Compare digistats Analytics and Sitesights on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Switzerland· Web Analytics
Needs review
Shortlist digistats when you want managed Swiss cookieless analytics with multi-site, events, API, and CSV on every listed tier and you accept SaaS-only operations. Skip when you need self-host/OSS, GA4-depth product analytics, or published ISO 27001/SOC 2—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.
Germany· Web Analytics
Needs review
Shortlist Sitesights when you need German-operated cookieless web analytics with real-time dashboards, funnels, page flow, and a server-side API—especially agencies and SaaS teams that want Hetzner Germany hosting claims without running Matomo. Skip when you need public ISO/SOC audits, long-term visitor identity, session replay, or a fully published subprocessor pack; consider Plausible Analytics or self-hosted Matomo instead.
Highlighted rows differ between the two products.
| Feature | digistats Analytics | Sitesights |
|---|---|---|
| Country of origin | Switzerland | Germany |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Switzerland | Germany |
| Legal entity | digistats Analytics Ltd., Täfernstrasse 2A, CH-5405 Dättwil AG (UID CHE-296.235.462) | Drude, Grossert GbR |
| Governing law | Swiss law; venue Bremgarten AG (per AGB) | Not listed |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Privacy policy: customer data processed/stored in Switzerland, not in the USA or outside the EU; pricing lists Switzerland Data Center. Hosting provider legal name not in a public subprocessor list. Payment subprocessors: Stripe, Inc. (USA) and Coinbase (crypto; German entity listed in AGB). | Product databases and app servers claimed in Germany on Hetzner. Marketing site uses Cloudflare (US) CDN. Payments via Paddle. Full product subprocessor/backup list not published on main site. |
| Summary | Swiss cookieless web analytics SaaS from digistats Analytics Ltd.: realtime traffic, city-level geo, events, and multi-site dashboards without storing cookies, IPs, or fingerprints. | German cookieless web analytics SaaS with real-time dashboards, events, funnels, and server-side APIs. Operated by Drude, Grossert GbR; product data claimed on Hetzner in Germany. |
| Tags |
| At a glance | digistats Analytics | Sitesights |
|---|---|---|
| HQ | Dättwil AG, Switzerland | Not listed |
| Legal entity | digistats Analytics Ltd. (CHE-296.235.462) | Not listed |
| Hosting | Switzerland data center (host brand not named publicly) | Not listed |
| Deployment | Managed SaaS only | Not listed |
| Open source | No | No (libs/plugins public; core SaaS proprietary) |
| Commercial model | Free low-traffic tier + pageview-based subscription | Free start; pageviews + events subscriptions (Paddle) |
| HQ / entity | Not listed | Drude, Grossert GbR, Germany |
| Category | Not listed | Web analytics (SaaS) |
| Hosting (product) | Not listed | Hetzner, Germany (vendor docs) |
| Tracking model | Not listed | Cookieless; 48h rotating server hash |
| Key capabilities | digistats Analytics | Sitesights |
|---|---|---|
| Cookieless tracking | Yes | Yes |
| No stored visitor IPs | Yes | Not listed |
| Swiss data center | Yes | Not listed |
| Unlimited websites | Yes | Not listed |
| API + CSV export | Yes | Not listed |
| Managed SaaS | Yes | Not listed |
| EU-operated (DE) | Not listed | Yes |
| Hetzner Germany (claimed) | Not listed | Yes |
| Server-side API | Not listed | Yes |
| Funnels + page flow | Not listed | Yes |
| Multi-project / agencies | Not listed | Yes |
Cookieless script without stored IPs or fingerprints
Vendor docs describe a sub-1 kB tag that measures traffic without cookies, without retaining visitor IPs (IP used only for live geo lookup), and without fingerprinting—aimed at sites that want analytics without a consent banner for non-essential cookies.
Realtime dashboard with geo, tech, events, and channels
Live visitor and pageview views plus city-level geography, browser/OS/device signals, custom conversion events, referrer/search/social acquisition, landing pages, and continuous site reachability (online status)—enough for content and marketing ops, not a full product-analytics suite.
Ad-blocker-resistant capture (vendor claim)
Marketing materials contrast digistats with Google Analytics being stripped by major blockers and state digistats is not blocked by common ad-block extensions. Useful for traffic completeness debates; treat as first-party claim until you validate on your stack.
Multi-site SaaS with API, email reports, and CSV on every tier
Published plans include unlimited websites and events, API access, email reports, Swiss data-center storage, and CSV export—even on the free low-traffic tier—so agencies can run multiple client properties without plan-gated feature cliffs.
Swiss entity and Swiss analytics data center
Operated by digistats Analytics Ltd. (Dättwil AG); privacy policy commits to storing customer data in Switzerland. Managed hosting only—no self-hosted edition in public materials.
Cookieless 48-hour rotating session hash
Standard tracking does not set cookies. Sitesights generates a server-side salted hash from IP, User-Agent, and site id with a salt that rotates every 48 hours, so long-term cross-day visitor re-identification is intentionally broken. Useful when teams want essential traffic metrics without a cookie-consent banner solely for analytics—confirm legal basis with counsel for your jurisdiction and data fields (including geo).
Sub-1 KB client script plus WordPress and Shopify plugins
Drop-in client snippet marketed as under 1 KB, with official WordPress and Shopify integration paths for non-engineers. Fits marketing sites and stores that need quick instrumentation without a heavy tag manager stack.
Server-side REST API with C# and Node libraries
Send page views and events from your backend with API-key auth so ad blockers cannot strip the beacon. MIT-licensed C# and Node.js libraries on GitHub speed integration; keep API keys off the client. Preferred path for accuracy-critical SaaS and app backends.
Real-time overview with campaign and device filters
Live dashboard for visitors, pageviews, and sessions with advanced filters, UTM/campaign views, geo, browser, OS, screen size, and daytime patterns. Aimed at operators who want essential marketing analytics in one place rather than a full product-analytics suite.
Custom funnels and page-flow journey maps
Build multi-step funnels and visual page-flow maps to see entry paths, routes, and exits. Helps conversion and UX work without session replay. Depth is journey-oriented, not identity-graph product analytics.
Multi-project workspaces with roles for agencies
Group sites and apps into projects, assign roles/permissions, and invite clients or teammates. Marketing materials reference high ceilings for team seats and properties on paid plans—verify current limits on the official pricing page.
| Assurance & compliance | digistats Analytics | Sitesights |
|---|---|---|
| Independent security / no-logs audit | Not found Vendor claims no IP storage and no fingerprints; no public third-party audit PDF found. | Not found No public third-party security or no-logs audit PDF located on the official site or docs. |
| ISO 27001 | Not found Not claimed on reviewed pages. Host partner ISO 14001 (environmental) is not an ISMS cert. | Not found No public ISO 27001 certificate found on official pages. |
| SOC 2 / SOC 3 | Not found | Not found No public SOC 2/3 report found on official pages. |
| GDPR / EU data protection | Vendor claimed Swiss entity; privacy policy cites DSG and GDPR/DSGVO, cookieless design, Swiss storage. Not legal advice. | Vendor claimed German controller (Drude, Grossert GbR); cookieless hashing and EU hosting claims in docs/privacy. Confirm DPA and legal basis for IP/geo with counsel. |
| US CLOUD Act exposure (indicative) | Partial Swiss Ltd, no known US parent, analytics residency claimed in Switzerland; billing via Stripe, Inc. (US) and Coinbase. EuropeanStack assessment — not a vendor certification. Not legal advice. | Partial EU entity / no known US parent; product hosting claimed on Hetzner Germany. Marketing site lists Cloudflare (US); payments via Paddle; full SaaS subprocessor list not public. Indicative only—not legal advice. |
| Data processing agreement (B2B) | Partial Privacy policy describes Art. 28-style processing on behalf of customers; dedicated public DPA download not found — request signed DPA. | Not found No standalone public DPA download found during research; request under contract for B2B processing. |
| EU AI Act | Not applicable Web analytics product; not positioned as an AI system product. | Not applicable Web analytics product; not marketed as an AI system under the EU AI Act. |
| Considerations & known limitations | digistats Analytics | Sitesights |
|---|---|---|
| No public independent security audit | Medium Cookieless and no-IP claims are first-party only. Security questionnaires that require audit reports will need vendor outreach or a different product. | Medium ISO 27001, SOC 2, and third-party security audits were not found on public pages. Enterprises may need to commission questionnaires or wait for vendor artifacts under NDA. |
| US-linked payment subprocessors | Medium AGB names Stripe, Inc. (San Francisco) for cards and Coinbase for crypto. Billing and account data may leave the pure Swiss analytics path even if telemetry stays in Switzerland. | Not listed |
| Hosting provider not named publicly | Low Switzerland data-center claim without a published host legal name or full subprocessor list complicates transfer and residual-risk assessments. | Not listed |
| No self-host or open-source path | Medium Cannot pin collector versions, run fully air-gapped, or satisfy hard self-host mandates. Operational dependency on digistats uptime and roadmap. | Not listed |
| Registration path may be restricted | Low At research time the login UI stated registrations were disabled and /developers redirected to login. Confirm trial and API access before scheduling migration. | Not listed |
| Incomplete public subprocessor list | Not listed | Medium Hetzner (product) and Cloudflare (marketing site) are documented; backups, email, support, and monitoring vendors for the SaaS are not fully listed. Ask for a current subprocessor annex. |
| US-group CDN on marketing site | Not listed | Low Privacy policy lists Cloudflare Inc. (US) for the public website CDN. Separate from claimed Hetzner product data path, but relevant to overall vendor surface area. |
| 48-hour hash limits long-term visitor analytics | Not listed | Low By design, the rotating salt prevents durable cross-day visitor recognition. Teams needing retention cohorts or multi-week funnels by person must model events differently or choose product-analytics tools. |
| On-premise availability is marketing-only detail | Not listed | Low About page claims on-prem hosting; docs do not provide a self-serve install guide. Treat as sales-assisted until scope is confirmed in writing. |
When: You need open-source and optional self-hosting with a large community
Consider: Plausible Analytics or Matomo
Plausible is cookieless SaaS + self-host; Matomo is the full self-host suite.
When: You want another lightweight EU cookieless SaaS without Swiss seat as a requirement
Consider: Simple Analytics or Pirsch Analytics
NL and DE peers in the same category band.
When: You need enterprise analytics, tag manager, and formal compliance packaging
Consider: Piwik PRO or Matomo Cloud
Heavier stacks with more modules and B2B assurance artifacts.
When: You are comparing global privacy-analytics brands rather than Swiss residency
Consider: Fathom Analytics
Different ownership and data-path story—verify residency independently.
When: You want a minimal EU cookieless SaaS or a well-known self-host option
Consider: Plausible Analytics
Simpler metric set; strong self-host story. Sitesights markets deeper funnels/page-flow and multi-project agency features.
When: You need full self-host control, on-prem by default, or mature open-source governance
Consider: Matomo (self-hosted)
Heavier stack, deeper feature surface, and you operate the data plane yourself.
When: You need identity-rich product analytics, retention cohorts, or event warehouses
Consider: Mixpanel or similar product-analytics platforms
Different category—Sitesights is website/app growth analytics, not a full product analytics suite.
When: You need heatmaps, recordings, or UX feedback loops
Consider: Hotjar, Microsoft Clarity, or EU UX-analytics tools
Sitesights focuses on traffic, events, funnels, and flows—not session replay.