Stored on the deviceNothing. No cookie, no localStorage, no sessionStorage.
Visitor idServer side: HMAC(monthSalt, site + IP + user agent), truncated. The IP is never stored.
Consent bannerNot needed.
How long it links visitsUntil the month ends and its salt is deleted. A visitor on a new network counts twice.

How a strict visitor id is made

The server hashes the site, IP and user agent with this month's random salt. The IP is then forgotten. When the month ends the salt is deleted, and nobody, including you, can link the ids back.

Visitor id

The same visitor now gets a different id.

On this device right now

Cookiesnone
localStoragenone
sessionStoragenone

Switch consent on in the Instrumented site tab, come back and refresh: the tab id appears. Withdraw consent and it is removed.