Compare Insights and Sitesights on capabilities, jurisdiction, assurance, and fit for European buyers.
Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo
Austria· Web Analytics
Needs review
Shortlist when you need cookie-free hosted analytics with first-class custom events for SPAs from an Austrian operator. Skip when you need self-host, public ISO/SOC packs, or infrastructure without Google Firebase—consider Plausible Analytics, Simple Analytics, or Pirsch Analytics instead (or self-hosted Matomo).
Germany· Web Analytics
Needs review
Shortlist Sitesights when you need German-operated cookieless web analytics with real-time dashboards, funnels, page flow, and a server-side API—especially agencies and SaaS teams that want Hetzner Germany hosting claims without running Matomo. Skip when you need public ISO/SOC audits, long-term visitor identity, session replay, or a fully published subprocessor pack; consider Plausible Analytics or self-hosted Matomo instead.
Highlighted rows differ between the two products.
| Feature | Insights | Sitesights |
|---|---|---|
| Country of origin | Austria | Germany |
| Category | Web Analytics | Web Analytics |
| Open source | Yes | No |
| Self-hosted | No | No |
| Headquarters | Austria | Germany |
| Legal entity | Unsourced Digital OG | Drude, Grossert GbR |
| US parent / control | No known US parent | No known US parent |
| CLOUD Act exposure (indicative) | Medium | Medium |
| Hosting / residency | Operator: Unsourced Digital OG (Austria). Vendor-documented infrastructure includes Google Firebase—Cloud Functions, Firebase Authentication (customer accounts), and Firebase Hosting—with temporary IP handling described for those Google services. Visitor analytics designed without cookies and without IP storage in DB/logs; still a US-group cloud path for processing/hosting/auth. | Product databases and app servers claimed in Germany on Hetzner. Marketing site uses Cloudflare (US) CDN. Payments via Paddle. Full product subprocessor/backup list not published on main site. |
| Summary | Austrian privacy-first hosted web analytics: page views and custom events without cookies or stored visitor IPs, with an MIT open-source JS client (backend uses Google Firebase). | German cookieless web analytics SaaS with real-time dashboards, events, funnels, and server-side APIs. Operated by Drude, Grossert GbR; product data claimed on Hetzner in Germany. |
| Tags |
| At a glance | Insights | Sitesights |
|---|---|---|
| HQ / law | Austria (Unsourced Digital OG; Austrian governing law) | Not listed |
| Product type | Hosted privacy web analytics + custom events | Not listed |
| Client license | MIT (insights-js); backend proprietary | Not listed |
| Self-host | No public self-host option | Not listed |
| Commercial model | Free low-volume tier; paid by monthly event/pageview volume | Free start; pageviews + events subscriptions (Paddle) |
| Known infra | Google Firebase (Functions, Auth, Hosting) per vendor docs | Not listed |
| HQ / entity | Not listed | Drude, Grossert GbR, Germany |
| Category | Not listed | Web analytics (SaaS) |
| Hosting (product) | Not listed | Hetzner, Germany (vendor docs) |
| Tracking model | Not listed | Cookieless; 48h rotating server hash |
| Open source | Not listed | No (libs/plugins public; core SaaS proprietary) |
| Key capabilities | Insights | Sitesights |
|---|---|---|
| Cookie-free tracking | Yes | Not listed |
| Custom events | Yes | Not listed |
| MIT client (insights-js) | Yes | Not listed |
| Austrian entity | Yes | Not listed |
| Hosted SaaS | Yes | Not listed |
| Firebase data path | Yes | Not listed |
| Cookieless tracking | Not listed | Yes |
| EU-operated (DE) | Not listed | Yes |
| Hetzner Germany (claimed) | Not listed | Yes |
| Server-side API | Not listed | Yes |
| Funnels + page flow | Not listed | Yes |
| Multi-project / agencies | Not listed | Yes |
Cookie-free page views and user flows
Tracks bounce rate, referrers, visits, and user-flow style page statistics without setting analytics cookies, so sites can avoid cookie banners driven solely by analytics. Script init plus trackPages() is the usual path for SPAs.
Custom and cancelable event tracking
insights-js supports named events with string parameters, unique-per-session flags, parameter-only updates, and remove/cancel for long-lived events (e.g. subscribe then unsubscribe). Built for product and funnel metrics, not pageviews only.
MIT open-source TypeScript client
The browser/npm client (insights-js) is MIT-licensed on GitHub with TypeScript types and helpers for locale, screen type, path, referrer, and duration buckets. Supports React, Angular, Vue, UMD script, and multi-project App instances. Backend remains proprietary SaaS.
Visitor anonymization pipeline (vendor-described)
Vendor docs: IPs hashed only in RAM for fraud checks (not stored in DB or logs); user agents reduced to browser/OS; optional screen sizes rounded to 50px; Do Not Track honoured. Confirm fit with your DPO—anonymous design is not a legal certification.
Developer-oriented integration
One-minute script install or npm package; docs cover multi-project tracking, ignoreErrors/disabled flags for production environments, and hash/search options on page paths. Lightweight client positioned against heavier GA-style tags.
Cookieless 48-hour rotating session hash
Standard tracking does not set cookies. Sitesights generates a server-side salted hash from IP, User-Agent, and site id with a salt that rotates every 48 hours, so long-term cross-day visitor re-identification is intentionally broken. Useful when teams want essential traffic metrics without a cookie-consent banner solely for analytics—confirm legal basis with counsel for your jurisdiction and data fields (including geo).
Sub-1 KB client script plus WordPress and Shopify plugins
Drop-in client snippet marketed as under 1 KB, with official WordPress and Shopify integration paths for non-engineers. Fits marketing sites and stores that need quick instrumentation without a heavy tag manager stack.
Server-side REST API with C# and Node libraries
Send page views and events from your backend with API-key auth so ad blockers cannot strip the beacon. MIT-licensed C# and Node.js libraries on GitHub speed integration; keep API keys off the client. Preferred path for accuracy-critical SaaS and app backends.
Real-time overview with campaign and device filters
Live dashboard for visitors, pageviews, and sessions with advanced filters, UTM/campaign views, geo, browser, OS, screen size, and daytime patterns. Aimed at operators who want essential marketing analytics in one place rather than a full product-analytics suite.
Custom funnels and page-flow journey maps
Build multi-step funnels and visual page-flow maps to see entry paths, routes, and exits. Helps conversion and UX work without session replay. Depth is journey-oriented, not identity-graph product analytics.
Multi-project workspaces with roles for agencies
Group sites and apps into projects, assign roles/permissions, and invite clients or teammates. Marketing materials reference high ceilings for team seats and properties on paid plans—verify current limits on the official pricing page.
| Assurance & compliance | Insights | Sitesights |
|---|---|---|
| Independent security / no-logs audit | Not found Vendor describes no IP storage in DB/logs and RAM-only hashing; no public third-party audit PDF found. | Not found No public third-party security or no-logs audit PDF located on the official site or docs. |
| ISO 27001 | Not found No public certificate on getinsights.io at research time. | Not found No public ISO 27001 certificate found on official pages. |
| SOC 2 / SOC 3 | Not found No public SOC report found. | Not found No public SOC 2/3 report found on official pages. |
| GDPR / EU data protection | Vendor claimed Austrian entity; privacy policy and data-collection docs; cookie-free/no-stored-IP design for visitors. Firebase/Google processing still requires transfer/DPA diligence. | Vendor claimed German controller (Drude, Grossert GbR); cookieless hashing and EU hosting claims in docs/privacy. Confirm DPA and legal basis for IP/geo with counsel. |
| US CLOUD Act exposure (indicative) | Partial EU entity / no known US parent, but Google Firebase (US-group) used for Cloud Functions, Auth, and Hosting per vendor data page. Indicative medium exposure. Not legal advice. | Partial EU entity / no known US parent; product hosting claimed on Hetzner Germany. Marketing site lists Cloudflare (US); payments via Paddle; full SaaS subprocessor list not public. Indicative only—not legal advice. |
| Data processing agreement (B2B) | Not found No standalone public DPA page found; request from contact@getinsights.io for B2B use. | Not found No standalone public DPA download found during research; request under contract for B2B processing. |
| EU AI Act | Not applicable Web analytics product, not an AI system product page. | Not applicable Web analytics product; not marketed as an AI system under the EU AI Act. |
| Considerations & known limitations | Insights | Sitesights |
|---|---|---|
| Google Firebase on critical path | High Vendor documents Firebase Cloud Functions, Auth, and Hosting. Anonymous visitor design does not remove US-group cloud dependency for hosting/auth/processing—material for sovereignty-sensitive buyers. | Not listed |
| No public independent audit or certs | Medium No ISO 27001, SOC 2, or third-party no-logs audit found on the public site. Rely on vendor claims plus your own review of the open client. | Medium ISO 27001, SOC 2, and third-party security audits were not found on public pages. Enterprises may need to commission questionnaires or wait for vendor artifacts under NDA. |
| Client open source only; no self-host | Medium insights-js is MIT; dashboard/backend are closed SaaS. You cannot run the full product on your infrastructure. | Not listed |
| Small team / continuity | Medium Product presented as built by two freelance developers under Unsourced Digital OG. Assess vendor longevity and support SLAs for business-critical analytics. | Not listed |
| Bounce/unique metrics need SPA routing | Low Client docs: trackPages bounce and unique views expect a client-side router and do not use cookies/localStorage; multi-page full reloads can skew metrics. | Not listed |
| Incomplete public subprocessor list | Not listed | Medium Hetzner (product) and Cloudflare (marketing site) are documented; backups, email, support, and monitoring vendors for the SaaS are not fully listed. Ask for a current subprocessor annex. |
| US-group CDN on marketing site | Not listed | Low Privacy policy lists Cloudflare Inc. (US) for the public website CDN. Separate from claimed Hetzner product data path, but relevant to overall vendor surface area. |
| 48-hour hash limits long-term visitor analytics | Not listed | Low By design, the rotating salt prevents durable cross-day visitor recognition. Teams needing retention cohorts or multi-week funnels by person must model events differently or choose product-analytics tools. |
| On-premise availability is marketing-only detail | Not listed | Low About page claims on-prem hosting; docs do not provide a self-serve install guide. Treat as sales-assisted until scope is confirmed in writing. |
When: You want simple hosted EU privacy page analytics with a strong Plausible-style product footprint
Consider: Plausible Analytics
Compare event depth: Insights markets custom events as a core differentiator vs simpler page-focused tools.
When: You want cookie-free analytics with an explicit privacy brand and different commercial packaging
Consider: Simple Analytics
Verify each vendor's hosting and subprocessor pages side by side.
When: You prefer a German peer privacy analytics product
Consider: Pirsch Analytics
Compare event features, regions, and legal docs for your DPA process.
When: You need full control of the stack or on-prem processing
Consider: Self-hosted Matomo (or similar open analytics)
Higher ops cost; no dependency on Insights SaaS or Firebase.
When: You want a minimal EU cookieless SaaS or a well-known self-host option
Consider: Plausible Analytics
Simpler metric set; strong self-host story. Sitesights markets deeper funnels/page-flow and multi-project agency features.
When: You need full self-host control, on-prem by default, or mature open-source governance
Consider: Matomo (self-hosted)
Heavier stack, deeper feature surface, and you operate the data plane yourself.
When: You need identity-rich product analytics, retention cohorts, or event warehouses
Consider: Mixpanel or similar product-analytics platforms
Different category—Sitesights is website/app growth analytics, not a full product analytics suite.
When: You need heatmaps, recordings, or UX feedback loops
Consider: Hotjar, Microsoft Clarity, or EU UX-analytics tools
Sitesights focuses on traffic, events, funnels, and flows—not session replay.