The tracking gate
One decision point answers "is this request tracked?" — a fixed order of config-driven checks, with a hook for your own rule and an event for every exclusion.
Bots and AI crawlers
Bots and AI training crawlers are excluded by default. How the layered detection works, in what order, and how to reach exhaustive coverage with an optional backstop.
AI assistants
Matomo splits AI traffic three ways. Referrals from an assistant work with no configuration; training crawlers are excluded by default; on-demand fetchers need server-side telemetry, which this package sends itself.
Consent and redaction
Cookieless by default, Do-Not-Track honored server-side, URL redaction on out of the box, a publishable privacy-policy partial, and a first-party opt-out cookie the server can actually see.
GDPR data-subject requests
Handle access and erasure requests through Matomo's PrivacyManager API — preview the match, export it, erase it, and keep an audit trail.