Pirsch Analytics vs Publytics

Compare Pirsch Analytics and Publytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Pirsch Analytics

Germany· Web Analytics

Needs review

Shortlist Pirsch when you want German-operated, cookie-free web analytics with funnels/events, agency white-label, and a public DPA—hosted on Hetzner per vendor docs. Skip when you need free full-product self-host, session replay/heatmaps, or a stack with zero US-group subprocessors; consider Plausible or Simple Analytics instead.

Cookie-free hashingOpen-source core (AGPL)Hetzner DE hosting (claimed)Server-side trackingAgency white-labelPublic DPA/AVV

View listing Visit Website

Publytics

Italy· Web Analytics

Needs review

Shortlist when you need cookieless, unsampled publisher analytics with multi-site Network views and a public EU DPA from an Italian SaaS operator. Skip when you need self-hosting, product analytics at GA4/Adobe depth, or product-level ISO/SOC—consider Plausible (simpler privacy analytics / self-host options) or Matomo (self-host ownership) instead.

Cookieless trackingNo default samplingMulti-site NetworkEU-hosted (EuroVPS/Hetzner)Public B2B DPAPublisher-focused UX

View listing Visit Website

Highlighted rows differ between the two products.

Pirsch Analytics vs Publytics: Snapshot
Feature	Pirsch Analytics	Publytics
Country of origin	Germany	Italy
Category	Web Analytics	Web Analytics
Open source	Yes	No
Self-hosted	No	No
Headquarters	Germany	Italy
Legal entity	Emvi Software GmbH (Nickelstraße 1b, 33378 Rheda-Wiedenbrück; HRB 11575, AG Gütersloh)	Publytics S.r.l. / Publytics SRL, Via Val Leventina 3 INT 1, 20148 Milan (MI), Italy (VAT IT13079420967)
Governing law	Germany / EU GDPR	Italy / EU GDPR (processor under published DPA)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Low
Hosting / residency	Analytics: Hetzner Online GmbH, Germany (vendor claims Nuremberg/Falkenstein). Account/ops subprocessors named in privacy policy include AWS SES (Amazon Web Services EMEA), Google Workspace (Google Cloud EMEA), Stripe, Inc. (US), Intuition Machines, Inc. (US CAPTCHA), and Datev eG (DE).	Analytics infrastructure subprocessors in public DPA: EuroVPS (Euclid Services Ltd, Cyprus) and Hetzner Online GmbH (Germany). Data policy/DPA: EU storage (NL, DE, FI; DPA also IT); no transfer outside the EU for analytics processing. Account path: Stripe (payments), Brevo/Sendinblue (email).
Summary	Cookie-free web analytics from Emvi Software GmbH in Germany: hash-based visitor IDs, open-source core, Hetzner-hosted SaaS with funnels, events, and agency white-label.	Cookieless web analytics SaaS for digital publishers: unsampled real-time and historical metrics, multi-site Network views, GA import, and EU-hosted measurement from an Italian company.
Tags	web-analytics privacy gdpr analytics cookie-free open-source saas germany server-side-tracking	web-analytics privacy gdpr cookieless publishers real-time

At a glance: Pirsch Analytics vs Publytics
At a glance	Pirsch Analytics	Publytics
HQ	Rheda-Wiedenbrück, Germany	Milan, Italy
Legal entity	Emvi Software GmbH	Publytics S.r.l. (VAT IT13079420967)
Category	Web analytics (SaaS)	Not listed
Open source	Core library AGPL-3.0; full SaaS commercial	No (tracker uses MIT library code)
Self-host	Enterprise on-prem option; not free CE	Not listed
Commercial model	Usage-based (monthly page views); trial available	Pageview tiers; free trial
Primary hosting (claimed)	Hetzner Germany (Nuremberg/Falkenstein)	Not listed
Hosting	Not listed	EuroVPS + Hetzner (EU regions)
Deployment	Not listed	Managed SaaS (not self-hosted)

Key capabilities: Pirsch Analytics vs Publytics
Key capabilities	Pirsch Analytics	Publytics
Cookie-free hashing	Yes	Not listed
Open-source core (AGPL)	Yes	Not listed
Hetzner DE hosting (claimed)	Yes	Not listed
Server-side tracking	Yes	Not listed
Agency white-label	Yes	Not listed
Public DPA/AVV	Yes	Yes
Cookieless tracking	Not listed	Yes
No default sampling	Not listed	Yes
Multi-site Network	Not listed	Yes
EU-hosted (EuroVPS/Hetzner)	Not listed	Yes
Publisher-focused UX	Not listed	Yes

Pirsch Analytics

Cookie-free 24-hour visitor hashing
Recognizes visitors without cookies by hashing IP, User-Agent, date, and a per-site salt into a short ID. The vendor states IPs are not stored and cross-site linkage is blocked by the salt; sessions expire after 24 hours so long-term profiles are not built. Best for sites that want aggregate traffic metrics without a dedicated analytics cookie banner—confirm ePrivacy/TTDSG fit with counsel.
Server-side and script integrations
Instrument via JS snippet, CMS plugins (e.g. WordPress, Shopify, Webflow, Framer), or backend SDKs/API (Go library and other stacks). Server-side collection improves resilience when ad blockers strip client scripts. Tradeoff: backend integration costs more engineering time than a single script tag.
Funnels, events, goals, and tag segmentation
Goes past pageviews with custom events, conversion goals, multi-step funnels, session path exploration, outbound/download/404 tracking, and tags for A/B tests or channel segmentation. Webhooks and email reports push insights into existing tools. Some advanced metrics (e.g. custom event metrics, e-commerce revenue tracking) sit on higher commercial tiers—verify the live feature matrix.
Agency white-label and shared dashboards
Custom domains, themes, logos, and broader white-label options let agencies present analytics under their own brand. Public dashboards and unique access links support clients without full account sprawl; roles/teams scale collaboration. Strong fit for multi-client portfolios; less relevant for a single personal blog.
Migration imports, API, and unlimited retention (stated)
Import historical data from Google Analytics, Plausible, or Fathom; export CSV; use the REST API and SDKs for custom pipelines. Pricing docs state unlimited data retention across Standard, Plus, and Enterprise. Limits are usage-based on monthly page views (events and a share of session extensions count)—plan for growth, not perpetual free volume.

Publytics

Unsampled real-time and daily publisher metrics
Dashboard and Real-time views show active users (including last-minute and 30-minute windows), top pages, sources, social referrals, and day trends—with minute-level trend comparison documented for real-time. Vendor states no default data sampling, so reports reflect full counted client-side traffic rather than GA-style estimates on large properties.
Multi-site Network mode for content portfolios
Business and Enterprise plans can group properties into Networks (plan caps apply: e.g. up to three Networks on Business, unlimited on Enterprise). Network views mirror site dashboards with split-by-site filters, combined real-time tables, and PDF/CSV export across the portfolio—built for multi-brand publishers rather than single blogs.
Cookieless measurement with daily-rotating visitor hash
Tracking avoids cookies and permanent device IDs. Per the DPA, IP and User-Agent are used only to derive a daily salted hash for unique visitors, then discarded; metrics stay aggregated (URL, referrer, browser/OS, device, country). Designed so many sites can skip consent banners for analytics alone—confirm with counsel for your jurisdictions and any custom IDs you add.
Historical import, custom events/dimensions, and API
Import paths cover GA4 and other tools (Plausible/Fathom mentioned) with support-assisted finalization. Custom events, dimensions, and metrics scale by plan; REST API uses Sanctum Bearer tokens scoped to subscribed sites. Fits teams rebuilding GA-era reporting without rebuilding infrastructure.
AI referral traffic reporting
Dedicated documentation for traffic referred from AI systems (ChatGPT, Gemini, Claude, Perplexity, Copilot, Mistral, Google AI Overviews, Deepseek, and others). Useful for publishers optimizing for answer-engine and AI-overview discovery alongside classic SEO sources.

Assurance & compliance: Pirsch Analytics vs Publytics
Assurance & compliance	Pirsch Analytics	Publytics
Independent security / privacy audit	Not found Open-source core allows code review; no public third-party audit PDF located in this research pass.	Not found Searched official site; no public third-party security or no-logs audit PDF found. DPA describes hashing and non-retention of raw IP/UA.
ISO 27001	Not found No ISO 27001 certificate or registry entry found on official trust pages reviewed.	Not found No Publytics product certificate found. Host EuroVPS markets ISO certifications; that is infrastructure provider scope, not Publytics certification.
SOC 2 / SOC 3	Not found No public SOC 2/3 report referenced on official pages reviewed.	Not found No public SOC 2/3 report found on official Publytics pages.
GDPR / EU data protection	Vendor claimed German controller/processor Emvi Software GmbH; cookie-free hashing design; public DPA; German Hetzner hosting claims. Vendor also cites CCPA/PECR/Schrems II—treat as claims, confirm with counsel.	Vendor claimed Italian controller/processor entity; cookieless design; public Art. 28 DPA; EU hosting named. Not legal advice.
US CLOUD Act exposure (indicative)	Partial EU entity / no known US parent and Hetzner DE analytics hosting, but privacy policy names AWS SES, Google Workspace, Stripe, and Intuition Machines (US-group services) for email/CAPTCHA/payments. Not legal advice.	Partial EU entity, no known US parent; analytics hosts EuroVPS + Hetzner in EU with DPA no third-country transfer for service data. Account billing via Stripe (US company). Not a vendor 'safe' claim—EuropeanStack assessment only.
Data processing agreement (B2B)	Vendor claimed Downloadable English DPA and German AVV PDFs linked from docs.pirsch.io/privacy.	Vendor claimed Full public DPA at https://publytics.net/dpa with Annex B subprocessors and Annex C security/transfer instructions.
EU AI Act	Not applicable Classical web analytics product; not marketed as an AI system.	Not applicable Web analytics product; AI-referral reporting is measurement of referrers, not an AI system product.

Considerations & known limitations: Pirsch Analytics vs Publytics
Considerations & known limitations	Pirsch Analytics	Publytics
US-group account/ops subprocessors	Medium Even with German analytics hosting claims, customer email, CAPTCHA, and payments involve AWS, Google, Stripe, and Intuition Machines. Sovereign or “no US cloud” policies need explicit exception handling or Enterprise architecture review.	Not listed
No public ISO/SOC or third-party audit	Medium Procurement teams that require ISO 27001 or SOC 2 evidence will need vendor questionnaires or NDA materials; public pages did not show those certs.	Not listed
Open-source core ≠ free full self-host	Low Teams assuming AGPL means free on-prem of the entire product may be surprised; full on-prem is positioned as Enterprise.	Not listed
Fingerprinting still needs legal fit review	Low Cookie-free hashing is not automatically lawful everywhere without information/consent analysis. Banner removal should be validated for your jurisdiction and tag stack.	Not listed
Page-view usage limits	Low Plans are metered on monthly page views (with events and partial session extensions counting). Hitting the cap can restrict dashboard access until upgrade or cycle reset—model traffic before cutover.	Not listed
SaaS-only (no self-host)	Not listed	Medium All measurement depends on Publytics cloud availability and vendor roadmap. Teams with residency or air-gap requirements need Matomo/Plausible CE-style self-host alternatives.
No public independent security audit	Not listed	Medium Hashing and non-retention claims are first-party (DPA/docs). No public third-party audit was found—enterprise security reviews will need questionnaires, DPA audit rights, and possibly NDA materials.
Feature depth tied to pageview tiers	Not listed	Low Networks, API rate limits, custom dimensions/metrics, retention years, and time granularity differ by Lite/Business/Enterprise. Validate limits against portfolio size before migration.
US payment processor on account path	Not listed	Low Stripe processes payments (US company). Separate from DPA Annex B analytics hosts, but relevant if procurement treats all vendor SaaS touchpoints as in-scope for CLOUD Act diligence.
Customer-injected identifiers can re-identify	Not listed	Medium DPA warns controllers not to inject unique user IDs that re-identify visitors via the script. Misconfiguration can undermine the cookieless privacy model.

Fit

Pirsch Analytics

Best fit when

EU sites replacing Google Analytics that need pageviews, campaigns, events, and funnels without analytics cookies
Agencies needing multi-site dashboards, client access links, and white-label branding
Teams that can instrument server-side or proxy scripts for better ad-blocker resilience
Buyers who want a German GmbH, downloadable DPA, and Hetzner-Germany residency claims for analytics data
Orgs evaluating Enterprise SAML, raw data access, or on-prem/managed private deployment

Poor fit when

Teams that require a free, full-product self-hosted community edition (core library ≠ full SaaS)
Product or UX research needing session replay, heatmaps, or persistent cross-site user identity
Procurement policies that forbid any US-group subprocessor (email CAPTCHA/billing still touch AWS/Google/Stripe/Intuition Machines)
Heavy product-analytics / multi-product identity graphs (closer to Amplitude/Mixpanel class tools)

Consider instead when

When: You need a free full-stack self-hosted analytics product with AGPL community edition
Consider: Plausible Analytics (CE) or other open full products in your shortlist
Pirsch open-sources the tracking core; on-prem of the full product is Enterprise-scoped.
When: You want the simplest possible privacy-first metrics with a Dutch vendor
Consider: Simple Analytics
Fewer advanced funnel/white-label features; different packaging tradeoffs.
When: You need heatmaps or session replay more than classical web analytics
Consider: Hotjar, Microsoft Clarity, or EU UX-analytics peers
Expect heavier consent and data-minimization review.
When: You must stay inside Google’s advertising and BigQuery measurement ecosystem
Consider: Google Analytics / Google Tag Manager stack
Opposite privacy and transfer posture—only if legal review accepts it.

Publytics

Best fit when

Content publishers and media sites that want GA3-style reporting without cookies or default sampling
Multi-brand portfolios that need Network dashboards, split-by-site filters, and shared exports
Teams migrating historical series from GA4 (or Plausible/Fathom) into a privacy-oriented SaaS
EU-oriented controllers who want Italian legal entity, published DPA, and EU infrastructure subprocessors named in annexes
Editorial/SEO leads who need real-time active users, sources, and AI-referral reporting without operating self-hosted analytics

Poor fit when

Organizations that require self-hosted or open-source analytics only
Product/growth teams that need GA4/Adobe-class event modeling, experiment stacks, and ads ecosystem integrations
Buyers that need verified product ISO 27001/SOC 2 certificates before shortlist (none found for Publytics itself)
Very simple single-site blogs that only need minimal privacy metrics—lighter tools may be enough

Consider instead when

When: You want open-core privacy analytics with optional self-host
Consider: Plausible Analytics
Simpler surface; stronger self-host/open-core path than Publytics SaaS-only model
When: You must run analytics on your own infrastructure
Consider: Matomo (self-host) or Plausible Community Edition
Publytics is managed cloud only—no official on-prem product
When: You need deep product analytics and marketing stack integration
Consider: Google Analytics or Adobe Analytics
Trade privacy/EU-hosting priorities for ecosystem breadth

Open questions for due diligence

Pirsch Analytics

Can Enterprise on-prem exclude AWS SES / Google Workspace / Stripe / CAPTCHA US-group dependencies for the customer’s deployment?
Is any ISO 27001, SOC 2, or independent penetration-test summary available under NDA?
Exact data centers, backup locations, and encryption-key custody for multi-tenant SaaS—beyond marketing Hetzner claims?
Which feature flags on Standard vs Plus vs Enterprise apply to funnels, A/B tags, e-commerce metrics, and white-label depth at contract time?

Publytics

Will Publytics provide completed security questionnaire, pen-test summary, or ISO evidence under NDA for enterprise procurement?
Exact current pageview tier limits, Network caps, and retention for the sites you will migrate?
Is GA4 historical import complete for your property structure (events, custom dimensions) or only core traffic series?
How are subprocessors for account services (Stripe, Brevo) contractually covered relative to the analytics DPA annex?
Any planned US or non-EU hosting options that would change the current EU-only transfer instruction?