Private and open-source alternatives to Google Analytics
10 website analytics rated against the same public privacy criteria as Google Analytics (GA4), with our picks first.
Why look for an alternative?
- Open source: no. Closed source.
- No trackers or telemetry: no. Google's websites and the Analytics site use Google's own advertising and analytics cookies.
- No ads or data sales: no. Part of Google's advertising business. Analytics data can be shared with Google for its products and used with Google Ads for audiences and ad personalization.
- Independent audit: partial. Google Analytics is covered by Google's ISO 27001 certification, but no full audit report is public.
- TLS configuration: partial. Grade B
- Security headers: no. Grade C (55/100+)
- No cookies: no. Uses first-party cookies on websites and app instance IDs in apps to identify users.
- No personal data: no. IP addresses are not stored, but cookie and user identifiers are kept, and data can be used for advertising personalization.
- Self-hostable: no. Hosted only.
See the full Google Analytics rating.
The alternatives
GoatCounter Grade C
Open source web analytics that shows aggregate visitor counts without cookies or stored IP addresses. Available as a hosted service at goatcounter.com or as a self-hosted binary.
Based in Ireland. GoatCounter scores 73 out of 100 (grade C) on the website analytics criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, no cookies, no personal data and self-hostable.
Plausible Analytics Grade C
Lightweight web analytics that counts visits without cookies and shows aggregate stats on a single dashboard. Available as a hosted service or as the self-hosted Community Edition.
Based in Estonia. Plausible Analytics scores 73 out of 100 (grade C) on the website analytics criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, no cookies, no personal data and self-hostable.
Swetrix Grade C
Open source, cookieless web analytics with performance monitoring, error tracking and optional session replays. Available as Swetrix Cloud or as the self-hosted Community Edition.
Based in the United Kingdom (Five Eyes). Swetrix scores 73 out of 100 (grade C) on the website analytics criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, no cookies, no personal data and self-hostable.
Pirsch Grade C
Hosted web analytics from Germany that counts visitors without cookies using a daily hash, with server-side tracking options and a built-in link shortener.
Based in Germany (Fourteen Eyes). Pirsch scores 64 out of 100 (grade C) on the website analytics criteria. It meets 5 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, no cookies and no personal data.
Cloudflare Web Analytics Grade C
Free web analytics from Cloudflare that reports page views, visits and Core Web Vitals using a JavaScript beacon or Cloudflare's proxy, without cookies.
Based in the United States (Five Eyes). Cloudflare Web Analytics scores 61 out of 100 (grade C) on the website analytics criteria. It meets 6 of 11 criteria: no ads or data sales, transparency report, tells users about requests, TLS configuration, no cookies and no personal data.
Simple Analytics Grade C
Hosted web analytics from the Netherlands that counts page views and unique visits without cookies, fingerprinting or IP addresses.
Based in the Netherlands (Nine Eyes). Simple Analytics scores 61 out of 100 (grade C) on the website analytics criteria. It meets 5 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, no cookies and no personal data.
Umami Grade C
Open source web analytics that tracks page views, referrers and events without cookies. Available as the hosted Umami Cloud or for self-hosting.
Based in the United States (Five Eyes). Umami scores 61 out of 100 (grade C) on the website analytics criteria. It meets 6 of 11 criteria: open source, no ads or data sales, TLS configuration, no cookies, no personal data and self-hostable.
Fathom Analytics Grade D
Hosted web analytics that counts visitors without cookies using a daily-salted hash, with a single-page dashboard and event tracking.
Based in Canada (Five Eyes). Fathom Analytics scores 50 out of 100 (grade D) on the website analytics criteria. It meets 4 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration and no cookies.
Matomo Grade D
Open source web analytics platform, formerly Piwik, with detailed reports, goals, heatmaps and a tag manager. Can be self-hosted or used as the hosted Matomo Cloud.
Based in New Zealand (Five Eyes). Matomo scores 50 out of 100 (grade D) on the website analytics criteria. It meets 4 of 11 criteria: open source, no ads or data sales, TLS configuration and self-hostable.
PostHog Grade D
Product analytics platform with web analytics, session replay, feature flags, experiments and surveys. Offered as PostHog Cloud or as an unsupported self-hosted deployment.
Based in the United States (Five Eyes). PostHog scores 48 out of 100 (grade D) on the website analytics criteria. It meets 4 of 11 criteria: open source, no ads or data sales, independent audit and TLS configuration.