What: GoatCounter is free, open-source, cookieless visit counting — a 3 KB script and a public code of conduct about not tracking people.
Why: the lightest honest option; free for personal use, self-hostable later (which moves it to Tier 2 entirely). Its consent class is :none; the demo gates it regardless.
How: in portfolio.edn —
:tracking {:providers [{:provider :goatcounter
:site-id "yourcode"}]}
:terms-md "text/terms.md"
The site id is your GoatCounter code — the beacon reports to yourcode.goatcounter.com, and the CSP names EXACTLY that host, never a wildcard.