Compare digistats Analytics and TelemetryDeck on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Matomo
Switzerland· Web Analytics
Needs review
Shortlist digistats when you want managed Swiss cookieless analytics with multi-site, events, API, and CSV on every listed tier and you accept SaaS-only operations. Skip when you need self-host/OSS, GA4-depth product analytics, or published ISO 27001/SOC 2—consider Plausible, Simple Analytics, Pirsch, or Matomo instead.
Germany· Web Analytics
Needs review
Shortlist TelemetryDeck for multi-platform app analytics when on-device double-hash anonymization, cookieless signals, open SDKs, and a German-operated SaaS matter more than self-host or profile-heavy product suites. Skip when you need website-only simplicity (Plausible/Pirsch), full self-host control (Matomo/Plausible CE), or Mixpanel/Firebase-class identity and ecosystem depth—and have legal review the vendor’s “not personal data / not Art. 28 processor” DPA model plus AWS/Azure subprocessors.
Highlighted rows differ between the two products.
| Feature | digistats Analytics | TelemetryDeck |
|---|---|---|
| Country of origin | Switzerland | Germany |
| Category | Web Analytics | Web Analytics |
| Open source | No | No |
| Self-hosted | No | No |
| Headquarters | Switzerland | Germany |
| Legal entity | digistats Analytics Ltd., Täfernstrasse 2A, CH-5405 Dättwil AG (UID CHE-296.235.462) | TelemetryDeck GmbH, Von-der-Tann-Str. 54, 86159 Augsburg (HRB 37541) |
| Governing law | Swiss law; venue Bremgarten AG (per AGB) | Germany (terms reference German law / Bayern courts; consumer protections may vary) |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Privacy policy: customer data processed/stored in Switzerland, not in the USA or outside the EU; pricing lists Switzerland Data Center. Hosting provider legal name not in a public subprocessor list. Payment subprocessors: Stripe, Inc. (USA) and Coinbase (crypto; German entity listed in AGB). | Product analytics: Microsoft Azure Amsterdam (NL), AWS Frankfurt (DE), Hetzner Falkenstein and Nürnberg (DE) per Privacy FAQ. Website privacy policy lists Microsoft Ireland Operations Ltd, Amazon Web Services Inc (US entity), and Hetzner Online GmbH as hosters with claimed Art. 28 contracts for site hosting. Account-side: HubSpot Inc (US CRM), Brevo/Sendinblue GmbH (DE email), Stripe payments per terms. |
| Summary | Swiss cookieless web analytics SaaS from digistats Analytics Ltd.: realtime traffic, city-level geo, events, and multi-site dashboards without storing cookies, IPs, or fingerprints. | German privacy-first app analytics SaaS: lightweight multi-platform SDKs, on-device double-hash anonymization, cookieless signals, and managed dashboards for mobile, desktop, and web products. |
| Tags |
| At a glance | digistats Analytics | TelemetryDeck |
|---|---|---|
| HQ | Dättwil AG, Switzerland | Augsburg, Germany (TelemetryDeck GmbH) |
| Legal entity | digistats Analytics Ltd. (CHE-296.235.462) | TelemetryDeck GmbH · HRB 37541 · VAT DE353418916 |
| Hosting | Switzerland data center (host brand not named publicly) | Not listed |
| Deployment | Managed SaaS only | Not listed |
| Open source | No | Not listed |
| Commercial model | Free low-traffic tier + pageview-based subscription | Free tier + monthly event volume; plan-based query retention |
| Product type | Not listed | Managed app/web analytics SaaS |
| Self-host | Not listed | No (open-source client SDKs only) |
| Hosting (vendor) | Not listed | Azure Amsterdam; AWS Frankfurt; Hetzner Falkenstein/Nürnberg |
| DPA | Not listed | Public DPA/AVV asserting anonymized non-processor model; TOMs on request |
| Key capabilities | digistats Analytics | TelemetryDeck |
|---|---|---|
| Cookieless tracking | Yes | Yes |
| No stored visitor IPs | Yes | Not listed |
| Swiss data center | Yes | Not listed |
| Unlimited websites | Yes | Not listed |
| API + CSV export | Yes | Not listed |
| Managed SaaS | Yes | Yes |
| Multi-platform app SDKs | Not listed | Yes |
| On-device anonymization | Not listed | Yes |
| EU-operated (DE GmbH) | Not listed | Yes |
| Open-source client SDKs | Not listed | Yes |
Cookieless script without stored IPs or fingerprints
Vendor docs describe a sub-1 kB tag that measures traffic without cookies, without retaining visitor IPs (IP used only for live geo lookup), and without fingerprinting—aimed at sites that want analytics without a consent banner for non-essential cookies.
Realtime dashboard with geo, tech, events, and channels
Live visitor and pageview views plus city-level geography, browser/OS/device signals, custom conversion events, referrer/search/social acquisition, landing pages, and continuous site reachability (online status)—enough for content and marketing ops, not a full product-analytics suite.
Ad-blocker-resistant capture (vendor claim)
Marketing materials contrast digistats with Google Analytics being stripped by major blockers and state digistats is not blocked by common ad-block extensions. Useful for traffic completeness debates; treat as first-party claim until you validate on your stack.
Multi-site SaaS with API, email reports, and CSV on every tier
Published plans include unlimited websites and events, API access, email reports, Swiss data-center storage, and CSV export—even on the free low-traffic tier—so agencies can run multiple client properties without plan-gated feature cliffs.
Swiss entity and Swiss analytics data center
Operated by digistats Analytics Ltd. (Dättwil AG); privacy policy commits to storing customer data in Switzerland. Managed hosting only—no self-hosted edition in public materials.
Multi-platform SDKs and HTTP signal ingest
Official clients for Swift (Apple platforms including visionOS), Kotlin/Android, JavaScript, Flutter, React/React Native, Vue, and a one-line web snippet, with community Unity, Rust WASM, and Vapor clients. Any runtime can POST to the documented ingest API. Suits cross-platform product teams; not a drop-in replacement for a full marketing tag manager suite.
On-device salt-and-hash user anonymization
Client SDKs salt and hash user identifiers on device; the server applies a second salt and hash so neither side can reverse the original ID. App analytics docs state IPs are never stored for signals; timestamps are rounded to the hour. Limit: publishers must not put personal data in custom metadata, or the anonymization model breaks for that payload.
Cookieless app and web tracking model
No analytics cookies for product signals: apps keep a local anonymized identifier; web derives a hashed identifier from date, site, and partial IP context without storing full IPs. Aimed at leaner consent UX and simpler App Store privacy labels versus cookie-based trackers—still confirm legal posture for your jurisdiction and configuration.
Product dashboards, funnels, TQL, and notebooks
Pre-built overview and AARRR-style customer journeys (acquisition, activation, retention, revenue), technical metrics (devices, versions, errors), visual funnel builder, Explore for raw signal types, TelemetryDeck Query Language for advanced insights, and Notebooks mixing live charts with markdown. Test mode separates IDE/dev traffic from production.
Volume-based SaaS with free tier and plan retention
Commercial model is monthly event/signal volume with a free tier and paid plans that differ on included volume and how long data stays query-ready (cold storage may hold older data). Free accounts can stop ingesting when the budget is exhausted; paid plans warn and may auto-upgrade after sustained overage. Check current limits on the vendor dashboard—no self-host option.
| Assurance & compliance | digistats Analytics | TelemetryDeck |
|---|---|---|
| Independent security / no-logs audit | Not found Vendor claims no IP storage and no fingerprints; no public third-party audit PDF found. | Not found Vendor claims no IP storage and open SDK code for inspection; no public third-party no-logs or security audit report found in this pass. |
| ISO 27001 | Not found Not claimed on reviewed pages. Host partner ISO 14001 (environmental) is not an ISMS cert. | Not found No public ISO 27001 certificate page located. |
| SOC 2 / SOC 3 | Not found | Not found No public SOC 2/3 report located. |
| GDPR / EU data protection | Vendor claimed Swiss entity; privacy policy cites DSG and GDPR/DSGVO, cookieless design, Swiss storage. Not legal advice. | Vendor claimed EU (German) controller entity; privacy policy and Privacy FAQ document anonymization, non-storage of IPs for signals, and EU hosting regions. Vendor asserts analytics signals are not personal data—validate with counsel for your config. |
| US CLOUD Act exposure (indicative) | Partial Swiss Ltd, no known US parent, analytics residency claimed in Switzerland; billing via Stripe, Inc. (US) and Coinbase. EuropeanStack assessment — not a vendor certification. Not legal advice. | Partial German GmbH, no known US parent, EU regions named—but public hosters include AWS and Microsoft (US groups) and HubSpot (US) for CRM. Indicative medium exposure. Not legal advice. |
| Data processing agreement (B2B) | Partial Privacy policy describes Art. 28-style processing on behalf of customers; dedicated public DPA download not found — request signed DPA. | Partial Public DPA at telemetrydeck.com/dpa (German AVV prevails). Document asserts TelemetryDeck is not Art. 28 processor/joint controller because signals are anonymized; TOMs on request. Not a classic processor AVV—legal review required. |
| EU AI Act | Not applicable Web analytics product; not positioned as an AI system product. | Not applicable Product analytics / telemetry; not marketed as an AI system core offering. |
| Considerations & known limitations | digistats Analytics | TelemetryDeck |
|---|---|---|
| No public independent security audit | Medium Cookieless and no-IP claims are first-party only. Security questionnaires that require audit reports will need vendor outreach or a different product. | Not listed |
| US-linked payment subprocessors | Medium AGB names Stripe, Inc. (San Francisco) for cards and Coinbase for crypto. Billing and account data may leave the pure Swiss analytics path even if telemetry stays in Switzerland. | Not listed |
| Hosting provider not named publicly | Low Switzerland data-center claim without a published host legal name or full subprocessor list complicates transfer and residual-risk assessments. | Not listed |
| No self-host or open-source path | Medium Cannot pin collector versions, run fully air-gapped, or satisfy hard self-host mandates. Operational dependency on digistats uptime and roadmap. | Not listed |
| Registration path may be restricted | Low At research time the login UI stated registrations were disabled and /developers redirected to login. Confirm trial and API access before scheduling migration. | Not listed |
| US-group cloud and CRM subprocessors | Not listed | Medium Even with EU regions, AWS and Microsoft Azure are US-group providers; HubSpot processes customer CRM data in a US SaaS path. Buyers with strict no-US-cloud policies need written architecture confirmation or another vendor. |
| Anonymization / non-processor legal model | Not listed | Medium Public DPA states TelemetryDeck is neither processor nor joint controller for service data. Strong if true for your configuration; risky if custom metadata reintroduces personal data or if counsel disagrees with the anonymization analysis. |
| No public ISO/SOC or independent audit | Not listed | Medium No ISO 27001, SOC 2, or independent no-logs audit found publicly. Enterprise security questionnaires may need NDA materials or alternate assurance. |
| Free-tier ingest hard-stop | Not listed | Low Free plans discard events after the included monthly budget; overage data is not recoverable. Production apps on free tier need monitoring or a paid plan. |
| No self-hosted product | Not listed | Low Only client SDKs are open source. Organizations that must keep analytics databases on-prem cannot use TelemetryDeck as a full stack. |
When: You need open-source and optional self-hosting with a large community
Consider: Plausible Analytics or Matomo
Plausible is cookieless SaaS + self-host; Matomo is the full self-host suite.
When: You want another lightweight EU cookieless SaaS without Swiss seat as a requirement
Consider: Simple Analytics or Pirsch Analytics
NL and DE peers in the same category band.
When: You need enterprise analytics, tag manager, and formal compliance packaging
Consider: Piwik PRO or Matomo Cloud
Heavier stacks with more modules and B2B assurance artifacts.
When: You are comparing global privacy-analytics brands rather than Swiss residency
Consider: Fathom Analytics
Different ownership and data-path story—verify residency independently.
When: You only need privacy-friendly website analytics with a simple script
Consider: Plausible Analytics or Pirsch Analytics
Stronger web-first UX; weaker native multi-platform SDK story than TelemetryDeck
When: You must self-host analytics and own the database
Consider: Matomo (self-host) or Plausible Community Edition
TelemetryDeck is managed SaaS only
When: You need Firebase/Google ecosystem depth or free crash+remote-config adjacency
Consider: Firebase Analytics (accept Google jurisdiction and tracking model)
Different privacy and lock-in trade-offs
When: You need enterprise product analytics with rich identity and experimentation packaging
Consider: Mixpanel or Amplitude
Heavier privacy/cookie surface; more suite features