etracker vs Insights

Compare etracker and Insights on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics, Matomo

etracker

Germany· Web Analytics

Needs review

Shortlist etracker when you need German-hosted marketing-grade web analytics with a cookieless default, integrated tag/consent tooling, and optional ad conversion sync. Skip when you must self-host open source (prefer Matomo) or only need lightweight pageview charts (prefer Plausible or similar). Treat ePrivacyseal consent-free claims as vendor-audited posture—confirm with your counsel and DPIA.

Cookieless default trackingEU/DE hosted (IPHH)ePrivacyseal (claimed)Tag + consent suiteAd conversion syncSaaS only (not self-host)

View listing Visit Website

Insights

Austria· Web Analytics

Needs review

Shortlist when you need cookie-free hosted analytics with first-class custom events for SPAs from an Austrian operator. Skip when you need self-host, public ISO/SOC packs, or infrastructure without Google Firebase—consider Plausible Analytics, Simple Analytics, or Pirsch Analytics instead (or self-hosted Matomo).

Cookie-free trackingCustom eventsMIT client (insights-js)Austrian entityHosted SaaSFirebase data path

View listing Visit Website

Highlighted rows differ between the two products.

etracker vs Insights: Snapshot
Feature	etracker	Insights
Country of origin	Germany	Austria
Category	Web Analytics	Web Analytics
Open source	No	Yes
Self-hosted	No	No
Headquarters	Germany	Austria
Legal entity	JustRelate Deutschland GmbH (Charlottenburg HRB 218235); product brand JustRelate etracker / etracker	Unsourced Digital OG
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Low	Medium
Hosting / residency	Primary analytics processing on etracker's own servers in Germany/EU with housing at IPHH Internet Port Hamburg GmbH (vendor: no third-party access to apps/data for housing). Optional customer-enabled outbound paths to Google/Meta/TikTok/Microsoft Ads (conversion upload) and Google Looker Studio connectors—not core storage hosts.	Operator: Unsourced Digital OG (Austria). Vendor-documented infrastructure includes Google Firebase—Cloud Functions, Firebase Authentication (customer accounts), and Firebase Hosting—with temporary IP handling described for those Google services. Visitor analytics designed without cookies and without IP storage in DB/logs; still a US-group cloud path for processing/hosting/auth.
Summary	German SaaS web and marketing analytics from JustRelate: cookieless default tracking, integrated tag/consent management, e-commerce and ad conversion sync on EU-hosted servers.	Austrian privacy-first hosted web analytics: page views and custom events without cookies or stored visitor IPs, with an MIT open-source JS client (backend uses Google Firebase).
Tags	analytics privacy gdpr cookieless marketing-analytics saas consent-management e-commerce	analytics privacy gdpr open-source cookie-free firebase

At a glance: etracker vs Insights
At a glance	etracker	Insights
HQ / legal entity	JustRelate Deutschland GmbH, Berlin (product ops Hamburg)	Not listed
Product type	Web & marketing analytics SaaS (+ tag/CMP modules)	Hosted privacy web analytics + custom events
Hosting	Own servers, IPHH housing, Hamburg/Germany	Not listed
Open source	No	Not listed
Self-hosted	No	Not listed
Commercial model	Usage-based SaaS licence (hit tiers); trial commonly offered	Free low-volume tier; paid by monthly event/pageview volume
HQ / law	Not listed	Austria (Unsourced Digital OG; Austrian governing law)
Client license	Not listed	MIT (insights-js); backend proprietary
Self-host	Not listed	No public self-host option
Known infra	Not listed	Google Firebase (Functions, Auth, Hosting) per vendor docs

Key capabilities: etracker vs Insights
Key capabilities	etracker	Insights
Cookieless default tracking	Yes	Not listed
EU/DE hosted (IPHH)	Yes	Not listed
ePrivacyseal (claimed)	Yes	Not listed
Tag + consent suite	Yes	Not listed
Ad conversion sync	Yes	Not listed
SaaS only (not self-host)	Yes	Not listed
Cookie-free tracking	Not listed	Yes
Custom events	Not listed	Yes
MIT client (insights-js)	Not listed	Yes
Austrian entity	Not listed	Yes
Hosted SaaS	Not listed	Yes
Firebase data path	Not listed	Yes

etracker

Cookieless session analytics (consent-oriented default)
Server-side session tokens link interactions without analytical cookies or device fingerprinting by default; IP truncation and daily-rotating hashes limit long-term recognition. Suits sites that want visit/conversion metrics under legitimate interest while keeping optional hybrid cookies behind consent.
Integrated tag and consent management
One product surface to load etracker and third-party tags and sync them with consent rules, reducing dual maintenance between a separate CMP and GTM. Best when marketers need gated Maps/ads tags without rebuilding the full Google stack.
Server-side conversion sync to major ad platforms
Upload conversions measured in etracker to Google Ads, Meta, TikTok, and Microsoft Ads so bid algorithms receive server-side signals. Customer-controlled outbound path—useful for paid media, but introduces destination-platform processing outside German housing.
E-commerce, UX scrollmaps, and multi-level drill-downs
Shop funnels from product list to order (including vouchers and abandonment), scrollmaps projected on pages, and reports with multi-dimension drill-downs plus attribution model switching. Aimed at merchandising and growth teams, not just pageview counters.
First-party tracking domain and BI exports
Optional own-subdomain tracking (including Let's Encrypt workflow docs) to reduce ad-blocker and ITP loss; connectors/API/SFTP-style raw data paths toward Looker Studio, Power BI, and warehouses. Ops teams still configure domains and data pipelines themselves.

Insights

Cookie-free page views and user flows
Tracks bounce rate, referrers, visits, and user-flow style page statistics without setting analytics cookies, so sites can avoid cookie banners driven solely by analytics. Script init plus trackPages() is the usual path for SPAs.
Custom and cancelable event tracking
insights-js supports named events with string parameters, unique-per-session flags, parameter-only updates, and remove/cancel for long-lived events (e.g. subscribe then unsubscribe). Built for product and funnel metrics, not pageviews only.
MIT open-source TypeScript client
The browser/npm client (insights-js) is MIT-licensed on GitHub with TypeScript types and helpers for locale, screen type, path, referrer, and duration buckets. Supports React, Angular, Vue, UMD script, and multi-project App instances. Backend remains proprietary SaaS.
Visitor anonymization pipeline (vendor-described)
Vendor docs: IPs hashed only in RAM for fraud checks (not stored in DB or logs); user agents reduced to browser/OS; optional screen sizes rounded to 50px; Do Not Track honoured. Confirm fit with your DPO—anonymous design is not a legal certification.
Developer-oriented integration
One-minute script install or npm package; docs cover multi-project tracking, ignoreErrors/disabled flags for production environments, and hash/search options on page paths. Lightweight client positioned against heavier GA-style tags.

Assurance & compliance: etracker vs Insights
Assurance & compliance	etracker	Insights
Independent security / privacy audit	Vendor claimed ePrivacyseal materials and vendor pages describe independent ePrivacy Consult audit of consent-free cookieless analytics posture; not a full public penetration-test report. Vendor also claims regular infrastructure pen tests.	Not found Vendor describes no IP storage in DB/logs and RAM-only hashing; no public third-party audit PDF found.
ISO 27001	Partial IPHH housing described as ISO/IEC 27001:2013-certified. No public organisation-level ISO 27001 certificate for etracker/JustRelate analytics found in materials reviewed.	Not found No public certificate on getinsights.io at research time.
SOC 2 / SOC 3	Not found No public SOC 2/SOC 3 report located on official trust/security pages reviewed.	Not found No public SOC report found.
GDPR / EU data protection	Vendor claimed EU/DE controller-processor setup; cookieless default under legitimate interest; Art. 28 DPA on registration; privacy notice + objection patterns documented.	Vendor claimed Austrian entity; privacy policy and data-collection docs; cookie-free/no-stored-IP design for visitors. Firebase/Google processing still requires transfer/DPA diligence.
US CLOUD Act exposure (indicative)	Partial EuropeanStack assessment: German entity, no known US parent, own-server housing at IPHH (no public AWS/GCP/Azure analytics store) → core exposure low. Partial because optional conversion sync and Google connectors can send data to US-group destinations when enabled by the customer. Not legal advice.	Partial EU entity / no known US parent, but Google Firebase (US-group) used for Cloud Functions, Auth, and Hosting per vendor data page. Indicative medium exposure. Not legal advice.
Data processing agreement (B2B)	Vendor claimed Vendor states DPA/AV concludes on account registration; public DPA PDFs and in-app DPA under Settings → Data processing agreement.	Not found No standalone public DPA page found; request from contact@getinsights.io for B2B use.
ePrivacyseal (privacy seal)	Vendor claimed Vendor and ePrivacy listing materials assert seal for consent-free cookieless mode under GDPR/TDDDG. Scope is privacy/consent posture, not a general security cert.	Not listed
EU AI Act	Not applicable Product is web/marketing analytics, not an AI-system offering as primary positioning.	Not applicable Web analytics product, not an AI system product page.

Considerations & known limitations: etracker vs Insights
Considerations & known limitations	etracker	Insights
Consent-free claims still need local legal review	Medium ePrivacyseal and vendor guidance support cookieless default under TDDDG/GDPR, but hybrid cookies, marketing tags, and non-German supervisory interpretations can change the picture. Operators remain responsible for DPIA and notices.	Not listed
Optional conversion sync / BI connectors to US platforms	Medium Core storage is claimed German; enabling Google/Meta/TikTok/Microsoft conversion upload or Looker Studio connectors creates additional processing at those destinations. Map each integration in your transfer assessment.	Not listed
Limited public enterprise security certs	Low No public SOC 2 or org-level ISO 27001 package found; IPHH housing ISO and ePrivacyseal are the main published assurance artefacts. May slow enterprise security questionnaires.	Not listed
SaaS-only, closed source	Low No self-host path. Exit requires export/API planning; multi-year usage contracts are common in this category—confirm terms on the vendor site.	Not listed
No exhaustive public subprocessor register	Low Housing (IPHH) is named; a full live subprocessor schedule (support tooling, email, etc.) was not found as a single public table. Request under NDA/procurement if required.	Not listed
Google Firebase on critical path	Not listed	High Vendor documents Firebase Cloud Functions, Auth, and Hosting. Anonymous visitor design does not remove US-group cloud dependency for hosting/auth/processing—material for sovereignty-sensitive buyers.
No public independent audit or certs	Not listed	Medium No ISO 27001, SOC 2, or third-party no-logs audit found on the public site. Rely on vendor claims plus your own review of the open client.
Client open source only; no self-host	Not listed	Medium insights-js is MIT; dashboard/backend are closed SaaS. You cannot run the full product on your infrastructure.
Small team / continuity	Not listed	Medium Product presented as built by two freelance developers under Unsourced Digital OG. Assess vendor longevity and support SLAs for business-critical analytics.
Bounce/unique metrics need SPA routing	Not listed	Low Client docs: trackPages bounce and unique views expect a client-side router and do not use cookies/localStorage; multi-page full reloads can skew metrics.

Fit

etracker

Best fit when

EU/German organisations replacing GA4 to reduce consent-mode data loss and US-linked analytics storage
Performance marketers needing campaign attribution plus server-side conversion upload to major ad platforms
E-commerce teams measuring product-to-checkout funnels, vouchers, and abandonment in one privacy-oriented SaaS
Agencies managing multi-account portfolios that want integrated tag and consent management without a separate CMP licence stack
Publishers and regulated sectors that require a German processor, Art. 28 DPA, and documented objection mechanisms

Poor fit when

Teams that must self-host open-source analytics with full infrastructure control (Matomo, Offen, etc.)
Sites that only need minimal cookieless pageviews without shop, UX, or paid-media depth
Procurement that requires published SOC 2 or organisation-level ISO 27001 for the analytics vendor before shortlisting
Buyers expecting a durable free-forever tier comparable to Google Analytics

Consider instead when

When: You need open-source self-host or full data-plane control on your own infrastructure
Consider: Matomo (self-host or Matomo by Stackhero / Friendly Analytics managed)
etracker is closed-source SaaS only
When: You want a lightweight EU cookieless counter without marketing suites
Consider: Plausible Analytics, Wide Angle Analytics, or digistats Analytics
Simpler product surface; fewer e-commerce and ad-sync features
When: You stay fully inside Google Ads optimisation and accept consent/US-transfer tradeoffs
Consider: Google Analytics 4
Deeper Google ecosystem wiring; different privacy posture

Insights

Best fit when

Indie developers and small teams who want pageviews plus product/funnel events without analytics cookies
SPA and web-app builders using client-side routers who can call insights-js track/trackPages APIs
Teams that accept a free low-volume tier then event-volume paid plans (check current limits on getinsights.io)
Buyers who value an MIT-auditable client library even if the backend stays closed
EU sites prioritizing no-stored-visitor-IP design over full stack self-host control

Poor fit when

Orgs that require self-hosted or fully open-source analytics backend
Procurement needing published DPA, ISO 27001, or SOC 2 on the vendor site today
Policies that forbid Google Firebase / US-group cloud on any analytics path
Classic multi-page sites expecting accurate cookie-free bounce/unique metrics without SPA routing
Teams needing GA-class free segmentation, ads integrations, or data warehouse export

Consider instead when

When: You want simple hosted EU privacy page analytics with a strong Plausible-style product footprint
Consider: Plausible Analytics
Compare event depth: Insights markets custom events as a core differentiator vs simpler page-focused tools.
When: You want cookie-free analytics with an explicit privacy brand and different commercial packaging
Consider: Simple Analytics
Verify each vendor's hosting and subprocessor pages side by side.
When: You prefer a German peer privacy analytics product
Consider: Pirsch Analytics
Compare event features, regions, and legal docs for your DPA process.
When: You need full control of the stack or on-prem processing
Consider: Self-hosted Matomo (or similar open analytics)
Higher ops cost; no dependency on Insights SaaS or Firebase.

Open questions for due diligence

etracker

Will procurement receive a current subprocessor list covering support, email, and any non-IPHH infrastructure?
Does JustRelate publish an organisation-level ISO 27001 or SOC 2 report for the analytics service (beyond IPHH housing)?
For your jurisdictions outside Germany, does counsel accept the cookieless legitimate-interest posture without a consent banner?
Which optional outbound integrations (ads conversion upload, Looker Studio, third-party tags) will you enable, and how are those transfers documented?

Insights

Will Unsourced Digital OG sign a customer DPA and provide a current subprocessor list with regions?
Which Firebase/GCP regions process analytics and auth data today?
Are there any independent security assessments available under NDA?
What is the data retention schedule for events and account data after cancellation?
Is there an official path for enterprise SSO, invoice billing, or custom retention?