# Pirsch privacy rating

Hosted web analytics from Germany that counts visitors without cookies using a daily hash, with server-side tracking options and a built-in link shortener.

## Summary

Pirsch scores 64 out of 100 (grade C) on the website analytics criteria. It meets 5 of 11 criteria: no trackers or telemetry, no ads or data sales, TLS configuration, no cookies and no personal data. It partly meets open source and self-hostable. It does not meet independent audit, transparency report, tells users about requests and security headers. It is based in Germany: Fourteen Eyes member; EU member (GDPR). Automated tests: SSL Labs grade A and Mozilla HTTP Observatory grade D.

- Website: https://pirsch.io
- Source code: https://github.com/pirsch-analytics/pirsch
- License: AGPL-3.0
- Jurisdiction: Germany. Fourteen Eyes member. EU member (GDPR).
- Platforms: Web
- Home page trackers: none found
- Category: [Website analytics](https://privacyratings.com/web-analytics/)
- Grade: C (64/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Partial | The core tracking library is AGPL-3.0, but the dashboard and hosted service are closed source. | https://github.com/pirsch-analytics/pirsch/blob/master/LICENSE |
| No trackers or telemetry | Yes | No third-party trackers. The website uses Pirsch's own analytics, which are cookieless and aggregate-only. | https://pirsch.io/privacy |
| No ads or data sales | Yes | Funded by subscriptions. The documentation states no information is sold to third parties. | https://docs.pirsch.io/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A | https://www.ssllabs.com/ssltest/analyze.html?d=pirsch.io&hideResults=on |
| Security headers | No | Grade D (30/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=pirsch.io |
| Modern web standards | Not tested yet | Not tested yet. |  |
| No cookies | Yes | No cookies are used. Visitors are recognized for up to a day with a salted hash computed on the server. | https://docs.pirsch.io/privacy |
| No personal data | Yes | The visitor's IP address is never stored or logged. | https://docs.pirsch.io/privacy |
| Self-hostable | Partial | On-premise installation is only offered with the Enterprise plan. | https://pirsch.io/pricing |

Source: https://privacyratings.com/web-analytics/pirsch/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/web-analytics/pirsch.md