Logo: SEAL Metrics

SEAL Metrics

Spanish cookieless web analytics for European eCommerce: first-party capture, Dublin EU storage, last-click revenue and ROAS without consent-dependent tags.

SEAL Metrics is a Spanish, cookieless web analytics platform aimed at European eCommerce and digital marketing teams. It ships a small first-party script on your own domain. Pageviews and conversions are counted server-side.

It exists to close the consent-dependent measurement gap for shops that need channel-level revenue decisions. The vendor positions the product as consentless by architecture: no cookies, no localStorage, no device fingerprinting, and no IPs persisted in the analytics database.

The concrete differentiator is last-click revenue and ROAS reporting with Dublin EU storage, aimed at finance and agency arguments rather than hobby-site dashboards.

Cookieless first-party pixelEU-hosted (Dublin)Revenue / ROAS focusReal-time dashboardsDPA includedSaaS only

Shortlist when European eCommerce or hospitality teams need cookieless full-traffic capture and last-click ROAS they can align with finance—without GA4 Consent Mode as the measurement backbone. Skip when you need self-host or open source, session replay and product analytics depth, or a certified ISO/SOC package today—consider Plausible, Simple Analytics, Pirsch, or Matomo-based hosts instead.

Key capabilities

Install a tiny first-party script on your domain that logs pageviews without cookies, localStorage, or fingerprinting. Designed so ad blockers that target third-party analytics domains hit less often. Benefit: fuller traffic capture for teams stuck with consent-gated tags; trade-off: aggregate and channel metrics rather than person-level journey stitching.

Attributes conversions and revenue to channels, campaigns, and landing pages with last-click models the vendor positions as CRM-alignable. Built for eCommerce and hospitality media decisions—not generic pageview vanity charts. Limits: not a full multi-touch marketing mix model out of the box; validate against your CRM as the case studies do.

Live views of revenue, channels, campaigns, and products during Promo Days so media teams can reallocate spend the same day. Suited to peak-load retail calendars. Constraint: value depends on tagging microconversions and keeping UTM hygiene; not a substitute for warehouse-grade BI alone.

Optional LENS layer answers growth, risk, and wasted-spend questions in plain language against SealMetrics data (vendor states exclusive private AI on Enterprise tiers). Useful when analysts are scarce. Caveat: AI outputs are assistive—confirm high-stakes budget cuts against raw reports and offline finance data.

Hosted MCP endpoint and docs let teams spin up accounts, pixels, and reports from AI coding assistants instead of a pure UI-only onboarding path. Speeds evaluation for engineering-heavy stacks. Still SaaS-only—there is no self-hosted SEAL Metrics server to run in your VPC.

Vendor documents processing and backups in Dublin, Ireland, with TLS 1.3, AES-256 at rest, and roughly 24-month analytics retention. API and BigQuery-style exports support dual-running with GA4. Hosting operator is described generically as an EU data center; Cloudflare sits on the transit path only.

At a glance

HQ
Spain (Spanish law; Barcelona courts per Terms)
Founded
2020 (vendor how-it-works page)
Hosting
Dublin, Ireland — EU data center; Cloudflare edge transit
Model
SaaS; event-volume plans; free agentic tier + trial
Open source
No
Self-host
No

Best fit when

  • European eCommerce, DTC, and hospitality brands measuring paid media ROAS against incomplete consent-gated analytics
  • Marketing ops and agencies that need a single channel revenue source of truth finance can challenge less often
  • Teams that want side-by-side GA4 calibration without migrating off Google Ads tooling immediately
  • DPOs and CISOs evaluating analytics that claim no cookies, no fingerprinting, and EEA-only storage of analytics data
  • Stacks that prefer SaaS plus API/BigQuery export over running Matomo themselves

Poor fit when

  • Organizations that require self-hosted or open-source analytics under their own admin control
  • Product teams needing session replay, heatmaps, or deep multi-touch product analytics (Heap/FullStory class)
  • Buyers that will not accept SaaS until ISO 27001 or SOC 2 Type II is fully certified and publicly evidenced
  • Hobby sites and blogs that only need lightweight open-source pageview analytics

Consider instead when

  • When: You need open-source or self-hosted cookieless analytics

    Consider: Plausible Analytics (self-host Community Edition) or Matomo

    SEAL Metrics is SaaS-only with no public source license.

  • When: You want simple privacy-first page analytics without eCommerce ROAS tooling

    Consider: Simple Analytics or Pirsch Analytics

    Lighter EU privacy analytics peers; less paid-media attribution depth.

  • When: You need managed Matomo with Swiss hosting or enterprise on-prem options

    Consider: Friendly Analytics

    Matomo ecosystem plugins and heatmaps vs SealMetrics proprietary ROAS focus.

  • When: You need Google Ads-native reporting and free-tier product analytics breadth

    Consider: Google Analytics 4

    Different sovereignty and consent trade-offs; often kept alongside SealMetrics.

Jurisdiction & ownership

Legal entity
SealMetrics (Spain; exact registered company name not found on public imprint)
Governing law
Spain (Terms of Service; courts of Barcelona)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Customer analytics app, DB, and backups: Dublin, Ireland (EU data center, provider not named publicly). Subprocessor: Cloudflare for CDN/DDoS on encrypted transit at EU edge locations; vendor states no analytics data at rest on Cloudflare and no US cloud storage of customer analytics.

No known US corporate parent. CLOUD Act exposure set to medium because Cloudflare (US-headquartered) is a listed subprocessor in the data path even when storage is EU-only. Indicative only — not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Partial
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumUS-group edge subprocessor (Cloudflare)

    Even with Dublin storage, Cloudflare sits on encrypted traffic. Procurement that bans any US-group vendor in the path will need a written exception or alternative edge posture.

  • MediumISO/SOC not fully certified yet

    SOC 2 in progress and ISO planned per vendor docs. Enterprise security questionnaires may block until reports are available under NDA.

  • MediumConsentless claim is architectural, not a warranty

    Vendor argues no personal data / no cookies so analytics need no banner. Other scripts on the same site and national guidance still matter—get DPO sign-off.

  • LowSaaS-only, proprietary pipeline

    No self-host path. Mitigate with API/BigQuery export and dual-running with GA4 during evaluation.

  • LowHosting operator not named

    Docs say EU data center in Dublin without naming the cloud or colo operator. Ask for the concrete provider in the TPSR pack.

Open questions for due diligence

  • What is the exact legal entity name (e.g. S.L.) and registered address for contracts?
  • Which Dublin operator hosts app/DB/backups (name on the infrastructure questionnaire)?
  • Current status and availability date of SOC 2 Type II report and ISO 27001 certification?
  • Does any account data, billing, or support channel leave the EEA (email, payments, CRM)?
  • For LENS AI: training data isolation guarantees and EU AI Act role for customer use cases?

Frequently Asked Questions

The vendor’s position is no: the analytics path sets no cookies or browser storage and stores no personal identifiers (IPs are not persisted in the analytics DB). That is an architectural claim aimed at GDPR and ePrivacy consentless audience measurement—not a legal warranty. Your DPO should still map it against AEPD or CNIL-style guidance and your other trackers (ads, chat, A/B tests), which may still need banners.

Public docs put application servers, analytics databases, and backups in Dublin, Ireland. The published subprocessor list names an EU data center for storage and Cloudflare for CDN and DDoS at EU edge locations (encrypted transit; no analytics data at rest on Cloudflare). No US cloud storage of customer analytics is claimed. Always re-check the live subprocessors page before procurement sign-off.

No. SEAL Metrics is commercial SaaS only—not open source and not offered as an on-prem appliance in public materials. If you need self-host or AGPL code, evaluate Plausible Community Edition, Matomo, or similar EU-hosted Matomo services instead.

GA4 is free-tier accessible and deeply integrated with Google Ads, but consent rates, modeling, and US-group infrastructure often leave European eCommerce with incomplete first-party revenue truth. SEAL Metrics focuses on cookieless full capture, last-click channel and ROAS views, Dublin processing claims, and side-by-side calibration with GA4 rather than replacing Ads platform tooling. Many teams keep GA4 for product reporting and use SealMetrics as the finance or agency source of truth for media.

A standard Data Processing Agreement is published on the site and stated to be included with every plan (custom negotiation on Enterprise). TLS 1.3 and AES-256 are claimed. As of public docs review, SOC 2 Type II is in progress, ISO 27001 is planned, and no downloadable independent audit PDF was found on the marketing or docs surfaces—request the TPSR pack and current cert status under NDA if your security questionnaire requires them.

Plans are event-volume based (human events), with a free agentic or onboarding package for limited total events, self-serve Growth and Scale tiers, annual versus monthly billing options, a time-boxed free trial, and custom Enterprise (SLA, private AI, warehouse depth). Exact figures change—confirm on the official pricing page; do not budget from third-party listicles.