AskGSC vs Sitesights

Compare AskGSC and Sitesights on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics

Logo: AskGSC

AskGSC

France· Web Analytics

Needs review

Shortlist AskGSC when a French-operated, hosted MCP layer is enough to query authorized Google Search Console data inside ChatGPT, Claude, or similar assistants. Skip when you need self-hosted control, write access, a site crawler, or first-party web analytics. Consider Plausible Analytics or Piwik PRO for on-site analytics, or a self-hosted GSC MCP when infrastructure ownership is the requirement.

EU-operatedHosted GSC MCPRead-only Google OAuthNo local MCP serverMulti-assistant MCP
Logo: Sitesights

Sitesights

Germany· Web Analytics

Needs review

Shortlist Sitesights when you need German-operated cookieless web analytics with real-time dashboards, funnels, page flow, and a server-side API—especially agencies and SaaS teams that want Hetzner Germany hosting claims without running Matomo. Skip when you need public ISO/SOC audits, long-term visitor identity, session replay, or a fully published subprocessor pack; consider Plausible Analytics or self-hosted Matomo instead.

Cookieless trackingEU-operated (DE)Hetzner Germany (claimed)Server-side APIFunnels + page flowMulti-project / agencies
AskGSC vs Sitesights: Snapshot
FeatureLogo: AskGSCAskGSCLogo: SitesightsSitesights
Country of originFranceGermany
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersFranceGermany
Legal entityKALYVOX SASUDrude, Grossert GbR
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
EU-hosted statusPartialNot listed
Hosting / residencyFrench operator; public providers include Lovable (web app hosting), Supabase (auth/DB/backend), Google APIs, Stripe for payments, and Cloudflare in front of the MCP host (mcp.askgsc.app CNAME to askgsc.pages.dev). Exact DB/hosting regions are not disclosed on AskGSC pages.Product databases and app servers claimed in Germany on Hetzner. Marketing site uses Cloudflare (US) CDN. Payments via Paddle. Full product subprocessor/backup list not published on main site.
Summary

French hosted MCP connector that gives ChatGPT, Claude, and other assistants read-only Google Search Console analytics for SEO decisions without CSV exports.

German cookieless web analytics SaaS with real-time dashboards, events, funnels, and server-side APIs. Operated by Drude, Grossert GbR; product data claimed on Hetzner in Germany.

Tags
At a glance: AskGSC vs Sitesights
At a glanceLogo: AskGSCAskGSCLogo: SitesightsSitesights
HQToulouse, FranceNot listed
Legal entityKALYVOX SASU (SIREN 999 458 409)Not listed
Product typeHosted MCP connector for Google Search ConsoleNot listed
Google scopewebmasters.readonlyNot listed
Self-hostNo (hosted SaaS)Not listed
Open sourceNot claimedNo (libs/plugins public; core SaaS proprietary)
HQ / entityNot listedDrude, Grossert GbR, Germany
CategoryNot listedWeb analytics (SaaS)
Hosting (product)Not listedHetzner, Germany (vendor docs)
Tracking modelNot listedCookieless; 48h rotating server hash
Commercial modelNot listedFree start; pageviews + events subscriptions (Paddle)
Cookieless trackingNot a site tracker; reads GSC via Google OAuth/APINot listed
Data residency regionsNot published; privacy policy allows non-EEA processing by providers/assistantsNot listed
Key capabilities: AskGSC vs Sitesights
Key capabilitiesLogo: AskGSCAskGSCLogo: SitesightsSitesights
EU-operatedYesYes
Hosted GSC MCPYesNot listed
Read-only Google OAuthYesNot listed
No local MCP serverYesNot listed
Multi-assistant MCPYesNot listed
Cookieless trackingNot listedYes
Hetzner Germany (claimed)Not listedYes
Server-side APINot listedYes
Funnels + page flowNot listedYes
Multi-project / agenciesNot listedYes

AskGSC

  • Hosted remote MCP for Search Console

    Provides a remote MCP URL (mcp.askgsc.app) that compatible assistants call on demand. No local MCP server, Google Cloud project, or CSV export is required for the standard flow.

  • Eleven read-only GSC analysis tools

    Tools cover overview trends, query/page/country/device search analytics, period comparisons, opportunity signals, URL inspection (last-known indexing), and sitemap checks. None can modify Search Console or the website.

  • Read-only Google OAuth scope

    Uses https://www.googleapis.com/auth/webmasters.readonly plus identity scopes for sign-in. Users can revoke access from Google account connections; AskGSC states it does not sell Google user data or train its own models on it.

  • Works across multiple MCP clients

    Documented integrations include ChatGPT, Claude, Notion AI, Cursor, Claude Code, and Codex using one hosted MCP server rather than a separate connector per assistant.

  • Trial then limited free access, optional Pro

    A card-free trial starts when Search Console is connected. After the trial the account can remain on a limited free allowance; Pro is an express paid subscription for fuller tool access. Plan figures belong on the vendor pricing page.

Sitesights

  • Cookieless 48-hour rotating session hash

    Standard tracking does not set cookies. Sitesights generates a server-side salted hash from IP, User-Agent, and site id with a salt that rotates every 48 hours, so long-term cross-day visitor re-identification is intentionally broken. Useful when teams want essential traffic metrics without a cookie-consent banner solely for analytics—confirm legal basis with counsel for your jurisdiction and data fields (including geo).

  • Sub-1 KB client script plus WordPress and Shopify plugins

    Drop-in client snippet marketed as under 1 KB, with official WordPress and Shopify integration paths for non-engineers. Fits marketing sites and stores that need quick instrumentation without a heavy tag manager stack.

  • Server-side REST API with C# and Node libraries

    Send page views and events from your backend with API-key auth so ad blockers cannot strip the beacon. MIT-licensed C# and Node.js libraries on GitHub speed integration; keep API keys off the client. Preferred path for accuracy-critical SaaS and app backends.

  • Real-time overview with campaign and device filters

    Live dashboard for visitors, pageviews, and sessions with advanced filters, UTM/campaign views, geo, browser, OS, screen size, and daytime patterns. Aimed at operators who want essential marketing analytics in one place rather than a full product-analytics suite.

  • Custom funnels and page-flow journey maps

    Build multi-step funnels and visual page-flow maps to see entry paths, routes, and exits. Helps conversion and UX work without session replay. Depth is journey-oriented, not identity-graph product analytics.

  • Multi-project workspaces with roles for agencies

    Group sites and apps into projects, assign roles/permissions, and invite clients or teammates. Marketing materials reference high ceilings for team seats and properties on paid plans—verify current limits on the official pricing page.

Assurance & compliance: AskGSC vs Sitesights
Assurance & complianceLogo: AskGSCAskGSCLogo: SitesightsSitesights
Independent security / no-logs audit
Not found

No public independent audit PDF or report linked from the site.

Not found

No public third-party security or no-logs audit PDF located on the official site or docs.

ISO 27001
Not found
Not found

No public ISO 27001 certificate found on official pages.

SOC 2 / SOC 3
Not found
Not found

No public SOC 2/3 report found on official pages.

GDPR / EU data protection
Vendor claimed

French controller; GDPR rights section and CNIL reference on privacy policy. Confirm DPA for B2B.

Vendor claimed

German controller (Drude, Grossert GbR); cookieless hashing and EU hosting claims in docs/privacy. Confirm DPA and legal basis for IP/geo with counsel.

US CLOUD Act exposure (indicative)
Partial

EU entity / no known US parent, but Google, Supabase, Stripe, Cloudflare/Lovable, and user-selected US AI assistants appear in the public data path. Not legal advice.

Partial

EU entity / no known US parent; product hosting claimed on Hetzner Germany. Marketing site lists Cloudflare (US); payments via Paddle; full SaaS subprocessor list not public. Indicative only—not legal advice.

Data processing agreement (B2B)
Not found

No public DPA download found; ask vendor.

Not found

No standalone public DPA download found during research; request under contract for B2B processing.

EU AI Act
Partial

AskGSC is an MCP data gateway to user-selected AI assistants rather than a published generative model. AI Act obligations may still matter for how connected assistants are used; confirm with counsel.

Not applicable

Web analytics product; not marketed as an AI system under the EU AI Act.

Considerations & known limitations: AskGSC vs Sitesights
Considerations & known limitationsLogo: AskGSCAskGSCLogo: SitesightsSitesights
US-group cloud and SaaS in the data path
Medium

Privacy policy names Google, Supabase, Lovable, and Stripe; MCP DNS uses Cloudflare Pages. Search Console results also flow to the AI client you connect. Teams with strict EU-only subprocessor rules need a written region and subprocessor schedule.

Not listed
No public independent audit or cert package
Medium

ISO 27001, SOC 2, and independent security audits were not found on public pages. Security claims rest on vendor documentation (encrypted refresh tokens, read-only scope).

Medium

ISO 27001, SOC 2, and third-party security audits were not found on public pages. Enterprises may need to commission questionnaires or wait for vendor artifacts under NDA.

Depends on Google Search Console data quality
Low

Vendor docs note GSC data may be delayed, aggregated, or incomplete, and average position is not a real-time ranking. AI interpretations remain the user's responsibility.

Not listed
Very new legal entity
Low

KALYVOX appears in the French registry as created in January 2026. Expect limited public operating history and incomplete legal placeholders (retention periods, mediator contact) on some policy pages.

Not listed
Incomplete public subprocessor listNot listed
Medium

Hetzner (product) and Cloudflare (marketing site) are documented; backups, email, support, and monitoring vendors for the SaaS are not fully listed. Ask for a current subprocessor annex.

US-group CDN on marketing siteNot listed
Low

Privacy policy lists Cloudflare Inc. (US) for the public website CDN. Separate from claimed Hetzner product data path, but relevant to overall vendor surface area.

48-hour hash limits long-term visitor analyticsNot listed
Low

By design, the rotating salt prevents durable cross-day visitor recognition. Teams needing retention cohorts or multi-week funnels by person must model events differently or choose product-analytics tools.

On-premise availability is marketing-only detailNot listed
Low

About page claims on-prem hosting; docs do not provide a self-serve install guide. Treat as sales-assisted until scope is confirmed in writing.

Fit

AskGSC

Best fit when

  • Founders and SEO operators who already decide inside ChatGPT, Claude, Notion AI, or coding agents
  • Teams that need recurring GSC questions (period compare, losing pages, low CTR) without CSV exports
  • Buyers who want read-only Google access and a hosted MCP URL rather than running their own server
  • Organizations that prefer a French contracting entity for a lightweight SEO analysis connector

Poor fit when

  • Needs to write to Search Console, request indexing, or edit the website through the connector
  • Requires self-hosted MCP, custom tool code, or fully controlled token storage and regions
  • Looking for cookieless first-party web analytics instead of Google search performance data
  • Procurement blocked without a public DPA, ISO 27001, or independent audit package

Consider instead when

  • When: You need first-party site analytics rather than Google Search Console metrics

    Consider: Plausible Analytics or Piwik PRO

    Different data source: on-site collection vs Google search reports

  • When: You must operate the MCP stack and credentials yourself

    Consider: Self-hosted Google Search Console MCP

    AskGSC's own compare pages frame this as higher setup for more control

  • When: Manual one-off analysis is enough

    Consider: Google Search Console UI and CSV exports

    No third-party MCP or assistant data path

Sitesights

Best fit when

  • EU teams replacing GA4 with cookieless SaaS and wanting funnels/page-flow beyond a bare traffic counter
  • Agencies and freelancers managing many client sites with projects and role-based invites
  • Engineering-led installs that prefer server-side pageview/event ingestion against ad blockers
  • WordPress or Shopify properties that want official plugin paths plus a light client script
  • Orgs that value a German GbR legal entity and Hetzner Germany hosting claims over US multi-region analytics

Poor fit when

  • Product analytics requiring long-term user identity, cross-device stitching, or CDP-style profiles (48h hash by design)
  • Buyers who need public ISO 27001, SOC 2, or independent audit PDFs before shortlist
  • Teams that require self-serve open-source self-host as the primary deployment (on-prem only claimed, not documented as OSS)
  • UX research needs for heatmaps or session replay
  • Procurement that requires a complete public subprocessor list without an NDA conversation

Consider instead when

  • When: You want a minimal EU cookieless SaaS or a well-known self-host option

    Consider: Plausible Analytics

    Simpler metric set; strong self-host story. Sitesights markets deeper funnels/page-flow and multi-project agency features.

  • When: You need full self-host control, on-prem by default, or mature open-source governance

    Consider: Matomo (self-hosted)

    Heavier stack, deeper feature surface, and you operate the data plane yourself.

  • When: You need identity-rich product analytics, retention cohorts, or event warehouses

    Consider: Mixpanel or similar product-analytics platforms

    Different category—Sitesights is website/app growth analytics, not a full product analytics suite.

  • When: You need heatmaps, recordings, or UX feedback loops

    Consider: Hotjar, Microsoft Clarity, or EU UX-analytics tools

    Sitesights focuses on traffic, events, funnels, and flows—not session replay.

Open questions for due diligence

AskGSC

  • Will KALYVOX sign a B2B DPA and publish an authoritative subprocessor list with regions?
  • Which Supabase and Lovable regions host AskGSC production data today?
  • Are ISO 27001, SOC 2, or independent penetration-test reports available under NDA?
  • What exact retention applies to technical logs and backups (privacy page still has placeholders)?

Sitesights

  • Will the vendor sign a B2B DPA and provide a complete subprocessor list (backups, email, support, monitoring)?
  • Is the Hetzner Germany residency contractual for all analytics tenant data, including DR/backups?
  • What is the formal on-premise offering (SLA, update model, supported regions) versus SaaS-only?
  • Are any ISO 27001 / SOC 2 / penetration-test reports available under NDA?
  • How should geolocation fields and IP hashing be assessed under your counsel's GDPR legal-basis analysis?