Website analytics privacy ratings
Tools that count website visitors. Some track people across sites, others collect no personal data.
12 website analytics are rated against 12 public criteria, and 12 have enough evidence for a letter grade. Of the 12 with a known jurisdiction, 8 are based in a Five Eyes country, and 10 in the wider Fourteen Eyes.
Open-source website analytics only · Criteria for this category · Suggest an addition · Markdown
| Name | Grade | Score | Data | Jurisdiction | Open source | No trackers or telemetry | No ads or data sales | Independent audit | Transparency report | Tells users about requests | No cookies | No personal data | Self-hostable | TLS configuration | Security headers | Modern web standards |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Open source web analytics that shows aggregate visitor counts without cookies or stored IP addresses. Available as a hosted service at goatcounter.com or as a self-hosted binary. |
Grade C | 73 | 100% | Ireland Outside Eyes | Yes | Yes | Yes | No | No | No | Yes | Yes | Yes | Yes | No | Not tested yet |
Lightweight web analytics that counts visits without cookies and shows aggregate stats on a single dashboard. Available as a hosted service or as the self-hosted Community Edition. |
Grade C | 73 | 100% | Estonia Outside Eyes | Yes | Yes | Yes | No | No | No | Yes | Yes | Yes | Yes | No | Not tested yet |
Open source, cookieless web analytics with performance monitoring, error tracking and optional session replays. Available as Swetrix Cloud or as the self-hosted Community Edition. |
Grade C | 73 | 100% | United Kingdom Five Eyes | Yes | Yes | Yes | No | No | No | Yes | Yes | Yes | Yes | No | Not tested yet |
Hosted web analytics from Germany that counts visitors without cookies using a daily hash, with server-side tracking options and a built-in link shortener. |
Grade C | 64 | 100% | Germany Fourteen Eyes | Partial | Yes | Yes | No | No | No | Yes | Yes | Partial | Yes | No | Not tested yet |
Free web analytics from Cloudflare that reports page views, visits and Core Web Vitals using a JavaScript beacon or Cloudflare's proxy, without cookies. |
Grade C | 61 | 100% | United States Five Eyes | No | No | Yes | Partial | Yes | Yes | Yes | Yes | No | Yes | Partial | Not tested yet |
Hosted web analytics from the Netherlands that counts page views and unique visits without cookies, fingerprinting or IP addresses. |
Grade C | 61 | 100% | Netherlands Nine Eyes | Partial | Yes | Yes | No | No | No | Yes | Yes | No | Yes | No | Not tested yet |
Open source web analytics that tracks page views, referrers and events without cookies. Available as the hosted Umami Cloud or for self-hosting. |
Grade C | 61 | 100% | United States Five Eyes | Yes | No | Yes | No | No | No | Yes | Yes | Yes | Yes | Partial | Not tested yet |
Hosted web analytics that counts visitors without cookies using a daily-salted hash, with a single-page dashboard and event tracking. |
Grade D | 50 | 100% | Canada Five Eyes | No | Yes | Yes | No | No | No | Yes | Partial | No | Yes | Partial | Not tested yet |
Open source web analytics platform, formerly Piwik, with detailed reports, goals, heatmaps and a tag manager. Can be self-hosted or used as the hosted Matomo Cloud. |
Grade D | 50 | 100% | New Zealand Five Eyes | Yes | No | Yes | No | No | No | Partial | Partial | Yes | Yes | Partial | Not tested yet |
Product analytics platform with web analytics, session replay, feature flags, experiments and surveys. Offered as PostHog Cloud or as an unsupported self-hosted deployment. |
Grade D | 48 | 100% | United States Five Eyes | Yes | No | Yes | Yes | No | No | Partial | No | Partial | Yes | No | Not tested yet |
Free behavior analytics from Microsoft that records sessions and builds heatmaps of clicks and scrolling on websites and mobile apps. |
Grade F | 27 | 100% | United States Five Eyes | No | No | No | No | Yes | Yes | Partial | No | No | Yes | No | Not tested yet |
Google's web and app analytics service (GA4) that measures traffic, events and conversions, and connects with Google Ads for audiences and ad measurement. |
Grade F | 23 | 100% | United States Five Eyes | No | No | No | Partial | Yes | Yes | No | No | No | Partial | No | Not tested yet |
Questions
What is the most private option among website analytics?
No pick has been made yet. The table above is sorted by score, based on public evidence.
How are website analytics rated?
Each entry answers 12 questions: open source, no trackers or telemetry, no ads or data sales, independent audit, transparency report, tells users about requests, TLS configuration, security headers, modern web standards, no cookies, no personal data and self-hostable. Answers need links to evidence. See the full criteria.
Does jurisdiction matter?
Jurisdiction decides which laws can compel a provider to hand over data. Each entry shows its country and whether it is in the Five, Nine or Fourteen Eyes. The data a provider can hand over depends mostly on what it stores and who holds the keys. Read about jurisdictions and the CLOUD Act.