Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Pirsch Analytics

VERIFIED
Web analytics · Germany
Founded 2020 · pirsch.io ↗

German cookieless server-side web analytics on Hetzner Gunzenhausen with bilingual public DPA and Schrems II-aligned posture.

In short

Pirsch Analytics, in the Web analytics category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

German GmbH (Emvi Software) running customer analytics on Hetzner in Gunzenhausen with cookieless server-side tracking, a publicly-linked bilingual DE/EN DPA, and SCC-covered US sub-processors limited to ancillary functions (Stripe payments, Intuition Machines CAPTCHA) plus AWS-EU and GCP-EU for email/workspace. EU-owned and EU-hosted with a public DPA, and the US sub-processors (Stripe payments, Intuition Machines CAPTCHA, AWS-EU SES email, GCP-EU workspace) are all ancillary and off the customer-analytics data-at-rest path (core analytics on Hetzner Gunzenhausen), so under a data-at-rest definition CLOUD Act exposure is none.

CLOUD ACT
OWNERSHIP
SUB-PROCS
6 · 4 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Pirsch Analytics

Pirsch is a Rheda-Wiedenbrück-based privacy-focused web analytics product operated by Emvi Software GmbH (Nickelstraße 1b, 33378 Rheda-Wiedenbrück). The product is built around server-side, cookieless tracking and explicitly markets itself as "Made and hosted with ❤️ in Germany, Europe" with GDPR, CCPA, PECR, and Schrems II compliance positioning, exactly the BSI-friendly profile that procurement-oriented German buyers tend to gravitate to as a Google Analytics alternative.

Customer analytics data sits on a Hetzner Online GmbH cluster in Gunzenhausen, Germany. The privacy policy is unusually transparent for a small vendor: it names every sub-processor with full address, including AWS EMEA SARL (Luxembourg) for transactional email and Google Cloud EMEA Limited (Dublin, Ireland) for workspace/communications, meaning the hosting graph is EU-region but uses US-owned hyperscalers for ancillary services. The remaining sub-processors are Stripe Inc. (San Francisco) for payments, Intuition Machines Inc. (San Francisco) for CAPTCHA verification, and Datev eG (Nuremberg) for tax-document exchange. US transfers are documented under the Standard Contractual Clauses of the European Commission per Art. 46 GDPR. The DPA is publicly available in both English and German via the footer.

Pricing in EUR is straightforward: the Standard plan starts at €6/month with 50 websites, unlimited members, and unlimited data retention; a 30-day free trial requires no credit card and SEPA Direct Debit is supported. There is no permanent free tier, so pricing_tier is paid. Best fit: German and DACH SMBs, agencies, and developers replacing Google Analytics with a cookie-banner-free Schrems-II-aligned tool, who need a credible "data stays in Germany" answer plus a self-serve DPA. Buyers who require open source or a fully self-hostable option should prefer Plausible; buyers who can accept Cloudflare/CDN exposure but want a richer feature set should benchmark against Matomo Cloud.

SUB-PROCESSORS

Sub-processor map · 6

Source ↗
  • Amazon Web Services EMEA SARL US
    Luxembourg

    AWS SES email sending (only when contacting or registering); ancillary

  • Google Cloud EMEA Limited US
    Ireland

    Google Workspace for appointment/contact management and email; ancillary

  • Intuition Machines, Inc. US
    United States

    CAPTCHA service (bot detection); ancillary

  • Stripe, Inc. US
    United States

    Payment services; ancillary

  • Datev eG EU
    Germany

    Software for communication with tax advisors/authorities

  • Hetzner Online GmbH EU
    Germany

    Data center / web hosting (visitor data)

4 of 6 sub-processors are US-incorporated. These are ancillary processors that do not hold protected customer data, so they do not change the assessment. CLOUD Act exposure is rated none.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-10).
FEATURES

Capability matrix

Cookieless Yes
Self-hostable Yes
Custom events Yes
Funnels Yes
Session replay No
GA import Yes
Stats API Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

PAID
from €6/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    pirsch.io/dpa…
    Open ↗
  • Sub-processors list
    pirsch.io/privacy…
    Open ↗
  • Terms of Service
    pirsch.io/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

GoatCounter
Ireland · Founded 2019
EU-SOVEREIGN

Solo-developer open-source web analytics on Hetzner DE/FI; no IP storage, no trackers, free for personal use, MIT-style source on GitHub.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Matomo
New Zealand · Founded 2007
EU-HOSTED

Open-source web analytics (NZ-incorporated InnoCraft) with EU-hosted Matomo Cloud on AWS and full self-hosted option.

Public DPA Sub-processors Open source
FROM
€29/mo
CLOUD ACT
MATERIAL
Plausible Analytics
Estonia · Founded 2018
EU-SOVEREIGN

Estonian-incorporated privacy-first Google Analytics alternative, bootstrapped, hosted on Hetzner Falkenstein, open source.

Public DPA Sub-processors Open source
FROM
€8/mo
CLOUD ACT
NONE