Logo: Vantevo Analytics

Vantevo Analytics

Italian cookie-less web analytics from Netforce Srl (Parma): single-dashboard traffic, events, goals, and ecommerce funnels with EU processing claims and a public DPA.

Vantevo Analytics is a subscription web analytics product operated by Netforce Srl in Parma, Italy. It targets teams that want traffic and conversion insight without placing analytics cookies on visitor browsers.

It exists as an Italian cookieless dashboard for unique visitors, sessions, goals, and ecommerce funnels. Visitor uniqueness for a given day is derived from a daily-rotating hash of domain, IP, and User-Agent. Raw IP and User-Agent are not stored after hashing.

The concrete differentiator is that single-dashboard traffic and funnel view plus a public DPA and EU processing claims. The product cannot show new versus returning visitors across days, by design.

Cookie-less trackingSingle-dashboard metricsEcommerce events (beta)GA history importPublic DPAItalian operator

Shortlist Vantevo when you want Italian-operated, cookie-less site analytics with a flat dashboard, goals/events, optional GA historical import, and beta ecommerce funnel events under a public DPA. Skip when you need multi-day returning-visitor identity, self-hosting/open source, or enterprise-grade public certifications—consider Plausible/Simple Analytics/Pirsch for lighter peers, or Piwik PRO for self-host/compliance-heavy programs.

Key capabilities

Visitor uniqueness for a day is derived from HASH(salt + domain + IP + User-Agent) with a salt that rotates every 24 hours; IP and User-Agent are not retained after hashing, per the DPA and docs. No cookies, localStorage, or browser cache for the analytics session—and therefore no multi-day new/returning visitor split. Fits privacy-led sites that prioritize aggregate trends over identity graphs.

Unique visitors, sessions, page views, bounce rate, duration, entry/exit pages, geography, devices, languages, referrals, and UTM campaigns appear on one overview without multi-level custom report builders. Aimed at agencies and SMEs that want operational metrics without a full-time analytics specialist.

Track button clicks, scrolls, form submits, custom event names with metadata, and conversion goals; outbound links and file downloads can be auto-captured with HTML attributes to exclude specific URLs. Useful for content and lead-gen sites measuring meaningful actions without cookie tags.

Optional vantevo-ecommerce.js records wishlist, view item, cart add/remove, checkout stages, payment type, coupons, variants/categories, and purchase—docs mark the ecommerce section as still in beta. Best for shops that need privacy-oriented funnel visibility and can accept beta maturity.

Connect Google Analytics to import page statistics from January 2018 onward into the same calendar view (with documented metric gaps and API limits). Ship via head script, WordPress plugin, React/Vue/npm packages, Shopify/Wix theme paste, hybrid apps, or server-side event APIs—plus optional Search Console connection for keyword/impression views.

At a glance

HQ
Parma, Italy (Netforce Srl)
Product type
Cookie-less web analytics SaaS
Self-host / OSS
No (SaaS only; not open source)
Hosting (public DPA)
OVH Roubaix + AWS datacenter; EU processing claims
Commercial model
View-based subscription after free trial
Notable limit
No multi-day returning visitors; max 50 sites/account (Terms)

Best fit when

  • EU/Italian teams replacing Google Analytics for marketing-site KPIs without analytics cookies
  • Agencies needing a simple multi-site dashboard clients can read without GA training
  • Shops that want privacy-oriented funnel events (cart → checkout → purchase) and accept beta maturity
  • Migrations that need to pull Universal Analytics page history into a privacy-first tool
  • Stacks using WordPress, Shopify, React/Next, Vue/Nuxt, or server-side event APIs

Poor fit when

  • Requirements for multi-day returning visitors, cross-device identity, or ad-platform audience sync
  • Mandatory self-hosting, open-source code audit, or on-prem only deployments
  • Procurement that requires public ISO 27001/SOC 2 evidence and independent security audits before shortlist
  • Heavy product analytics / cohort experimentation beyond site and ecommerce funnel events
  • Accounts that need more than the Terms’ 50-website cap without vendor exception

Consider instead when

  • When: You want a well-known lightweight EU privacy analytics tool with strong community presence

    Consider: Plausible Analytics or Simple Analytics

    Compare ecommerce depth, GA import, and commercial packaging side by side.

  • When: You need self-host or enterprise compliance packaging

    Consider: Piwik PRO (or Matomo self-host outside this catalog’s EU-SaaS peers)

    Vantevo is SaaS-only with no public self-host edition found.

  • When: You need full product analytics and long-horizon cohorts

    Consider: Mixpanel or similar product analytics suites

    Different category: identity-rich product instrumentation vs privacy-first site metrics.

  • When: You specifically want German-market privacy analytics peers

    Consider: Pirsch Analytics or etracker (catalog peers)

    Validate feature parity on ecommerce and import paths.

Jurisdiction & ownership

Legal entity
Netforce Srl, Via Po' 136/A, 43124 Parma PR, Italy
Governing law
Italian law (controller established in Italy; Terms governed by place of establishment)
US parent / control
No known US parent
CLOUD Act exposure (indicative)
Medium
Hosting / residency
Vendor claims EU servers and EU backups. Public DPA names OVH Datacenter Roubaix and an AWS datacenter for storage/processing. Additional third parties: Stripe (payments), Crisp (support chat), optional Google Analytics and Search Console APIs when customers connect them.

No known US corporate parent. CLOUD Act exposure rated medium because of AWS (US-group cloud) and other US SaaS (Stripe; optional Google APIs), despite Italian HQ and EU-region claims. Indicative only — not legal advice.

  • Independent security / no-logs auditNot found
  • ISO 27001Not found
  • SOC 2 / SOC 3Not found
  • GDPR / EU data protectionVendor claimed
  • +3

Considerations & known limitations

  • MediumAWS (and other US-group services) in data path

    Despite Italian HQ and EU hosting marketing, the DPA explicitly stores data at OVH Roubaix and an AWS datacenter. Stripe payments and optional Google integrations add further US-group processors. Organizations with strict “no US cloud” policies need written clarification of regions, SCCs, and residual access risk.

  • MediumNo public ISO/SOC or independent audit

    Shortlisting relies on vendor security measures described in the DPA (encryption, backups, breach notification windows) without published certs or third-party audit reports. Security questionnaires and NDA evidence may be required for regulated buyers.

  • LowNo multi-day visitor identity by design

    Daily salt rotation and cookie-less design prevent classic returning-visitor and cross-device analysis. This is a privacy feature for many buyers and a hard product limit for others.

  • MediumEcommerce module still beta

    Official ecommerce docs mark the section as beta/incomplete for final publication. Do not assume GA ecommerce parity or long-term event stability without a pilot.

  • LowView overage and website caps in Terms

    Recording can pause after plan-specific overage tolerances; Terms also set a 50-website maximum per account. Align marketing “unlimited domains” language with contract terms before large agency rollouts.

  • LowSaaS-only dependency

    No public self-host option. Continuity depends on Netforce operations, OVH/AWS, and export/delete workflows (JSON/CSV return or delete timelines in DPA/Terms).

Open questions for due diligence

  • Which exact AWS region(s) and services are in production, and are standard contractual clauses / transfer impact assessments available on request?
  • Is a current subprocessor list (beyond DPA/privacy mentions of OVH, AWS, Stripe, Crisp, Google) available under NDA?
  • Are ISO 27001, SOC 2, or independent penetration-test summaries available for enterprise procurement?
  • What is the production roadmap and support SLA for ecommerce events leaving beta?
  • How should multi-brand agencies interpret “unlimited domains” marketing versus the Terms’ 50-website cap—exceptions available?

Frequently Asked Questions

No. The product deliberately avoids cookies, localStorage, and browser cache for visitor sessions. Daily uniqueness uses a hash salt that rotates every 24 hours, so the same person cannot be stitched across days. If multi-day cohorts or cross-device identity are mandatory, evaluate cookie-based or first-party ID platforms instead (or self-hosted stacks with different models).

Marketing and docs state EU hosting and EU backups, with the operator in Italy (Netforce Srl, Parma). The public DPA names OVH Datacenter Roubaix and an AWS datacenter as storage locations. Privacy/terms also reference Stripe (payments), Crisp (support chat), and optional Google APIs if you connect GA import or Search Console. EU regions on US-group clouds still raise CLOUD Act-style diligence questions—treat exposure as medium, not eliminated by HQ alone.

Yes. Vantevo publishes a DPA at vantevo.io/dpa; Terms state the DPA forms part of the service agreement, with the customer as controller and Netforce Srl as processor. Confirm acceptance workflow for your procurement process and request the current subprocessor list if your policy requires named processors beyond the DPA text.

Vantevo provides a dedicated ecommerce script and a documented event schema (cart, checkout stages, purchase, coupons, variants, etc.). Official docs still label the ecommerce section as beta. It is closer to privacy-first shop funnels than to full product analytics (Mixpanel-class) or GA’s ecosystem. Run a pilot on one storefront before replacing established ecommerce reporting.

Service is a view-based prepaid subscription after a free trial (no card required to start the trial). Views include page views and custom events per pricing FAQ language. Terms set a maximum of 50 websites per account, define overage tolerance before recording pauses, and describe data retention after cancellation/deletion. Marketing copy about “unlimited domains” should be reconciled with the Terms during procurement. Current list prices belong on the official pricing page only.

No public self-hosted or open-source edition was found. Vantevo is offered as SaaS with script/SDK integration. If you require software you operate yourself under your own DPA stack, shortlist Plausible Community Edition, Matomo, Piwik PRO, or similar instead.