Tinylytics vs Wide Angle Analytics

Compare Tinylytics and Wide Angle Analytics on capabilities, jurisdiction, assurance, and fit for European buyers.

Both listed as alternatives to: Fathom Analytics, Google Analytics

Tinylytics

United Kingdom· Web Analytics

Needs review

Shortlist Tinylytics when you want cookieless page analytics plus bundled uptime/SSL/content checks for a handful of small sites, with primary data on Hetzner in Germany and founder support. Skip when you need self-host/open source, formal ISO/SOC packs, or enterprise multi-tenant governance—consider Plausible Analytics or Simple Analytics instead.

Cookieless analyticsPrimary host: Hetzner DEUptime + SSL monitoringBroken-link crawlsSaaS only (no self-host)Solo-founder UK

View listing Visit Website

Wide Angle Analytics

Germany· Web Analytics

Needs review

Do not shortlist Wide Angle for new multi-year analytics: the vendor is winding the product down by end of August 2026. Existing customers should migrate using the promised data snapshot. For new EU privacy-analytics shortlists prefer Plausible, Pirsch, Simple Analytics, or Piwik PRO; keep Matomo-class stacks when self-host control is mandatory.

Cookieless by defaultGerman GmbH (Berlin)OVHcloud FR/DE hostingSaaS only (no self-host)EOL Aug 2026

View listing Visit Website

Highlighted rows differ between the two products.

Tinylytics vs Wide Angle Analytics: Snapshot
Feature	Tinylytics	Wide Angle Analytics
Country of origin	United Kingdom	Germany
Category	Web Analytics	Web Analytics
Open source	No	No
Self-hosted	No	No
Headquarters	United Kingdom	Germany
Legal entity	Vincent Ritter Consulting (service brand; terms state not separately incorporated yet)	Input Objects GmbH, Scharnhorststraße 24, 10115 Berlin, Germany
Governing law	Not clearly stated as a single governing-law clause on the public terms page; confirm contractually	Not listed
US parent / control	No known US parent	No known US parent
CLOUD Act exposure (indicative)	Medium	Medium
Hosting / residency	Primary analytics storage: Hetzner Falkenstein (Germany). CDN/security: Cloudflare. Error monitoring: Sentry.io. Payments: Paddle and Lemon Squeezy (Stripe company). Optional: IPinfo geo fallback for API hits; opt-in AI Insights via xAI and Google Gemini. No public backup-provider detail beyond that stack.	Visitor analytics: OVHcloud limited to FR/DE (vendor). Account path: Paddle (payments), Brevo email/automation, Infomaniak; older vendor post notes Brevo/Sendinblue encrypted DR involving AWS/GCP. No known US corporate parent.
Summary	Privacy-first cookieless web analytics for small sites, with bundled uptime/SSL checks, content monitoring, events, and founder support—hosted primarily on Hetzner in Germany.	German cookieless-by-default web analytics SaaS (Input Objects GmbH, OVHcloud FR/DE). Product announced for discontinuation end of August 2026—prefer living EU peers for new deployments.
Tags	analytics privacy gdpr cookie-free uptime-monitoring indie api	analytics privacy gdpr web-analytics cookieless saas germany google-analytics-alternative end-of-life

At a glance: Tinylytics vs Wide Angle Analytics
At a glance	Tinylytics	Wide Angle Analytics
HQ / operator	Vincent Ritter Consulting, United Kingdom	Not listed
Launched	12 June 2023 (live counters on homepage)	Not listed
Primary hosting	Hetzner, Falkenstein, Germany	Not listed
Deployment	Managed SaaS only (not open source, not self-hosted)	Not listed
Commercial model	Paid site-count plans; short trial; no permanent free tier	Event/site SaaS tiers + 14-day trial (see official pricing)
Differentiators	Analytics + uptime/SSL/content monitoring + widgets	Not listed
HQ	Not listed	Berlin, Germany (Input Objects GmbH)
Product launch	Not listed	November 2021
Hosting (visitor path)	Not listed	OVHcloud France & Germany (vendor-stated)
Open source	Not listed	No
Self-host	Not listed	No
Status	Not listed	Discontinuing end of August 2026

Key capabilities: Tinylytics vs Wide Angle Analytics
Key capabilities	Tinylytics	Wide Angle Analytics
Cookieless analytics	Yes	Not listed
Primary host: Hetzner DE	Yes	Not listed
Uptime + SSL monitoring	Yes	Not listed
Broken-link crawls	Yes	Not listed
SaaS only (no self-host)	Yes	Yes
Solo-founder UK	Yes	Not listed
Cookieless by default	Not listed	Yes
German GmbH (Berlin)	Not listed	Yes
OVHcloud FR/DE hosting	Not listed	Yes
EOL Aug 2026	Not listed	Yes

Tinylytics

Cookie-free unique hits with rotating salts
Page views and unique hits without tracking cookies or fingerprinting. Uniques combine truncated request signals with a 12-hour rotating salt and one-way hash, reset daily at midnight UTC; visitor IPs are not stored in hits. Suited to indie sites that want trendable uniques without consent banners for analytics cookies.
Thunder Clap uptime, SSL, and domain alerts
In-house multi-region health checks (default every 10 minutes) confirm downtime before emailing, plus SSL expiry notices and domain monitoring. Ultra can shorten intervals. Replaces a separate uptime tool for small fleets—but false downs can occur if WAFs block the Tinylytics monitor user-agent.
Daily content crawl for broken links and mixed content
Subscribed sites can crawl up to 50 pages (two levels deep) on a daily cadence, flagging broken links and mixed HTTP assets on HTTPS pages, with ignore lists and re-check. Ultra adds optional AI spell-check on visible copy—keep it off if AI subprocessors are out of policy.
Attribute-based event tracking (beta)
Enable events on the embed script and mark elements with data-tinylytics-event using category.action names (optional values for downloads). No GTM required; beacon mode helps navigations. Still beta—expect API/schema changes and incomplete capture under aggressive blockers.
Public stats, kudos, hit counters, API, and webhooks
Share passcode-protected public stats, embed hit counters and kudos buttons, export CSV, call the documented API, and push signed webhooks for visits, events, and monitoring. Built for transparent blogs and light automation rather than enterprise BI warehouses.

Wide Angle Analytics

Cookieless request-based sessions with daily rotating salt
Default mode hashes site + IP + User-Agent with a non-persisted daily salt (SHA-256). Same-day uniques without cookies or long-lived IDs; past sessions cannot be re-linked after salt rotation. Optional 24h cookie or canvas fingerprinting change the consent analysis.
Optional tracking modes for SPA and consent-gated detail
Enable HTTP(S)-only 24h cookies, client fingerprinting, or service-issued IDs for SPA reliability. Fingerprinting is off by default and may require consent—controllers must re-assess before enabling.
Marketer dashboards, custom events, and multi-site teams
Real-time charts for sources, pages, devices, UTM campaigns, goals, custom actions, and e-commerce revenue attribution. Higher tiers add multi-user sharing, permissions, and many sites without SQL.
CMS one-click installs and lightweight script embed
Plugins/integrations for WordPress, Squarespace, Wix, Ghost, Webflow, and common JS stacks; custom sites add a script tag. Built for marketers rather than BI engineers.
OVHcloud EU regions (FR/DE) for visitor analytics path
Vendor states product hosting is limited to OVHcloud France and Germany with no end-user analytics transfer outside EU/EEA and no sale of visitor data. Account billing/email use separate subprocessors (see Trust).

Assurance & compliance: Tinylytics vs Wide Angle Analytics
Assurance & compliance	Tinylytics	Wide Angle Analytics
Independent security / no-logs audit	Not found No public third-party security or no-logs audit report found on official docs.	Not found No public independent pen-test or no-logs audit PDF found on site materials reviewed.
ISO 27001	Not found No ISO 27001 claim found on privacy, compliance, or hosting pages.	Not found No public ISO 27001 certificate page found.
SOC 2 / SOC 3	Not found No SOC 2/3 report or claim found on public site.	Not found No public SOC 2/3 report found.
GDPR / EU data protection	Vendor claimed Vendor documents GDPR-oriented design (cookieless, data minimisation, EU primary host, deletion). Not independent certification.	Vendor claimed German controller/processor entity; cookieless-default design; DPO named (DPO CONSULTING). Not legal advice.
US CLOUD Act exposure (indicative)	Partial UK operator, no known US parent, primary host Hetzner DE; partial exposure via Cloudflare, Sentry, Lemon Squeezy/Paddle, optional IPinfo and opt-in US AI APIs. Not legal advice.	Partial EU GmbH, no known US parent, OVH FR/DE visitor hosting; offset by Paddle and Brevo-related infrastructure (incl. encrypted AWS/GCP DR per vendor blog). Assessment row—not vendor marketing.
Data processing agreement (B2B)	Not found No public DPA/downloadable processor agreement found; ask the vendor before B2B rollout.	Vendor claimed Vendor blog/compliance materials state a signed DPA is offered; confirm current template with vendor.
EU AI Act	Not applicable Core product is analytics/monitoring; optional AI insights are secondary and opt-in.	Not applicable Web analytics product, not an AI system under typical AI Act product framing.

Considerations & known limitations: Tinylytics vs Wide Angle Analytics
Considerations & known limitations	Tinylytics	Wide Angle Analytics
US-group subprocessors on the data path	Medium Cloudflare, Sentry, payment processors (incl. Lemon Squeezy/Stripe group), optional IPinfo and opt-in xAI/Gemini mean the stack is not EU-only end-to-end despite Hetzner primary storage.	Not listed
Solo-founder operational concentration	Medium Service is provided by Vincent Ritter Consulting / a solo developer. Support is personal and fast for indies, but bus-factor and formal SLA expectations differ from larger vendors.	Not listed
No public ISO/SOC/audit or DPA pack	Medium Enterprise security questionnaires will hit gaps until the vendor supplies audits and a B2B DPA under NDA or email.	Not listed
Scale and feature boundaries	Low Content crawls are depth/page limited; event tracking is beta; fair-usage applies to extreme hit volumes; no self-host escape hatch.	Not listed
Optional AI shares aggregated analytics	Low AI Insights and related AI spell-check are opt-in and send aggregated (not visitor PII per vendor) data to third-party AI providers—leave disabled under strict AI policies.	Not listed
Product end-of-life (August 2026)	Not listed	High Vendor announced discontinuation; service runs until end of August 2026 with pro-rata refunds and a vendor-prepared snapshot—not a self-service export. New deployments risk forced migration within weeks.
No self-host continuity path	Not listed	High SaaS-only design means the product cannot be retained on your infrastructure after shutdown.
Account subprocessors beyond OVH	Not listed	Medium Paddle, Brevo, Infomaniak (and historical Brevo DR via US-group clouds) affect customer-account and support data paths even if visitor analytics stay on OVH EU.
Optional fingerprinting/cookies	Not listed	Medium Non-default modes can reintroduce consent obligations; misconfiguration is a controller risk.
No public ISO/SOC/independent audit	Not listed	Medium Assurance rests on design docs, DPA, and vendor claims unless private reports are provided under NDA.

Fit

Tinylytics

Best fit when

Indie blogs, portfolios, and side projects that want simple cookieless stats without Google Analytics
Small sites that also want uptime, SSL expiry, and broken-link checks in the same tool
Operators who prefer founder-answered support and lightweight embeds over enterprise marketing stacks
Teams OK with managed EU primary hosting and willing to review named US-group subprocessors (CDN, payments, optional AI)
Agencies managing a modest number of client sites with public stats or kudos-style engagement widgets

Poor fit when

Orgs that require self-hosted collectors or open-source audit of the full analytics stack
Procurement needing published ISO 27001, SOC 2, independent audits, or a downloadable DPA out of the box
Very high-traffic properties needing contractual capacity/SLA commitments beyond fair-usage conversation
Policies that ban Cloudflare/Sentry/US payment or optional US AI APIs on any data path
Teams that need session replay, heatmaps, or deep advertising attribution (Clarity/GA territory)

Consider instead when

When: You need open-source and optional self-hosting of the analytics stack
Consider: Plausible Analytics
Estonian product with Cloud plus Community Edition self-host; less bundling of uptime/content monitors.
When: You want European cookieless analytics with a simpler analytics-only scope
Consider: Simple Analytics
Strong privacy positioning; compare feature depth and monitoring separately.
When: You need free-at-scale marketing analytics, ads integrations, or attribution depth
Consider: Google Analytics (incumbent) — or stay on a privacy tool if GA is disallowed
Different privacy and sovereignty profile entirely.
When: You need session replay or heatmaps and accept that privacy model
Consider: Microsoft Clarity or specialised replay tools
Tinylytics deliberately avoids fingerprinting-style session products.

Wide Angle Analytics

Best fit when

Existing Wide Angle customers completing migration before the announced August 2026 shutdown
Historical evaluation of cookieless, marketer-oriented EU SaaS analytics design (daily-salted sessions, OVH FR/DE)
Teams that needed multi-site CMS installs and shared reports without running Matomo themselves (while service remained live)
Controllers comparing default cookieless vs optional fingerprint/cookie modes on a single product

Poor fit when

Any new production deployment expected to outlive August 2026
Buyers requiring open-source self-host continuity (use Plausible CE, Matomo, or similar)
Product analytics, session replay, heatmaps, or ad-tech attribution platforms
Orgs that need public ISO 27001 / SOC 2 certificates without requesting private packs
Free forever hosted analytics

Consider instead when

When: You need a living cookieless EU SaaS analytics product
Consider: Plausible Analytics, Pirsch Analytics, or Simple Analytics
All remain active EU-oriented peers in this directory category.
When: You need self-host or deep plugin/on-prem control
Consider: Matomo (self-host or hosted peers) or Piwik PRO
Wide Angle never offered self-host and is shutting down.
When: You accept US ad-stack analytics for free depth
Consider: Google Analytics (GA4)
Different jurisdiction, cookie/consent model, and product surface—not a like-for-like privacy swap.

Open questions for due diligence

Tinylytics

Will Vincent Ritter Consulting sign a GDPR Article 28 DPA and provide a current subprocessor list under contract?
Are backups/DR and email delivery fully covered by the named providers, or are there additional hosts?
Is there any roadmap for independent security review, SOC 2, or ISO 27001?
What contractual terms apply for accounts consistently above the fair-usage hit threshold?
For AI Insights: exact retention, regions, and processor terms at xAI and Google for the paid API plans used?

Wide Angle Analytics

Exact cutover date/time and timezone for service stop after August 2026?
When and in what open format is each tenant's data snapshot delivered?
Current signed subprocessor list and SCCs under the active DPA (vs 2022 blog / iubenda summary)?
Any residual access window or deletion certificate after EOL?
Are private security assessments available under NDA before remaining term ends?