Zum Inhalt springen
EU VETTED

Trackboxx

Web-Analyse · Deutschland
trackboxx.com

German sole-proprietor cookieless analytics, B2B-only, with daily-rotating anonymisation and BunnyCDN script delivery.

Trackboxx ist ein europäischer Dienst mit Hosting in Deutschland und höchstens geringfügigem, vorübergehendem US-Bezug nach dem CLOUD Act. Gelistet unter Web-Analyse.

Bewertungsnotizen

German sole-proprietor analytics product (Christian Pust, Halberstadt) with cookieless tracking, daily-rotating anonymisation, and named sub-processors disclosed in the privacy policy. A publicly downloadable AVV is published and its Anlage 3 names the hosting sub-processor, TK ENTERPRISES LTD (Cyprus-registered, data centre Frankfurt, Germany) — an EU data centre behind a Cypriot shell rather than a named German provider. The Imprint still omits HRB and USt-IdNr details, and AWS Simple Email Service (US-owned) is used for newsletter email, resulting in minor CLOUD Act exposure.

Befund

CLOUD Act
Eigentümer
Unterauftragsverarbeiter
3 · 0 US

Geprüfte Signale

Jurisdiktion
  • EU-/Angemessenheits-Hosting: Ja
  • EU-/Angemessenheits-Betreiber: Ja
  • Keine US-CLOUD-Act-Exposition: Nicht bewertet
Transparenz
  • Öffentlicher AVV: Ja
  • Unterauftragsverarbeiter offengelegt: Ja
  • Open-Source-Clients: Nein
  • Zertifizierung durch Dritte: Nein
Springen zu

Über Trackboxx

Trackboxx is a small German cookieless web analytics product operated by Christian Pust as a sole proprietorship (Humboldtstraße 9, 38820 Halberstadt; branch office at Dorfstr. 12, 22956 Grönwohld). The service is sold strictly business-to-business, the imprint explicitly states that "Unser Service richtet sich ausschließlich an Unternehmer" (our service is directed exclusively at commercial customers). Co-founders Christian and Ulrike split development, strategy, marketing, and social media duties.

The product runs cookieless analytics with rotating daily encryption codes for visitor anonymisation, marketing itself as "100% DSGVO-konform" with the Bitmi (Bundesverband IT-Mittelstand) member badge. The privacy policy is unusually transparent for a small vendor: the named sub-processors are Paddle (UK, payments / merchant of record), Amazon Web Services (Amazon Simple Email Service for newsletter delivery, the only US-owned sub-processor), Userlike (DE, chat), BunnyCDN (SI, script delivery), and TradeTracker (NL, affiliate tracking). The hosting sub-processor is disclosed too, but only inside the AVV: its Anlage 3 names TK ENTERPRISES LTD (Paphos, Cyprus) for the IT and server infrastructure, with the data centre in Frankfurt, Germany. So the analytics database sits in an EU data centre operated for Trackboxx by a Cyprus-registered company rather than by a named German provider, and because the Datenschutz page itself omits that entry, the privacy policy is an incomplete list on its own.

Pricing starts at 5 € per month for up to 25,000 page views on a single website, billed monthly, with a 30-day trial that needs no payment details; there is no standalone pricing page any more, so the figure is quoted on the homepage and the full plan ladder sits behind the registration flow. A publicly downloadable AVV is linked and commits, in clause 4c, to performing the service exclusively within an EU member state or EEA contracting state; the imprint still omits a Handelsregister number and USt-IdNr, which is consistent with a sole-proprietor (Einzelunternehmen) structure but unusual for a vendor courting business buyers. Best fit: small German-speaking SMBs and e-commerce shops that want a low-friction Google Analytics replacement and accept a sole-proprietor counter-party. Buyers who need a corporate counter-party and a hosting provider named in the privacy policy itself should compare Pirsch, Plausible or Wide Angle Analytics in this category.

Unterauftragsverarbeiter-Karte · 3

Quelle
  • BunnyWay d.o.o. EU
    Slowenien

    CDN services (BunnyCDN)

  • Paddle.com Market Ltd. non-US
    Vereinigtes Königreich

    Payment processing

  • TK ENTERPRISES LTD EU
    Zypern

    Hosting / IT-server infrastructure (datacenter Frankfurt, Germany)

Quelle: veröffentlichte Unterauftragsverarbeiter-Liste des Anbieters, gelesen am 26 Aug 2026.

Keine Unterauftragsverarbeiter in US-Eigentum oder mit Sitz in den USA.

Rahmenwerke & Zertifizierungen · keine gelistet

Wir haben die Website des Anbieters und die Register der Zertifizierungsstellen geprüft. Keine aktiven Zertifizierungen gefunden zum Zeitpunkt der letzten Prüfung (2026-08-26).

Funktionsmatrix

Tabelle 2Funktionen von Trackboxx

Cookielos Ja
Self-Hosting Nein
Eigene Events Ja
Funnels Ja
Session-Replay Nein
GA-Import Nein
Statistik-API Nein

Integration & Zugriff

REST API Nein
SSO (SAML / OIDC) Nein

Compliance & Governance

Audit log Nein
Self-host / on-prem option Nein

Preise & Tarife

ab 5 €/Monat
Kostenpflichtig

Öffentliche Dokumente

  • Auftragsverarbeitungsvertrag (AVV)
    trackboxx.com/daten…
    Öffnen
  • Liste der Unterauftragsverarbeiter
    trackboxx.com/datenschutz…
    Öffnen
  • Nutzungsbedingungen
    trackboxx.com/nutzungsbedingungen…
    Öffnen

Alternativen in dieser Kategorie

  • GoatCounter
    Irland
    EU-souverän
    Öffentl. AVV: Nicht bewertet Subprozessoren: Ja Open Source: Ja
  • Matomo
    Neuseeland · 29 €/Mt.
    EU-gehostet
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Ja
  • Pirsch Analytics
    Deutschland · 6 $/Mt.
    EU-souverän
    Öffentl. AVV: Ja Subprozessoren: Ja Open Source: Nein
Alle web-analyse-Alternativen ansehen