Skip to content
Independently verified · Quarterly re-audit
EU VETTED

Plausible Analytics

VERIFIED
Web analytics · Estonia
Founded 2018 · plausible.io ↗

Estonian-incorporated privacy-first Google Analytics alternative, bootstrapped, hosted on Hetzner Falkenstein, open source.

In short

Plausible Analytics, in the Web analytics category, is an EU-owned service with Germany as its hosting location and no identified CLOUD Act exposure.

Assessment notes

Estonian OÜ, bootstrapped and self-funded, runs the entire customer analytics stack on EU-incorporated infrastructure (Hetzner Falkenstein DE, Bunny SI, UpCloud FI) with no customer data at rest on a US-owned cloud; the publicly-linked DPA, AGPL open-source codebase, and self-hosting option round out a strong EU-owned, EU-hosted posture with no CLOUD Act exposure on the customer-data path. The only US-owned sub-processors (Postmark for system email, Algolia for docs search, hCaptcha for signup anti-spam) are ancillary, transient and SCC-covered (none touches analytics data at rest), so under a data-at-rest definition CLOUD Act exposure is none.

CLOUD ACT
OWNERSHIP
SUB-PROCS
7 · 3 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About Plausible Analytics

Plausible Analytics is the textbook procurement-friendly Google Analytics alternative: an Estonian-incorporated, bootstrapped, profitable team-of-ten that runs the entire product on European infrastructure and publishes a clean, public DPA. The legal entity is Plausible Insights OÜ in Tartu, Estonia. Uku Taht launched the project in December 2018 and Marko Saric joined as co-founder in 2020. The company is self-funded, has more than 17,000 paying subscribers, and explicitly rejects outside investment, keeping the cap table firmly EU-owned.

The product is a lightweight, cookieless analytics script (~1 KB, ~54× smaller than GA4) that does not use persistent identifiers; daily salts are rotated and deleted, raw IPs and User-Agents are never stored, and no cookie banner is required for visitor analytics. Customer analytics data is "kept fully secured, encrypted and hosted on 100% renewable-energy-powered servers in Falkenstein, Germany"; Hetzner is the named hosting provider. Other product sub-processors are EU-only as well: Bunny CDN (Slovenia) and UpCloud (Finland). The small set of non-EU sub-processors is scoped to ancillary functions and covered by Standard Contractual Clauses: Paddle for billing (UK), Postmark for transactional email (US), and Algolia for documentation search (US, added May 2026). Optional integrations (Google, Help Scout) only engage if a customer turns them on.

Pricing starts at €8/month (billed in USD at $9) for the Starter plan with 10k pageviews and three years of data retention; a 30-day free trial requires no credit card. Plausible is also fully open source (AGPL on GitHub) and self-hostable, making it a credible answer for buyers who want the option to escape SaaS entirely. Best fit: privacy-first websites, EU agencies, regulated SMBs, and open-source-friendly engineering teams replacing GA4, and the strongest baseline reference point on this directory for how a "no CLOUD Act drama" web analytics stack actually looks.

SUB-PROCESSORS

Sub-processor map · 7

Source ↗
  • Algolia, Inc. US
    United States

    Documentation search (ancillary, added May 2026, SCC-covered)

  • hCaptcha (Intuition Machines, Inc.) US
    United States

    Anti-spam on account registration (ancillary; signup path, not analytics)

  • Postmark (ActiveCampaign, LLC) US
    United States

    Transactional emails and scheduled reports (ancillary, SCC-covered)

  • BunnyWay (Bunny.net) EU
    Slovenia

    Content delivery network (CDN), DNS, DDoS protection

  • Hetzner Online GmbH EU
    Germany

    Server hosting and storage of visitor analytics data (Falkenstein, Germany)

  • Paddle.com Market Ltd non-US
    United Kingdom

    Payment processing / merchant of record

  • UpCloud EU
    Finland

    Database hosting and storage of data exports

3 of 7 sub-processors are US-incorporated. These are ancillary processors that do not hold protected customer data, so they do not change the assessment. CLOUD Act exposure is rated none.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-10).
FEATURES

Capability matrix

Cookieless Yes
Self-hostable Yes
Custom events Yes
Funnels Yes
Session replay No
GA import Yes
Stats API Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option Yes
PRICING

Pricing & tiers

PAID
from €8/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    plausible.io/dpa…
    Open ↗
  • Sub-processors list
    plausible.io/privacy…
    Open ↗
  • Terms of Service
    plausible.io/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

GoatCounter
Ireland · Founded 2019
EU-SOVEREIGN

Solo-developer open-source web analytics on Hetzner DE/FI; no IP storage, no trackers, free for personal use, MIT-style source on GitHub.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Matomo
New Zealand · Founded 2007
EU-HOSTED

Open-source web analytics (NZ-incorporated InnoCraft) with EU-hosted Matomo Cloud on AWS and full self-hosted option.

Public DPA Sub-processors Open source
FROM
€29/mo
CLOUD ACT
MATERIAL
Pirsch Analytics
Germany · Founded 2020
EU-SOVEREIGN

German cookieless server-side web analytics on Hetzner Gunzenhausen with bilingual public DPA and Schrems II-aligned posture.

Public DPA Sub-processors Open source
FROM
€6/mo
CLOUD ACT
NONE