fusedeck® vs Publytics

Compare fusedeck® and Publytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: fusedeck®

fusedeck®

Switzerland· Web Analytics

Needs review

Shortlist fusedeck when you need Swiss-operated cookieless-capable web analytics plus tag management and on-site activation (scoring, modals, A/B, server-side ad exports) in one SaaS. Skip when you only need lightweight pageviews (consider Plausible or Simple Analytics) or must self-host open-source analytics (consider Matomo-class tools).

Cookieless + cookie modesServer-side tag managerOn-site activationEU storage (claimed)Swiss HQSaaS (Shared/Owned)
Logo: Publytics

Publytics

Italy· Web Analytics

Needs review

Shortlist when you need cookieless, unsampled publisher analytics with multi-site Network views and a public EU DPA from an Italian SaaS operator. Skip when you need self-hosting, product analytics at GA4/Adobe depth, or product-level ISO/SOC—consider Plausible (simpler privacy analytics / self-host options) or Matomo (self-host ownership) instead.

Cookieless trackingNo default samplingMulti-site NetworkEU-hosted (EuroVPS/Hetzner)Public B2B DPAPublisher-focused UX
fusedeck® vs Publytics: Snapshot
FeatureLogo: fusedeck®fusedeck®Logo: PublyticsPublytics
Country of originSwitzerlandItaly
CategoryWeb AnalyticsWeb Analytics
Open sourceNoNo
Self-hostedNoNo
HeadquartersSwitzerlandItaly
Legal entityCapture Media AG (imprint); privacy policy controller listed as cptr AG — same Zurich addressPublytics S.r.l. / Publytics SRL, Via Val Leventina 3 INT 1, 20148 Milan (MI), Italy (VAT IT13079420967)
Governing lawSwiss data protection (FADP) for the operator; German GTC apply to cptr Germany GmbH contracts; confirm order formItaly / EU GDPR (processor under published DPA)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumLow
Hosting / residencyMain storage claimed in the EU (encrypted). Public subprocessors: AWS EMEA SARL (compute), ClickHouse, Inc. (US) with data on AWS Ireland, Aiven Oy (Finland) DBaaS on AWS, VSHN AG (CH) for Kubernetes on AWS, cptr Hungary Kft. (development). Optional customer exports to Meta/LinkedIn/TikTok/Google are separate transfer paths.Analytics infrastructure subprocessors in public DPA: EuroVPS (Euclid Services Ltd, Cyprus) and Hetzner Online GmbH (Germany). Data policy/DPA: EU storage (NL, DE, FI; DPA also IT); no transfer outside the EU for analytics processing. Account path: Stripe (payments), Brevo/Sendinblue (email).
Summary

Cookieless analytics, server-side tagging, and on-site activation from Switzerland—Track, Analyse, and Activate workflows for marketing teams leaving cookie-only stacks.

Cookieless web analytics SaaS for digital publishers: unsampled real-time and historical metrics, multi-site Network views, GA import, and EU-hosted measurement from an Italian company.

Tags
At a glance: fusedeck® vs Publytics
At a glanceLogo: fusedeck®fusedeck®Logo: PublyticsPublytics
HQZurich, SwitzerlandMilan, Italy
Legal entity (public)Capture Media AG (imprint); cptr AG (privacy controller)Not listed
Product typeCookieless analytics + activation SaaSNot listed
Hosting (public)EU storage claimed; AWS + ClickHouse on AWS IrelandNot listed
Open sourceNoNo (tracker uses MIT library code)
Self-hostedNo (Shared / Owned SaaS stacks)Not listed
Commercial modelPaid monthly SaaS; Shared vs Owned stacksPageview tiers; free trial
Legal entityNot listedPublytics S.r.l. (VAT IT13079420967)
HostingNot listedEuroVPS + Hetzner (EU regions)
DeploymentNot listedManaged SaaS (not self-hosted)
Key capabilities: fusedeck® vs Publytics
Key capabilitiesLogo: fusedeck®fusedeck®Logo: PublyticsPublytics
Cookieless + cookie modesYesNot listed
Server-side tag managerYesNot listed
On-site activationYesNot listed
EU storage (claimed)YesNot listed
Swiss HQYesNot listed
SaaS (Shared/Owned)YesNot listed
Cookieless trackingNot listedYes
No default samplingNot listedYes
Multi-site NetworkNot listedYes
EU-hosted (EuroVPS/Hetzner)Not listedYes
Public B2B DPANot listedYes
Publisher-focused UXNot listedYes

fusedeck®

  • Configurable cookieless and cookie tracking modes

    Full cookie tracking, cookieless user tracking (calculated ID, no device storage), and cookieless session tracking (session-level only, no cross-session recognition) so teams can match consent posture and geo rules. Limit: legal fit of each mode still depends on your counsel and implementation—not a blanket no-consent guarantee for every event design.

  • Server-side tag manager and event control

    Define events, triggers, and selectors; gate which external tags and third parties receive data based on consent and configuration. Reduces reliance on brittle client-only pixels. Limit: marketers still need a clear data and tag taxonomy or complexity moves into fusedeck workspaces.

  • Reports, dashboards, and API exports

    Ready-made reports (behaviour, campaigns, inbound, tag manager, visitors), report builder, dashboards, share links, raw or API export, and optional Looker Studio connectivity for deeper analysis without rebuilding every KPI in a spreadsheet.

  • On-site activation: scoring, modals, A/B tests

    Score sessions, trigger call-to-action modals, run A/B tests, and inject dynamic content so analytics can drive conversion work inside the same product—not only offline reporting.

  • Server-side transfers to ad and CRM systems

    Export audiences and conversion signals server-side toward platforms such as Meta, LinkedIn, and TikTok, plus API hooks to CRM or other systems, while keeping more tag logic off the browser. Limit: those destinations introduce their own processors and transfer assessments.

  • Shared Stack vs Owned Stack infrastructure

    Shared multi-tenant cloud for standard deployments; Owned Stack with vendor-described physically separated infrastructure, white-label domain option, and higher scale for stricter security or traffic needs—still SaaS, not self-hosted open source.

Publytics

  • Unsampled real-time and daily publisher metrics

    Dashboard and Real-time views show active users (including last-minute and 30-minute windows), top pages, sources, social referrals, and day trends—with minute-level trend comparison documented for real-time. Vendor states no default data sampling, so reports reflect full counted client-side traffic rather than GA-style estimates on large properties.

  • Multi-site Network mode for content portfolios

    Business and Enterprise plans can group properties into Networks (plan caps apply: e.g. up to three Networks on Business, unlimited on Enterprise). Network views mirror site dashboards with split-by-site filters, combined real-time tables, and PDF/CSV export across the portfolio—built for multi-brand publishers rather than single blogs.

  • Cookieless measurement with daily-rotating visitor hash

    Tracking avoids cookies and permanent device IDs. Per the DPA, IP and User-Agent are used only to derive a daily salted hash for unique visitors, then discarded; metrics stay aggregated (URL, referrer, browser/OS, device, country). Designed so many sites can skip consent banners for analytics alone—confirm with counsel for your jurisdictions and any custom IDs you add.

  • Historical import, custom events/dimensions, and API

    Import paths cover GA4 and other tools (Plausible/Fathom mentioned) with support-assisted finalization. Custom events, dimensions, and metrics scale by plan; REST API uses Sanctum Bearer tokens scoped to subscribed sites. Fits teams rebuilding GA-era reporting without rebuilding infrastructure.

  • AI referral traffic reporting

    Dedicated documentation for traffic referred from AI systems (ChatGPT, Gemini, Claude, Perplexity, Copilot, Mistral, Google AI Overviews, Deepseek, and others). Useful for publishers optimizing for answer-engine and AI-overview discovery alongside classic SEO sources.

Assurance & compliance: fusedeck® vs Publytics
Assurance & complianceLogo: fusedeck®fusedeck®Logo: PublyticsPublytics
Independent security / no-logs audit
Not found

TOMs and legal opinions on cookieless tracking exist; no independent third-party security audit PDF found on primary trust pages.

Not found

Searched official site; no public third-party security or no-logs audit PDF found. DPA describes hashing and non-retention of raw IP/UA.

ISO 27001
Not found

No public ISO 27001 certificate located on imprint, privacy, TOM, or subprocessor pages.

Not found

No Publytics product certificate found. Host EuroVPS markets ISO certifications; that is infrastructure provider scope, not Publytics certification.

SOC 2 / SOC 3
Not found

No SOC 2/3 report referenced on primary trust pages.

Not found

No public SOC 2/3 report found on official Publytics pages.

GDPR / EU data protection
Vendor claimed

Swiss operator; product data-privacy page claims GDPR/ePrivacy-configurable setups; privacy policy cites FADP and GDPR legal bases. Confirm DPA and configuration for your properties.

Vendor claimed

Italian controller/processor entity; cookieless design; public Art. 28 DPA; EU hosting named. Not legal advice.

US CLOUD Act exposure (indicative)
Partial

Swiss entity / no known US parent, but public subprocessors include AWS and ClickHouse, Inc. (US) with EU residency claims. Indicative medium exposure—not a clean bill of health and not legal advice.

Partial

EU entity, no known US parent; analytics hosts EuroVPS + Hetzner in EU with DPA no third-country transfer for service data. Account billing via Stripe (US company). Not a vendor 'safe' claim—EuropeanStack assessment only.

Data processing agreement (B2B)
Vendor claimed

German GTC state processing under an Auftragsverarbeitung with customer as controller and cptr as processor. Obtain the signed DPA + annex for your contracting entity.

Vendor claimed

Full public DPA at https://publytics.net/dpa with Annex B subprocessors and Annex C security/transfer instructions.

EU AI Act
Not applicable

Web analytics / marketing activation product; not positioned as an AI system under public materials.

Not applicable

Web analytics product; AI-referral reporting is measurement of referrers, not an AI system product.

Considerations & known limitations: fusedeck® vs Publytics
Considerations & known limitationsLogo: fusedeck®fusedeck®Logo: PublyticsPublytics
AWS and US-domiciled database subprocessor
Medium

Despite Swiss HQ and EU storage claims, compute and DB path use AWS and ClickHouse, Inc. (US company, data on AWS Ireland). Policies that ban US-group cloud providers entirely may fail even if data residency is EU.

Not listed
Capture Media AG vs cptr AG naming
Low

Imprint still lists Capture Media AG while the privacy policy names cptr AG as controller. Confirm the exact contracting party, invoice entity, and DPA counterparty on the order form.

Not listed
No public independent security audit or ISO/SOC
Medium

TOMs are published, but we found no independent audit report or ISO 27001 / SOC 2 certificate. Security questionnaires and NDA materials may still be required for enterprise purchase.

Medium

Hashing and non-retention claims are first-party (DPA/docs). No public third-party audit was found—enterprise security reviews will need questionnaires, DPA audit rights, and possibly NDA materials.

Cookieless modes are not automatic legal clearance
Medium

Cookieless session tracking is positioned for compliance without consent, but full cookie and cookieless user modes, identity features, and ad-platform exports can reintroduce consent and transfer questions. Legal review of your event design remains mandatory.

Not listed
No classical self-host option
Low

Owned Stack is dedicated vendor-operated cloud, not buyer-operated self-hosting. Air-gapped or fully on-prem mandates need another product.

Medium

All measurement depends on Publytics cloud availability and vendor roadmap. Teams with residency or air-gap requirements need Matomo/Plausible CE-style self-host alternatives.

Feature depth tied to pageview tiersNot listed
Low

Networks, API rate limits, custom dimensions/metrics, retention years, and time granularity differ by Lite/Business/Enterprise. Validate limits against portfolio size before migration.

US payment processor on account pathNot listed
Low

Stripe processes payments (US company). Separate from DPA Annex B analytics hosts, but relevant if procurement treats all vendor SaaS touchpoints as in-scope for CLOUD Act diligence.

Customer-injected identifiers can re-identifyNot listed
Medium

DPA warns controllers not to inject unique user IDs that re-identify visitors via the script. Misconfiguration can undermine the cookieless privacy model.

Fit

fusedeck®

Best fit when

  • Marketing ops teams that want Track + Analyse + Activate in one stack, not only traffic charts
  • Organisations replacing or supplementing GA4 with cookieless-capable, consent-flexible collection modes
  • Teams that need server-side control over which third-party tags and ad platforms receive data
  • Buyers who want Swiss contracting and public EU hosting claims, and can accept AWS-based SaaS
  • Sites that benefit from scoring, modals, A/B tests, or server-side Meta/LinkedIn/TikTok transfers

Poor fit when

  • Teams that only need simple privacy-first pageview analytics without activation tooling
  • Requirements for open-source or classical self-hosted analytics under buyer-operated infrastructure
  • Procurement policies that forbid US-group cloud subprocessors (AWS / US-domiciled database vendors) entirely
  • Buyers seeking a free production tier or purely DIY setup without commercial SaaS onboarding

Consider instead when

  • When: You only need lightweight, privacy-oriented traffic metrics

    Consider: Plausible Analytics, Simple Analytics, or Friendly Analytics

    Smaller surface area; little or no activation / ad-export stack

  • When: You must self-host or prefer open-source analytics under your operators

    Consider: Matomo-class deployments or Piwik PRO where self-host/on-prem options fit

    fusedeck is SaaS Shared/Owned stack, not a public self-host product

  • When: You need global free-tier depth and Google ecosystem defaults

    Consider: Google Analytics

    Different jurisdiction and subprocessor story; still the default for many teams

  • When: You want a German enterprise analytics brand with strong packaging options

    Consider: etracker or Piwik PRO

    Compare residency, consent tooling, and activation depth side by side

Publytics

Best fit when

  • Content publishers and media sites that want GA3-style reporting without cookies or default sampling
  • Multi-brand portfolios that need Network dashboards, split-by-site filters, and shared exports
  • Teams migrating historical series from GA4 (or Plausible/Fathom) into a privacy-oriented SaaS
  • EU-oriented controllers who want Italian legal entity, published DPA, and EU infrastructure subprocessors named in annexes
  • Editorial/SEO leads who need real-time active users, sources, and AI-referral reporting without operating self-hosted analytics

Poor fit when

  • Organizations that require self-hosted or open-source analytics only
  • Product/growth teams that need GA4/Adobe-class event modeling, experiment stacks, and ads ecosystem integrations
  • Buyers that need verified product ISO 27001/SOC 2 certificates before shortlist (none found for Publytics itself)
  • Very simple single-site blogs that only need minimal privacy metrics—lighter tools may be enough

Consider instead when

  • When: You want open-core privacy analytics with optional self-host

    Consider: Plausible Analytics

    Simpler surface; stronger self-host/open-core path than Publytics SaaS-only model

  • When: You must run analytics on your own infrastructure

    Consider: Matomo (self-host) or Plausible Community Edition

    Publytics is managed cloud only—no official on-prem product

  • When: You need deep product analytics and marketing stack integration

    Consider: Google Analytics or Adobe Analytics

    Trade privacy/EU-hosting priorities for ecosystem breadth

Open questions for due diligence

fusedeck®

  • Which legal entity will appear on the contract and DPA for our region (Capture Media AG, cptr AG, cptr Germany GmbH, or another affiliate)?
  • Can the vendor provide the current subprocessor annex, SCCs if any, and confirmation of all AWS regions used for our data?
  • Is an independent security audit, pen-test summary, or ISO/SOC roadmap available under NDA?
  • Which tracking mode and event schema does fusedeck recommend for our CMP and target markets, and what remains after ad-blocker impact?
  • What are Shared vs Owned stack operational differences (isolation, custom domain, support SLAs) for our traffic volume?

Publytics

  • Will Publytics provide completed security questionnaire, pen-test summary, or ISO evidence under NDA for enterprise procurement?
  • Exact current pageview tier limits, Network caps, and retention for the sites you will migrate?
  • Is GA4 historical import complete for your property structure (events, custom dimensions) or only core traffic series?
  • How are subprocessors for account services (Stripe, Brevo) contractually covered relative to the analytics DPA annex?
  • Any planned US or non-EU hosting options that would change the current EU-only transfer instruction?