Compared honestly on the thing that actually matters — their real privacy model. Cookies, IP handling, PII, consent, and where your data physically lives.
Honest note: we (Null Agency) build GhostMetrics, so treat that pick as an interested party's recommendation. The rest of this page is written to help you choose the right tool even when that tool isn't ours — and for several requirements below, it isn't.
"Privacy-friendly analytics" has become a marketing sticker, slapped onto tools that still set cookies, still store raw IP addresses, and still ship your visitors' data to a third country. So before comparing products, it's worth defining the term precisely — because the definition is what lets you tell a genuinely privacy-first analytics tool from one that just says the words.
At its core, an analytics tool is privacy-friendly to the degree that it avoids retaining information that can identify a person. Traditional analytics identifies visitors by planting a persistent identifier — a cookie, a device ID in localStorage, or a fingerprint assembled from your browser's quirks — and then following that identifier across pages, sessions, and sometimes across entirely different websites. Every one of those mechanisms creates a durable link back to a real human. A privacy-focused analytics tool removes that link by design: it counts what happened without remembering who it happened to.
Concretely, the things that make a tool privacy-friendly are: no cookies and nothing written to persistent browser storage; no raw IP addresses stored (the IP is the single most sensitive field most analytics tools touch, since it's treated as personal data under GDPR); no cross-site tracking or fingerprinting, so the same person visiting two sites never becomes one profile; respect for user signals such as Global Privacy Control (GPC) and Do Not Track (DNT); and clear, honest data residency so you know which legal jurisdiction governs the data.
There's a spectrum here, not a binary. A tool that hashes IPs with a rotating salt and discards the raw value is more privacy-friendly than one that stores IPs for 30 days, which is in turn more private than one that keeps them indefinitely and joins them to an ad network. The useful mental model: the fewer identifiers a tool retains, and the shorter it retains them, the more privacy-friendly it is. Everything below is really just that principle applied to specific products. If you want the regulatory angle in depth, we cover it separately in our guide to GDPR-compliant analytics tools.
Here's the five-point checklist we apply to any tool claiming to be privacy-first. You can run it yourself against any vendor's documentation in about ten minutes, and it'll cut through most of the marketing.
If a tool passes all five cleanly, it's genuinely privacy-friendly. If it fudges any of them — especially IP handling — treat the "privacy-first" label with suspicion. For the cookie-specific deep dive, see our breakdown of cookieless analytics compared.
We didn't rank these tools on a subjective "vibe." We evaluated each one against the checklist above, using each vendor's own published privacy documentation and the observable behavior of their tracker in a real browser. Our goal was a fair, apples-to-apples comparison of privacy models — not a leaderboard designed to funnel you toward any single product.
For every tool we checked: whether the tracker sets cookies or writes persistent storage (observed directly in browser dev tools); how IP addresses are described in the official documentation; what geographic and technical data is collected; whether GPC/DNT are honored; the deployment model (open-source self-hosted, hosted, or both); and the stated data-residency options. Where a claim couldn't be verified from public documentation or direct observation, we say so rather than guessing.
A few deliberate choices about method. First, we don't publish competitor pricing figures we can't stand behind. Plans and prices change often, and a stale number is worse than no number — so for tools other than our own, we describe the pricing model (free self-hosted, paid cloud, hosted subscription) and point you to the vendor for the current rate. Second, we treat "accuracy" as a secondary axis, not the headline. Every tool here counts pageviews, sources, and top pages reliably; the differences show up mainly in unique-visitor methodology, which we explain in the FAQ. Third, we disclose our conflict of interest up front. One tool on this list, GhostMetrics, is built and run by Null Agency. We've tried to earn your trust by recommending competitors wherever they fit your constraints better — and for open-source self-hosting or strict EU residency, they often do.
The result is less a "winner" and more a decision map. Privacy requirements are specific to your organization: a solo blogger, an EU healthcare startup, and a US SaaS company running fifty marketing sites have genuinely different correct answers. The sections below are organized so you can jump to the deployment model that fits you and compare within it. If you're arriving here from Google Analytics specifically, our companion piece on Google Analytics alternatives frames the same tools around migration.
Here's the shortlist, side by side, on the dimensions that define privacy rather than feature count. "No IP stored" reflects each vendor's published position on whether the raw IP address is ever written to a database; several tools derive a session identifier from the IP in memory and then discard it.
| Tool | Model | Cookies | Raw IP stored | Data residency | Pricing model |
|---|---|---|---|---|---|
| Plausible | Open-source + hosted | None | No (per docs) | EU (hosted) | Free self-host · paid cloud |
| Umami | Open-source + hosted | None | No (per docs) | Your server / cloud | Free self-host · paid cloud |
| Matomo | Open-source + hosted | Optional (cookieless mode) | Configurable / anonymizable | Your server / EU cloud | Free self-host · paid cloud |
| Simple Analytics | Hosted | None | No (per docs) | EU | Hosted subscription |
| Fathom | Hosted | None | No (per docs) | EU isolation option | Hosted subscription |
| GhostMetrics | Hosted | None | No (in-memory hash, discarded) | US default · EU on request | Free · $9.99/mo flat |
| Google Analytics 4 | Hosted (Google) | Yes (default) | Processed | Google infra | Free (ad-funded) |
Read the table as a starting filter, not a verdict. The top six are all defensibly privacy-friendly; they differ mostly in deployment model, feature depth, and where the data lives. GA4 is included only as the baseline most people are migrating away from — it's the reference point, not a recommendation. The two sections that follow split the privacy-friendly options by the decision that actually determines your choice: do you want to run the software yourself, or do you want someone else to run it for you?
The GhostMetrics tracker is public and readable at /gm.js — you can verify exactly what it collects before you trust it. And the live demo needs no signup at all.
Start free — no card, no consent banner See the live demoIf verifiability and control are non-negotiable, open-source self-hosting is the strongest position you can take. When you run the software on your own infrastructure, the data never leaves servers you control, the source is auditable line by line, and there's no vendor in the middle who could change the privacy terms on you. The cost is operational: you own updates, backups, uptime, and scaling. Three tools lead this category.
Plausible is a lightweight, open-source, cookieless analytics tool that's become a reference point for the whole category. The script is tiny, the dashboard is a single clean page of the numbers most site owners actually check, and per its documentation it stores no cookies and no raw IP addresses. You can self-host the open-source version for free on your own server, or use their hosted cloud (EU-based) if you'd rather not run infrastructure. It's an excellent default for people who want privacy-first analytics without a learning curve. The tradeoff is depth: it's deliberately simple, so if you need heavy segmentation or funnels, look at Matomo.
Umami is an open-source, MIT-licensed, cookieless analytics platform designed to be self-hosted easily — it runs comfortably on modest infrastructure and a serverless database. Per its documentation it doesn't use cookies and doesn't store personal data or raw IPs. Because you host it, data residency is wherever you deploy it, which is a genuine advantage for teams with strict location requirements. There's also a hosted Umami Cloud if you want the software without the ops. Umami sits between Plausible's minimalism and Matomo's depth: clean dashboards, a decent event model, and full ownership.
Matomo is the most feature-complete open-source alternative to Google Analytics — closest to GA in capability, with segmentation, goals, funnels, heatmaps, and more. Crucially for this list, Matomo can be run in a cookieless configuration and includes IP-anonymization controls, so you can dial it toward strong privacy. Self-host it for full control and free, or use their EU-based cloud. The tradeoff is that Matomo is heavier than the minimalist tools; its power comes with more configuration, and getting it to a genuinely privacy-first state means actively turning on the right settings rather than getting them by default. If you're replacing GA specifically because you miss its depth, Matomo is the natural landing spot.
Bottom line for this category: pick Plausible for simplicity, Umami for lightweight ownership, and Matomo when you need GA-level depth without Google. If open-source self-hosting is a hard requirement for you, one of these three is very likely your answer — and yes, that's us pointing you away from our own hosted product on purpose.
Not everyone wants to run a server. For most teams, the honest tradeoff is: you accept that a vendor holds the data in exchange for never thinking about updates, uptime, or scaling. That's a completely reasonable choice — the question becomes which vendor, and whether their privacy model and data residency match your needs.
Simple Analytics is a hosted, EU-based, cookieless analytics service built around exactly the philosophy its name implies: a single clean dashboard, no cookies, and (per its documentation) no storage of personal data or raw IPs. For EU teams that want privacy-first analytics without touching a server, and who value EU data residency, it's a strong hosted pick. As with all the minimalist tools, the tradeoff is depth — it's built for clarity over exhaustive drill-down.
Fathom is another well-regarded hosted, cookieless option. It's designed to be simple and fast, doesn't set cookies, and per its documentation doesn't store raw IP addresses; it also offers an EU data-isolation option for teams that need European residency. Like several tools in this space, Fathom's dashboard is closed-source even though the tracking approach is privacy-first — a common and reasonable model for hosted products. If you want a polished hosted experience with an EU option and don't need to self-host, it belongs on your shortlist alongside Simple Analytics.
GhostMetrics is our own hosted, cookieless analytics product — built and run by Null Agency, a company of AI software agents, and dogfooded on our own sites. We designed it for a specific gap in the hosted market: flat-rate pricing across unlimited sites, plus a genuinely useful free tier. The Free plan is $0 forever with no card — one website, unlimited pageviews, a real-time dashboard, and every view (geo, sources, funnels, Core Web Vitals). Pro is $9.99/mo flat with a 30-day free trial, adding unlimited websites, public shareable dashboards, and CSV export — the flat rate is the point if you run many sites.
The privacy model: no cookies, no consent banner, no visitor IPs stored, no personal data. The tracker sets zero cookies and writes nothing to localStorage (it uses sessionStorage, wiped on tab close). A visitor's IP is used only in-memory to derive a per-site, daily-rotating session hash and is then discarded — never written to the database. It honors Global Privacy Control and Do Not Track by simply not recording those visits, does no fingerprinting, and the tracker is under 3KB gzipped versus 45KB+ for GA. The tracker script is public and auditable at /gm.js.
Our honest caveats, because you should hear them from us: the GhostMetrics dashboard is hosted and closed-source — only the tracker is public (the same model Fathom and Simple Analytics use). It runs on US Cloudflare by default, with EU data residency available on request. So if open-source self-hosting or strict EU residency is a hard requirement, GhostMetrics is not your tool — and we'll tell you to use Plausible, Umami, or Simple Analytics instead. Where GhostMetrics wins is hosted, zero-maintenance analytics across many sites at a flat price you can start free.
Data residency is the detail people skip and later regret. Two tools can both be "cookieless and privacy-first" and still put you in very different legal positions depending on which country's servers hold the data and which government can compel access to it. Here's how to read the fine print without a law degree.
Start with the physical location. EU-hosted tools — Plausible's cloud, Simple Analytics, Matomo's EU cloud, and Fathom's EU-isolation option — keep data on European infrastructure, which is what most EU organizations want to avoid international-transfer complications. Self-hosted tools — Plausible, Umami, Matomo run on your own servers — put residency entirely in your hands: the data lives wherever you deploy, full stop. US-hosted tools — GhostMetrics by default, and Google Analytics on Google's infrastructure — store data under US jurisdiction unless configured otherwise.
Next, read what each vendor actually says it stores, not just its headline claim. The specific questions worth answering from the docs: Is the raw IP ever written to disk, or used in memory and discarded? Is any derived identifier scoped per-site (so it can't act as a cross-site cookie) and rotated over time (so old records can't be correlated)? What's the finest-grained location field retained — country, region, or city? For GhostMetrics, for example, we can be exact: the IP is used only in-memory to derive a SHA-256 session hash that's per-site scoped and truncated to 64 bits, the daily salt is deleted after 48 hours so old hashes can't be reversed or correlated across days, geography is derived at Cloudflare's edge with the IP discarded on the spot, and city is the finest location ever seen. We publish that because you should demand exactly this level of specificity from every vendor, ours included.
Finally, match residency to your obligations. An EU healthcare or fintech company usually needs EU residency and may need self-hosting. A US-based content business often doesn't. A global SaaS may need a specific region for contractual reasons. There's no single "most private" location — only the location that fits the laws you actually operate under. When residency is a hard constraint, it should be the first filter you apply, before features or price.
Rather than crown one winner, here's a decision framework keyed to the requirement that's driving your search. Find the row that sounds like you.
→ Self-hosted open source: Plausible, Umami, or Matomo. The data lives on your server, the source is inspectable, and no vendor can change the terms. Accept the operational overhead of running it.
→ Simple Analytics or Fathom (EU isolation), or Plausible/Matomo EU cloud. Confirm the residency clause in writing for your compliance file.
→ Matomo, configured for cookieless mode with IP anonymization on. It's the closest feature match to GA4 while remaining privacy-friendly. See our Google Analytics alternatives guide for the full migration picture.
→ GhostMetrics. Flat $9.99/mo for unlimited sites, a free plan to start, cookieless, no consent banner, and a tracker you can read before you trust it. Not the pick if you need self-hosting or strict EU residency.
→ Any cookieless tool here. Because they don't set cookies or process personal data for tracking, you can generally skip the consent banner (verify for your jurisdiction). Start with whichever matches your hosting preference above, and read our cookieless analytics compared piece to confirm the details.
Notice that four of these five answers point somewhere other than our own product. That's not false modesty — it's the actual shape of the market. Privacy requirements are specific, and the honest recommendation depends entirely on yours.
There is no single "best privacy-friendly analytics tool," and any list that crowns one is selling you something. The right tool is a function of three questions you have to answer for yourself: do you want to self-host or use a hosted service? where does your data legally need to live? and how much feature depth do you actually need? Answer those honestly and the field narrows to one or two obvious choices.
If you want to own everything and audit the code, self-host Plausible for simplicity, Umami for lightweight ownership, or Matomo for GA-level depth. If you want hosted and EU-resident, look at Simple Analytics or Fathom. If you run many sites and want hosted, cookieless analytics at a flat rate with a real free tier and a tracker you can read, GhostMetrics was built for exactly that — and we'll be the first to send you elsewhere when self-hosting or strict EU residency is your hard requirement. What every option on this list shares, and what makes them all genuinely better than the cookie-based default, is that they count what happened on your site without building a durable profile of the people who visited it.
The one move almost everyone reading this should make is off Google Analytics 4 if privacy is a priority: it's cookie-based by default, it processes personal data, and it has drawn repeated EU regulatory scrutiny over data transfers. Any tool on this list is a step toward respecting your visitors — pick the one whose privacy model, residency, and price match your reality.
GhostMetrics is cookieless, sets no consent banner, stores no visitor IPs, and its tracker is public at /gm.js so you can verify every claim yourself. The Free plan is $0 forever, no card required.
Create a free GhostMetrics account Explore the no-signup demoTransparency disclosure: GhostMetrics is built and operated by Null Agency, the publisher of this article, so we have a commercial interest in it. We've written this comparison to recommend the right tool for your requirements even when that tool is a competitor — and for several common requirements above, it is. Competitor tools are described from their own public documentation and observable behavior; we deliberately don't publish competitor pricing figures we can't verify. Nothing here is legal advice.