Simple Analytics is a Dutch privacy-first web analytics product operated by Simple Analytics B.V. (registered in Bussum, Netherlands; KVK 60978856) and founded by Adriaan van Rossum in 2018. It is one of the cleanest "no-CLOUD-Act-exposure" picks in the web-analytics category: customer analytics data is stored on bare-metal infrastructure at Worldstream and Leaseweb in the Netherlands, the CDN runs through Bunny (Slovenia), and the company explicitly states that "only Simple Analytics holds the decryption keys", meaning even the hosting providers cannot read unencrypted customer data. The reference customer list is unusually strong for a small vendor: the Bank of England, Michelin, Hyundai, and the UK Government all appear on the homepage.
Compliance positioning is built on a "no personal data" principle: no cookies, no IP collection, no device fingerprinting, no persistent identifiers, which lets the product claim GDPR, UK PECR, German TTDSG, CCPA, and even HIPAA fitness without a Business Associate Agreement. The company publishes documentation of its compliance posture at docs.simpleanalytics.com (compliance, compliance-faq, data-security-and-ownership) and includes correspondence from the UK ICO confirming that no consent banner is required when analytics providers neither read nor write to user devices. Where Simple Analytics is weaker for procurement-grade buyers is in the format of its DPA and sub-processors disclosures: the dedicated /dpa, /sub-processors, and /privacy-policy paths returned 404 or 301-redirect at audit, and there is no single downloadable DPA artefact; the relevant information is split across docs pages.
Pricing is freemium and EU-buyer-friendly: the free tier covers one user, five websites, 30 days of history, and unlimited pageviews; Simple is €15/month (one user, ten websites, three years of retention); Team is €40/month plus €20 per additional user; Enterprise is custom-priced with SLA and priority support. EUR/USD/GBP currency switching, bank transfer accepted on invoices €500+, plus Bitcoin/Apple Pay/Google Pay. Best fit: privacy-conscious EU companies, public-sector buyers, and indie publishers who want a no-cookie, no-CLOUD-Act analytics stack with named Dutch hosting and a credible reference list, and don't yet need a unified DPA download.