Matomo by Stackhero vs Wide Angle Analytics

Compare Matomo by Stackhero and Wide Angle Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Matomo by Stackhero

Matomo by Stackhero

France· Web Analytics

Needs review

Shortlist when you want full Matomo on a dedicated French-operated bare-metal instance with one-click updates and hourly billing—especially if you prefer unlimited site/seat product framing over hit-metered multi-tenant SaaS. Skip when you need EU-only with no US region option, root/SSH access, or a minimal cookieless counter—consider self-hosted Matomo, Friendly Analytics, or Plausible instead.

Managed MatomoDedicated instanceFrench PaaS operatorISO 27001 (claimed)Automatic DPAEU or US region
Logo: Wide Angle Analytics

Wide Angle Analytics

Germany· Web Analytics

Needs review

Do not shortlist Wide Angle for new multi-year analytics: the vendor is winding the product down by end of August 2026. Existing customers should migrate using the promised data snapshot. For new EU privacy-analytics shortlists prefer Plausible, Pirsch, Simple Analytics, or Piwik PRO; keep Matomo-class stacks when self-host control is mandatory.

Cookieless by defaultGerman GmbH (Berlin)OVHcloud FR/DE hostingSaaS only (no self-host)EOL Aug 2026
Matomo by Stackhero vs Wide Angle Analytics: Snapshot
FeatureLogo: Matomo by StackheroMatomo by StackheroLogo: Wide Angle AnalyticsWide Angle Analytics
Country of originFranceGermany
CategoryWeb AnalyticsWeb Analytics
Open sourceYesNo
Self-hostedNoNo
HeadquartersFranceGermany
Legal entityStackhero (RCS Paris 512 366 378, VAT FR92512366378), 1 rue de Stockholm, 75008 Paris, FranceInput Objects GmbH, Scharnhorststraße 24, 10115 Berlin, Germany
Governing lawFrench law; courts at registered head office (per Terms of service)Not listed
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyPrimary compute: Stackhero bare-metal cloud, customer-chosen region EU (France) or USA. Backups: stored in the EU per Matomo FAQ; encrypted atomic images retained up to ~3 months. Not built on AWS/GCP/Azure as the stated compute substrate. Payment processor (unnamed) handles card data; privacy policy mentions third-party messaging/stats tools without a full named subprocessor table.Visitor analytics: OVHcloud limited to FR/DE (vendor). Account path: Paddle (payments), Brevo email/automation, Infomaniak; older vendor post notes Brevo/Sendinblue encrypted DR involving AWS/GCP. No known US corporate parent.
Summary

French PaaS-managed Matomo on dedicated bare-metal instances: unlimited sites until capacity, one-click updates, EU or US region choice, with hourly billing and an automatic DPA.

German cookieless-by-default web analytics SaaS (Input Objects GmbH, OVHcloud FR/DE). Product announced for discontinuation end of August 2026—prefer living EU peers for new deployments.

Tags
At a glance: Matomo by Stackhero vs Wide Angle Analytics
At a glanceLogo: Matomo by StackheroMatomo by StackheroLogo: Wide Angle AnalyticsWide Angle Analytics
HQParis, France (1 rue de Stockholm, 75008)Berlin, Germany (Input Objects GmbH)
Legal entityStackhero — RCS Paris 512 366 378Not listed
StackOpen-source Matomo on dedicated Stackhero VMNot listed
Hosting regionsEU (France) or USA; backups in EU (vendor FAQ)Not listed
Commercial modelHourly instance billing; free trial; no standard commitmentEvent/site SaaS tiers + 14-day trial (see official pricing)
CertificationsISO 27001:2022 claimed (BAB #254338)Not listed
Product launchNot listedNovember 2021
Hosting (visitor path)Not listedOVHcloud France & Germany (vendor-stated)
Open sourceNot listedNo
Self-hostNot listedNo
StatusNot listedDiscontinuing end of August 2026
Key capabilities: Matomo by Stackhero vs Wide Angle Analytics
Key capabilitiesLogo: Matomo by StackheroMatomo by StackheroLogo: Wide Angle AnalyticsWide Angle Analytics
Managed MatomoYesNot listed
Dedicated instanceYesNot listed
French PaaS operatorYesNot listed
ISO 27001 (claimed)YesNot listed
Automatic DPAYesNot listed
EU or US regionYesNot listed
Cookieless by defaultNot listedYes
German GmbH (Berlin)Not listedYes
OVHcloud FR/DE hostingNot listedYes
SaaS only (no self-host)Not listedYes
EOL Aug 2026Not listedYes

Matomo by Stackhero

  • Dedicated bare-metal Matomo instance

    Each customer gets an isolated VM on Stackhero’s own bare-metal cloud (Stackhero DC OS), not shared multi-tenant Matomo. Local disks and included Redis are positioned for high IOPS and heavy traffic—fit teams that outgrow noisy-neighbor shared analytics clouds.

  • Unlimited sites, members, segments, and goals until capacity

    Stackhero does not meter websites, team seats, segments, or goals as product SKUs; you scale by instance size (published up to 16 vCPUs / 64 GB RAM). Retention is limited by disk, not a fixed product TTL—plan storage for long history.

  • One-click Matomo updates and managed ops (no SSH)

    Stackhero delivers Matomo updates for dashboard application; firewall IP rules are customer-configurable. SSH is intentionally unavailable on the managed service—good for reduced surface area, poor fit if you need custom OS packages.

  • Custom domain, GeoIP2, and dedicated notification email

    Point matomo.yourdomain.com with TLS 1.3/ECDSA, ship visitor location via bundled GeoIP2, and send unlimited Matomo reports/alerts through a per-instance email path—reduces glue work after first deploy.

  • Atomic encrypted daily backups (EU vault)

    24-hour atomic image backups (plus event-driven backups on upgrades) are validated, then encrypted (OpenPGP ECDH/Curve25519) and retained up to three months. Vendor FAQ states backups are stored in the EU even when regions differ—confirm dual-region implications for US instances.

  • Hourly billing with EU or US region choice

    Spin services up/down with hourly charging and a single monthly invoice; free trial without payment method. Choose European (France) or USA placement at create time—region is a first-class control for residency, not a hidden default.

Wide Angle Analytics

  • Cookieless request-based sessions with daily rotating salt

    Default mode hashes site + IP + User-Agent with a non-persisted daily salt (SHA-256). Same-day uniques without cookies or long-lived IDs; past sessions cannot be re-linked after salt rotation. Optional 24h cookie or canvas fingerprinting change the consent analysis.

  • Optional tracking modes for SPA and consent-gated detail

    Enable HTTP(S)-only 24h cookies, client fingerprinting, or service-issued IDs for SPA reliability. Fingerprinting is off by default and may require consent—controllers must re-assess before enabling.

  • Marketer dashboards, custom events, and multi-site teams

    Real-time charts for sources, pages, devices, UTM campaigns, goals, custom actions, and e-commerce revenue attribution. Higher tiers add multi-user sharing, permissions, and many sites without SQL.

  • CMS one-click installs and lightweight script embed

    Plugins/integrations for WordPress, Squarespace, Wix, Ghost, Webflow, and common JS stacks; custom sites add a script tag. Built for marketers rather than BI engineers.

  • OVHcloud EU regions (FR/DE) for visitor analytics path

    Vendor states product hosting is limited to OVHcloud France and Germany with no end-user analytics transfer outside EU/EEA and no sale of visitor data. Account billing/email use separate subprocessors (see Trust).

Assurance & compliance: Matomo by Stackhero vs Wide Angle Analytics
Assurance & complianceLogo: Matomo by StackheroMatomo by StackheroLogo: Wide Angle AnalyticsWide Angle Analytics
Independent security / no-logs audit
Not found

ISO 27001 and bug-bounty openness claimed; no public independent no-logs audit report specific to analytics found.

Not found

No public independent pen-test or no-logs audit PDF found on site materials reviewed.

ISO 27001
Vendor claimed

Vendor publishes ISO/IEC 27001:2022 certificate #254338 from the British Assessment Bureau (PDF). Not re-verified against the issuer’s public register in this draft.

Not found

No public ISO 27001 certificate page found.

SOC 2 / SOC 3
Not found

No SOC 2/3 claim found on certifications/privacy/GDPR pages reviewed.

Not found

No public SOC 2/3 report found.

GDPR / EU data protection
Vendor claimed

French entity; public GDPR & DPA page; customer controller / Stackhero processor model; EU region option for service data.

Vendor claimed

German controller/processor entity; cookieless-default design; DPO named (DPO CONSULTING). Not legal advice.

US CLOUD Act exposure (indicative)
Partial

French entity, no known US parent, non-hyperscaler bare-metal hosting claimed. Medium/partial because USA is a first-class hosting region; EU-only only when the customer creates the service in Europe. Backups stated as EU-stored. Not legal advice.

Partial

EU GmbH, no known US parent, OVH FR/DE visitor hosting; offset by Paddle and Brevo-related infrastructure (incl. encrypted AWS/GCP DR per vendor blog). Assessment row—not vendor marketing.

Data processing agreement (B2B)
Vendor claimed

DPA applies automatically with Terms of service; PDF downloadable from the GDPR & DPA page.

Vendor claimed

Vendor blog/compliance materials state a signed DPA is offered; confirm current template with vendor.

EU AI Act
Not applicable

Web analytics hosting; not positioned as an AI system product.

Not applicable

Web analytics product, not an AI system under typical AI Act product framing.

Considerations & known limitations: Matomo by Stackhero vs Wide Angle Analytics
Considerations & known limitationsLogo: Matomo by StackheroMatomo by StackheroLogo: Wide Angle AnalyticsWide Angle Analytics
Optional US hosting region
Medium

Platform offers USA placement alongside France/EU. Mis-selected region or unclear contract language can put visitor analytics outside the EU. Procurements that require EU-only must pin region at create time and in the order form.

Not listed
EU backups when primary is US
Medium

FAQ states backups are stored in the EU. If an instance runs in the USA, confirm whether visitor data is dual-homed (US primary + EU backup) and how that affects DPIA and transfer tools.

Not listed
No SSH / managed-only host
Low

Cannot install arbitrary system software or agents; support hours stated as CET office hours for basic platform support—not full Matomo application consulting.

Not listed
Limited named subprocessor list
Medium

Privacy policy mentions third-party tools and a payment processor without a detailed public subprocessor register. Request the annex in diligence if procurement requires named processors.

Not listed
ISO certificate vendor-published
Low

ISO 27001:2022 is claimed with a public PDF and BAB certificate number; validate scope, sites, and validity dates with the certification body before treating it as verified.

Not listed
Matomo privacy configuration is yours
Low

Hosting in the EU does not auto-configure consent, IP anonymization, or cookieless modes. Controllers remain responsible for Matomo GDPR tooling and site policy.

Not listed
Product end-of-life (August 2026)Not listed
High

Vendor announced discontinuation; service runs until end of August 2026 with pro-rata refunds and a vendor-prepared snapshot—not a self-service export. New deployments risk forced migration within weeks.

No self-host continuity pathNot listed
High

SaaS-only design means the product cannot be retained on your infrastructure after shutdown.

Account subprocessors beyond OVHNot listed
Medium

Paddle, Brevo, Infomaniak (and historical Brevo DR via US-group clouds) affect customer-account and support data paths even if visitor analytics stay on OVH EU.

Optional fingerprinting/cookiesNot listed
Medium

Non-default modes can reintroduce consent obligations; misconfiguration is a controller risk.

No public ISO/SOC/independent auditNot listed
Medium

Assurance rests on design docs, DPA, and vendor claims unless private reports are provided under NDA.

Fit

Matomo by Stackhero

Best fit when

  • Teams that want Matomo’s full analytics/admin surface without running OS or Matomo upgrades themselves
  • Buyers who prefer a dedicated VM and capacity-based limits over multi-tenant hit metering
  • Orgs consolidating Matomo with other Stackhero-managed open-source services under one French operator
  • Projects that need hourly elasticity and the ability to stop billing with one click
  • Controllers who will configure Matomo privacy features themselves and want a signed/automatic DPA plus ISO 27001 claims

Poor fit when

  • Requirements that forbid any US hosting option or dual-region backup stories—platform publicly offers USA regions
  • Teams that need SSH, custom kernels, or non-Matomo system agents on the host
  • Buyers seeking only a lightweight cookieless pageview product (Plausible-class tools are simpler)
  • Organizations that must self-host inside their own cloud account with no third-party PaaS operator
  • Use cases needing a named public subprocessor register beyond Stackhero’s high-level privacy/GDPR pages

Consider instead when

  • When: You want Swiss Matomo-as-a-Service with cookieless defaults and CH product hosts

    Consider: Friendly Analytics

    Different operator, residency story, and privacy defaults; still Matomo-based.

  • When: You need enterprise analytics packaging beyond plain managed Matomo

    Consider: Piwik PRO

    Compare modules, contracts, and hosting regions independently.

  • When: You only need a minimal open-source-friendly counter with simple SaaS UX

    Consider: Plausible Analytics

    Far less Matomo depth; different product surface.

  • When: You require full root control and in-house residency guarantees

    Consider: Self-hosted Matomo on your own EU IaaS

    Maximum control; you own updates, backups, and hardening.

Wide Angle Analytics

Best fit when

  • Existing Wide Angle customers completing migration before the announced August 2026 shutdown
  • Historical evaluation of cookieless, marketer-oriented EU SaaS analytics design (daily-salted sessions, OVH FR/DE)
  • Teams that needed multi-site CMS installs and shared reports without running Matomo themselves (while service remained live)
  • Controllers comparing default cookieless vs optional fingerprint/cookie modes on a single product

Poor fit when

  • Any new production deployment expected to outlive August 2026
  • Buyers requiring open-source self-host continuity (use Plausible CE, Matomo, or similar)
  • Product analytics, session replay, heatmaps, or ad-tech attribution platforms
  • Orgs that need public ISO 27001 / SOC 2 certificates without requesting private packs
  • Free forever hosted analytics

Consider instead when

  • When: You need a living cookieless EU SaaS analytics product

    Consider: Plausible Analytics, Pirsch Analytics, or Simple Analytics

    All remain active EU-oriented peers in this directory category.

  • When: You need self-host or deep plugin/on-prem control

    Consider: Matomo (self-host or hosted peers) or Piwik PRO

    Wide Angle never offered self-host and is shutting down.

  • When: You accept US ad-stack analytics for free depth

    Consider: Google Analytics (GA4)

    Different jurisdiction, cookie/consent model, and product surface—not a like-for-like privacy swap.

Open questions for due diligence

Matomo by Stackhero

  • Will the order form and DPA annex permanently pin the Matomo instance to the EU (France) region with no US failover?
  • For US-region instances, what exact data is copied to EU backup vaults and under which transfer mechanism?
  • Who is the unnamed parent company referenced on the About page, and is there any US ownership or PE?
  • Can ISO 27001 certificate 254338 be validated on the British Assessment Bureau (or successor) public register for current scope/dates?
  • Which payment, support, and website analytics providers process Stackhero account data (named subprocessor list)?

Wide Angle Analytics

  • Exact cutover date/time and timezone for service stop after August 2026?
  • When and in what open format is each tenant's data snapshot delivered?
  • Current signed subprocessor list and SCCs under the active DPA (vs 2022 blog / iubenda summary)?
  • Any residual access window or deletion certificate after EOL?
  • Are private security assessments available under NDA before remaining term ends?