Insights vs SEAL Metrics

Compare Insights and SEAL Metrics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics

Logo: Insights

Insights

Austria· Web Analytics

Needs review

Shortlist when you need cookie-free hosted analytics with first-class custom events for SPAs from an Austrian operator. Skip when you need self-host, public ISO/SOC packs, or infrastructure without Google Firebase—consider Plausible Analytics, Simple Analytics, or Pirsch Analytics instead (or self-hosted Matomo).

Cookie-free trackingCustom eventsMIT client (insights-js)Austrian entityHosted SaaSFirebase data path
Logo: SEAL Metrics

SEAL Metrics

Spain· Web Analytics

Needs review

Shortlist when European eCommerce or hospitality teams need cookieless full-traffic capture and last-click ROAS they can align with finance—without GA4 Consent Mode as the measurement backbone. Skip when you need self-host or open source, session replay and product analytics depth, or a certified ISO/SOC package today—consider Plausible, Simple Analytics, Pirsch, or Matomo-based hosts instead.

Cookieless first-party pixelEU-hosted (Dublin)Revenue / ROAS focusReal-time dashboardsDPA includedSaaS only
Insights vs SEAL Metrics: Snapshot
FeatureLogo: InsightsInsightsLogo: SEAL MetricsSEAL Metrics
Country of originAustriaSpain
CategoryWeb AnalyticsWeb Analytics
Open sourceYesNo
Self-hostedNoNo
HeadquartersAustriaSpain
Legal entityUnsourced Digital OGSealMetrics (Spain; exact registered company name not found on public imprint)
Governing lawNot listedSpain (Terms of Service; courts of Barcelona)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyOperator: Unsourced Digital OG (Austria). Vendor-documented infrastructure includes Google Firebase—Cloud Functions, Firebase Authentication (customer accounts), and Firebase Hosting—with temporary IP handling described for those Google services. Visitor analytics designed without cookies and without IP storage in DB/logs; still a US-group cloud path for processing/hosting/auth.Customer analytics app, DB, and backups: Dublin, Ireland (EU data center, provider not named publicly). Subprocessor: Cloudflare for CDN/DDoS on encrypted transit at EU edge locations; vendor states no analytics data at rest on Cloudflare and no US cloud storage of customer analytics.
Summary

Austrian privacy-first hosted web analytics: page views and custom events without cookies or stored visitor IPs, with an MIT open-source JS client (backend uses Google Firebase).

Spanish cookieless web analytics for European eCommerce: first-party capture, Dublin EU storage, last-click revenue and ROAS without consent-dependent tags.

Tags
At a glance: Insights vs SEAL Metrics
At a glanceLogo: InsightsInsightsLogo: SEAL MetricsSEAL Metrics
HQ / lawAustria (Unsourced Digital OG; Austrian governing law)Not listed
Product typeHosted privacy web analytics + custom eventsNot listed
Client licenseMIT (insights-js); backend proprietaryNot listed
Self-hostNo public self-host optionNo
Commercial modelFree low-volume tier; paid by monthly event/pageview volumeNot listed
Known infraGoogle Firebase (Functions, Auth, Hosting) per vendor docsNot listed
HQNot listedSpain (Spanish law; Barcelona courts per Terms)
FoundedNot listed2020 (vendor how-it-works page)
HostingNot listedDublin, Ireland — EU data center; Cloudflare edge transit
ModelNot listedSaaS; event-volume plans; free agentic tier + trial
Open sourceNot listedNo
Key capabilities: Insights vs SEAL Metrics
Key capabilitiesLogo: InsightsInsightsLogo: SEAL MetricsSEAL Metrics
Cookie-free trackingYesNot listed
Custom eventsYesNot listed
MIT client (insights-js)YesNot listed
Austrian entityYesNot listed
Hosted SaaSYesNot listed
Firebase data pathYesNot listed
Cookieless first-party pixelNot listedYes
EU-hosted (Dublin)Not listedYes
Revenue / ROAS focusNot listedYes
Real-time dashboardsNot listedYes
DPA includedNot listedYes
SaaS onlyNot listedYes

Insights

  • Cookie-free page views and user flows

    Tracks bounce rate, referrers, visits, and user-flow style page statistics without setting analytics cookies, so sites can avoid cookie banners driven solely by analytics. Script init plus trackPages() is the usual path for SPAs.

  • Custom and cancelable event tracking

    insights-js supports named events with string parameters, unique-per-session flags, parameter-only updates, and remove/cancel for long-lived events (e.g. subscribe then unsubscribe). Built for product and funnel metrics, not pageviews only.

  • MIT open-source TypeScript client

    The browser/npm client (insights-js) is MIT-licensed on GitHub with TypeScript types and helpers for locale, screen type, path, referrer, and duration buckets. Supports React, Angular, Vue, UMD script, and multi-project App instances. Backend remains proprietary SaaS.

  • Visitor anonymization pipeline (vendor-described)

    Vendor docs: IPs hashed only in RAM for fraud checks (not stored in DB or logs); user agents reduced to browser/OS; optional screen sizes rounded to 50px; Do Not Track honoured. Confirm fit with your DPO—anonymous design is not a legal certification.

  • Developer-oriented integration

    One-minute script install or npm package; docs cover multi-project tracking, ignoreErrors/disabled flags for production environments, and hash/search options on page paths. Lightweight client positioned against heavier GA-style tags.

SEAL Metrics

  • 846-byte first-party cookieless pixel

    Install a tiny first-party script on your domain that logs pageviews without cookies, localStorage, or fingerprinting. Designed so ad blockers that target third-party analytics domains hit less often. Benefit: fuller traffic capture for teams stuck with consent-gated tags; trade-off: aggregate and channel metrics rather than person-level journey stitching.

  • Last-click revenue and ROAS attribution

    Attributes conversions and revenue to channels, campaigns, and landing pages with last-click models the vendor positions as CRM-alignable. Built for eCommerce and hospitality media decisions—not generic pageview vanity charts. Limits: not a full multi-touch marketing mix model out of the box; validate against your CRM as the case studies do.

  • Real-time promo and campaign dashboards

    Live views of revenue, channels, campaigns, and products during Promo Days so media teams can reallocate spend the same day. Suited to peak-load retail calendars. Constraint: value depends on tagging microconversions and keeping UTM hygiene; not a substitute for warehouse-grade BI alone.

  • LENS private AI on full capture

    Optional LENS layer answers growth, risk, and wasted-spend questions in plain language against SealMetrics data (vendor states exclusive private AI on Enterprise tiers). Useful when analysts are scarce. Caveat: AI outputs are assistive—confirm high-stakes budget cuts against raw reports and offline finance data.

  • MCP and AI-assisted provisioning

    Hosted MCP endpoint and docs let teams spin up accounts, pixels, and reports from AI coding assistants instead of a pure UI-only onboarding path. Speeds evaluation for engineering-heavy stacks. Still SaaS-only—there is no self-hosted SEAL Metrics server to run in your VPC.

  • EU Dublin storage with exports

    Vendor documents processing and backups in Dublin, Ireland, with TLS 1.3, AES-256 at rest, and roughly 24-month analytics retention. API and BigQuery-style exports support dual-running with GA4. Hosting operator is described generically as an EU data center; Cloudflare sits on the transit path only.

Assurance & compliance: Insights vs SEAL Metrics
Assurance & complianceLogo: InsightsInsightsLogo: SEAL MetricsSEAL Metrics
Independent security / no-logs audit
Not found

Vendor describes no IP storage in DB/logs and RAM-only hashing; no public third-party audit PDF found.

Not found

Vendor mentions regular security audits and independent legal audits; no public third-party audit PDF found on site/docs.

ISO 27001
Not found

No public certificate on getinsights.io at research time.

Not found

Data location docs list ISO 27001 as planned, not certified.

SOC 2 / SOC 3
Not found

No public SOC report found.

Partial

Vendor docs list SOC 2 Type II as in progress — not a completed public report.

GDPR / EU data protection
Vendor claimed

Austrian entity; privacy policy and data-collection docs; cookie-free/no-stored-IP design for visitors. Firebase/Google processing still requires transfer/DPA diligence.

Vendor claimed

Spanish entity; cookieless architecture; EEA processing claims; DPA published. Legal conclusion remains for counsel.

US CLOUD Act exposure (indicative)
Partial

EU entity / no known US parent, but Google Firebase (US-group) used for Cloud Functions, Auth, and Hosting per vendor data page. Indicative medium exposure. Not legal advice.

Partial

EU entity / no known US parent; analytics at rest in Dublin. Cloudflare (US group) processes TLS transit at EU edge. Not legal advice.

Data processing agreement (B2B)
Not found

No standalone public DPA page found; request from contact@getinsights.io for B2B use.

Vendor claimed

Public DPA page; vendor states standard DPA with every plan, custom on Enterprise.

EU AI Act
Not applicable

Web analytics product, not an AI system product page.

Not applicable

Core product is measurement analytics; optional LENS private AI is a feature—confirm classification if heavily relied on for automated decisions.

Considerations & known limitations: Insights vs SEAL Metrics
Considerations & known limitationsLogo: InsightsInsightsLogo: SEAL MetricsSEAL Metrics
Google Firebase on critical path
High

Vendor documents Firebase Cloud Functions, Auth, and Hosting. Anonymous visitor design does not remove US-group cloud dependency for hosting/auth/processing—material for sovereignty-sensitive buyers.

Not listed
No public independent audit or certs
Medium

No ISO 27001, SOC 2, or third-party no-logs audit found on the public site. Rely on vendor claims plus your own review of the open client.

Not listed
Client open source only; no self-host
Medium

insights-js is MIT; dashboard/backend are closed SaaS. You cannot run the full product on your infrastructure.

Not listed
Small team / continuity
Medium

Product presented as built by two freelance developers under Unsourced Digital OG. Assess vendor longevity and support SLAs for business-critical analytics.

Not listed
Bounce/unique metrics need SPA routing
Low

Client docs: trackPages bounce and unique views expect a client-side router and do not use cookies/localStorage; multi-page full reloads can skew metrics.

Not listed
US-group edge subprocessor (Cloudflare)Not listed
Medium

Even with Dublin storage, Cloudflare sits on encrypted traffic. Procurement that bans any US-group vendor in the path will need a written exception or alternative edge posture.

ISO/SOC not fully certified yetNot listed
Medium

SOC 2 in progress and ISO planned per vendor docs. Enterprise security questionnaires may block until reports are available under NDA.

Consentless claim is architectural, not a warrantyNot listed
Medium

Vendor argues no personal data / no cookies so analytics need no banner. Other scripts on the same site and national guidance still matter—get DPO sign-off.

SaaS-only, proprietary pipelineNot listed
Low

No self-host path. Mitigate with API/BigQuery export and dual-running with GA4 during evaluation.

Hosting operator not namedNot listed
Low

Docs say EU data center in Dublin without naming the cloud or colo operator. Ask for the concrete provider in the TPSR pack.

Fit

Insights

Best fit when

  • Indie developers and small teams who want pageviews plus product/funnel events without analytics cookies
  • SPA and web-app builders using client-side routers who can call insights-js track/trackPages APIs
  • Teams that accept a free low-volume tier then event-volume paid plans (check current limits on getinsights.io)
  • Buyers who value an MIT-auditable client library even if the backend stays closed
  • EU sites prioritizing no-stored-visitor-IP design over full stack self-host control

Poor fit when

  • Orgs that require self-hosted or fully open-source analytics backend
  • Procurement needing published DPA, ISO 27001, or SOC 2 on the vendor site today
  • Policies that forbid Google Firebase / US-group cloud on any analytics path
  • Classic multi-page sites expecting accurate cookie-free bounce/unique metrics without SPA routing
  • Teams needing GA-class free segmentation, ads integrations, or data warehouse export

Consider instead when

  • When: You want simple hosted EU privacy page analytics with a strong Plausible-style product footprint

    Consider: Plausible Analytics

    Compare event depth: Insights markets custom events as a core differentiator vs simpler page-focused tools.

  • When: You want cookie-free analytics with an explicit privacy brand and different commercial packaging

    Consider: Simple Analytics

    Verify each vendor's hosting and subprocessor pages side by side.

  • When: You prefer a German peer privacy analytics product

    Consider: Pirsch Analytics

    Compare event features, regions, and legal docs for your DPA process.

  • When: You need full control of the stack or on-prem processing

    Consider: Self-hosted Matomo (or similar open analytics)

    Higher ops cost; no dependency on Insights SaaS or Firebase.

SEAL Metrics

Best fit when

  • European eCommerce, DTC, and hospitality brands measuring paid media ROAS against incomplete consent-gated analytics
  • Marketing ops and agencies that need a single channel revenue source of truth finance can challenge less often
  • Teams that want side-by-side GA4 calibration without migrating off Google Ads tooling immediately
  • DPOs and CISOs evaluating analytics that claim no cookies, no fingerprinting, and EEA-only storage of analytics data
  • Stacks that prefer SaaS plus API/BigQuery export over running Matomo themselves

Poor fit when

  • Organizations that require self-hosted or open-source analytics under their own admin control
  • Product teams needing session replay, heatmaps, or deep multi-touch product analytics (Heap/FullStory class)
  • Buyers that will not accept SaaS until ISO 27001 or SOC 2 Type II is fully certified and publicly evidenced
  • Hobby sites and blogs that only need lightweight open-source pageview analytics

Consider instead when

  • When: You need open-source or self-hosted cookieless analytics

    Consider: Plausible Analytics (self-host Community Edition) or Matomo

    SEAL Metrics is SaaS-only with no public source license.

  • When: You want simple privacy-first page analytics without eCommerce ROAS tooling

    Consider: Simple Analytics or Pirsch Analytics

    Lighter EU privacy analytics peers; less paid-media attribution depth.

  • When: You need managed Matomo with Swiss hosting or enterprise on-prem options

    Consider: Friendly Analytics

    Matomo ecosystem plugins and heatmaps vs SealMetrics proprietary ROAS focus.

  • When: You need Google Ads-native reporting and free-tier product analytics breadth

    Consider: Google Analytics 4

    Different sovereignty and consent trade-offs; often kept alongside SealMetrics.

Open questions for due diligence

Insights

  • Will Unsourced Digital OG sign a customer DPA and provide a current subprocessor list with regions?
  • Which Firebase/GCP regions process analytics and auth data today?
  • Are there any independent security assessments available under NDA?
  • What is the data retention schedule for events and account data after cancellation?
  • Is there an official path for enterprise SSO, invoice billing, or custom retention?

SEAL Metrics

  • What is the exact legal entity name (e.g. S.L.) and registered address for contracts?
  • Which Dublin operator hosts app/DB/backups (name on the infrastructure questionnaire)?
  • Current status and availability date of SOC 2 Type II report and ISO 27001 certification?
  • Does any account data, billing, or support channel leave the EEA (email, payments, CRM)?
  • For LENS AI: training data isolation guarantees and EU AI Act role for customer use cases?