Compare Alceris Analytics and Trackboxx on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Germany· Web Analytics
Needs review
Shortlist when you need German-operated, cookieless pageview/event analytics with a free monthly allowance and one-line install. Skip when you need self-hosting, open-source core, enterprise cert packs, or deep product analytics—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.
Germany· Web Analytics
Needs review
Shortlist Trackboxx when you want German-operated, cookie-free hosted analytics with ecommerce and agency-friendly public dashboards. Skip when you need self-host/open-source control or GA-class product analytics—consider Plausible (self-host option) or Matomo instead.
Highlighted rows differ between the two products.
| Feature | Alceris Analytics | Trackboxx |
|---|---|---|
| Country of origin | Germany | Germany |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Germany | Germany |
| Legal entity | Manuel Bauer, Innere Passauer Str. 45, 94315 Straubing, Germany (VAT DE353601960) | Trackboxx / Christian Pust (sole trader imprint; Halberstadt seat, Grönwohld branch) |
| Governing law | Germany | Not listed |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Vendor claims analytics data is stored and served only on European servers and aggregated on arrival. Named external paths: Paddle (paid billing MoR) and optional Google Search Console. No official named infrastructure/subprocessor inventory beyond those; public site IP/ASN currently associated with netcup GmbH (Germany). DNS nameservers observed on Hetzner. | Visitor analytics: TK Enterprises Ltd infrastructure in First Colo Frankfurt. CDN: BunnyWay d.o.o. (Slovenia). Payments: Paddle.com Market Ltd (UK). Email/newsletters: Amazon SES (AWS; EU regions primary, possible US). Chat on marketing site: Userlike UG (Germany). |
| Summary | German cookieless website analytics SaaS: aggregate pageviews, events, and UTM campaigns without cookies or IP logs, operated from Straubing with EU-oriented hosting claims. | German cookie-free web analytics SaaS: day-rotating hash tracking, ecommerce and UTM dashboards, hosted analytics in Frankfurt with a published B2B DPA. |
| Tags |
| At a glance | Alceris Analytics | Trackboxx |
|---|---|---|
| HQ | Straubing, Germany | Halberstadt / Grönwohld, Germany |
| Legal entity | Manuel Bauer (sole operator) | Trackboxx / Christian Pust (imprint) |
| Deployment | Hosted SaaS only | Not listed |
| Open source | Product SaaS closed; WP plugin on WordPress.org | No |
| Commercial model | Free volume-capped tier; paid via Paddle | Pageview packages; free tier + trial; Paddle checkout |
| Governing law | Germany (per terms) | Not listed |
| Product type | Not listed | Managed web analytics SaaS |
| Self-host | Not listed | No |
| Analytics hosting | Not listed | First Colo, Frankfurt (via TK Enterprises Ltd) |
| Key capabilities | Alceris Analytics | Trackboxx |
|---|---|---|
| Cookieless by design | Yes | Not listed |
| EU-operated (Germany) | Yes | Not listed |
| Realtime dashboard | Yes | Not listed |
| Free tier (volume-capped) | Yes | Not listed |
| SaaS only (no self-host) | Yes | Yes |
| Cookie-free tracking | Not listed | Yes |
| Germany-operated | Not listed | Yes |
| Frankfurt analytics hosting | Not listed | Yes |
| E-commerce analytics | Not listed | Yes |
| B2B DPA available | Not listed | Yes |
Cookieless aggregation without IP storage
Per the privacy policy, Alceris does not set cookies, session IDs, or similar client storage; IPs are not logged; the full User-Agent is not stored. Only aggregated fields such as page URL, referrer, parsed browser/OS, language, and timezone-based country are retained—aimed at sites that want stats without an analytics cookie banner.
One-line async script, deferred events, WordPress plugin
Install via a single async script from alceris.com with your site data-id (docs include a deferred alceris() queue so early events are not lost). WordPress operators can use the official plugin and paste the dashboard site ID. SaaS-only—there is no self-hosted server package.
Realtime pageviews and custom events with metadata
Pageviews and events are processed immediately into the dashboard. Custom events are sent with alceris('event', name, { ...metadata }), useful for button clicks, form steps, or content attributes without building a full product-analytics stack.
UTM campaigns, outbound links, and cross-domain flows
UTM parameters are extracted for campaign reporting; outbound link clicks are tracked automatically; cross-domain tracking follows visitors across owned domains. Scope is web traffic measurement—not session replay or heatmaps.
Optional Google Search Console and first-party proxy
Connect Search Console to import query impressions, clicks, and terms (data removed on unlink). Docs also describe reverse-proxying script.js and the img.alceris.com data endpoint through your own domain so ad-blockers are less likely to drop hits—at the cost of operating that proxy yourself.
Cookie-free day-hash session tracking
No analytics cookies. Same-day visitor correlation uses hashes of IP, user agent, site ID, and a daily rotating signature (page hashes also include host/path). Hashes expire within 24 hours so multi-day visitor histories and IP recovery are not available by design.
Traffic, channel, and live visitor dashboards
Dashboards cover visits, pageviews, bounce rate, dwell time, devices/browsers, geo down to city, channel mix including AI traffic, outbound link clicks, live visitors on a short refresh interval, and period-over-period comparisons without a heavy analyst UI.
E-commerce funnels and revenue breakdowns
Shop metrics include products sold, cart abandonment, add-to-cart style signals, checkout funnel visibility, and revenue by channel and location—aimed at operators who need store KPIs without a full GA4 ecommerce implementation.
UTM, goals, GSC keywords, and public reports
Campaign UTMs, conversion goals (including auto goals), optional Google Search Console keyword views, shareable public dashboards (URL or iframe), and PDF reports support marketers and agencies who need client-facing summaries.
CMS and shop plugins plus GA import
Documented integrations include WordPress, Shopware, Shopify, JTL, and ePages. Help center also covers script install, excluding own IP/paths, ads tracking patterns, and importing historical Google Analytics data when migrating.
| Assurance & compliance | Alceris Analytics | Trackboxx |
|---|---|---|
| Independent security / no-logs audit | Not found No public third-party audit of cookieless/no-IP claims found | Not found No public third-party audit PDF or cert registry entry found on primary pages. |
| ISO 27001 | Not found No ISO 27001 claim on public site/security pages (none published) | Not found No ISO 27001 claim found on imprint, help center, or DPA materials reviewed. |
| SOC 2 / SOC 3 | Not found No SOC 2/3 report referenced publicly | Not found No SOC 2/3 report referenced on public trust materials reviewed. |
| GDPR / EU data protection | Vendor claimed German controller; cookieless/no-IP design claims on privacy policy (last updated 2022). Not legal advice—confirm with counsel and DPA. | Vendor claimed German controller imprint; cookie-free hash model; public DPA; processing described as EU/EEA. Vendor asserts DSGVO fitness—confirm with counsel for your site stack. |
| US CLOUD Act exposure (indicative) | Partial EU sole proprietor, no known US parent; vendor EU-hosting claims and DE-associated hosting for the public site. Optional Google Search Console involves Google; Paddle handles payments; infrastructure subprocessors not fully named. Indicative only—not legal advice. | Partial EU sole-trader operator, no known US parent; analytics hosting claimed in Frankfurt. Partial/medium because privacy policy names Amazon SES (AWS) for email with possible US transfers; payments via UK Paddle. Not legal advice. |
| Data processing agreement (B2B) | Not found No public DPA page or in-product DPA download found; ask vendor before production use | Vendor claimed Free AV/DPA offered at order and as PDF; annex lists hosting, Paddle, BunnyWay. |
| EU AI Act | Not applicable Web analytics measurement product; not marketed as an AI system | Not applicable Web analytics SaaS; not an AI system product for AI Act high-risk classification purposes. |
| Considerations & known limitations | Alceris Analytics | Trackboxx |
|---|---|---|
| Solo / small-operator continuity | Medium Imprint shows an individual operator in Straubing. Terms provide service as-is with email support on reasonable effort and reserve the right to modify or discontinue the service. Practical impact: backup exports and an exit plan matter more than with a large SaaS vendor. | Not listed |
| Thin public compliance packaging | Medium No ISO/SOC claims, no independent audit, no public DPA template, and no named infrastructure subprocessor list despite terms referring to third-party hardware/storage vendors. Practical impact: slower security review for regulated buyers. | Not listed |
| Optional Google Search Console path | Low Connecting Search Console pulls query metrics from Google into Alceris. Leave it disconnected if US providers are out of policy for any analytics-adjacent data. | Not listed |
| Billing via Paddle MoR | Low Paid plans are contracted with Paddle, not Alceris directly. Review Paddle's terms and data role for finance/procurement. | Not listed |
| WordPress plugin maintenance signal | Low WordPress.org lists the plugin as not tested with the latest major WP releases and few active installs. Prefer manual script install or re-test thoroughly on your WP version. | Not listed |
| Consent banner claim is vendor legal opinion | Not listed | Medium Trackboxx argues legitimate interest and no opt-in for its cookie-free tracker alone, while noting some DPOs disagree. Other tags on the site can still force banners. Treat as diligence input, not a legal certificate. |
| Amazon SES on email path | Not listed | Medium Privacy policy discloses AWS SES for system/newsletter email with possible US transfers. Distinct from Frankfurt analytics storage, but raises residual US-group process exposure for account communications. |
| No self-host edition | Not listed | Low Managed SaaS only. Policies that mandate customer-operated infrastructure need a different product. |
| No public ISO/SOC/independent audit | Not listed | Medium Procurement teams that require cert packs will need questionnaires, DPA annex review, and possibly NDA materials beyond the public site. |
| Same-day hash limits multi-day user journeys | Not listed | Low By design you cannot rebuild long-lived individual visitor histories across days. Teams needing identity-resolution analytics will find this a hard product limit. |
When: You want a more established cookieless SaaS brand with stronger public compliance packaging
Consider: Plausible Analytics or Simple Analytics
Similar lightweight privacy analytics category; different ownership and documentation maturity
When: You need self-hosted or on-prem control of the analytics stack
Consider: Matomo (self-hosted) or catalog Matomo hosting variants
Alceris is cloud-only; proxying the script still sends data to Alceris
When: You need German-hosted open-source cookieless analytics with a different product surface
Consider: Pirsch Analytics
Peer German privacy-analytics option for side-by-side evaluation
When: You need full GA4-class product and marketing analytics depth
Consider: Google Analytics (accept its data model) or a heavier EU suite
Alceris intentionally stays narrow
When: You need cookieless EU analytics with an official self-host path
Consider: Plausible Analytics (Cloud or Community Edition)
Trade Trackboxx ecommerce/plugin depth for open-source deployability.
When: You want maximal privacy minimalism and a very small surface area
Consider: Simple Analytics
Simpler feature set; less ecommerce and shop-plugin emphasis than Trackboxx.
When: You need deep self-hosted analytics or on-prem control
Consider: Matomo or Piwik PRO-class platforms
Heavier ops and UI; stronger fit for full data residency under your infrastructure.
When: You depend on Google Ads identity graphs, Audiences, and free unlimited scale
Consider: Google Analytics
Keep GA only with full consent/transfer diligence; not a privacy substitute for Trackboxx.