Pirsch Analytics vs SEAL Metrics

Compare Pirsch Analytics and SEAL Metrics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Google Analytics

Logo: Pirsch Analytics

Pirsch Analytics

Germany· Web Analytics

Needs review

Shortlist Pirsch when you want German-operated, cookie-free web analytics with funnels/events, agency white-label, and a public DPA—hosted on Hetzner per vendor docs. Skip when you need free full-product self-host, session replay/heatmaps, or a stack with zero US-group subprocessors; consider Plausible or Simple Analytics instead.

Cookie-free hashingOpen-source core (AGPL)Hetzner DE hosting (claimed)Server-side trackingAgency white-labelPublic DPA/AVV
Logo: SEAL Metrics

SEAL Metrics

Spain· Web Analytics

Needs review

Shortlist when European eCommerce or hospitality teams need cookieless full-traffic capture and last-click ROAS they can align with finance—without GA4 Consent Mode as the measurement backbone. Skip when you need self-host or open source, session replay and product analytics depth, or a certified ISO/SOC package today—consider Plausible, Simple Analytics, Pirsch, or Matomo-based hosts instead.

Cookieless first-party pixelEU-hosted (Dublin)Revenue / ROAS focusReal-time dashboardsDPA includedSaaS only
Pirsch Analytics vs SEAL Metrics: Snapshot
FeatureLogo: Pirsch AnalyticsPirsch AnalyticsLogo: SEAL MetricsSEAL Metrics
Country of originGermanySpain
CategoryWeb AnalyticsWeb Analytics
Open sourceYesNo
Self-hostedNoNo
HeadquartersGermanySpain
Legal entityEmvi Software GmbH (Nickelstraße 1b, 33378 Rheda-Wiedenbrück; HRB 11575, AG Gütersloh)SealMetrics (Spain; exact registered company name not found on public imprint)
Governing lawGermany / EU GDPRSpain (Terms of Service; courts of Barcelona)
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyAnalytics: Hetzner Online GmbH, Germany (vendor claims Nuremberg/Falkenstein). Account/ops subprocessors named in privacy policy include AWS SES (Amazon Web Services EMEA), Google Workspace (Google Cloud EMEA), Stripe, Inc. (US), Intuition Machines, Inc. (US CAPTCHA), and Datev eG (DE).Customer analytics app, DB, and backups: Dublin, Ireland (EU data center, provider not named publicly). Subprocessor: Cloudflare for CDN/DDoS on encrypted transit at EU edge locations; vendor states no analytics data at rest on Cloudflare and no US cloud storage of customer analytics.
Summary

Cookie-free web analytics from Emvi Software GmbH in Germany: hash-based visitor IDs, open-source core, Hetzner-hosted SaaS with funnels, events, and agency white-label.

Spanish cookieless web analytics for European eCommerce: first-party capture, Dublin EU storage, last-click revenue and ROAS without consent-dependent tags.

Tags
At a glance: Pirsch Analytics vs SEAL Metrics
At a glanceLogo: Pirsch AnalyticsPirsch AnalyticsLogo: SEAL MetricsSEAL Metrics
HQRheda-Wiedenbrück, GermanySpain (Spanish law; Barcelona courts per Terms)
Legal entityEmvi Software GmbHNot listed
CategoryWeb analytics (SaaS)Not listed
Open sourceCore library AGPL-3.0; full SaaS commercialNo
Self-hostEnterprise on-prem option; not free CENo
Commercial modelUsage-based (monthly page views); trial availableNot listed
Primary hosting (claimed)Hetzner Germany (Nuremberg/Falkenstein)Not listed
FoundedNot listed2020 (vendor how-it-works page)
HostingNot listedDublin, Ireland — EU data center; Cloudflare edge transit
ModelNot listedSaaS; event-volume plans; free agentic tier + trial
Key capabilities: Pirsch Analytics vs SEAL Metrics
Key capabilitiesLogo: Pirsch AnalyticsPirsch AnalyticsLogo: SEAL MetricsSEAL Metrics
Cookie-free hashingYesNot listed
Open-source core (AGPL)YesNot listed
Hetzner DE hosting (claimed)YesNot listed
Server-side trackingYesNot listed
Agency white-labelYesNot listed
Public DPA/AVVYesYes
Cookieless first-party pixelNot listedYes
EU-hosted (Dublin)Not listedYes
Revenue / ROAS focusNot listedYes
Real-time dashboardsNot listedYes
SaaS onlyNot listedYes

Pirsch Analytics

  • Cookie-free 24-hour visitor hashing

    Recognizes visitors without cookies by hashing IP, User-Agent, date, and a per-site salt into a short ID. The vendor states IPs are not stored and cross-site linkage is blocked by the salt; sessions expire after 24 hours so long-term profiles are not built. Best for sites that want aggregate traffic metrics without a dedicated analytics cookie banner—confirm ePrivacy/TTDSG fit with counsel.

  • Server-side and script integrations

    Instrument via JS snippet, CMS plugins (e.g. WordPress, Shopify, Webflow, Framer), or backend SDKs/API (Go library and other stacks). Server-side collection improves resilience when ad blockers strip client scripts. Tradeoff: backend integration costs more engineering time than a single script tag.

  • Funnels, events, goals, and tag segmentation

    Goes past pageviews with custom events, conversion goals, multi-step funnels, session path exploration, outbound/download/404 tracking, and tags for A/B tests or channel segmentation. Webhooks and email reports push insights into existing tools. Some advanced metrics (e.g. custom event metrics, e-commerce revenue tracking) sit on higher commercial tiers—verify the live feature matrix.

  • Agency white-label and shared dashboards

    Custom domains, themes, logos, and broader white-label options let agencies present analytics under their own brand. Public dashboards and unique access links support clients without full account sprawl; roles/teams scale collaboration. Strong fit for multi-client portfolios; less relevant for a single personal blog.

  • Migration imports, API, and unlimited retention (stated)

    Import historical data from Google Analytics, Plausible, or Fathom; export CSV; use the REST API and SDKs for custom pipelines. Pricing docs state unlimited data retention across Standard, Plus, and Enterprise. Limits are usage-based on monthly page views (events and a share of session extensions count)—plan for growth, not perpetual free volume.

SEAL Metrics

  • 846-byte first-party cookieless pixel

    Install a tiny first-party script on your domain that logs pageviews without cookies, localStorage, or fingerprinting. Designed so ad blockers that target third-party analytics domains hit less often. Benefit: fuller traffic capture for teams stuck with consent-gated tags; trade-off: aggregate and channel metrics rather than person-level journey stitching.

  • Last-click revenue and ROAS attribution

    Attributes conversions and revenue to channels, campaigns, and landing pages with last-click models the vendor positions as CRM-alignable. Built for eCommerce and hospitality media decisions—not generic pageview vanity charts. Limits: not a full multi-touch marketing mix model out of the box; validate against your CRM as the case studies do.

  • Real-time promo and campaign dashboards

    Live views of revenue, channels, campaigns, and products during Promo Days so media teams can reallocate spend the same day. Suited to peak-load retail calendars. Constraint: value depends on tagging microconversions and keeping UTM hygiene; not a substitute for warehouse-grade BI alone.

  • LENS private AI on full capture

    Optional LENS layer answers growth, risk, and wasted-spend questions in plain language against SealMetrics data (vendor states exclusive private AI on Enterprise tiers). Useful when analysts are scarce. Caveat: AI outputs are assistive—confirm high-stakes budget cuts against raw reports and offline finance data.

  • MCP and AI-assisted provisioning

    Hosted MCP endpoint and docs let teams spin up accounts, pixels, and reports from AI coding assistants instead of a pure UI-only onboarding path. Speeds evaluation for engineering-heavy stacks. Still SaaS-only—there is no self-hosted SEAL Metrics server to run in your VPC.

  • EU Dublin storage with exports

    Vendor documents processing and backups in Dublin, Ireland, with TLS 1.3, AES-256 at rest, and roughly 24-month analytics retention. API and BigQuery-style exports support dual-running with GA4. Hosting operator is described generically as an EU data center; Cloudflare sits on the transit path only.

Assurance & compliance: Pirsch Analytics vs SEAL Metrics
Assurance & complianceLogo: Pirsch AnalyticsPirsch AnalyticsLogo: SEAL MetricsSEAL Metrics
Independent security / privacy audit
Not found

Open-source core allows code review; no public third-party audit PDF located in this research pass.

Not found

Vendor mentions regular security audits and independent legal audits; no public third-party audit PDF found on site/docs.

ISO 27001
Not found

No ISO 27001 certificate or registry entry found on official trust pages reviewed.

Not found

Data location docs list ISO 27001 as planned, not certified.

SOC 2 / SOC 3
Not found

No public SOC 2/3 report referenced on official pages reviewed.

Partial

Vendor docs list SOC 2 Type II as in progress — not a completed public report.

GDPR / EU data protection
Vendor claimed

German controller/processor Emvi Software GmbH; cookie-free hashing design; public DPA; German Hetzner hosting claims. Vendor also cites CCPA/PECR/Schrems II—treat as claims, confirm with counsel.

Vendor claimed

Spanish entity; cookieless architecture; EEA processing claims; DPA published. Legal conclusion remains for counsel.

US CLOUD Act exposure (indicative)
Partial

EU entity / no known US parent and Hetzner DE analytics hosting, but privacy policy names AWS SES, Google Workspace, Stripe, and Intuition Machines (US-group services) for email/CAPTCHA/payments. Not legal advice.

Partial

EU entity / no known US parent; analytics at rest in Dublin. Cloudflare (US group) processes TLS transit at EU edge. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Downloadable English DPA and German AVV PDFs linked from docs.pirsch.io/privacy.

Vendor claimed

Public DPA page; vendor states standard DPA with every plan, custom on Enterprise.

EU AI Act
Not applicable

Classical web analytics product; not marketed as an AI system.

Not applicable

Core product is measurement analytics; optional LENS private AI is a feature—confirm classification if heavily relied on for automated decisions.

Considerations & known limitations: Pirsch Analytics vs SEAL Metrics
Considerations & known limitationsLogo: Pirsch AnalyticsPirsch AnalyticsLogo: SEAL MetricsSEAL Metrics
US-group account/ops subprocessors
Medium

Even with German analytics hosting claims, customer email, CAPTCHA, and payments involve AWS, Google, Stripe, and Intuition Machines. Sovereign or “no US cloud” policies need explicit exception handling or Enterprise architecture review.

Not listed
No public ISO/SOC or third-party audit
Medium

Procurement teams that require ISO 27001 or SOC 2 evidence will need vendor questionnaires or NDA materials; public pages did not show those certs.

Medium

SOC 2 in progress and ISO planned per vendor docs. Enterprise security questionnaires may block until reports are available under NDA.

Open-source core ≠ free full self-host
Low

Teams assuming AGPL means free on-prem of the entire product may be surprised; full on-prem is positioned as Enterprise.

Not listed
Fingerprinting still needs legal fit review
Low

Cookie-free hashing is not automatically lawful everywhere without information/consent analysis. Banner removal should be validated for your jurisdiction and tag stack.

Not listed
Page-view usage limits
Low

Plans are metered on monthly page views (with events and partial session extensions counting). Hitting the cap can restrict dashboard access until upgrade or cycle reset—model traffic before cutover.

Not listed
US-group edge subprocessor (Cloudflare)Not listed
Medium

Even with Dublin storage, Cloudflare sits on encrypted traffic. Procurement that bans any US-group vendor in the path will need a written exception or alternative edge posture.

Consentless claim is architectural, not a warrantyNot listed
Medium

Vendor argues no personal data / no cookies so analytics need no banner. Other scripts on the same site and national guidance still matter—get DPO sign-off.

SaaS-only, proprietary pipelineNot listed
Low

No self-host path. Mitigate with API/BigQuery export and dual-running with GA4 during evaluation.

Hosting operator not namedNot listed
Low

Docs say EU data center in Dublin without naming the cloud or colo operator. Ask for the concrete provider in the TPSR pack.

Fit

Pirsch Analytics

Best fit when

  • EU sites replacing Google Analytics that need pageviews, campaigns, events, and funnels without analytics cookies
  • Agencies needing multi-site dashboards, client access links, and white-label branding
  • Teams that can instrument server-side or proxy scripts for better ad-blocker resilience
  • Buyers who want a German GmbH, downloadable DPA, and Hetzner-Germany residency claims for analytics data
  • Orgs evaluating Enterprise SAML, raw data access, or on-prem/managed private deployment

Poor fit when

  • Teams that require a free, full-product self-hosted community edition (core library ≠ full SaaS)
  • Product or UX research needing session replay, heatmaps, or persistent cross-site user identity
  • Procurement policies that forbid any US-group subprocessor (email CAPTCHA/billing still touch AWS/Google/Stripe/Intuition Machines)
  • Heavy product-analytics / multi-product identity graphs (closer to Amplitude/Mixpanel class tools)

Consider instead when

  • When: You need a free full-stack self-hosted analytics product with AGPL community edition

    Consider: Plausible Analytics (CE) or other open full products in your shortlist

    Pirsch open-sources the tracking core; on-prem of the full product is Enterprise-scoped.

  • When: You want the simplest possible privacy-first metrics with a Dutch vendor

    Consider: Simple Analytics

    Fewer advanced funnel/white-label features; different packaging tradeoffs.

  • When: You need heatmaps or session replay more than classical web analytics

    Consider: Hotjar, Microsoft Clarity, or EU UX-analytics peers

    Expect heavier consent and data-minimization review.

  • When: You must stay inside Google’s advertising and BigQuery measurement ecosystem

    Consider: Google Analytics / Google Tag Manager stack

    Opposite privacy and transfer posture—only if legal review accepts it.

SEAL Metrics

Best fit when

  • European eCommerce, DTC, and hospitality brands measuring paid media ROAS against incomplete consent-gated analytics
  • Marketing ops and agencies that need a single channel revenue source of truth finance can challenge less often
  • Teams that want side-by-side GA4 calibration without migrating off Google Ads tooling immediately
  • DPOs and CISOs evaluating analytics that claim no cookies, no fingerprinting, and EEA-only storage of analytics data
  • Stacks that prefer SaaS plus API/BigQuery export over running Matomo themselves

Poor fit when

  • Organizations that require self-hosted or open-source analytics under their own admin control
  • Product teams needing session replay, heatmaps, or deep multi-touch product analytics (Heap/FullStory class)
  • Buyers that will not accept SaaS until ISO 27001 or SOC 2 Type II is fully certified and publicly evidenced
  • Hobby sites and blogs that only need lightweight open-source pageview analytics

Consider instead when

  • When: You need open-source or self-hosted cookieless analytics

    Consider: Plausible Analytics (self-host Community Edition) or Matomo

    SEAL Metrics is SaaS-only with no public source license.

  • When: You want simple privacy-first page analytics without eCommerce ROAS tooling

    Consider: Simple Analytics or Pirsch Analytics

    Lighter EU privacy analytics peers; less paid-media attribution depth.

  • When: You need managed Matomo with Swiss hosting or enterprise on-prem options

    Consider: Friendly Analytics

    Matomo ecosystem plugins and heatmaps vs SealMetrics proprietary ROAS focus.

  • When: You need Google Ads-native reporting and free-tier product analytics breadth

    Consider: Google Analytics 4

    Different sovereignty and consent trade-offs; often kept alongside SealMetrics.

Open questions for due diligence

Pirsch Analytics

  • Can Enterprise on-prem exclude AWS SES / Google Workspace / Stripe / CAPTCHA US-group dependencies for the customer’s deployment?
  • Is any ISO 27001, SOC 2, or independent penetration-test summary available under NDA?
  • Exact data centers, backup locations, and encryption-key custody for multi-tenant SaaS—beyond marketing Hetzner claims?
  • Which feature flags on Standard vs Plus vs Enterprise apply to funnels, A/B tags, e-commerce metrics, and white-label depth at contract time?

SEAL Metrics

  • What is the exact legal entity name (e.g. S.L.) and registered address for contracts?
  • Which Dublin operator hosts app/DB/backups (name on the infrastructure questionnaire)?
  • Current status and availability date of SOC 2 Type II report and ISO 27001 certification?
  • Does any account data, billing, or support channel leave the EEA (email, payments, CRM)?
  • For LENS AI: training data isolation guarantees and EU AI Act role for customer use cases?