Alceris Analytics vs Publytics

Compare Alceris Analytics and Publytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Alceris Analytics

Alceris Analytics

Germany· Web Analytics

Needs review

Shortlist when you need German-operated, cookieless pageview/event analytics with a free monthly allowance and one-line install. Skip when you need self-hosting, open-source core, enterprise cert packs, or deep product analytics—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.

Cookieless by designEU-operated (Germany)Realtime dashboardFree tier (volume-capped)SaaS only (no self-host)
Logo: Publytics

Publytics

Italy· Web Analytics

Needs review

Shortlist when you need cookieless, unsampled publisher analytics with multi-site Network views and a public EU DPA from an Italian SaaS operator. Skip when you need self-hosting, product analytics at GA4/Adobe depth, or product-level ISO/SOC—consider Plausible (simpler privacy analytics / self-host options) or Matomo (self-host ownership) instead.

Cookieless trackingNo default samplingMulti-site NetworkEU-hosted (EuroVPS/Hetzner)Public B2B DPAPublisher-focused UX
Alceris Analytics vs Publytics: Snapshot
FeatureLogo: Alceris AnalyticsAlceris AnalyticsLogo: PublyticsPublytics
Country of originGermanyItaly
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersGermanyItaly
Legal entityManuel Bauer, Innere Passauer Str. 45, 94315 Straubing, Germany (VAT DE353601960)Publytics S.r.l. / Publytics SRL, Via Val Leventina 3 INT 1, 20148 Milan (MI), Italy (VAT IT13079420967)
Governing lawGermanyItaly / EU GDPR (processor under published DPA)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyVendor claims analytics data is stored and served only on European servers and aggregated on arrival. Named external paths: Paddle (paid billing MoR) and optional Google Search Console. No official named infrastructure/subprocessor inventory beyond those; public site IP/ASN currently associated with netcup GmbH (Germany). DNS nameservers observed on Hetzner.Analytics infrastructure subprocessors in public DPA: EuroVPS (Euclid Services Ltd, Cyprus) and Hetzner Online GmbH (Germany). Data policy/DPA: EU storage (NL, DE, FI; DPA also IT); no transfer outside the EU for analytics processing. Account path: Stripe (payments), Brevo/Sendinblue (email).
Summary

German cookieless website analytics SaaS: aggregate pageviews, events, and UTM campaigns without cookies or IP logs, operated from Straubing with EU-oriented hosting claims.

Cookieless web analytics SaaS for digital publishers: unsampled real-time and historical metrics, multi-site Network views, GA import, and EU-hosted measurement from an Italian company.

Tags
At a glance: Alceris Analytics vs Publytics
At a glanceLogo: Alceris AnalyticsAlceris AnalyticsLogo: PublyticsPublytics
HQStraubing, GermanyMilan, Italy
Legal entityManuel Bauer (sole operator)Publytics S.r.l. (VAT IT13079420967)
DeploymentHosted SaaS onlyManaged SaaS (not self-hosted)
Open sourceProduct SaaS closed; WP plugin on WordPress.orgNo (tracker uses MIT library code)
Commercial modelFree volume-capped tier; paid via PaddlePageview tiers; free trial
Governing lawGermany (per terms)Not listed
HostingNot listedEuroVPS + Hetzner (EU regions)
Key capabilities: Alceris Analytics vs Publytics
Key capabilitiesLogo: Alceris AnalyticsAlceris AnalyticsLogo: PublyticsPublytics
Cookieless by designYesYes
EU-operated (Germany)YesNot listed
Realtime dashboardYesNot listed
Free tier (volume-capped)YesNot listed
SaaS only (no self-host)YesNot listed
No default samplingNot listedYes
Multi-site NetworkNot listedYes
EU-hosted (EuroVPS/Hetzner)Not listedYes
Public B2B DPANot listedYes
Publisher-focused UXNot listedYes

Alceris Analytics

  • Cookieless aggregation without IP storage

    Per the privacy policy, Alceris does not set cookies, session IDs, or similar client storage; IPs are not logged; the full User-Agent is not stored. Only aggregated fields such as page URL, referrer, parsed browser/OS, language, and timezone-based country are retained—aimed at sites that want stats without an analytics cookie banner.

  • One-line async script, deferred events, WordPress plugin

    Install via a single async script from alceris.com with your site data-id (docs include a deferred alceris() queue so early events are not lost). WordPress operators can use the official plugin and paste the dashboard site ID. SaaS-only—there is no self-hosted server package.

  • Realtime pageviews and custom events with metadata

    Pageviews and events are processed immediately into the dashboard. Custom events are sent with alceris('event', name, { ...metadata }), useful for button clicks, form steps, or content attributes without building a full product-analytics stack.

  • UTM campaigns, outbound links, and cross-domain flows

    UTM parameters are extracted for campaign reporting; outbound link clicks are tracked automatically; cross-domain tracking follows visitors across owned domains. Scope is web traffic measurement—not session replay or heatmaps.

  • Optional Google Search Console and first-party proxy

    Connect Search Console to import query impressions, clicks, and terms (data removed on unlink). Docs also describe reverse-proxying script.js and the img.alceris.com data endpoint through your own domain so ad-blockers are less likely to drop hits—at the cost of operating that proxy yourself.

Publytics

  • Unsampled real-time and daily publisher metrics

    Dashboard and Real-time views show active users (including last-minute and 30-minute windows), top pages, sources, social referrals, and day trends—with minute-level trend comparison documented for real-time. Vendor states no default data sampling, so reports reflect full counted client-side traffic rather than GA-style estimates on large properties.

  • Multi-site Network mode for content portfolios

    Business and Enterprise plans can group properties into Networks (plan caps apply: e.g. up to three Networks on Business, unlimited on Enterprise). Network views mirror site dashboards with split-by-site filters, combined real-time tables, and PDF/CSV export across the portfolio—built for multi-brand publishers rather than single blogs.

  • Cookieless measurement with daily-rotating visitor hash

    Tracking avoids cookies and permanent device IDs. Per the DPA, IP and User-Agent are used only to derive a daily salted hash for unique visitors, then discarded; metrics stay aggregated (URL, referrer, browser/OS, device, country). Designed so many sites can skip consent banners for analytics alone—confirm with counsel for your jurisdictions and any custom IDs you add.

  • Historical import, custom events/dimensions, and API

    Import paths cover GA4 and other tools (Plausible/Fathom mentioned) with support-assisted finalization. Custom events, dimensions, and metrics scale by plan; REST API uses Sanctum Bearer tokens scoped to subscribed sites. Fits teams rebuilding GA-era reporting without rebuilding infrastructure.

  • AI referral traffic reporting

    Dedicated documentation for traffic referred from AI systems (ChatGPT, Gemini, Claude, Perplexity, Copilot, Mistral, Google AI Overviews, Deepseek, and others). Useful for publishers optimizing for answer-engine and AI-overview discovery alongside classic SEO sources.

Assurance & compliance: Alceris Analytics vs Publytics
Assurance & complianceLogo: Alceris AnalyticsAlceris AnalyticsLogo: PublyticsPublytics
Independent security / no-logs audit
Not found

No public third-party audit of cookieless/no-IP claims found

Not found

Searched official site; no public third-party security or no-logs audit PDF found. DPA describes hashing and non-retention of raw IP/UA.

ISO 27001
Not found

No ISO 27001 claim on public site/security pages (none published)

Not found

No Publytics product certificate found. Host EuroVPS markets ISO certifications; that is infrastructure provider scope, not Publytics certification.

SOC 2 / SOC 3
Not found

No SOC 2/3 report referenced publicly

Not found

No public SOC 2/3 report found on official Publytics pages.

GDPR / EU data protection
Vendor claimed

German controller; cookieless/no-IP design claims on privacy policy (last updated 2022). Not legal advice—confirm with counsel and DPA.

Vendor claimed

Italian controller/processor entity; cookieless design; public Art. 28 DPA; EU hosting named. Not legal advice.

US CLOUD Act exposure (indicative)
Partial

EU sole proprietor, no known US parent; vendor EU-hosting claims and DE-associated hosting for the public site. Optional Google Search Console involves Google; Paddle handles payments; infrastructure subprocessors not fully named. Indicative only—not legal advice.

Partial

EU entity, no known US parent; analytics hosts EuroVPS + Hetzner in EU with DPA no third-country transfer for service data. Account billing via Stripe (US company). Not a vendor 'safe' claim—EuropeanStack assessment only.

Data processing agreement (B2B)
Not found

No public DPA page or in-product DPA download found; ask vendor before production use

Vendor claimed

Full public DPA at https://publytics.net/dpa with Annex B subprocessors and Annex C security/transfer instructions.

EU AI Act
Not applicable

Web analytics measurement product; not marketed as an AI system

Not applicable

Web analytics product; AI-referral reporting is measurement of referrers, not an AI system product.

Considerations & known limitations: Alceris Analytics vs Publytics
Considerations & known limitationsLogo: Alceris AnalyticsAlceris AnalyticsLogo: PublyticsPublytics
Solo / small-operator continuity
Medium

Imprint shows an individual operator in Straubing. Terms provide service as-is with email support on reasonable effort and reserve the right to modify or discontinue the service. Practical impact: backup exports and an exit plan matter more than with a large SaaS vendor.

Not listed
Thin public compliance packaging
Medium

No ISO/SOC claims, no independent audit, no public DPA template, and no named infrastructure subprocessor list despite terms referring to third-party hardware/storage vendors. Practical impact: slower security review for regulated buyers.

Not listed
Optional Google Search Console path
Low

Connecting Search Console pulls query metrics from Google into Alceris. Leave it disconnected if US providers are out of policy for any analytics-adjacent data.

Not listed
Billing via Paddle MoR
Low

Paid plans are contracted with Paddle, not Alceris directly. Review Paddle's terms and data role for finance/procurement.

Not listed
WordPress plugin maintenance signal
Low

WordPress.org lists the plugin as not tested with the latest major WP releases and few active installs. Prefer manual script install or re-test thoroughly on your WP version.

Not listed
SaaS-only (no self-host)Not listed
Medium

All measurement depends on Publytics cloud availability and vendor roadmap. Teams with residency or air-gap requirements need Matomo/Plausible CE-style self-host alternatives.

No public independent security auditNot listed
Medium

Hashing and non-retention claims are first-party (DPA/docs). No public third-party audit was found—enterprise security reviews will need questionnaires, DPA audit rights, and possibly NDA materials.

Feature depth tied to pageview tiersNot listed
Low

Networks, API rate limits, custom dimensions/metrics, retention years, and time granularity differ by Lite/Business/Enterprise. Validate limits against portfolio size before migration.

US payment processor on account pathNot listed
Low

Stripe processes payments (US company). Separate from DPA Annex B analytics hosts, but relevant if procurement treats all vendor SaaS touchpoints as in-scope for CLOUD Act diligence.

Customer-injected identifiers can re-identifyNot listed
Medium

DPA warns controllers not to inject unique user IDs that re-identify visitors via the script. Misconfiguration can undermine the cookieless privacy model.

Fit

Alceris Analytics

Best fit when

  • Small-to-medium websites that want aggregate traffic and event stats without analytics cookies
  • Teams replacing GA for basic reporting (pages, referrers, UTMs) under a German legal entity
  • Operators who value a free volume-capped tier and Paddle-billed paid upgrades
  • Sites that may reverse-proxy the script/data endpoints to reduce ad-blocker loss
  • WordPress sites willing to validate the plugin against their WP version

Poor fit when

  • Organisations that must self-host analytics or run an open-source core under their own ops
  • Buyers needing public ISO 27001/SOC 2, independent audits, or a ready DPA/subprocessor pack
  • Product teams requiring funnels, session replay, heatmaps, or multi-product analytics depth
  • Procurement processes that reject solo-operator vendors or optional US integrations (Google Search Console)

Consider instead when

  • When: You want a more established cookieless SaaS brand with stronger public compliance packaging

    Consider: Plausible Analytics or Simple Analytics

    Similar lightweight privacy analytics category; different ownership and documentation maturity

  • When: You need self-hosted or on-prem control of the analytics stack

    Consider: Matomo (self-hosted) or catalog Matomo hosting variants

    Alceris is cloud-only; proxying the script still sends data to Alceris

  • When: You need German-hosted open-source cookieless analytics with a different product surface

    Consider: Pirsch Analytics

    Peer German privacy-analytics option for side-by-side evaluation

  • When: You need full GA4-class product and marketing analytics depth

    Consider: Google Analytics (accept its data model) or a heavier EU suite

    Alceris intentionally stays narrow

Publytics

Best fit when

  • Content publishers and media sites that want GA3-style reporting without cookies or default sampling
  • Multi-brand portfolios that need Network dashboards, split-by-site filters, and shared exports
  • Teams migrating historical series from GA4 (or Plausible/Fathom) into a privacy-oriented SaaS
  • EU-oriented controllers who want Italian legal entity, published DPA, and EU infrastructure subprocessors named in annexes
  • Editorial/SEO leads who need real-time active users, sources, and AI-referral reporting without operating self-hosted analytics

Poor fit when

  • Organizations that require self-hosted or open-source analytics only
  • Product/growth teams that need GA4/Adobe-class event modeling, experiment stacks, and ads ecosystem integrations
  • Buyers that need verified product ISO 27001/SOC 2 certificates before shortlist (none found for Publytics itself)
  • Very simple single-site blogs that only need minimal privacy metrics—lighter tools may be enough

Consider instead when

  • When: You want open-core privacy analytics with optional self-host

    Consider: Plausible Analytics

    Simpler surface; stronger self-host/open-core path than Publytics SaaS-only model

  • When: You must run analytics on your own infrastructure

    Consider: Matomo (self-host) or Plausible Community Edition

    Publytics is managed cloud only—no official on-prem product

  • When: You need deep product analytics and marketing stack integration

    Consider: Google Analytics or Adobe Analytics

    Trade privacy/EU-hosting priorities for ecosystem breadth

Open questions for due diligence

Alceris Analytics

  • Will the vendor sign a B2B DPA and provide a current named subprocessor list (hosting, backups, email)?
  • Which exact EU data-centre operators and regions process customer analytics data today?
  • Is there any independent assessment of the no-cookie / no-IP-storage claims?
  • What is the support SLA or roadmap process for a solo-operated product?
  • Is the WordPress plugin still maintained for current WordPress majors?

Publytics

  • Will Publytics provide completed security questionnaire, pen-test summary, or ISO evidence under NDA for enterprise procurement?
  • Exact current pageview tier limits, Network caps, and retention for the sites you will migrate?
  • Is GA4 historical import complete for your property structure (events, custom dimensions) or only core traffic series?
  • How are subprocessors for account services (Stripe, Brevo) contractually covered relative to the analytics DPA annex?
  • Any planned US or non-EU hosting options that would change the current EU-only transfer instruction?