Sitesights vs Vantevo Analytics

Compare Sitesights and Vantevo Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo, Mixpanel

Sitesights

Germany· Web Analytics

Needs review

Shortlist Sitesights when you need German-operated cookieless web analytics with real-time dashboards, funnels, page flow, and a server-side API—especially agencies and SaaS teams that want Hetzner Germany hosting claims without running Matomo. Skip when you need public ISO/SOC audits, long-term visitor identity, session replay, or a fully published subprocessor pack; consider Plausible Analytics or self-hosted Matomo instead.

Cookieless trackingEU-operated (DE)Hetzner Germany (claimed)Server-side APIFunnels + page flowMulti-project / agencies

View listing Visit Website

Vantevo Analytics

Italy· Web Analytics

Needs review

Shortlist Vantevo when you want Italian-operated, cookie-less site analytics with a flat dashboard, goals/events, optional GA historical import, and beta ecommerce funnel events under a public DPA. Skip when you need multi-day returning-visitor identity, self-hosting/open source, or enterprise-grade public certifications—consider Plausible/Simple Analytics/Pirsch for lighter peers, or Piwik PRO for self-host/compliance-heavy programs.

Cookie-less trackingSingle-dashboard metricsEcommerce events (beta)GA history importPublic DPAItalian operator

View listing Visit Website

Highlighted rows differ between the two products.

Sitesights vs Vantevo Analytics: Snapshot
Feature	Sitesights	Vantevo Analytics
Country of origin	Germany	Italy
Category	Web Analytics	Web Analytics
Open source	No	No
Self-hosted	No	No
Headquarters	Germany	Italy
Legal entity	Drude, Grossert GbR	Netforce Srl, Via Po' 136/A, 43124 Parma PR, Italy
Governing law	Not listed	Italian law (controller established in Italy; Terms governed by place of establishment)
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
Hosting / residency	Product databases and app servers claimed in Germany on Hetzner. Marketing site uses Cloudflare (US) CDN. Payments via Paddle. Full product subprocessor/backup list not published on main site.	Vendor claims EU servers and EU backups. Public DPA names OVH Datacenter Roubaix and an AWS datacenter for storage/processing. Additional third parties: Stripe (payments), Crisp (support chat), optional Google Analytics and Search Console APIs when customers connect them.
Summary	German cookieless web analytics SaaS with real-time dashboards, events, funnels, and server-side APIs. Operated by Drude, Grossert GbR; product data claimed on Hetzner in Germany.	Italian cookie-less web analytics from Netforce Srl (Parma): single-dashboard traffic, events, goals, and ecommerce funnels with EU processing claims and a public DPA.
Tags	analytics privacy gdpr api cookieless saas germany	analytics privacy gdpr api cookie-less ecommerce italy

At a glance: Sitesights vs Vantevo Analytics
At a glance	Sitesights	Vantevo Analytics
HQ / entity	Drude, Grossert GbR, Germany	Not listed
Category	Web analytics (SaaS)	Not listed
Hosting (product)	Hetzner, Germany (vendor docs)	Not listed
Tracking model	Cookieless; 48h rotating server hash	Not listed
Open source	No (libs/plugins public; core SaaS proprietary)	Not listed
Commercial model	Free start; pageviews + events subscriptions (Paddle)	View-based subscription after free trial
HQ	Not listed	Parma, Italy (Netforce Srl)
Product type	Not listed	Cookie-less web analytics SaaS
Self-host / OSS	Not listed	No (SaaS only; not open source)
Hosting (public DPA)	Not listed	OVH Roubaix + AWS datacenter; EU processing claims
Notable limit	Not listed	No multi-day returning visitors; max 50 sites/account (Terms)

Key capabilities: Sitesights vs Vantevo Analytics
Key capabilities	Sitesights	Vantevo Analytics
Cookieless tracking	Yes	Not listed
EU-operated (DE)	Yes	Not listed
Hetzner Germany (claimed)	Yes	Not listed
Server-side API	Yes	Not listed
Funnels + page flow	Yes	Not listed
Multi-project / agencies	Yes	Not listed
Cookie-less tracking	Not listed	Yes
Single-dashboard metrics	Not listed	Yes
Ecommerce events (beta)	Not listed	Yes
GA history import	Not listed	Yes
Public DPA	Not listed	Yes
Italian operator	Not listed	Yes

Sitesights

Cookieless 48-hour rotating session hash
Standard tracking does not set cookies. Sitesights generates a server-side salted hash from IP, User-Agent, and site id with a salt that rotates every 48 hours, so long-term cross-day visitor re-identification is intentionally broken. Useful when teams want essential traffic metrics without a cookie-consent banner solely for analytics—confirm legal basis with counsel for your jurisdiction and data fields (including geo).
Sub-1 KB client script plus WordPress and Shopify plugins
Drop-in client snippet marketed as under 1 KB, with official WordPress and Shopify integration paths for non-engineers. Fits marketing sites and stores that need quick instrumentation without a heavy tag manager stack.
Server-side REST API with C# and Node libraries
Send page views and events from your backend with API-key auth so ad blockers cannot strip the beacon. MIT-licensed C# and Node.js libraries on GitHub speed integration; keep API keys off the client. Preferred path for accuracy-critical SaaS and app backends.
Real-time overview with campaign and device filters
Live dashboard for visitors, pageviews, and sessions with advanced filters, UTM/campaign views, geo, browser, OS, screen size, and daytime patterns. Aimed at operators who want essential marketing analytics in one place rather than a full product-analytics suite.
Custom funnels and page-flow journey maps
Build multi-step funnels and visual page-flow maps to see entry paths, routes, and exits. Helps conversion and UX work without session replay. Depth is journey-oriented, not identity-graph product analytics.
Multi-project workspaces with roles for agencies
Group sites and apps into projects, assign roles/permissions, and invite clients or teammates. Marketing materials reference high ceilings for team seats and properties on paid plans—verify current limits on the official pricing page.

Vantevo Analytics

Daily-rotating hash visitor counting (no analytics cookies)
Visitor uniqueness for a day is derived from HASH(salt + domain + IP + User-Agent) with a salt that rotates every 24 hours; IP and User-Agent are not retained after hashing, per the DPA and docs. No cookies, localStorage, or browser cache for the analytics session—and therefore no multi-day new/returning visitor split. Fits privacy-led sites that prioritize aggregate trends over identity graphs.
Single-page traffic dashboard
Unique visitors, sessions, page views, bounce rate, duration, entry/exit pages, geography, devices, languages, referrals, and UTM campaigns appear on one overview without multi-level custom report builders. Aimed at agencies and SMEs that want operational metrics without a full-time analytics specialist.
Custom events, goals, and automatic link/download tracking
Track button clicks, scrolls, form submits, custom event names with metadata, and conversion goals; outbound links and file downloads can be auto-captured with HTML attributes to exclude specific URLs. Useful for content and lead-gen sites measuring meaningful actions without cookie tags.
Ecommerce funnel events (beta script)
Optional vantevo-ecommerce.js records wishlist, view item, cart add/remove, checkout stages, payment type, coupons, variants/categories, and purchase—docs mark the ecommerce section as still in beta. Best for shops that need privacy-oriented funnel visibility and can accept beta maturity.
Universal Analytics import and multi-platform install paths
Connect Google Analytics to import page statistics from January 2018 onward into the same calendar view (with documented metric gaps and API limits). Ship via head script, WordPress plugin, React/Vue/npm packages, Shopify/Wix theme paste, hybrid apps, or server-side event APIs—plus optional Search Console connection for keyword/impression views.

Assurance & compliance: Sitesights vs Vantevo Analytics
Assurance & compliance	Sitesights	Vantevo Analytics
Independent security / no-logs audit	Not found No public third-party security or no-logs audit PDF located on the official site or docs.	Not found No public third-party audit PDF or no-logs attestation found on security/docs pages searched.
ISO 27001	Not found No public ISO 27001 certificate found on official pages.	Not found No ISO 27001 certificate or registry evidence found on the public site.
SOC 2 / SOC 3	Not found No public SOC 2/3 report found on official pages.	Not found No SOC 2/3 report referenced on public trust/legal pages.
GDPR / EU data protection	Vendor claimed German controller (Drude, Grossert GbR); cookieless hashing and EU hosting claims in docs/privacy. Confirm DPA and legal basis for IP/geo with counsel.	Vendor claimed Italian controller (Netforce Srl); cookie-less visitor model and EU hosting asserted on docs/GDPR pages; public DPA available. Vendor “100% GDPR compliant” wording is a claim, not independent legal certification.
US CLOUD Act exposure (indicative)	Partial EU entity / no known US parent; product hosting claimed on Hetzner Germany. Marketing site lists Cloudflare (US); payments via Paddle; full SaaS subprocessor list not public. Indicative only—not legal advice.	Partial EU entity / no known US parent, but DPA lists AWS alongside OVH Roubaix; Stripe and optional Google APIs are US-group services. Not a clean EU-only infrastructure story. Not legal advice.
Data processing agreement (B2B)	Not found No standalone public DPA download found during research; request under contract for B2B processing.	Vendor claimed Public DPA at vantevo.io/dpa; Terms state DPA forms part of the main agreement (customer controller, Netforce processor).
EU AI Act	Not applicable Web analytics product; not marketed as an AI system under the EU AI Act.	Not applicable Web analytics SaaS; not marketed as an AI system product.

Considerations & known limitations: Sitesights vs Vantevo Analytics
Considerations & known limitations	Sitesights	Vantevo Analytics
No public independent security audit	Medium ISO 27001, SOC 2, and third-party security audits were not found on public pages. Enterprises may need to commission questionnaires or wait for vendor artifacts under NDA.	Not listed
Incomplete public subprocessor list	Medium Hetzner (product) and Cloudflare (marketing site) are documented; backups, email, support, and monitoring vendors for the SaaS are not fully listed. Ask for a current subprocessor annex.	Not listed
US-group CDN on marketing site	Low Privacy policy lists Cloudflare Inc. (US) for the public website CDN. Separate from claimed Hetzner product data path, but relevant to overall vendor surface area.	Not listed
48-hour hash limits long-term visitor analytics	Low By design, the rotating salt prevents durable cross-day visitor recognition. Teams needing retention cohorts or multi-week funnels by person must model events differently or choose product-analytics tools.	Low Daily salt rotation and cookie-less design prevent classic returning-visitor and cross-device analysis. This is a privacy feature for many buyers and a hard product limit for others.
On-premise availability is marketing-only detail	Low About page claims on-prem hosting; docs do not provide a self-serve install guide. Treat as sales-assisted until scope is confirmed in writing.	Not listed
AWS (and other US-group services) in data path	Not listed	Medium Despite Italian HQ and EU hosting marketing, the DPA explicitly stores data at OVH Roubaix and an AWS datacenter. Stripe payments and optional Google integrations add further US-group processors. Organizations with strict “no US cloud” policies need written clarification of regions, SCCs, and residual access risk.
No public ISO/SOC or independent audit	Not listed	Medium Shortlisting relies on vendor security measures described in the DPA (encryption, backups, breach notification windows) without published certs or third-party audit reports. Security questionnaires and NDA evidence may be required for regulated buyers.
Ecommerce module still beta	Not listed	Medium Official ecommerce docs mark the section as beta/incomplete for final publication. Do not assume GA ecommerce parity or long-term event stability without a pilot.
View overage and website caps in Terms	Not listed	Low Recording can pause after plan-specific overage tolerances; Terms also set a 50-website maximum per account. Align marketing “unlimited domains” language with contract terms before large agency rollouts.
SaaS-only dependency	Not listed	Low No public self-host option. Continuity depends on Netforce operations, OVH/AWS, and export/delete workflows (JSON/CSV return or delete timelines in DPA/Terms).

Fit

Sitesights

Best fit when

EU teams replacing GA4 with cookieless SaaS and wanting funnels/page-flow beyond a bare traffic counter
Agencies and freelancers managing many client sites with projects and role-based invites
Engineering-led installs that prefer server-side pageview/event ingestion against ad blockers
WordPress or Shopify properties that want official plugin paths plus a light client script
Orgs that value a German GbR legal entity and Hetzner Germany hosting claims over US multi-region analytics

Poor fit when

Product analytics requiring long-term user identity, cross-device stitching, or CDP-style profiles (48h hash by design)
Buyers who need public ISO 27001, SOC 2, or independent audit PDFs before shortlist
Teams that require self-serve open-source self-host as the primary deployment (on-prem only claimed, not documented as OSS)
UX research needs for heatmaps or session replay
Procurement that requires a complete public subprocessor list without an NDA conversation

Consider instead when

When: You want a minimal EU cookieless SaaS or a well-known self-host option
Consider: Plausible Analytics
Simpler metric set; strong self-host story. Sitesights markets deeper funnels/page-flow and multi-project agency features.
When: You need full self-host control, on-prem by default, or mature open-source governance
Consider: Matomo (self-hosted)
Heavier stack, deeper feature surface, and you operate the data plane yourself.
When: You need identity-rich product analytics, retention cohorts, or event warehouses
Consider: Mixpanel or similar product-analytics platforms
Different category—Sitesights is website/app growth analytics, not a full product analytics suite.
When: You need heatmaps, recordings, or UX feedback loops
Consider: Hotjar, Microsoft Clarity, or EU UX-analytics tools
Sitesights focuses on traffic, events, funnels, and flows—not session replay.

Vantevo Analytics

Best fit when

EU/Italian teams replacing Google Analytics for marketing-site KPIs without analytics cookies
Agencies needing a simple multi-site dashboard clients can read without GA training
Shops that want privacy-oriented funnel events (cart → checkout → purchase) and accept beta maturity
Migrations that need to pull Universal Analytics page history into a privacy-first tool
Stacks using WordPress, Shopify, React/Next, Vue/Nuxt, or server-side event APIs

Poor fit when

Requirements for multi-day returning visitors, cross-device identity, or ad-platform audience sync
Mandatory self-hosting, open-source code audit, or on-prem only deployments
Procurement that requires public ISO 27001/SOC 2 evidence and independent security audits before shortlist
Heavy product analytics / cohort experimentation beyond site and ecommerce funnel events
Accounts that need more than the Terms’ 50-website cap without vendor exception

Consider instead when

When: You want a well-known lightweight EU privacy analytics tool with strong community presence
Consider: Plausible Analytics or Simple Analytics
Compare ecommerce depth, GA import, and commercial packaging side by side.
When: You need self-host or enterprise compliance packaging
Consider: Piwik PRO (or Matomo self-host outside this catalog’s EU-SaaS peers)
Vantevo is SaaS-only with no public self-host edition found.
When: You need full product analytics and long-horizon cohorts
Consider: Mixpanel or similar product analytics suites
Different category: identity-rich product instrumentation vs privacy-first site metrics.
When: You specifically want German-market privacy analytics peers
Consider: Pirsch Analytics or etracker (catalog peers)
Validate feature parity on ecommerce and import paths.

Open questions for due diligence

Sitesights

Will the vendor sign a B2B DPA and provide a complete subprocessor list (backups, email, support, monitoring)?
Is the Hetzner Germany residency contractual for all analytics tenant data, including DR/backups?
What is the formal on-premise offering (SLA, update model, supported regions) versus SaaS-only?
Are any ISO 27001 / SOC 2 / penetration-test reports available under NDA?
How should geolocation fields and IP hashing be assessed under your counsel's GDPR legal-basis analysis?

Vantevo Analytics

Which exact AWS region(s) and services are in production, and are standard contractual clauses / transfer impact assessments available on request?
Is a current subprocessor list (beyond DPA/privacy mentions of OVH, AWS, Stripe, Crisp, Google) available under NDA?
Are ISO 27001, SOC 2, or independent penetration-test summaries available for enterprise procurement?
What is the production roadmap and support SLA for ecommerce events leaving beta?
How should multi-brand agencies interpret “unlimited domains” marketing versus the Terms’ 50-website cap—exceptions available?