Alceris Analytics vs Simple Analytics

Compare Alceris Analytics and Simple Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Alceris Analytics

Alceris Analytics

Germany· Web Analytics

Needs review

Shortlist when you need German-operated, cookieless pageview/event analytics with a free monthly allowance and one-line install. Skip when you need self-hosting, open-source core, enterprise cert packs, or deep product analytics—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.

Cookieless by designEU-operated (Germany)Realtime dashboardFree tier (volume-capped)SaaS only (no self-host)
Logo: Simple Analytics

Simple Analytics

Netherlands· Web Analytics

Needs review

Shortlist when you need EU-operated, cookieless web metrics without visitor IDs or stored IPs—especially as a visibility layer beside GA4. Skip when you need self-host/open-source control, session replay, or identity-rich marketing analytics; consider Plausible Analytics or Matomo/Piwik PRO instead.

Cookieless analyticsNo stored IPs / visitor IDsEU-hosted (NL focus)Dutch B.V.Works beside GA4API & BI export
Alceris Analytics vs Simple Analytics: Snapshot
FeatureLogo: Alceris AnalyticsAlceris AnalyticsLogo: Simple AnalyticsSimple Analytics
Country of originGermanyNetherlands
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersGermanyNetherlands
Legal entityManuel Bauer, Innere Passauer Str. 45, 94315 Straubing, Germany (VAT DE353601960)Simple Analytics B.V., Amsterdam (KVK 88269922, VAT NL864560011B01)
Governing lawGermanyNetherlands / EU
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyVendor claims analytics data is stored and served only on European servers and aggregated on arrival. Named external paths: Paddle (paid billing MoR) and optional Google Search Console. No official named infrastructure/subprocessor inventory beyond those; public site IP/ASN currently associated with netcup GmbH (Germany). DNS nameservers observed on Hetzner.Analytics data claimed processed in the Netherlands/EU. Public subprocessors (May 2026): Worldstream + Leaseweb (NL hosting), Hetzner (DE hosting), Bunny (SI CDN/DNS), Hyperping (FR uptime), Intention (NL domains). Vendor states this list covers website visitor-data subprocessors only—not payments/internal ops.
Summary

German cookieless website analytics SaaS: aggregate pageviews, events, and UTM campaigns without cookies or IP logs, operated from Straubing with EU-oriented hosting claims.

Dutch privacy-first web analytics SaaS: cookieless pageviews and campaigns without visitor IDs or stored IPs, EU-hosted by Simple Analytics B.V. in Amsterdam.

Tags
At a glance: Alceris Analytics vs Simple Analytics
At a glanceLogo: Alceris AnalyticsAlceris AnalyticsLogo: Simple AnalyticsSimple Analytics
HQStraubing, GermanyAmsterdam, Netherlands
Legal entityManuel Bauer (sole operator)Simple Analytics B.V. (KVK 88269922)
DeploymentHosted SaaS onlyNot listed
Open sourceProduct SaaS closed; WP plugin on WordPress.orgNo (proprietary)
Commercial modelFree volume-capped tier; paid via PaddleFree hobby tier + usage-based paid + enterprise
Governing lawGermany (per terms)Not listed
FoundedNot listed2018
Product typeNot listedHosted web analytics SaaS (not self-hosted)
Data focusNot listedCookieless, non-identifying aggregate metrics
Primary hostingNot listedNetherlands (EU); see subprocessors
Key capabilities: Alceris Analytics vs Simple Analytics
Key capabilitiesLogo: Alceris AnalyticsAlceris AnalyticsLogo: Simple AnalyticsSimple Analytics
Cookieless by designYesYes
EU-operated (Germany)YesNot listed
Realtime dashboardYesNot listed
Free tier (volume-capped)YesNot listed
SaaS only (no self-host)YesNot listed
No stored IPs / visitor IDsNot listedYes
EU-hosted (NL focus)Not listedYes
Dutch B.V.Not listedYes
Works beside GA4Not listedYes
API & BI exportNot listedYes

Alceris Analytics

  • Cookieless aggregation without IP storage

    Per the privacy policy, Alceris does not set cookies, session IDs, or similar client storage; IPs are not logged; the full User-Agent is not stored. Only aggregated fields such as page URL, referrer, parsed browser/OS, language, and timezone-based country are retained—aimed at sites that want stats without an analytics cookie banner.

  • One-line async script, deferred events, WordPress plugin

    Install via a single async script from alceris.com with your site data-id (docs include a deferred alceris() queue so early events are not lost). WordPress operators can use the official plugin and paste the dashboard site ID. SaaS-only—there is no self-hosted server package.

  • Realtime pageviews and custom events with metadata

    Pageviews and events are processed immediately into the dashboard. Custom events are sent with alceris('event', name, { ...metadata }), useful for button clicks, form steps, or content attributes without building a full product-analytics stack.

  • UTM campaigns, outbound links, and cross-domain flows

    UTM parameters are extracted for campaign reporting; outbound link clicks are tracked automatically; cross-domain tracking follows visitors across owned domains. Scope is web traffic measurement—not session replay or heatmaps.

  • Optional Google Search Console and first-party proxy

    Connect Search Console to import query impressions, clicks, and terms (data removed on unlink). Docs also describe reverse-proxying script.js and the img.alceris.com data endpoint through your own domain so ad-blockers are less likely to drop hits—at the cost of operating that proxy yourself.

Simple Analytics

  • Cookieless metrics without visitor IDs or stored IPs

    Collects pageviews, referrers, UTMs, time-on-page, and scroll depth without cookies, localStorage, fingerprints, or stored IP addresses. Unique visits are inferred from referrer hostname matching, not device IDs. Built for sites that want analytics without a consent banner solely for this tool—and without building visitor profiles.

  • Country from time zone, not geo-IP

    Country-level location is derived from the visitor’s IANA time zone rather than IP lookup, so IPs can be dropped end-to-end. City/region is not available; some border and multi-country zones can mis-tag. Useful when legal teams reject IP-based geolocation even when hashed.

  • Cookieless layer beside GA4 and BI stacks

    Positioned to measure traffic lost when consent is denied in cookie-based tools. Import historical Google Analytics data; export via Stats/Export APIs and integrations toward Looker Studio, Power BI, and warehouse workflows so analysts can compare consented vs observed traffic without replacing every GA report.

  • Lightweight script, events, goals, and ad-blocker bypass

    Vendor claims a single script under 5 KB. Supports events, automated events (e.g. downloads, outbound links), goals, filters, email reports, and robot/referrer-spam controls. Ad-blocker resilience is via first-party proxy or custom subdomain CNAME—not automatic immunity for every blocklist.

  • Team access, SSO, and EU-operated SaaS

    Hosted product from Simple Analytics B.V. (Amsterdam) with role-oriented team features on higher tiers and documented SAML SSO for Okta and Microsoft Entra. No official self-host edition—operations and residency follow the vendor’s EU infrastructure and public subprocessor list.

Assurance & compliance: Alceris Analytics vs Simple Analytics
Assurance & complianceLogo: Alceris AnalyticsAlceris AnalyticsLogo: Simple AnalyticsSimple Analytics
Independent security / no-logs audit
Not found

No public third-party audit of cookieless/no-IP claims found

Not found

Searched security/trust pages; no public independent audit PDF found.

ISO 27001
Not found

No ISO 27001 claim on public site/security pages (none published)

Not found

No ISO 27001 certificate claimed on primary security pages.

SOC 2 / SOC 3
Not found

No SOC 2/3 report referenced publicly

Partial

Vendor states SOC 2 Type II is in progress / coming soon—not completed certification at research time.

GDPR / EU data protection
Vendor claimed

German controller; cookieless/no-IP design claims on privacy policy (last updated 2022). Not legal advice—confirm with counsel and DPA.

Vendor claimed

Dutch EU entity; vendor claims no personal data collection (no cookies/IPs/visitor IDs) and GDPR-friendly design. Not legal advice—confirm for your processing facts.

US CLOUD Act exposure (indicative)
Partial

EU sole proprietor, no known US parent; vendor EU-hosting claims and DE-associated hosting for the public site. Optional Google Search Console involves Google; Paddle handles payments; infrastructure subprocessors not fully named. Indicative only—not legal advice.

Partial

EU entity, no known US parent, public analytics subprocessors are EU-based (Worldstream, Leaseweb, Hetzner, Bunny, Hyperping). Residual risk remains; reconcile Cloudflare mention on GDPR page vs Bunny on subprocessors. Assessment by EuropeanStack—not a vendor 'safe' claim. Not legal advice.

Data processing agreement (B2B)
Not found

No public DPA page or in-product DPA download found; ask vendor before production use

Partial

Vendor says DPA usually not required (no personal data) but will review/sign customer-provided DPAs aligned with architecture.

EU AI Act
Not applicable

Web analytics measurement product; not marketed as an AI system

Not applicable

Web analytics product; not marketed as an AI system subject to AI Act high-risk regimes.

Considerations & known limitations: Alceris Analytics vs Simple Analytics
Considerations & known limitationsLogo: Alceris AnalyticsAlceris AnalyticsLogo: Simple AnalyticsSimple Analytics
Solo / small-operator continuity
Medium

Imprint shows an individual operator in Straubing. Terms provide service as-is with email support on reasonable effort and reserve the right to modify or discontinue the service. Practical impact: backup exports and an exit plan matter more than with a large SaaS vendor.

Not listed
Thin public compliance packaging
Medium

No ISO/SOC claims, no independent audit, no public DPA template, and no named infrastructure subprocessor list despite terms referring to third-party hardware/storage vendors. Practical impact: slower security review for regulated buyers.

Not listed
Optional Google Search Console path
Low

Connecting Search Console pulls query metrics from Google into Alceris. Leave it disconnected if US providers are out of policy for any analytics-adjacent data.

Not listed
Billing via Paddle MoR
Low

Paid plans are contracted with Paddle, not Alceris directly. Review Paddle's terms and data role for finance/procurement.

Not listed
WordPress plugin maintenance signal
Low

WordPress.org lists the plugin as not tested with the latest major WP releases and few active installs. Prefer manual script install or re-test thoroughly on your WP version.

Not listed
Hosted SaaS only—no self-hostNot listed
Medium

No official self-host edition. Orgs with air-gap or on-prem telemetry mandates need Plausible self-host, Matomo, or similar instead.

SOC 2 not yet completeNot listed
Medium

SOC 2 Type II is publicly 'in progress'. Enterprise security reviews may block until a report is available or accept compensating controls (minimal data + EU hosts).

Referrer-based uniques and timezone countryNot listed
Low

Uniques are not durable visitor IDs; country is timezone-based with known mis-tag edge cases. Totals will differ from GA client-ID models—set stakeholder expectations.

CDN/DDoS vendor documentation inconsistencyNot listed
Low

Subprocessors list Bunny (EU) for CDN/DNS; GDPR page still references Cloudflare for CDN/DDoS. Ask for current edge path before asserting zero US-group infrastructure touch.

Small independent operatorNot listed
Low

Public About page describes a three-person self-funded team. Fine for many sites; large enterprises should assess continuity, support SLAs, and roadmap capacity explicitly.

Fit

Alceris Analytics

Best fit when

  • Small-to-medium websites that want aggregate traffic and event stats without analytics cookies
  • Teams replacing GA for basic reporting (pages, referrers, UTMs) under a German legal entity
  • Operators who value a free volume-capped tier and Paddle-billed paid upgrades
  • Sites that may reverse-proxy the script/data endpoints to reduce ad-blocker loss
  • WordPress sites willing to validate the plugin against their WP version

Poor fit when

  • Organisations that must self-host analytics or run an open-source core under their own ops
  • Buyers needing public ISO 27001/SOC 2, independent audits, or a ready DPA/subprocessor pack
  • Product teams requiring funnels, session replay, heatmaps, or multi-product analytics depth
  • Procurement processes that reject solo-operator vendors or optional US integrations (Google Search Console)

Consider instead when

  • When: You want a more established cookieless SaaS brand with stronger public compliance packaging

    Consider: Plausible Analytics or Simple Analytics

    Similar lightweight privacy analytics category; different ownership and documentation maturity

  • When: You need self-hosted or on-prem control of the analytics stack

    Consider: Matomo (self-hosted) or catalog Matomo hosting variants

    Alceris is cloud-only; proxying the script still sends data to Alceris

  • When: You need German-hosted open-source cookieless analytics with a different product surface

    Consider: Pirsch Analytics

    Peer German privacy-analytics option for side-by-side evaluation

  • When: You need full GA4-class product and marketing analytics depth

    Consider: Google Analytics (accept its data model) or a heavier EU suite

    Alceris intentionally stays narrow

Simple Analytics

Best fit when

  • Teams measuring traffic lost when consent is denied in cookie-based analytics (GA4/Adobe)
  • Public-sector and regulated sites that need no cookies/IPs/visitor profiles for web stats
  • EU procurement that requires Dutch legal entity + published EU subprocessors for visitor data
  • Agencies/multi-site operators wanting a simple hosted dashboard, reports, and API/BI egress
  • Sites that want essential pageview/referrer/UTM metrics without an analytics-only consent banner

Poor fit when

  • Product analytics needing session replay, heatmaps, or person-level funnels
  • Organizations that must self-host analytics or prefer open-source governance (see Plausible/Matomo)
  • Buyers requiring city/region geolocation accuracy (country is timezone-derived)
  • Teams whose primary need is identity-rich attribution, audiences, and marketing automation inside the analytics suite

Consider instead when

  • When: You need open-source and/or official self-hosting of privacy-first analytics

    Consider: Plausible Analytics (catalog: plausible_analytics) or Matomo

    Simple Analytics is hosted SaaS only; Plausible and Matomo cover self-host paths many security policies require.

  • When: You need a deeper EU enterprise analytics platform with configurable processing and on-prem options

    Consider: Piwik PRO (catalog: piwik_pro)

    Heavier suite and procurement surface than Simple Analytics’ minimal cookieless product.

  • When: You need identity graphs, remarketing audiences, and full marketing analytics depth

    Consider: Google Analytics or Adobe Analytics

    Keep those for consented deep analysis; Simple Analytics is the opposite design tradeoff.

  • When: You want another lightweight EU cookieless tracker and are comparing peers

    Consider: Pirsch Analytics (pirsch_analytics) or Friendly Analytics (friendly_analytics)

    Compare retention, multi-site, SSO, and API maturity rather than GDPR slogans alone.

Open questions for due diligence

Alceris Analytics

  • Will the vendor sign a B2B DPA and provide a current named subprocessor list (hosting, backups, email)?
  • Which exact EU data-centre operators and regions process customer analytics data today?
  • Is there any independent assessment of the no-cookie / no-IP-storage claims?
  • What is the support SLA or roadmap process for a solo-operated product?
  • Is the WordPress plugin still maintained for current WordPress majors?

Simple Analytics

  • Is Cloudflare still used for any CDN/DDoS path, or has Bunny fully replaced it for edge services?
  • When will SOC 2 Type II complete, and will the report be available under NDA?
  • What exact data-retention windows apply per plan for your expected traffic volume?
  • Will the vendor sign your standard DPA/SCC pack as-is for public-sector procurement?
  • Are any non-EU subprocessors used for account email, payments, or support that could affect broader vendor risk (visitor analytics list excludes these)?