# Swetrix privacy rating

Open source, cookieless web analytics with performance monitoring, error tracking and optional session replays. Available as Swetrix Cloud or as the self-hosted Community Edition.

## Summary

Swetrix scores 73 out of 100 (grade C) on the website analytics criteria. It meets 7 of 11 criteria: open source, no trackers or telemetry, no ads or data sales, TLS configuration, no cookies, no personal data and self-hostable. It does not meet independent audit, transparency report, tells users about requests and security headers. It is based in the United Kingdom: Five Eyes member; GDPR-style data protection law; CLOUD Act data access agreement with the US. Automated tests: SSL Labs grade A+ and Mozilla HTTP Observatory grade C-.

- Website: https://swetrix.com
- Source code: https://github.com/Swetrix/swetrix
- License: AGPL-3.0
- Jurisdiction: United Kingdom. Five Eyes member. GDPR-style data protection law. CLOUD Act data access agreement with the US.
- Platforms: Web
- Home page trackers: none found
- Category: [Website analytics](https://privacyratings.com/web-analytics/)
- Grade: C (73/100)

## Criteria

| Criterion | Answer | Note | Evidence |
| --- | --- | --- | --- |
| Open source | Yes | All code is public. The Community Edition is AGPL-3.0, and the cloud-only features in backend/apps/cloud use a source-available proprietary license. | https://github.com/Swetrix/swetrix/blob/main/backend/apps/cloud/COPYING.txt |
| No trackers or telemetry | Yes | No third-party trackers. The website uses Swetrix's own analytics, which are cookieless and aggregate-only. | https://swetrix.com/privacy |
| No ads or data sales | Yes | Funded by subscriptions. The privacy policy states personal information is not sold or rented. | https://swetrix.com/privacy |
| Independent audit | No | No independent audit is published. |  |
| Transparency report | No | No transparency report or government request policy is published. |  |
| Tells users about requests | No | No published policy on notifying users about data requests. |  |
| TLS configuration | Yes | Grade A+ | https://www.ssllabs.com/ssltest/analyze.html?d=swetrix.com&hideResults=on |
| Security headers | No | Grade C- (45/100+) | https://developer.mozilla.org/en-US/observatory/analyze?host=swetrix.com |
| Modern web standards | Not tested yet | Not tested yet. |  |
| No cookies | Yes | No cookies or other client-side identifiers such as local storage are used for tracking. | https://swetrix.com/data-policy |
| No personal data | Yes | IP addresses and User-Agent strings are only processed in memory to build a daily-salted session hash and are not stored. | https://swetrix.com/data-policy |
| Self-hostable | Yes | The Community Edition is officially documented for self-hosting with Docker. | https://swetrix.com/docs/selfhosting/how-to |

Source: https://privacyratings.com/web-analytics/swetrix/
Edit: https://github.com/privacyratings/privacyratings.com/edit/main/ratings/web-analytics/swetrix.md