Clean homepage data: bots, staff visits and consent gaps

Key takeaways

Before judging your homepage, clean the data. Exclude internal traffic in GA4 so your own team's visits do not inflate sessions, check for odd spikes that look like bots, and understand that visitors who decline analytics cookies may not be recorded. Dirty data makes a homepage look better or worse than it is.

• Exclude staff visits with GA4's internal traffic filter.
• GA4 excludes known bots automatically, but spam can slip through.
• Declined cookies mean some visits are missing or modelled.
• Compare trends, not absolute numbers.

Why does homepage data get dirty?

The homepage is the page most likely to be distorted, because staff open it every day, test visits land there, bots hit the root address first and campaign links often point there. In a small business, staff visits alone can be a noticeable share of homepage sessions.

• Why your homepage is not converting visitors into customers
• Check your homepage's performance in GA4

How do you exclude internal traffic in GA4?

In GA4, go to Admin, Data streams, your web stream, then Configure tag settings and Define internal traffic. Add your office IP addresses, then activate the internal traffic data filter in Admin under Data filters. For staff working from home, a browser extension or a cookie-based approach may be needed.

• GA4 setup for small business websites

What about bot and spam traffic?

GA4 automatically excludes traffic from known bots and spiders. Some spam still appears as sudden spikes from one city, very short sessions or odd referrers. Look for traffic that does not fit your business, compare with server logs if you can and exclude it from your reading rather than your decisions.

• Wrong visitors reaching your homepage? Check traffic first

How does cookie consent affect the numbers?

Under PECR, analytics cookies generally need consent, although the Data (Use and Access) Act 2025 creates exceptions for some low-risk analytics as its provisions come into force. When visitors decline, GA4 may not record them, or may model their behaviour if consent mode is configured. Either way, absolute counts are less reliable than trends.

• Cookie banners and UK law: what small businesses need
• Homepage conversion rate: what to expect and how to read it

When should you stop worrying about accuracy?

Once internal traffic is excluded and obvious spam is set aside, accept that analytics is a guide. Decide based on consistent trends over several weeks, confirmed by enquiries in your inbox and calls on your phone, rather than chasing perfect numbers.

• A homepage dashboard: five numbers to check each month

What does this look like in practice?

A pattern we see: a homepage that looks busy but converts badly, because a large share of sessions come from staff opening it as their browser home page. Excluding internal traffic often makes the true conversion rate look healthier and the real problem easier to see.

• See client work
• Website Design & Development for UK businesses

Clean data checklist

• Define internal traffic and activate the filter.
• Ask staff not to use the homepage as a browser start page.
• Look for spikes from odd locations or referrers.
• Note your cookie consent setup and its effect.
• Read trends, confirmed by real enquiries.

• What Search Console says about your homepage
• Homepage conversions dropped after a change? Check these

Next step

Check today whether GA4's internal traffic filter is active. If not, set it up before you read another homepage report.