is equally clear about what the exception does not cover. Logs or recordings of individual visitors and their actions need consent, as does tracking or profiling visitors based on their IP address or the pages they visited6. That is why Microsoft says Clarity requires explicit consent for visitors in the UK, EEA and Switzerland7. Company identification is a separate question again, which we cover in our note on the ICO's storage and access guidance and visitor identification.
Which website visitor tracking tools suit a UK B2B team?
Most teams need one counting tool and, if sales cares about the website, one identification tool. Ask of each: which visitors does it lose?
| GA4 | Microsoft Clarity | Leadfeeder (Dealfront) | Scout (our product) | |
|---|---|---|---|---|
| Main job | Counting users, sessions and sources | Heatmaps and session recordings | Identifying companies | Identifying companies, shown alongside your own GA4 and Search Console data |
| UK consent note | Refusals send cookieless pings at most; modelling needs 1,000 consented daily users5 | Explicit consent required in the UK7 | Not publicly documented | Company-level only; raw IP addresses never stored; UK and EEA hosting |
| Who it misses | People who refuse cookies or block scripts | People who refuse cookies | Not publicly documented | Residential, mobile, VPN and data-centre traffic is flagged and held in the low confidence band |
On cost, Clarity is free with no traffic limits7. Leadfeeder has a free Lite plan covering up to 100 companies from the last 7 days only, and paid plans from €79 a month8. Scout's plans are on our pricing page. Scout gives every match a 1 to 99 confidence score with a band and a one-line reason, which matters when deciding whether a name deserves a sales call: here is how the confidence score works.
From counting visitors to knowing which ones matter
Visitor counts tell you how much attention the site gets. They cannot tell you which organisations are paying it. Scout identifies the company behind a visit and connects your GA4 and Search Console data, so you see the pages each company read and the searches associated with it next to the numbers you already report. Start a 14-day free trial, no card needed.
Frequently asked questions
Can someone see that I visited their website?
Yes, in aggregate. Their analytics can show your visit, the pages you read, your device and a rough location, but not your name. A company identification tool may show your employer's name if you browsed from an office network. From home broadband it usually shows only your internet provider.
Is there free website visitor tracking?
Yes. Microsoft Clarity is free with no traffic limits, though it needs explicit consent from UK visitors. Leadfeeder offers a free Lite plan showing up to 100 companies from the last 7 days. Google Analytics 4 and Search Console are the usual starting points for counting visits.
Can website visitor tracking identify individual people?
Not on its own. Analytics tools count anonymous users, and reverse IP tools identify the organisation behind an office connection, not the person. The ICO says its statistical purposes exception does not cover tracking or profiling individual visitors, so that needs consent.
Why does GA4 show fewer visitors than my server logs?
Server logs record every request, including bots, which Imperva found made up more than 53% of web traffic in 2025. GA4 filters known bots and only records full visits from people whose browser runs its script and who accept analytics cookies.
Sources
- Clay: What is Website Visitor Tracking? clay.com
- Siteimprove: Website visitor tracking: what it is and how it works siteimprove.com
- Imperva: Bad Bot Report 2026: Bots in the Agentic Age imperva.com
- Plausible: Consent Mode and how GA4 fills missing data with behavioral modeling plausible.io
- Google Tag Manager Help: [GA4] Behavioural modelling for consent mode support.google.com
- ICO: Guidance on the use of storage and access technologies, what are the exceptions? ico.org.uk
- Microsoft Learn: Clarity frequently asked questions learn.microsoft.com
- Dealfront Help Center: Leadfeeder pricing, plans and payment methods help.dealfront.com