Compare Alceris Analytics and Tinylytics on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics
Germany· Web Analytics
Needs review
Shortlist when you need German-operated, cookieless pageview/event analytics with a free monthly allowance and one-line install. Skip when you need self-hosting, open-source core, enterprise cert packs, or deep product analytics—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.
United Kingdom· Web Analytics
Needs review
Shortlist Tinylytics when you want cookieless page analytics plus bundled uptime/SSL/content checks for a handful of small sites, with primary data on Hetzner in Germany and founder support. Skip when you need self-host/open source, formal ISO/SOC packs, or enterprise multi-tenant governance—consider Plausible Analytics or Simple Analytics instead.
Highlighted rows differ between the two products.
| Feature | Alceris Analytics | Tinylytics |
|---|---|---|
| Country of origin | Germany | United Kingdom |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Germany | United Kingdom |
| Legal entity | Manuel Bauer, Innere Passauer Str. 45, 94315 Straubing, Germany (VAT DE353601960) | Vincent Ritter Consulting (service brand; terms state not separately incorporated yet) |
| Governing law | Germany | Not clearly stated as a single governing-law clause on the public terms page; confirm contractually |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Vendor claims analytics data is stored and served only on European servers and aggregated on arrival. Named external paths: Paddle (paid billing MoR) and optional Google Search Console. No official named infrastructure/subprocessor inventory beyond those; public site IP/ASN currently associated with netcup GmbH (Germany). DNS nameservers observed on Hetzner. | Primary analytics storage: Hetzner Falkenstein (Germany). CDN/security: Cloudflare. Error monitoring: Sentry.io. Payments: Paddle and Lemon Squeezy (Stripe company). Optional: IPinfo geo fallback for API hits; opt-in AI Insights via xAI and Google Gemini. No public backup-provider detail beyond that stack. |
| Summary | German cookieless website analytics SaaS: aggregate pageviews, events, and UTM campaigns without cookies or IP logs, operated from Straubing with EU-oriented hosting claims. | Privacy-first cookieless web analytics for small sites, with bundled uptime/SSL checks, content monitoring, events, and founder support—hosted primarily on Hetzner in Germany. |
| Tags |
| At a glance | Alceris Analytics | Tinylytics |
|---|---|---|
| HQ | Straubing, Germany | Not listed |
| Legal entity | Manuel Bauer (sole operator) | Not listed |
| Deployment | Hosted SaaS only | Managed SaaS only (not open source, not self-hosted) |
| Open source | Product SaaS closed; WP plugin on WordPress.org | Not listed |
| Commercial model | Free volume-capped tier; paid via Paddle | Paid site-count plans; short trial; no permanent free tier |
| Governing law | Germany (per terms) | Not listed |
| HQ / operator | Not listed | Vincent Ritter Consulting, United Kingdom |
| Launched | Not listed | 12 June 2023 (live counters on homepage) |
| Primary hosting | Not listed | Hetzner, Falkenstein, Germany |
| Differentiators | Not listed | Analytics + uptime/SSL/content monitoring + widgets |
| Key capabilities | Alceris Analytics | Tinylytics |
|---|---|---|
| Cookieless by design | Yes | Yes |
| EU-operated (Germany) | Yes | Not listed |
| Realtime dashboard | Yes | Not listed |
| Free tier (volume-capped) | Yes | Not listed |
| SaaS only (no self-host) | Yes | Yes |
| Primary host: Hetzner DE | Not listed | Yes |
| Uptime + SSL monitoring | Not listed | Yes |
| Broken-link crawls | Not listed | Yes |
| Solo-founder UK | Not listed | Yes |
Cookieless aggregation without IP storage
Per the privacy policy, Alceris does not set cookies, session IDs, or similar client storage; IPs are not logged; the full User-Agent is not stored. Only aggregated fields such as page URL, referrer, parsed browser/OS, language, and timezone-based country are retained—aimed at sites that want stats without an analytics cookie banner.
One-line async script, deferred events, WordPress plugin
Install via a single async script from alceris.com with your site data-id (docs include a deferred alceris() queue so early events are not lost). WordPress operators can use the official plugin and paste the dashboard site ID. SaaS-only—there is no self-hosted server package.
Realtime pageviews and custom events with metadata
Pageviews and events are processed immediately into the dashboard. Custom events are sent with alceris('event', name, { ...metadata }), useful for button clicks, form steps, or content attributes without building a full product-analytics stack.
UTM campaigns, outbound links, and cross-domain flows
UTM parameters are extracted for campaign reporting; outbound link clicks are tracked automatically; cross-domain tracking follows visitors across owned domains. Scope is web traffic measurement—not session replay or heatmaps.
Optional Google Search Console and first-party proxy
Connect Search Console to import query impressions, clicks, and terms (data removed on unlink). Docs also describe reverse-proxying script.js and the img.alceris.com data endpoint through your own domain so ad-blockers are less likely to drop hits—at the cost of operating that proxy yourself.
Cookie-free unique hits with rotating salts
Page views and unique hits without tracking cookies or fingerprinting. Uniques combine truncated request signals with a 12-hour rotating salt and one-way hash, reset daily at midnight UTC; visitor IPs are not stored in hits. Suited to indie sites that want trendable uniques without consent banners for analytics cookies.
Thunder Clap uptime, SSL, and domain alerts
In-house multi-region health checks (default every 10 minutes) confirm downtime before emailing, plus SSL expiry notices and domain monitoring. Ultra can shorten intervals. Replaces a separate uptime tool for small fleets—but false downs can occur if WAFs block the Tinylytics monitor user-agent.
Daily content crawl for broken links and mixed content
Subscribed sites can crawl up to 50 pages (two levels deep) on a daily cadence, flagging broken links and mixed HTTP assets on HTTPS pages, with ignore lists and re-check. Ultra adds optional AI spell-check on visible copy—keep it off if AI subprocessors are out of policy.
Attribute-based event tracking (beta)
Enable events on the embed script and mark elements with data-tinylytics-event using category.action names (optional values for downloads). No GTM required; beacon mode helps navigations. Still beta—expect API/schema changes and incomplete capture under aggressive blockers.
Public stats, kudos, hit counters, API, and webhooks
Share passcode-protected public stats, embed hit counters and kudos buttons, export CSV, call the documented API, and push signed webhooks for visits, events, and monitoring. Built for transparent blogs and light automation rather than enterprise BI warehouses.
| Assurance & compliance | Alceris Analytics | Tinylytics |
|---|---|---|
| Independent security / no-logs audit | Not found No public third-party audit of cookieless/no-IP claims found | Not found No public third-party security or no-logs audit report found on official docs. |
| ISO 27001 | Not found No ISO 27001 claim on public site/security pages (none published) | Not found No ISO 27001 claim found on privacy, compliance, or hosting pages. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report referenced publicly | Not found No SOC 2/3 report or claim found on public site. |
| GDPR / EU data protection | Vendor claimed German controller; cookieless/no-IP design claims on privacy policy (last updated 2022). Not legal advice—confirm with counsel and DPA. | Vendor claimed Vendor documents GDPR-oriented design (cookieless, data minimisation, EU primary host, deletion). Not independent certification. |
| US CLOUD Act exposure (indicative) | Partial EU sole proprietor, no known US parent; vendor EU-hosting claims and DE-associated hosting for the public site. Optional Google Search Console involves Google; Paddle handles payments; infrastructure subprocessors not fully named. Indicative only—not legal advice. | Partial UK operator, no known US parent, primary host Hetzner DE; partial exposure via Cloudflare, Sentry, Lemon Squeezy/Paddle, optional IPinfo and opt-in US AI APIs. Not legal advice. |
| Data processing agreement (B2B) | Not found No public DPA page or in-product DPA download found; ask vendor before production use | Not found No public DPA/downloadable processor agreement found; ask the vendor before B2B rollout. |
| EU AI Act | Not applicable Web analytics measurement product; not marketed as an AI system | Not applicable Core product is analytics/monitoring; optional AI insights are secondary and opt-in. |
| Considerations & known limitations | Alceris Analytics | Tinylytics |
|---|---|---|
| Solo / small-operator continuity | Medium Imprint shows an individual operator in Straubing. Terms provide service as-is with email support on reasonable effort and reserve the right to modify or discontinue the service. Practical impact: backup exports and an exit plan matter more than with a large SaaS vendor. | Medium Service is provided by Vincent Ritter Consulting / a solo developer. Support is personal and fast for indies, but bus-factor and formal SLA expectations differ from larger vendors. |
| Thin public compliance packaging | Medium No ISO/SOC claims, no independent audit, no public DPA template, and no named infrastructure subprocessor list despite terms referring to third-party hardware/storage vendors. Practical impact: slower security review for regulated buyers. | Not listed |
| Optional Google Search Console path | Low Connecting Search Console pulls query metrics from Google into Alceris. Leave it disconnected if US providers are out of policy for any analytics-adjacent data. | Not listed |
| Billing via Paddle MoR | Low Paid plans are contracted with Paddle, not Alceris directly. Review Paddle's terms and data role for finance/procurement. | Not listed |
| WordPress plugin maintenance signal | Low WordPress.org lists the plugin as not tested with the latest major WP releases and few active installs. Prefer manual script install or re-test thoroughly on your WP version. | Not listed |
| US-group subprocessors on the data path | Not listed | Medium Cloudflare, Sentry, payment processors (incl. Lemon Squeezy/Stripe group), optional IPinfo and opt-in xAI/Gemini mean the stack is not EU-only end-to-end despite Hetzner primary storage. |
| No public ISO/SOC/audit or DPA pack | Not listed | Medium Enterprise security questionnaires will hit gaps until the vendor supplies audits and a B2B DPA under NDA or email. |
| Scale and feature boundaries | Not listed | Low Content crawls are depth/page limited; event tracking is beta; fair-usage applies to extreme hit volumes; no self-host escape hatch. |
| Optional AI shares aggregated analytics | Not listed | Low AI Insights and related AI spell-check are opt-in and send aggregated (not visitor PII per vendor) data to third-party AI providers—leave disabled under strict AI policies. |
When: You want a more established cookieless SaaS brand with stronger public compliance packaging
Consider: Plausible Analytics or Simple Analytics
Similar lightweight privacy analytics category; different ownership and documentation maturity
When: You need self-hosted or on-prem control of the analytics stack
Consider: Matomo (self-hosted) or catalog Matomo hosting variants
Alceris is cloud-only; proxying the script still sends data to Alceris
When: You need German-hosted open-source cookieless analytics with a different product surface
Consider: Pirsch Analytics
Peer German privacy-analytics option for side-by-side evaluation
When: You need full GA4-class product and marketing analytics depth
Consider: Google Analytics (accept its data model) or a heavier EU suite
Alceris intentionally stays narrow
When: You need open-source and optional self-hosting of the analytics stack
Consider: Plausible Analytics
Estonian product with Cloud plus Community Edition self-host; less bundling of uptime/content monitors.
When: You want European cookieless analytics with a simpler analytics-only scope
Consider: Simple Analytics
Strong privacy positioning; compare feature depth and monitoring separately.
When: You need free-at-scale marketing analytics, ads integrations, or attribution depth
Consider: Google Analytics (incumbent) — or stay on a privacy tool if GA is disallowed
Different privacy and sovereignty profile entirely.
When: You need session replay or heatmaps and accept that privacy model
Consider: Microsoft Clarity or specialised replay tools
Tinylytics deliberately avoids fingerprinting-style session products.