etracker vs Vantevo Analytics

Compare etracker and Vantevo Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics, Matomo

Logo: etracker

etracker

Germany· Web Analytics

Needs review

Shortlist etracker when you need German-hosted marketing-grade web analytics with a cookieless default, integrated tag/consent tooling, and optional ad conversion sync. Skip when you must self-host open source (prefer Matomo) or only need lightweight pageview charts (prefer Plausible or similar). Treat ePrivacyseal consent-free claims as vendor-audited posture—confirm with your counsel and DPIA.

Cookieless default trackingEU/DE hosted (IPHH)ePrivacyseal (claimed)Tag + consent suiteAd conversion syncSaaS only (not self-host)
Logo: Vantevo Analytics

Vantevo Analytics

Italy· Web Analytics

Needs review

Shortlist Vantevo when you want Italian-operated, cookie-less site analytics with a flat dashboard, goals/events, optional GA historical import, and beta ecommerce funnel events under a public DPA. Skip when you need multi-day returning-visitor identity, self-hosting/open source, or enterprise-grade public certifications—consider Plausible/Simple Analytics/Pirsch for lighter peers, or Piwik PRO for self-host/compliance-heavy programs.

Cookie-less trackingSingle-dashboard metricsEcommerce events (beta)GA history importPublic DPAItalian operator
etracker vs Vantevo Analytics: Snapshot
FeatureLogo: etrackeretrackerLogo: Vantevo AnalyticsVantevo Analytics
Country of originGermanyItaly
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersGermanyItaly
Legal entityJustRelate Deutschland GmbH (Charlottenburg HRB 218235); product brand JustRelate etracker / etrackerNetforce Srl, Via Po' 136/A, 43124 Parma PR, Italy
Governing lawNot listedItalian law (controller established in Italy; Terms governed by place of establishment)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)LowMedium
Hosting / residencyPrimary analytics processing on etracker's own servers in Germany/EU with housing at IPHH Internet Port Hamburg GmbH (vendor: no third-party access to apps/data for housing). Optional customer-enabled outbound paths to Google/Meta/TikTok/Microsoft Ads (conversion upload) and Google Looker Studio connectors—not core storage hosts.Vendor claims EU servers and EU backups. Public DPA names OVH Datacenter Roubaix and an AWS datacenter for storage/processing. Additional third parties: Stripe (payments), Crisp (support chat), optional Google Analytics and Search Console APIs when customers connect them.
Summary

German SaaS web and marketing analytics from JustRelate: cookieless default tracking, integrated tag/consent management, e-commerce and ad conversion sync on EU-hosted servers.

Italian cookie-less web analytics from Netforce Srl (Parma): single-dashboard traffic, events, goals, and ecommerce funnels with EU processing claims and a public DPA.

Tags
At a glance: etracker vs Vantevo Analytics
At a glanceLogo: etrackeretrackerLogo: Vantevo AnalyticsVantevo Analytics
HQ / legal entityJustRelate Deutschland GmbH, Berlin (product ops Hamburg)Not listed
Product typeWeb & marketing analytics SaaS (+ tag/CMP modules)Cookie-less web analytics SaaS
HostingOwn servers, IPHH housing, Hamburg/GermanyNot listed
Open sourceNoNot listed
Self-hostedNoNot listed
Commercial modelUsage-based SaaS licence (hit tiers); trial commonly offeredView-based subscription after free trial
HQNot listedParma, Italy (Netforce Srl)
Self-host / OSSNot listedNo (SaaS only; not open source)
Hosting (public DPA)Not listedOVH Roubaix + AWS datacenter; EU processing claims
Notable limitNot listedNo multi-day returning visitors; max 50 sites/account (Terms)
Key capabilities: etracker vs Vantevo Analytics
Key capabilitiesLogo: etrackeretrackerLogo: Vantevo AnalyticsVantevo Analytics
Cookieless default trackingYesNot listed
EU/DE hosted (IPHH)YesNot listed
ePrivacyseal (claimed)YesNot listed
Tag + consent suiteYesNot listed
Ad conversion syncYesNot listed
SaaS only (not self-host)YesNot listed
Cookie-less trackingNot listedYes
Single-dashboard metricsNot listedYes
Ecommerce events (beta)Not listedYes
GA history importNot listedYes
Public DPANot listedYes
Italian operatorNot listedYes

etracker

  • Cookieless session analytics (consent-oriented default)

    Server-side session tokens link interactions without analytical cookies or device fingerprinting by default; IP truncation and daily-rotating hashes limit long-term recognition. Suits sites that want visit/conversion metrics under legitimate interest while keeping optional hybrid cookies behind consent.

  • Integrated tag and consent management

    One product surface to load etracker and third-party tags and sync them with consent rules, reducing dual maintenance between a separate CMP and GTM. Best when marketers need gated Maps/ads tags without rebuilding the full Google stack.

  • Server-side conversion sync to major ad platforms

    Upload conversions measured in etracker to Google Ads, Meta, TikTok, and Microsoft Ads so bid algorithms receive server-side signals. Customer-controlled outbound path—useful for paid media, but introduces destination-platform processing outside German housing.

  • E-commerce, UX scrollmaps, and multi-level drill-downs

    Shop funnels from product list to order (including vouchers and abandonment), scrollmaps projected on pages, and reports with multi-dimension drill-downs plus attribution model switching. Aimed at merchandising and growth teams, not just pageview counters.

  • First-party tracking domain and BI exports

    Optional own-subdomain tracking (including Let's Encrypt workflow docs) to reduce ad-blocker and ITP loss; connectors/API/SFTP-style raw data paths toward Looker Studio, Power BI, and warehouses. Ops teams still configure domains and data pipelines themselves.

Vantevo Analytics

  • Daily-rotating hash visitor counting (no analytics cookies)

    Visitor uniqueness for a day is derived from HASH(salt + domain + IP + User-Agent) with a salt that rotates every 24 hours; IP and User-Agent are not retained after hashing, per the DPA and docs. No cookies, localStorage, or browser cache for the analytics session—and therefore no multi-day new/returning visitor split. Fits privacy-led sites that prioritize aggregate trends over identity graphs.

  • Single-page traffic dashboard

    Unique visitors, sessions, page views, bounce rate, duration, entry/exit pages, geography, devices, languages, referrals, and UTM campaigns appear on one overview without multi-level custom report builders. Aimed at agencies and SMEs that want operational metrics without a full-time analytics specialist.

  • Custom events, goals, and automatic link/download tracking

    Track button clicks, scrolls, form submits, custom event names with metadata, and conversion goals; outbound links and file downloads can be auto-captured with HTML attributes to exclude specific URLs. Useful for content and lead-gen sites measuring meaningful actions without cookie tags.

  • Ecommerce funnel events (beta script)

    Optional vantevo-ecommerce.js records wishlist, view item, cart add/remove, checkout stages, payment type, coupons, variants/categories, and purchase—docs mark the ecommerce section as still in beta. Best for shops that need privacy-oriented funnel visibility and can accept beta maturity.

  • Universal Analytics import and multi-platform install paths

    Connect Google Analytics to import page statistics from January 2018 onward into the same calendar view (with documented metric gaps and API limits). Ship via head script, WordPress plugin, React/Vue/npm packages, Shopify/Wix theme paste, hybrid apps, or server-side event APIs—plus optional Search Console connection for keyword/impression views.

Assurance & compliance: etracker vs Vantevo Analytics
Assurance & complianceLogo: etrackeretrackerLogo: Vantevo AnalyticsVantevo Analytics
Independent security / privacy audit
Vendor claimed

ePrivacyseal materials and vendor pages describe independent ePrivacy Consult audit of consent-free cookieless analytics posture; not a full public penetration-test report. Vendor also claims regular infrastructure pen tests.

Not found

No public third-party audit PDF or no-logs attestation found on security/docs pages searched.

ISO 27001
Partial

IPHH housing described as ISO/IEC 27001:2013-certified. No public organisation-level ISO 27001 certificate for etracker/JustRelate analytics found in materials reviewed.

Not found

No ISO 27001 certificate or registry evidence found on the public site.

SOC 2 / SOC 3
Not found

No public SOC 2/SOC 3 report located on official trust/security pages reviewed.

Not found

No SOC 2/3 report referenced on public trust/legal pages.

GDPR / EU data protection
Vendor claimed

EU/DE controller-processor setup; cookieless default under legitimate interest; Art. 28 DPA on registration; privacy notice + objection patterns documented.

Vendor claimed

Italian controller (Netforce Srl); cookie-less visitor model and EU hosting asserted on docs/GDPR pages; public DPA available. Vendor “100% GDPR compliant” wording is a claim, not independent legal certification.

US CLOUD Act exposure (indicative)
Partial

EuropeanStack assessment: German entity, no known US parent, own-server housing at IPHH (no public AWS/GCP/Azure analytics store) → core exposure low. Partial because optional conversion sync and Google connectors can send data to US-group destinations when enabled by the customer. Not legal advice.

Partial

EU entity / no known US parent, but DPA lists AWS alongside OVH Roubaix; Stripe and optional Google APIs are US-group services. Not a clean EU-only infrastructure story. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Vendor states DPA/AV concludes on account registration; public DPA PDFs and in-app DPA under Settings → Data processing agreement.

Vendor claimed

Public DPA at vantevo.io/dpa; Terms state DPA forms part of the main agreement (customer controller, Netforce processor).

ePrivacyseal (privacy seal)
Vendor claimed

Vendor and ePrivacy listing materials assert seal for consent-free cookieless mode under GDPR/TDDDG. Scope is privacy/consent posture, not a general security cert.

Not listed
EU AI Act
Not applicable

Product is web/marketing analytics, not an AI-system offering as primary positioning.

Not applicable

Web analytics SaaS; not marketed as an AI system product.

Considerations & known limitations: etracker vs Vantevo Analytics
Considerations & known limitationsLogo: etrackeretrackerLogo: Vantevo AnalyticsVantevo Analytics
Consent-free claims still need local legal review
Medium

ePrivacyseal and vendor guidance support cookieless default under TDDDG/GDPR, but hybrid cookies, marketing tags, and non-German supervisory interpretations can change the picture. Operators remain responsible for DPIA and notices.

Not listed
Optional conversion sync / BI connectors to US platforms
Medium

Core storage is claimed German; enabling Google/Meta/TikTok/Microsoft conversion upload or Looker Studio connectors creates additional processing at those destinations. Map each integration in your transfer assessment.

Not listed
Limited public enterprise security certs
Low

No public SOC 2 or org-level ISO 27001 package found; IPHH housing ISO and ePrivacyseal are the main published assurance artefacts. May slow enterprise security questionnaires.

Not listed
SaaS-only, closed source
Low

No self-host path. Exit requires export/API planning; multi-year usage contracts are common in this category—confirm terms on the vendor site.

Not listed
No exhaustive public subprocessor register
Low

Housing (IPHH) is named; a full live subprocessor schedule (support tooling, email, etc.) was not found as a single public table. Request under NDA/procurement if required.

Not listed
AWS (and other US-group services) in data pathNot listed
Medium

Despite Italian HQ and EU hosting marketing, the DPA explicitly stores data at OVH Roubaix and an AWS datacenter. Stripe payments and optional Google integrations add further US-group processors. Organizations with strict “no US cloud” policies need written clarification of regions, SCCs, and residual access risk.

No public ISO/SOC or independent auditNot listed
Medium

Shortlisting relies on vendor security measures described in the DPA (encryption, backups, breach notification windows) without published certs or third-party audit reports. Security questionnaires and NDA evidence may be required for regulated buyers.

No multi-day visitor identity by designNot listed
Low

Daily salt rotation and cookie-less design prevent classic returning-visitor and cross-device analysis. This is a privacy feature for many buyers and a hard product limit for others.

Ecommerce module still betaNot listed
Medium

Official ecommerce docs mark the section as beta/incomplete for final publication. Do not assume GA ecommerce parity or long-term event stability without a pilot.

View overage and website caps in TermsNot listed
Low

Recording can pause after plan-specific overage tolerances; Terms also set a 50-website maximum per account. Align marketing “unlimited domains” language with contract terms before large agency rollouts.

SaaS-only dependencyNot listed
Low

No public self-host option. Continuity depends on Netforce operations, OVH/AWS, and export/delete workflows (JSON/CSV return or delete timelines in DPA/Terms).

Fit

etracker

Best fit when

  • EU/German organisations replacing GA4 to reduce consent-mode data loss and US-linked analytics storage
  • Performance marketers needing campaign attribution plus server-side conversion upload to major ad platforms
  • E-commerce teams measuring product-to-checkout funnels, vouchers, and abandonment in one privacy-oriented SaaS
  • Agencies managing multi-account portfolios that want integrated tag and consent management without a separate CMP licence stack
  • Publishers and regulated sectors that require a German processor, Art. 28 DPA, and documented objection mechanisms

Poor fit when

  • Teams that must self-host open-source analytics with full infrastructure control (Matomo, Offen, etc.)
  • Sites that only need minimal cookieless pageviews without shop, UX, or paid-media depth
  • Procurement that requires published SOC 2 or organisation-level ISO 27001 for the analytics vendor before shortlisting
  • Buyers expecting a durable free-forever tier comparable to Google Analytics

Consider instead when

  • When: You need open-source self-host or full data-plane control on your own infrastructure

    Consider: Matomo (self-host or Matomo by Stackhero / Friendly Analytics managed)

    etracker is closed-source SaaS only

  • When: You want a lightweight EU cookieless counter without marketing suites

    Consider: Plausible Analytics, Wide Angle Analytics, or digistats Analytics

    Simpler product surface; fewer e-commerce and ad-sync features

  • When: You stay fully inside Google Ads optimisation and accept consent/US-transfer tradeoffs

    Consider: Google Analytics 4

    Deeper Google ecosystem wiring; different privacy posture

Vantevo Analytics

Best fit when

  • EU/Italian teams replacing Google Analytics for marketing-site KPIs without analytics cookies
  • Agencies needing a simple multi-site dashboard clients can read without GA training
  • Shops that want privacy-oriented funnel events (cart → checkout → purchase) and accept beta maturity
  • Migrations that need to pull Universal Analytics page history into a privacy-first tool
  • Stacks using WordPress, Shopify, React/Next, Vue/Nuxt, or server-side event APIs

Poor fit when

  • Requirements for multi-day returning visitors, cross-device identity, or ad-platform audience sync
  • Mandatory self-hosting, open-source code audit, or on-prem only deployments
  • Procurement that requires public ISO 27001/SOC 2 evidence and independent security audits before shortlist
  • Heavy product analytics / cohort experimentation beyond site and ecommerce funnel events
  • Accounts that need more than the Terms’ 50-website cap without vendor exception

Consider instead when

  • When: You want a well-known lightweight EU privacy analytics tool with strong community presence

    Consider: Plausible Analytics or Simple Analytics

    Compare ecommerce depth, GA import, and commercial packaging side by side.

  • When: You need self-host or enterprise compliance packaging

    Consider: Piwik PRO (or Matomo self-host outside this catalog’s EU-SaaS peers)

    Vantevo is SaaS-only with no public self-host edition found.

  • When: You need full product analytics and long-horizon cohorts

    Consider: Mixpanel or similar product analytics suites

    Different category: identity-rich product instrumentation vs privacy-first site metrics.

  • When: You specifically want German-market privacy analytics peers

    Consider: Pirsch Analytics or etracker (catalog peers)

    Validate feature parity on ecommerce and import paths.

Open questions for due diligence

etracker

  • Will procurement receive a current subprocessor list covering support, email, and any non-IPHH infrastructure?
  • Does JustRelate publish an organisation-level ISO 27001 or SOC 2 report for the analytics service (beyond IPHH housing)?
  • For your jurisdictions outside Germany, does counsel accept the cookieless legitimate-interest posture without a consent banner?
  • Which optional outbound integrations (ads conversion upload, Looker Studio, third-party tags) will you enable, and how are those transfers documented?

Vantevo Analytics

  • Which exact AWS region(s) and services are in production, and are standard contractual clauses / transfer impact assessments available on request?
  • Is a current subprocessor list (beyond DPA/privacy mentions of OVH, AWS, Stripe, Crisp, Google) available under NDA?
  • Are ISO 27001, SOC 2, or independent penetration-test summaries available for enterprise procurement?
  • What is the production roadmap and support SLA for ecommerce events leaving beta?
  • How should multi-brand agencies interpret “unlimited domains” marketing versus the Terms’ 50-website cap—exceptions available?