Pirsch Analytics
A single roll-up of ownership and CLOUD Act exposure.
-
EU-Sovereign This listing EU/EEA/Switzerland-owned and -operated, with no identified CLOUD Act exposure.
-
EU-Based EU-operated, with at most minor or transient US exposure.
-
EU-Hosted EU hosting available, but a US parent or hyperscaler sub-processor creates material exposure.
-
US-Linked Operated by a US-incorporated entity, directly subject to US jurisdiction.
German cookieless server-side web analytics on Hetzner Gunzenhausen with bilingual public DPA and Schrems II-aligned posture.
Pirsch Analytics is an EU-owned service hosted in Germany, with no identified CLOUD Act exposure. It is listed under Web analytics.
Assessment notes
German GmbH (Emvi Software) running customer analytics on Hetzner in Gunzenhausen with cookieless server-side tracking, a publicly-linked bilingual DE/EN DPA, and SCC-covered US sub-processors limited to ancillary functions (Stripe payments, Intuition Machines CAPTCHA) plus AWS-EU and GCP-EU for email/workspace. EU-owned and EU-hosted with a public DPA, and the US sub-processors (Stripe payments, Intuition Machines CAPTCHA, AWS-EU SES email, GCP-EU workspace) are all ancillary and off the customer-analytics data-at-rest path (core analytics on Hetzner Gunzenhausen), so under a data-at-rest definition CLOUD Act exposure is none.
Findings
- CLOUD Act
- CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
-
- Ownership
- Ownership
Where ultimate control over the operating company sits.
-
EU-owned This listing EU-incorporated and EU-controlled; no significant US ownership.
-
EU HQ, US-funded EU-headquartered but US venture- or PE-controlled.
-
EU subsidiary, US parent European operating company owned by a US parent company.
-
US-owned The operating company itself is US-headquartered.
-
Other A non-EU jurisdiction. Swiss/EEA-owned vendors count as European here; the UK and others do not.
-
- Sub-processors
- 6 · 4 US
Verified signals
-
EU / adequacy hosting: Yes
-
EU / adequacy operator: Yes
-
No US CLOUD Act exposure: Yes
-
Public DPA: Yes
-
Sub-processors disclosed: Yes
-
Open-source clients: No
-
Third-party certification: No
Jump to
About Pirsch Analytics
Pirsch is a Rheda-Wiedenbrück-based privacy-focused web analytics product operated by Emvi Software GmbH (Nickelstraße 1b, 33378 Rheda-Wiedenbrück). The product is built around server-side, cookieless tracking and explicitly markets itself as "Made and hosted with ❤️ in Germany, Europe" with GDPR, CCPA, PECR, and Schrems II compliance positioning, exactly the BSI-friendly profile that procurement-oriented German buyers tend to gravitate to as a Google Analytics alternative.
Customer analytics data sits on a Hetzner Online GmbH cluster in Gunzenhausen, Germany. The privacy policy is unusually transparent for a small vendor: it names every sub-processor with full address, including AWS EMEA SARL (Luxembourg) for transactional email and Google Cloud EMEA Limited (Dublin, Ireland) for workspace/communications, meaning the hosting graph is EU-region but uses US-owned hyperscalers for ancillary services. The remaining sub-processors are Stripe Inc. (San Francisco) for payments, Intuition Machines Inc. (San Francisco) for CAPTCHA verification, and Datev eG (Nuremberg) for tax-document exchange. US transfers are documented under the Standard Contractual Clauses of the European Commission per Art. 46 GDPR. The DPA is publicly available in both English and German via the footer.
Pricing is quoted in USD on the public pricing page: the Standard plan starts at $6/month with 50 websites, unlimited members, and unlimited data retention, with Plus above it. EUR is available as a currency choice inside the billing flow; a 30-day free trial requires no credit card and SEPA Direct Debit in EUR is supported. There is no permanent free tier, so pricing_tier is paid. Best fit: German and DACH SMBs, agencies, and developers replacing Google Analytics with a cookie-banner-free Schrems-II-aligned tool, who need a credible "data stays in Germany" answer plus a self-serve DPA. Buyers who require open source or a fully self-hostable option should prefer Plausible; buyers who can accept Cloudflare/CDN exposure but want a richer feature set should benchmark against Matomo Cloud.
Sub-processor map · 6
-
Amazon Web Services EMEA SARL USLuxembourg
AWS SES email sending (only when contacting or registering); ancillary
-
Google Cloud EMEA Limited USIreland
Google Workspace for appointment/contact management and email; ancillary
-
Intuition Machines, Inc. USUnited States
CAPTCHA service (bot detection); ancillary
-
Stripe, Inc. USUnited States
Payment services; ancillary
-
Datev eG EUGermany
Software for communication with tax advisors/authorities
-
Hetzner Online GmbH EUGermany
Data center / web hosting (visitor data)
| Vendor | Country | Purpose | Owner |
|---|---|---|---|
| Amazon Web Services EMEA SARL | Luxembourg | AWS SES email sending (only when contacting or registering); ancillary | US |
| Google Cloud EMEA Limited | Ireland | Google Workspace for appointment/contact management and email; ancillary | US |
| Intuition Machines, Inc. | United States | CAPTCHA service (bot detection); ancillary | US |
| Stripe, Inc. | United States | Payment services; ancillary | US |
| Datev eG | Germany | Software for communication with tax advisors/authorities | EU |
| Hetzner Online GmbH | Germany | Data center / web hosting (visitor data) | EU |
Source: the vendor’s published sub-processor list, read 26 Aug 2026.
Frameworks & certifications · none listed
Capability matrix
Table 2Capabilities of Pirsch Analytics
Integration & access
Compliance & governance
Pricing & tiers
Public documents
Alternatives in this category
-
IrelandEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Not assessed Sub-processors: Yes Open source: Yes -
-
New Zealand · €29/moEU-HostedCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material This listing US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: Yes -
-
Estonia · €8/moEU-SovereignCLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
-
None This listing EU operator, no US parent, no US sub-processors of note.
-
Minor A transient US sub-processor (CDN, maps); data at rest stays in the EU.
-
Material US parent, or a core sub-processor is a US-owned hyperscaler.
-
Direct The operator itself is US-incorporated.
Public DPA: Yes Sub-processors: Yes Open source: Yes -
| Product | Sovereignty | CLOUD Act | Signals | From |
|---|---|---|---|---|
GoatCounter
Ireland
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Not assessed
Sub-processors: Yes
Open source: Yes
|
— |
Matomo
New Zealand
|
EU-Hosted | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: Yes
|
€29/mo |
Plausible Analytics
Estonia
|
EU-Sovereign | CLOUD Act exposure
How exposed customer data is to US authorities under the CLOUD Act (Clarifying Lawful Overseas Use of Data Act).
|
Public DPA: Yes
Sub-processors: Yes
Open source: Yes
|
€8/mo |