Swetrix vs Wide Angle Analytics

Compare Swetrix and Wide Angle Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics, Matomo

Logo: Swetrix

Swetrix

United Kingdom· Web Analytics

Needs review

Shortlist Swetrix when you want cookieless traffic plus product-oriented tools (funnels, RUM, errors, optional Cloud replays) under a UK company with Hetzner DE hosting and AGPLv3 self-host CE. Skip when you need public ISO/SOC packs, zero US-group subprocessors, multi-year cookie retention cohorts, or free forever hosted analytics—consider Plausible Analytics or Simple Analytics for minimal traffic-only privacy analytics, or Matomo for heavyweight self-host control.

Cookieless trackingHetzner DE hostingOpen source (AGPLv3)Self-host CEFunnels + errors + RUMPublic DPA
Logo: Wide Angle Analytics

Wide Angle Analytics

Germany· Web Analytics

Needs review

Do not shortlist Wide Angle for new multi-year analytics: the vendor is winding the product down by end of August 2026. Existing customers should migrate using the promised data snapshot. For new EU privacy-analytics shortlists prefer Plausible, Pirsch, Simple Analytics, or Piwik PRO; keep Matomo-class stacks when self-host control is mandatory.

Cookieless by defaultGerman GmbH (Berlin)OVHcloud FR/DE hostingSaaS only (no self-host)EOL Aug 2026
Swetrix vs Wide Angle Analytics: Snapshot
FeatureLogo: SwetrixSwetrixLogo: Wide Angle AnalyticsWide Angle Analytics
Country of originUnited KingdomGermany
CategoryWeb AnalyticsWeb Analytics
Open sourceYesNo
Self-hostedYesNo
HeadquartersUnited KingdomGermany
Legal entitySwetrix Ltd (SC797389), Edinburgh, ScotlandInput Objects GmbH, Scharnhorststraße 24, 10115 Berlin, Germany
US parent / controlNo known US parentNo known US parent
CLOUD Act exposure (indicative)MediumMedium
Hosting / residencyCloud analytics data: Hetzner Online GmbH (Germany) per DPA/Data Policy. End User error monitoring sub-processor: Sentry / Functional Software Inc. (United States). Customer-side Privacy Policy list also includes Paddle (UK payments), Fastmail (Australia business email), AWS (US transactional/marketing email), OpenRouter (US optional AI chat). No known US parent.Visitor analytics: OVHcloud limited to FR/DE (vendor). Account path: Paddle (payments), Brevo email/automation, Infomaniak; older vendor post notes Brevo/Sendinblue encrypted DR involving AWS/GCP. No known US corporate parent.
Summary

Cookieless, privacy-first web analytics from a UK company: traffic, funnels, errors, and performance on Hetzner in Germany, with AGPLv3 self-host Community Edition and optional Cloud session replays.

German cookieless-by-default web analytics SaaS (Input Objects GmbH, OVHcloud FR/DE). Product announced for discontinuation end of August 2026—prefer living EU peers for new deployments.

Tags
At a glance: Swetrix vs Wide Angle Analytics
At a glanceLogo: SwetrixSwetrixLogo: Wide Angle AnalyticsWide Angle Analytics
HQEdinburgh, United KingdomBerlin, Germany (Input Objects GmbH)
Legal entitySwetrix Ltd (SC797389)Not listed
Governing lawScotland (Terms)Not listed
Primary hostingHetzner Online GmbH, GermanyNot listed
LicenseAGPLv3 (Community Edition)Not listed
Commercial modelEvent-volume Cloud subscription; free self-host CE; timed trialEvent/site SaaS tiers + 14-day trial (see official pricing)
Open sourceYes — github.com/Swetrix/swetrixNo
Product launchNot listedNovember 2021
Hosting (visitor path)Not listedOVHcloud France & Germany (vendor-stated)
Self-hostNot listedNo
StatusNot listedDiscontinuing end of August 2026
Key capabilities: Swetrix vs Wide Angle Analytics
Key capabilitiesLogo: SwetrixSwetrixLogo: Wide Angle AnalyticsWide Angle Analytics
Cookieless trackingYesNot listed
Hetzner DE hostingYesNot listed
Open source (AGPLv3)YesNot listed
Self-host CEYesNot listed
Funnels + errors + RUMYesNot listed
Public DPAYesNot listed
Cookieless by defaultNot listedYes
German GmbH (Berlin)Not listedYes
OVHcloud FR/DE hostingNot listedYes
SaaS only (no self-host)Not listedYes
EOL Aug 2026Not listedYes

Swetrix

  • Cookieless traffic analytics with hashed sessions

    Lightweight script captures pageviews, referrers/UTMs, devices, and city-level geo without cookies or client-side storage. Per the Data Policy, IP and User-Agent are hashed in memory with a daily rotating salt; only a random session id is stored—so you get sessions without long-term cross-day visitor retention.

  • Funnels, custom events, and goals

    Instrument signups, purchases, and other conversions as custom events; build multi-step funnels and goals in the dashboard. Useful for product and growth teams who need drop-off analysis without bolting on a second product-analytics SaaS.

  • Real-user performance and client error tracking

    Records Web Performance API timings (TTFB, DNS, TLS, render, full page load) and optional JavaScript errors with stack/context by page and browser. Bridges marketing traffic views with engineering signals that pure pageview tools omit.

  • Opt-in Cloud session replays with privacy modes

    Cloud projects can call startSessionReplay() to record DOM and interactions; default modes mask text/inputs. Replays are not created by ordinary pageviews—customers must enable them and own consent, masking, and page exclusions. Cloud-only versus Community Edition.

  • AGPLv3 open source with Docker self-host CE

    Core platform is public on GitHub under GNU AGPLv3; Community Edition deploys via official Docker docs with MySQL, ClickHouse, and Redis. CE includes core analytics, events, sessions, funnels, performance, and errors—but not all Cloud extras (replays, some alerts/org/AI features).

  • Alerts, API, GA import, and team access

    Configure alerts to email, Slack, Telegram, Discord, webhooks, or push; pull or push data via the API; import GA4 history; invite organisations with roles or share password-protected/public dashboards. Fits agencies and multi-site operators who outgrow single-user tools.

Wide Angle Analytics

  • Cookieless request-based sessions with daily rotating salt

    Default mode hashes site + IP + User-Agent with a non-persisted daily salt (SHA-256). Same-day uniques without cookies or long-lived IDs; past sessions cannot be re-linked after salt rotation. Optional 24h cookie or canvas fingerprinting change the consent analysis.

  • Optional tracking modes for SPA and consent-gated detail

    Enable HTTP(S)-only 24h cookies, client fingerprinting, or service-issued IDs for SPA reliability. Fingerprinting is off by default and may require consent—controllers must re-assess before enabling.

  • Marketer dashboards, custom events, and multi-site teams

    Real-time charts for sources, pages, devices, UTM campaigns, goals, custom actions, and e-commerce revenue attribution. Higher tiers add multi-user sharing, permissions, and many sites without SQL.

  • CMS one-click installs and lightweight script embed

    Plugins/integrations for WordPress, Squarespace, Wix, Ghost, Webflow, and common JS stacks; custom sites add a script tag. Built for marketers rather than BI engineers.

  • OVHcloud EU regions (FR/DE) for visitor analytics path

    Vendor states product hosting is limited to OVHcloud France and Germany with no end-user analytics transfer outside EU/EEA and no sale of visitor data. Account billing/email use separate subprocessors (see Trust).

Assurance & compliance: Swetrix vs Wide Angle Analytics
Assurance & complianceLogo: SwetrixSwetrixLogo: Wide Angle AnalyticsWide Angle Analytics
Independent security / no-logs audit
Not found

Searched marketing, DPA, privacy, and data policy; no public independent audit PDF located. Open-source code is available for review.

Not found

No public independent pen-test or no-logs audit PDF found on site materials reviewed.

ISO 27001
Not found

No public ISO 27001 certification claim found on primary pages.

Not found

No public ISO 27001 certificate page found.

SOC 2 / SOC 3
Not found

No public SOC 2/3 report found.

Not found

No public SOC 2/3 report found.

GDPR / EU data protection
Vendor claimed

UK company; public GDPR/PECR discussion in Data Policy; cookieless design with non-stored IPs for standard analytics; Hetzner DE hosting; public DPA. Optional replays may be personal data depending on configuration—customer assesses legal basis.

Vendor claimed

German controller/processor entity; cookieless-default design; DPO named (DPO CONSULTING). Not legal advice.

US CLOUD Act exposure (indicative)
Partial

No known US parent; primary analytics on Hetzner DE. Material exception: Sentry (US) processes End User error data per DPA; Privacy Policy also lists AWS and OpenRouter (US) for customer email/AI. Indicative medium exposure—not a clean bill. Not legal advice.

Partial

EU GmbH, no known US parent, OVH FR/DE visitor hosting; offset by Paddle and Brevo-related infrastructure (incl. encrypted AWS/GCP DR per vendor blog). Assessment row—not vendor marketing.

Data processing agreement (B2B)
Vendor claimed

Public DPA at swetrix.com/dpa incorporated by Terms; acceptance by use of Service; signed copy on request.

Vendor claimed

Vendor blog/compliance materials state a signed DPA is offered; confirm current template with vendor.

EU AI Act
Not applicable

Core product is web analytics, not an AI system. Optional Ask AI / OpenRouter is ancillary; confirm if your deployment enables it.

Not applicable

Web analytics product, not an AI system under typical AI Act product framing.

Considerations & known limitations: Swetrix vs Wide Angle Analytics
Considerations & known limitationsLogo: SwetrixSwetrixLogo: Wide Angle AnalyticsWide Angle Analytics
US-group subprocessors (Sentry, AWS, OpenRouter)
Medium

Primary analytics hosting is Hetzner DE, but Sentry (US) is an End User error-tracking sub-processor on the DPA, and AWS/OpenRouter appear for customer email/AI. Orgs with strict no-US-cloud rules need explicit acceptance or self-host CE to avoid those paths.

Not listed
Session replay is opt-in and controller-owned
Medium

Cloud replays can capture DOM and inputs unless masked. Customers must enable startSessionReplay(), configure privacy modes/exclusions, and provide notices/consent where required—misconfiguration can reintroduce personal data risk that standard cookieless pageviews avoid.

Not listed
No public ISO/SOC or third-party audit
Medium

Assurance relies on first-party policies, Hetzner infrastructure claims, and open source. Enterprise questionnaires that hard-gate on certs will stall until materials are provided under NDA or produced.

Not listed
Cloud vs Community Edition feature gap
Low

Self-host CE is free and covers core analytics, but replays and several Cloud growth/ops features are limited or Cloud-only. Budget and feature planning must not assume feature parity.

Not listed
Daily salt rotation limits retention metrics
Low

Cookieless design deliberately prevents classic multi-day visitor retention. Teams that need that metric class need another product or consented identity.

Not listed
Product end-of-life (August 2026)Not listed
High

Vendor announced discontinuation; service runs until end of August 2026 with pro-rata refunds and a vendor-prepared snapshot—not a self-service export. New deployments risk forced migration within weeks.

No self-host continuity pathNot listed
High

SaaS-only design means the product cannot be retained on your infrastructure after shutdown.

Account subprocessors beyond OVHNot listed
Medium

Paddle, Brevo, Infomaniak (and historical Brevo DR via US-group clouds) affect customer-account and support data paths even if visitor analytics stay on OVH EU.

Optional fingerprinting/cookiesNot listed
Medium

Non-default modes can reintroduce consent obligations; misconfiguration is a controller risk.

No public ISO/SOC/independent auditNot listed
Medium

Assurance rests on design docs, DPA, and vendor claims unless private reports are provided under NDA.

Fit

Swetrix

Best fit when

  • SMEs, agencies, and product teams replacing GA4 who need cookieless traffic stats without a cookie banner driven only by analytics
  • Engineering-minded buyers who want error tracking and real-user performance in the same privacy-first dashboard as pageviews
  • Teams that may enable Cloud session replays later but can treat them as explicit opt-in with their own legal basis
  • Operators willing to run Docker Community Edition (MySQL/ClickHouse/Redis) when Cloud commercial terms or feature limits do not fit
  • Buyers who need a public B2B DPA, API access, GA4 import, and multi-channel alerts under a UK legal entity

Poor fit when

  • Enterprises that require published ISO 27001 / SOC 2 certificates or independent audit PDFs before shortlist
  • Policies that forbid any US-group subprocessors (Sentry is listed for End User error data; AWS/OpenRouter appear for customer services)
  • Use cases that depend on long-term cookie-based retention or cross-device identity graphs
  • Buyers who only want free hosted analytics with no paid Cloud tier and no self-host operations burden
  • Sites that will run session replays on sensitive flows without capacity to configure masking, exclusions, and consent

Consider instead when

  • When: You only need minimal cookieless pageviews/referrers with the smallest possible product surface

    Consider: Plausible Analytics or Simple Analytics

    Swetrix adds funnels, errors, RUM, and Cloud replays; peers stay closer to pure traffic analytics.

  • When: You need deep on-prem control, plugins, and mature enterprise self-host packaging

    Consider: Matomo (self-host or managed EU hosts such as Matomo by Stackhero)

    Heavier ops and optional cookies; stronger fit for large controlled deployments.

  • When: You must stay inside Google advertising measurement and free GA4 ecosystem tooling

    Consider: Google Analytics

    Trade privacy, consent, and transfer complexity for ads integration and zero software fee.

Wide Angle Analytics

Best fit when

  • Existing Wide Angle customers completing migration before the announced August 2026 shutdown
  • Historical evaluation of cookieless, marketer-oriented EU SaaS analytics design (daily-salted sessions, OVH FR/DE)
  • Teams that needed multi-site CMS installs and shared reports without running Matomo themselves (while service remained live)
  • Controllers comparing default cookieless vs optional fingerprint/cookie modes on a single product

Poor fit when

  • Any new production deployment expected to outlive August 2026
  • Buyers requiring open-source self-host continuity (use Plausible CE, Matomo, or similar)
  • Product analytics, session replay, heatmaps, or ad-tech attribution platforms
  • Orgs that need public ISO 27001 / SOC 2 certificates without requesting private packs
  • Free forever hosted analytics

Consider instead when

  • When: You need a living cookieless EU SaaS analytics product

    Consider: Plausible Analytics, Pirsch Analytics, or Simple Analytics

    All remain active EU-oriented peers in this directory category.

  • When: You need self-host or deep plugin/on-prem control

    Consider: Matomo (self-host or hosted peers) or Piwik PRO

    Wide Angle never offered self-host and is shutting down.

  • When: You accept US ad-stack analytics for free depth

    Consider: Google Analytics (GA4)

    Different jurisdiction, cookie/consent model, and product surface—not a like-for-like privacy swap.

Open questions for due diligence

Swetrix

  • Can Enterprise contracts exclude or replace Sentry (and other US-group subprocessors) for End User data paths?
  • Are ISO 27001, SOC 2, or pen-test summaries available under NDA?
  • What is the exact backup/DR location topology beyond “secure backups” wording on the DPA?
  • Which Cloud-only features remain permanently out of CE versus delayed open-source release?
  • For session replay at your traffic volumes, what retention defaults and export/delete SLAs apply on your plan?

Wide Angle Analytics

  • Exact cutover date/time and timezone for service stop after August 2026?
  • When and in what open format is each tenant's data snapshot delivered?
  • Current signed subprocessor list and SCCs under the active DPA (vs 2022 blog / iubenda summary)?
  • Any residual access window or deletion certificate after EOL?
  • Are private security assessments available under NDA before remaining term ends?