Skip to content
Independently verified · Quarterly re-audit
EU VETTED

TelemetryDeck

VERIFIED
Web analytics · Germany
Founded 2020 · telemetrydeck.com ↗

German privacy-first mobile + web app analytics with on-device anonymisation, EN/DE DPA, and a transparent sub-processors list.

In short

TelemetryDeck, in the Web analytics category, offers EU hosting with Germany as its hosting location, but a US parent or sub-processor leaves material CLOUD Act exposure.

Assessment notes

German GmbH (Augsburg) with on-device anonymisation, public DPA + AVV in EN/DE and a transparent named sub-processors list, but the infrastructure mix includes Microsoft Ireland (Azure, US-owned, EU-region), AWS Inc. (Seattle), and HubSpot (US) alongside Hetzner Gunzenhausen, so customer signal data sits across multiple US-owned hyperscalers; EU-owned with a public DPA and disclosed sub-processors, but material CLOUD Act exposure due to Azure and AWS handling customer data at rest.

CLOUD ACT
OWNERSHIP
SUB-PROCS
5 · 3 US
Verified signals
Jurisdiction
  • EU / adequacy hosting
  • EU / adequacy operator
  • No US CLOUD Act exposure
Transparency
  • Public DPA
  • Sub-processors disclosed
  • Open-source clients
  • Third-party certification
JUMP TO
OVERVIEW

About TelemetryDeck

TelemetryDeck is an Augsburg-headquartered privacy-first mobile and web app analytics platform operated by TelemetryDeck GmbH (Von-der-Tann-Str. 54, 86159 Augsburg, Germany), founded in 2020 by Daniel and Lisa during the pandemic and serving more than 6,000 developers across iOS, Android, Flutter, React Native, and the web. The differentiator is on-device anonymisation: signals are hashed before they ever leave the device, so the dashboard sees only aggregate, non-identifying data, which makes app-store privacy nutrition labels trivial and removes the need for in-app tracking consent in most jurisdictions.

Trust documentation is unusually thorough for a small German vendor: a publicly-linked DPA in English, an AVV (Auftragsverarbeitungsvertrag) in German, a transparent privacy policy (last updated 30 June 2025) that names every sub-processor with its full legal address, and Standard Contractual Clauses (EU-Standarddatenschutzklauseln) cited for any third-country transfers. The infrastructure side is more mixed than the brand suggests, however. The privacy policy lists three hosting providers: Hetzner Online GmbH in Gunzenhausen (EU-owned, EU region), Microsoft Ireland Operations Ltd. in Dublin (Azure, US-owned hyperscaler in an EU region), and Amazon Web Services, Inc. (Seattle legal-entity address, region unclear), which means a non-trivial portion of customer signal data at rest sits with US-owned hyperscalers. Other sub-processors include HubSpot (US, contact management), Brevo (DE, newsletter), Meta Ireland (Instagram embed), X Corp Ireland (Twitter embed), GitHub (US, code-hosting widget), and Mastodon (DE, social embed). Per the directory's strict CLOUD Act stance, where provider ownership matters more than data-centre region (Schrems II / Microsoft Ireland v US), this combination is material CLOUD Act exposure despite an otherwise excellent transparency posture.

Pricing is freemium: 100,000 signals/month free for indie developers, with paid plans starting around €9/month; annual billing offered with 20% discount. Awards: CDR Corporate Digital Responsibility 2024, MyData Award 2025, Augusta Wirtschaftspreis für Frauen. Best fit: indie iOS/Android/Flutter developers and small mobile-app shops who want on-device privacy with a clean DPA story and don't mind the Azure-EU + AWS dependency. Procurement-grade enterprise mobile teams with strict no-US-cloud requirements should look at self-hosted Matomo for mobile, or evaluate whether the Hetzner-only data path can be selected explicitly with TelemetryDeck.

SUB-PROCESSORS

Sub-processor map · 5

Source ↗
  • Amazon Web Services, Inc. US
    United States

    Hosting (analytics infrastructure, eu-central-1 Frankfurt)

  • HubSpot Inc. US
    United States

    CRM

  • Microsoft Ireland Operations Ltd. US
    Ireland

    Hosting

  • Hetzner Online GmbH EU
    Germany

    Hosting

  • Sendinblue GmbH (Brevo) EU
    Germany

    Newsletter

3 of 5 sub-processors are US-incorporated. CLOUD Act exposure applies.
CERTIFICATIONS

Frameworks & certifications · none listed

We checked the vendor's website and standard certification body registries. No active certifications found at the time of last audit (2026-05-10).
FEATURES

Capability matrix

Cookieless Yes
Self-hostable No
Custom events Yes
Funnels Yes
Session replay No
GA import No
Stats API Yes
INTEGRATION & ACCESS
REST API Yes
SSO (SAML / OIDC) No
COMPLIANCE & GOVERNANCE
Audit log No
Self-host / on-prem option No
PRICING

Pricing & tiers

FREEMIUM
from €9/mo
View pricing page ↗
PUBLIC DOCUMENTS

Public documents

  • Data Processing Addendum (DPA)
    telemetrydeck.com/dpa…
    Open ↗
  • Sub-processors list
    telemetrydeck.com/privacy…
    Open ↗
  • Terms of Service
    telemetrydeck.com/terms…
    Open ↗
ALTERNATIVES

Alternatives in this category

GoatCounter
Ireland · Founded 2019
EU-SOVEREIGN

Solo-developer open-source web analytics on Hetzner DE/FI; no IP storage, no trackers, free for personal use, MIT-style source on GitHub.

Public DPA Sub-processors Open source
FROM
CLOUD ACT
NONE
Matomo
New Zealand · Founded 2007
EU-HOSTED

Open-source web analytics (NZ-incorporated InnoCraft) with EU-hosted Matomo Cloud on AWS and full self-hosted option.

Public DPA Sub-processors Open source
FROM
€29/mo
CLOUD ACT
MATERIAL
Pirsch Analytics
Germany · Founded 2020
EU-SOVEREIGN

German cookieless server-side web analytics on Hetzner Gunzenhausen with bilingual public DPA and Schrems II-aligned posture.

Public DPA Sub-processors Open source
FROM
€6/mo
CLOUD ACT
NONE