AskGSC vs Swetrix

Compare AskGSC and Swetrix on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics

AskGSC

France· Web Analytics

Needs review

Shortlist AskGSC when a French-operated, hosted MCP layer is enough to query authorized Google Search Console data inside ChatGPT, Claude, or similar assistants. Skip when you need self-hosted control, write access, a site crawler, or first-party web analytics. Consider Plausible Analytics or Piwik PRO for on-site analytics, or a self-hosted GSC MCP when infrastructure ownership is the requirement.

EU-operatedHosted GSC MCPRead-only Google OAuthNo local MCP serverMulti-assistant MCP

View listing Visit Website

Swetrix

United Kingdom· Web Analytics

Needs review

Shortlist Swetrix when you want cookieless traffic plus product-oriented tools (funnels, RUM, errors, optional Cloud replays) under a UK company with Hetzner DE hosting and AGPLv3 self-host CE. Skip when you need public ISO/SOC packs, zero US-group subprocessors, multi-year cookie retention cohorts, or free forever hosted analytics—consider Plausible Analytics or Simple Analytics for minimal traffic-only privacy analytics, or Matomo for heavyweight self-host control.

Cookieless trackingHetzner DE hostingOpen source (AGPLv3)Self-host CEFunnels + errors + RUMPublic DPA

View listing Visit Website

Highlighted rows differ between the two products.

AskGSC vs Swetrix: Snapshot
Feature	AskGSC	Swetrix
Country of origin	France	United Kingdom
Category	Web Analytics	Web Analytics
Open source	No	Yes
Self-hosted	No	Yes
Headquarters	France	United Kingdom
Legal entity	KALYVOX SASU	Swetrix Ltd (SC797389), Edinburgh, Scotland
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
EU-hosted status	Partial	Not listed
Hosting / residency	French operator; public providers include Lovable (web app hosting), Supabase (auth/DB/backend), Google APIs, Stripe for payments, and Cloudflare in front of the MCP host (mcp.askgsc.app CNAME to askgsc.pages.dev). Exact DB/hosting regions are not disclosed on AskGSC pages.	Cloud analytics data: Hetzner Online GmbH (Germany) per DPA/Data Policy. End User error monitoring sub-processor: Sentry / Functional Software Inc. (United States). Customer-side Privacy Policy list also includes Paddle (UK payments), Fastmail (Australia business email), AWS (US transactional/marketing email), OpenRouter (US optional AI chat). No known US parent.
Summary	French hosted MCP connector that gives ChatGPT, Claude, and other assistants read-only Google Search Console analytics for SEO decisions without CSV exports.	Cookieless, privacy-first web analytics from a UK company: traffic, funnels, errors, and performance on Hetzner in Germany, with AGPLv3 self-host Community Edition and optional Cloud session replays.
Tags	SEO Google Search Console MCP AI assistants developer tools France	analytics cookieless open-source privacy gdpr self-host product-analytics

At a glance: AskGSC vs Swetrix
At a glance	AskGSC	Swetrix
HQ	Toulouse, France	Edinburgh, United Kingdom
Legal entity	KALYVOX SASU (SIREN 999 458 409)	Swetrix Ltd (SC797389)
Product type	Hosted MCP connector for Google Search Console	Not listed
Google scope	webmasters.readonly	Not listed
Self-host	No (hosted SaaS)	Not listed
Open source	Not claimed	Yes — github.com/Swetrix/swetrix
Governing law	Not listed	Scotland (Terms)
Primary hosting	Not listed	Hetzner Online GmbH, Germany
License	Not listed	AGPLv3 (Community Edition)
Commercial model	Not listed	Event-volume Cloud subscription; free self-host CE; timed trial
Cookieless tracking	Not a site tracker; reads GSC via Google OAuth/API	Not listed
Data residency regions	Not published; privacy policy allows non-EEA processing by providers/assistants	Not listed

Key capabilities: AskGSC vs Swetrix
Key capabilities	AskGSC	Swetrix
EU-operated	Yes	Not listed
Hosted GSC MCP	Yes	Not listed
Read-only Google OAuth	Yes	Not listed
No local MCP server	Yes	Not listed
Multi-assistant MCP	Yes	Not listed
Cookieless tracking	Not listed	Yes
Hetzner DE hosting	Not listed	Yes
Open source (AGPLv3)	Not listed	Yes
Self-host CE	Not listed	Yes
Funnels + errors + RUM	Not listed	Yes
Public DPA	Not listed	Yes

AskGSC

Hosted remote MCP for Search Console
Provides a remote MCP URL (mcp.askgsc.app) that compatible assistants call on demand. No local MCP server, Google Cloud project, or CSV export is required for the standard flow.
Eleven read-only GSC analysis tools
Tools cover overview trends, query/page/country/device search analytics, period comparisons, opportunity signals, URL inspection (last-known indexing), and sitemap checks. None can modify Search Console or the website.
Read-only Google OAuth scope
Uses https://www.googleapis.com/auth/webmasters.readonly plus identity scopes for sign-in. Users can revoke access from Google account connections; AskGSC states it does not sell Google user data or train its own models on it.
Works across multiple MCP clients
Documented integrations include ChatGPT, Claude, Notion AI, Cursor, Claude Code, and Codex using one hosted MCP server rather than a separate connector per assistant.
Trial then limited free access, optional Pro
A card-free trial starts when Search Console is connected. After the trial the account can remain on a limited free allowance; Pro is an express paid subscription for fuller tool access. Plan figures belong on the vendor pricing page.

Swetrix

Cookieless traffic analytics with hashed sessions
Lightweight script captures pageviews, referrers/UTMs, devices, and city-level geo without cookies or client-side storage. Per the Data Policy, IP and User-Agent are hashed in memory with a daily rotating salt; only a random session id is stored—so you get sessions without long-term cross-day visitor retention.
Funnels, custom events, and goals
Instrument signups, purchases, and other conversions as custom events; build multi-step funnels and goals in the dashboard. Useful for product and growth teams who need drop-off analysis without bolting on a second product-analytics SaaS.
Real-user performance and client error tracking
Records Web Performance API timings (TTFB, DNS, TLS, render, full page load) and optional JavaScript errors with stack/context by page and browser. Bridges marketing traffic views with engineering signals that pure pageview tools omit.
Opt-in Cloud session replays with privacy modes
Cloud projects can call startSessionReplay() to record DOM and interactions; default modes mask text/inputs. Replays are not created by ordinary pageviews—customers must enable them and own consent, masking, and page exclusions. Cloud-only versus Community Edition.
AGPLv3 open source with Docker self-host CE
Core platform is public on GitHub under GNU AGPLv3; Community Edition deploys via official Docker docs with MySQL, ClickHouse, and Redis. CE includes core analytics, events, sessions, funnels, performance, and errors—but not all Cloud extras (replays, some alerts/org/AI features).
Alerts, API, GA import, and team access
Configure alerts to email, Slack, Telegram, Discord, webhooks, or push; pull or push data via the API; import GA4 history; invite organisations with roles or share password-protected/public dashboards. Fits agencies and multi-site operators who outgrow single-user tools.

Assurance & compliance: AskGSC vs Swetrix
Assurance & compliance	AskGSC	Swetrix
Independent security / no-logs audit	Not found No public independent audit PDF or report linked from the site.	Not found Searched marketing, DPA, privacy, and data policy; no public independent audit PDF located. Open-source code is available for review.
ISO 27001	Not found	Not found No public ISO 27001 certification claim found on primary pages.
SOC 2 / SOC 3	Not found	Not found No public SOC 2/3 report found.
GDPR / EU data protection	Vendor claimed French controller; GDPR rights section and CNIL reference on privacy policy. Confirm DPA for B2B.	Vendor claimed UK company; public GDPR/PECR discussion in Data Policy; cookieless design with non-stored IPs for standard analytics; Hetzner DE hosting; public DPA. Optional replays may be personal data depending on configuration—customer assesses legal basis.
US CLOUD Act exposure (indicative)	Partial EU entity / no known US parent, but Google, Supabase, Stripe, Cloudflare/Lovable, and user-selected US AI assistants appear in the public data path. Not legal advice.	Partial No known US parent; primary analytics on Hetzner DE. Material exception: Sentry (US) processes End User error data per DPA; Privacy Policy also lists AWS and OpenRouter (US) for customer email/AI. Indicative medium exposure—not a clean bill. Not legal advice.
Data processing agreement (B2B)	Not found No public DPA download found; ask vendor.	Vendor claimed Public DPA at swetrix.com/dpa incorporated by Terms; acceptance by use of Service; signed copy on request.
EU AI Act	Partial AskGSC is an MCP data gateway to user-selected AI assistants rather than a published generative model. AI Act obligations may still matter for how connected assistants are used; confirm with counsel.	Not applicable Core product is web analytics, not an AI system. Optional Ask AI / OpenRouter is ancillary; confirm if your deployment enables it.

Considerations & known limitations: AskGSC vs Swetrix
Considerations & known limitations	AskGSC	Swetrix
US-group cloud and SaaS in the data path	Medium Privacy policy names Google, Supabase, Lovable, and Stripe; MCP DNS uses Cloudflare Pages. Search Console results also flow to the AI client you connect. Teams with strict EU-only subprocessor rules need a written region and subprocessor schedule.	Medium Primary analytics hosting is Hetzner DE, but Sentry (US) is an End User error-tracking sub-processor on the DPA, and AWS/OpenRouter appear for customer email/AI. Orgs with strict no-US-cloud rules need explicit acceptance or self-host CE to avoid those paths.
No public independent audit or cert package	Medium ISO 27001, SOC 2, and independent security audits were not found on public pages. Security claims rest on vendor documentation (encrypted refresh tokens, read-only scope).	Not listed
Depends on Google Search Console data quality	Low Vendor docs note GSC data may be delayed, aggregated, or incomplete, and average position is not a real-time ranking. AI interpretations remain the user's responsibility.	Not listed
Very new legal entity	Low KALYVOX appears in the French registry as created in January 2026. Expect limited public operating history and incomplete legal placeholders (retention periods, mediator contact) on some policy pages.	Not listed
Session replay is opt-in and controller-owned	Not listed	Medium Cloud replays can capture DOM and inputs unless masked. Customers must enable startSessionReplay(), configure privacy modes/exclusions, and provide notices/consent where required—misconfiguration can reintroduce personal data risk that standard cookieless pageviews avoid.
No public ISO/SOC or third-party audit	Not listed	Medium Assurance relies on first-party policies, Hetzner infrastructure claims, and open source. Enterprise questionnaires that hard-gate on certs will stall until materials are provided under NDA or produced.
Cloud vs Community Edition feature gap	Not listed	Low Self-host CE is free and covers core analytics, but replays and several Cloud growth/ops features are limited or Cloud-only. Budget and feature planning must not assume feature parity.
Daily salt rotation limits retention metrics	Not listed	Low Cookieless design deliberately prevents classic multi-day visitor retention. Teams that need that metric class need another product or consented identity.

Fit

AskGSC

Best fit when

Founders and SEO operators who already decide inside ChatGPT, Claude, Notion AI, or coding agents
Teams that need recurring GSC questions (period compare, losing pages, low CTR) without CSV exports
Buyers who want read-only Google access and a hosted MCP URL rather than running their own server
Organizations that prefer a French contracting entity for a lightweight SEO analysis connector

Poor fit when

Needs to write to Search Console, request indexing, or edit the website through the connector
Requires self-hosted MCP, custom tool code, or fully controlled token storage and regions
Looking for cookieless first-party web analytics instead of Google search performance data
Procurement blocked without a public DPA, ISO 27001, or independent audit package

Consider instead when

When: You need first-party site analytics rather than Google Search Console metrics
Consider: Plausible Analytics or Piwik PRO
Different data source: on-site collection vs Google search reports
When: You must operate the MCP stack and credentials yourself
Consider: Self-hosted Google Search Console MCP
AskGSC's own compare pages frame this as higher setup for more control
When: Manual one-off analysis is enough
Consider: Google Search Console UI and CSV exports
No third-party MCP or assistant data path

Swetrix

Best fit when

SMEs, agencies, and product teams replacing GA4 who need cookieless traffic stats without a cookie banner driven only by analytics
Engineering-minded buyers who want error tracking and real-user performance in the same privacy-first dashboard as pageviews
Teams that may enable Cloud session replays later but can treat them as explicit opt-in with their own legal basis
Operators willing to run Docker Community Edition (MySQL/ClickHouse/Redis) when Cloud commercial terms or feature limits do not fit
Buyers who need a public B2B DPA, API access, GA4 import, and multi-channel alerts under a UK legal entity

Poor fit when

Enterprises that require published ISO 27001 / SOC 2 certificates or independent audit PDFs before shortlist
Policies that forbid any US-group subprocessors (Sentry is listed for End User error data; AWS/OpenRouter appear for customer services)
Use cases that depend on long-term cookie-based retention or cross-device identity graphs
Buyers who only want free hosted analytics with no paid Cloud tier and no self-host operations burden
Sites that will run session replays on sensitive flows without capacity to configure masking, exclusions, and consent

Consider instead when

When: You only need minimal cookieless pageviews/referrers with the smallest possible product surface
Consider: Plausible Analytics or Simple Analytics
Swetrix adds funnels, errors, RUM, and Cloud replays; peers stay closer to pure traffic analytics.
When: You need deep on-prem control, plugins, and mature enterprise self-host packaging
Consider: Matomo (self-host or managed EU hosts such as Matomo by Stackhero)
Heavier ops and optional cookies; stronger fit for large controlled deployments.
When: You must stay inside Google advertising measurement and free GA4 ecosystem tooling
Consider: Google Analytics
Trade privacy, consent, and transfer complexity for ads integration and zero software fee.

Open questions for due diligence

AskGSC

Will KALYVOX sign a B2B DPA and publish an authoritative subprocessor list with regions?
Which Supabase and Lovable regions host AskGSC production data today?
Are ISO 27001, SOC 2, or independent penetration-test reports available under NDA?
What exact retention applies to technical logs and backups (privacy page still has placeholders)?

Swetrix

Can Enterprise contracts exclude or replace Sentry (and other US-group subprocessors) for End User data paths?
Are ISO 27001, SOC 2, or pen-test summaries available under NDA?
What is the exact backup/DR location topology beyond “secure backups” wording on the DPA?
Which Cloud-only features remain permanently out of CE versus delayed open-source release?
For session replay at your traffic volumes, what retention defaults and export/delete SLAs apply on your plan?