Web Analytics
Mixpanel
Rest of world Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Mixpanel, Inc. · mixpanel.com
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Mixpanel at a glance
- Vendor
- Mixpanel, Inc.
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Yes, per the vendor’s own page source, captured 29 Oct 2026
- Panel verdict
- The AI panel rates Mixpanel 2.5/5, the mean of 6 judges. Mixpanel is an event-based product and web analytics platform from Mixpanel, Inc., of San Francisco; persona-weighted totals ranged from 4.9 to 6.2. how scores are made
- As of
- Vendor pages captured 29 Oct 2026 to 1 Nov 2026; evaluated by the panel 30 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Mixpanel is an event-based product and web analytics platform from Mixpanel, Inc., of San Francisco; persona-weighted totals ranged from 4.9 to 6.2. Its strongest criterion is data ownership, scoring 7-8: export, query, ingestion and pipelines APIs with dedicated EU endpoints, warehouse connectors including Snowflake, events ingested without sampling, and termination terms of 30-day data availability before destruction with a certificate of destruction on request. The weakest criteria are consent and privacy and pricing transparency: we found no public information on a cookieless or consent-free mode, on how visitors are identified, or on IP truncation, and the only stated price is the free tier, with Growth listed as "Starts at $0" and we found no public Enterprise price. The genuine split is conversions and events, spanning 4-7: judges who weighed documented funnels, property breakdowns and retention scored it high, while those needing e-commerce revenue tracking, attribution or shop-system plugins found no public information. Traffic reporting scored 5-7, implementation 4-6, sovereignty 5-6 on an opt-in EU program over US-default storage.
Speaks for it
- Data ownership scored 7-8, the bench's strongest band, on export, query, ingestion and pipelines APIs with dedicated EU endpoints and warehouse connectors including Snowflake.
- All events are ingested without sampling, with query-time sampling confined to Enterprise projects above two billion monthly events.
- Personal information is made available for 30 days after termination, then destroyed, with a certificate of destruction available.
- Funnels, Flows and Retention reports break down by event property or cohort, with conversion rate among the documented measurements.
- The free tier is published with precise limits: unlimited seats, up to 1M events per month and 10K session replays.
Held against it
- Consent and privacy scored 3-4, and we found no public information on a cookieless or consent-free mode, on how visitors are identified, or on IP truncation.
- The privacy statement reserves the right to use and disclose de-identified data for any purpose.
- Growth (up to 20M events per month) is priced only as "Starts at $0", and we found no public Enterprise price, so an annual cost cannot be computed.
- We found no public information on e-commerce tracking of orders, revenue and products, on attribution models, or on conversions sent back to Google Ads or Meta.
- Storage defaults to US servers on Google Cloud Platform, and the documentation states ingestion through a customer data platform cannot be guaranteed to stay within the EU.
Best for
- You build analysis around custom events and properties and want documented funnels, cohorts and retention with raw export into your own warehouse.
- You want to start on the published free tier — unlimited seats, up to 1M events per month, 10K session replays — before committing spend.
- You can select EU residency at project creation, point your SDKs at the EU server, and run your own consent banner.
Avoid if
- You must compute a defensible annual cost from public pages — ask the vendor: the public pages we read do not show it
- You need analytics that runs without a consent banner: default collection captures city, region and country per event, and the privacy statement reserves de-identified data use.
- Your data flows through a customer data platform and EU-only processing is required: the documentation states such ingestion cannot be guaranteed to stay within the EU.
- You need a European chain end to end: the contracting entity is Mixpanel, Inc. of San Francisco and storage defaults to US servers on Google Cloud Platform.
The scores
| Criterion | Panel median |
|---|---|
| Traffic, sources & campaign reports | 3 of 5 |
| Goals, events, funnels & e-commerce | 3 of 5 |
| Consent-free operation & data minimisation | 2 of 5 |
| Data access, export & self-hosting | 3.5 of 5 |
| Installation, integrations & performance | 2.5 of 5 |
| European sovereignty | 3 of 5 |
| Pricing transparency | 2 of 5 |
Traffic, sources & campaign reports
Show reasoningHide reasoning
How this is scored
What the standard reports show: page views, visits and visitors, entry and exit pages, referrers, search engines and social networks as sources, campaigns tagged with UTM parameters, countries, devices and browsers, a real-time view, date comparisons, segments and filters, custom dashboards, scheduled email reports, shared or public dashboards, and whether reports are sampled or complete.
0 — Not a web analytics product; website traffic cannot be measured with it.
3 — Page views and visitors over time with top pages and referrers; campaign parameters, segments and report sharing are basic or not described.
5 — A dashboard with pages, referrers, UTM campaigns, countries and devices, a real-time view, date comparison, filters across all reports, email reports, and dashboards shared with clients or colleagues.
8 — Custom segments and saved views, custom dashboards and report builders, channel grouping that can be configured, Search Console or ad platform data shown beside the traffic, unsampled reports stated, several sites and roll-up reporting in one account, and annotations.
10 — Reporting that a whole organisation runs on: custom dimensions and calculated metrics, anomaly alerts, multi-site and multi-brand roll-ups with roles per site, report accuracy and how visitors are counted explained in a published methodology, and every report reproducible from the raw data.
The E-Commerce Marketing Lead
The reports sit above a standard dashboard: Insights, Funnels, Flows and Retention with global and inline filters, comparisons to past periods and segments, saved reports on boards with sharing permissions, breakdowns by property or cohort, and country, browser and device among the default data collected. Channel-level traffic analysis and campaign ROI insights are promised on the web analytics pages, and real-time self-serve trends are claimed. I found no public information on UTM campaign reports, referrer breakdowns or roll-up reporting across several shops, and query-time sampling exists for Enterprise projects above two billion monthly events. 2 3 7 10
The Data Protection Officer
The reports documentation covers Insights, Funnels, Flows and Retention with global and inline filters, comparisons against past periods, minute-level granularity and report version history, and states that no events are sampled or dropped at ingestion, with query-time sampling confined to Enterprise projects above two billion monthly events. Saved reports sit on boards that carry sharing settings, and free-plan users are capped at five saved reports each. We found no public information on referrer and UTM campaign reports, entry and exit pages, a live real-time view, scheduled email reports or roll-up reporting across several sites. 2 5 7 10
The Agency Developer
The reports documentation shows Insights, Funnels, Flows and Retention with global and inline filters, comparisons to past periods and segments, breakdowns by property or cohort, boards with sharing permissions, minute-level granularity, and the stated approach of ingesting every event without sampling at ingestion. Classic traffic reporting, though — referrers, entry and exit pages, UTM-tagged campaigns — appears on the captured pages only as a general claim of channel-level traffic and campaign ROI analysis, and no scheduled email reports or roll-up reporting across several client sites are described. 10 2 7 3
The Growth Analyst
Boards carry sharing settings and permissions, reports compare against past periods or segments with global and inline filters, and country, browser and device arrive as default collected properties; the documentation also states no events are sampled or dropped at ingestion. I found no public information on referrer reports, UTM campaign breakdowns, or entry and exit pages, so the classic traffic reports I check after every campaign are not documented, only channel-level and campaign-ROI claims from the marketing pages. 2 3 7 10
The Public-Sector Site Owner
The captured report documentation describes Insights, Funnels, Flows and Retention reports with global and inline filters, date comparisons, minute-level granularity, boards with sharing settings, and a stated sampling policy — no sampling at ingestion, with query-time sampling only for Enterprise projects over two billion monthly events. Countries, browsers and devices are among the default collected fields, and cohort segmentation is documented. We found no public information on referrer and UTM campaign reports, entry and exit pages, or roll-up reporting across several sites, so we cannot confirm the full traffic picture a council site of our size would need. 10 7 3 2
The Skeptic
The reports documentation shows Insights, Funnels, Flows and Retention with global and inline filters, breakdowns by property or cohort, comparisons against past periods, custom date ranges down to the minute, and boards whose sharing settings every report inherits; countries, browsers and devices appear only as properties collected by default, not as reports. We found no public information on referrers, entry and exit pages, UTM campaign reports or scheduled email reports. Sampling is handled honestly at the front door — all events are ingested — though Enterprise projects above 2 billion monthly events are sampled at query time. 10 7 2
Goals, events, funnels & e-commerce
panel disagrees
Show reasoningHide reasoning
How this is scored
How the product measures what visitors do: goals for pages and events, custom events with properties, outbound links, downloads, form submissions and scroll depth tracked without code, funnels with drop-off, e-commerce tracking of orders, revenue and products, attribution of conversions to channels and campaigns, cohorts and retention, and conversion data passed back to ad platforms.
0 — Counts page views only; no goals, events or conversions can be defined.
3 — Goals for a page or a custom event; funnels, revenue and attribution are basic or not described.
5 — Goals and custom events with properties, outbound links and file downloads tracked, funnels with drop-off per step, revenue attached to goals or orders, and conversions broken down by source and campaign.
8 — Full e-commerce tracking (products, cart, checkout, orders, revenue) with plugins for named shop systems, several attribution models compared, cohorts and retention, user journeys or paths, forms and scroll depth tracked without code, and conversions sent back to Google Ads, Meta or other ad platforms server to server.
10 — Conversion analysis to the level of a product analytics suite: multi-touch attribution explained, funnels and cohorts on any event or property, revenue reconciled with the shop system, predictive or anomaly metrics with their method stated, and every conversion traceable to the raw event.
The E-Commerce Marketing Lead
Funnel analysis with drop-off points, conversion-rate measurements, cohort and retention analysis and event breakdowns are documented, included even in the free plan, and the web analytics pages speak of campaign ROI and turning visitors into customers. As a shop operator I have to stop there: I found no public information on e-commerce tracking of orders, revenue and products, on plugins for named shop systems such as Shopware, or on conversion data being sent back to Google Ads, Meta or the price comparison sites I spend on. 2 3 5 10
The Data Protection Officer
Funnels with drop-off analysis, cohorts, retention and Flows journey reports are described, with events carrying properties that can be broken down and a first-time filter on any event; the web analytics pages speak of per-page conversion rates and campaign ROI insights. We found no public information on e-commerce tracking of orders, revenue and products, on compared attribution models, on sending conversions back to ad platforms server to server, or on outbound links, downloads, forms and scroll depth tracked without code. 2 3 10
The Agency Developer
Funnels with drop-off, user journeys, cohort segmentation and retention reports are documented, and events carry properties like browser, device, city, country and current URL that can be broken down and typecast — the event model is clearly there. We found no public information on e-commerce tracking of orders, revenue and products, on attribution models, or on conversions sent back to Google Ads or Meta. 3 10 2 7
The Growth Analyst
This is the part I care about and it is documented well: Funnels, Flows and Retention reports break down by any event property or cohort, a first-time filter isolates each user's first instance of an event, conversion and retention are built-in measurements, and paid plans add anomaly alerts. We found no public information on e-commerce tracking with named shop systems, compared attribution models, or conversions sent back to ad platforms server to server, which is what I would need to trace a signup all the way to the first paid invoice. 2 3 5 10
The Public-Sector Site Owner
Funnels with drop-off points, events with properties and breakdowns, cohort and retention analysis, a Flows journey report and a first-time filter per user are all documented, with conversion rate among the measurements. For the form abandonment we most need to see, we found no public information on form, outbound-link, download or scroll tracking without code. We also found no public information on e-commerce orders, revenue or attribution models, so the conversion specifics a public-service site would rely on are not described. 3 10 7 2
The Skeptic
Funnels with drop-off points, cohorts and retention analysis, first-time event filters and conversion-rate measurements are documented, and custom properties are a listed Growth inclusion. Revenue, e-commerce and attribution are where the evidence thins: we found no public information on order or revenue tracking, outbound-link or download tracking, attribution models, or conversions sent back to Google Ads or Meta. 3 10 5 2
Consent-free operation & data minimisation
Show reasoningHide reasoning
How this is scored
What is collected and whether a consent banner is needed: a cookieless mode with how visitors are counted (daily hash, server-side fingerprint, no identifier), IP addresses truncated or not stored, no cross-site or cross-device profile and no use of data for the vendor's own purposes, data retention settings, opt-out and Do Not Track, a consent mode for features that do need consent, the vendor's stated reading of §25 TDDDG, the CNIL consent exemption and the authorities' rulings on Google Analytics, and guidance for the site's privacy policy. Where the data is processed is scored under sovereignty.
0 — Requires consent for every visit and sets tracking cookies with no privacy settings at all, or shares visitor data for advertising by default.
3 — IP anonymisation or a cookie setting exists and the product is described as GDPR-compliant; how visitors are identified, retention and the consent position are basic or not described.
5 — A documented cookieless or consent-free mode that states how visitors are counted, IP addresses truncated before storage, no cross-site tracking, retention configurable, an opt-out, a consent mode for the features that need one, and a data protection page explaining when a banner is required.
8 — The consent position stated against named law (§25 TDDDG, the ePrivacy Directive, the CNIL exemption or a DPA ruling), identifiers rotated or never created and the method published, personal data never stored by default, pseudonymisation and retention settings per data type, a legal opinion or external audit of the consent-free mode cited, and wording for the privacy policy supplied.
10 — Data minimisation that can be verified: the collection script and processing open to inspection, exactly which fields are stored documented, a consent-free mode recognised by a named authority or certified, accuracy with and without consent stated, and every privacy setting the customer controls listed with its effect.
The E-Commerce Marketing Lead
GDPR is named as a regulation the analysis tools are built around, Do Not Track and Global Privacy Control are honoured on Mixpanel's own sites, the fields collected are listed in the agreement, and programmatic deletion plus retention options exist in the product. Beyond that, I found no public information on a cookieless or consent-free mode, on how visitors are counted or identified, or on a position against German or French consent law; the privacy statement also reserves the right to use and disclose de-identified data for any purpose. 6 7 8 9
The Data Protection Officer
The data processing agreement lists exactly what default settings collect — events, city, region, country code, browser, device, current URL — and the security page documents programmatic end-user deletion, configurable retention periods and a privacy portal for data subject requests; Do Not Track and Global Privacy Control are honoured on Mixpanel's own sites. There is no documented cookieless or consent-free mode, no statement of how a visitor is identified or whether an IP address is cut before storage, and no position on §25 TDDDG or the CNIL exemption. Before I signed off a site without a banner I would need the vendor's written reading of the law, and the captured pages do not supply one. 6 7 8 9
The Agency Developer
The product is described as GDPR and CCPA compliant, customers get programmatic end-user deletion, a privacy portal and configurable retention periods, and Do Not Track and Global Privacy Control are honoured on Mixpanel's own sites. A cookieless or consent-free mode for tracked visitors, how visitors are identified, whether IP addresses are truncated, and whether a consent banner is needed on the client site are not described on the captured pages. 9 8 6 7
The Growth Analyst
The product is described as built in compliance with the GDPR, with programmatic end-user deletion, configurable retention periods and a privacy portal in the account, plus a published DPA with EU Standard Contractual Clauses. We found no public information on a cookieless or consent-free mode, how visitors are identified, IP truncation, or any position against German or French consent law, so I would plan on running a consent banner; the privacy statement also reserves the right to use de-identified data for any purpose. 6 7 8 9
The Public-Sector Site Owner
The captured pages describe the tools as GDPR-compliant, offer data retention options and programmatic deletion of end-user data, and honour Do Not Track and Global Privacy Control on Mixpanel's own websites. We found no public information on a cookieless or consent-free mode, on how visitors are identified, on IP truncation, or on any position against §25 TDDDG or the CNIL exemption, and the privacy statement reserves the right to use and disclose de-identified data for any purpose. Without a documented banner-free mode we could not put this in front of the council. 6 8 9
The Skeptic
Default collection captures city, region and country per event, and the privacy policy both builds individual profiles with third-party tools on the vendor's own site and reserves the right to use de-identified data for any purpose; DNT and GPC are honoured on Mixpanel's sites, not the customer's. GDPR tooling exists — programmatic end-user deletion, retention options, a privacy portal — but we found no public information on a cookieless or consent-free mode, IP truncation, how visitors are identified, or when the vendor says a consent banner is required. 6 7 8
Data access, export & self-hosting
Show reasoningHide reasoning
How this is scored
Whether the data stays the customer's and can leave with them: a reporting API and a raw event export, CSV export of every report, a scheduled export or sync to a data warehouse or BI tool (BigQuery, Snowflake, Looker Studio), no data sampling or limits on history, import of historical data from Google Analytics or another tool, open-source code, and a self-hosted or on-premise edition the customer runs on its own servers.
0 — No export of any kind; the data can only be viewed in the vendor's dashboard.
3 — A CSV export of reports; an API, raw data and history limits are basic or not described.
5 — A documented reporting API, CSV export of all reports, the retention period for raw data stated, and an import of historical data from Google Analytics or a stated migration path.
8 — Raw event data exportable or streamed to a named warehouse or BI tool, an API covering both reporting and data collection, no sampling stated, a self-hosted or on-premise edition with its own documentation, and the data returned or deleted on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete raw export in an open format that another tool can import, and the deletion of every copy on termination documented.
The E-Commerce Marketing Lead
Raw event export, data pipelines, query and ingestion APIs with dedicated EU endpoints, CSV export of reports and user lists, and stated terms for making data available and then destroying it after termination give me genuine portability. Events are ingested unsampled, with sampling only at query time for Enterprise projects above two billion monthly events. I found no public information on a self-hosted or on-premise edition or on importing historical data from Google Analytics. 7 9 10
The Data Protection Officer
A raw data export API, a query API, an ingestion API and a data pipelines API are documented with dedicated EU endpoints, and warehouse connectors including a named Snowflake partnership move events into the customer's own warehouse. The processing agreement states personal information is made available for 30 days after termination, then destroyed, with a certificate of destruction on request. We found no public information on a self-hosted or on-premise edition, open-source code, or an import of historical data from Google Analytics, and CSV exports of reports are capped at 10,000 rows for most reports. 4 7 9 10
The Agency Developer
There is a raw data export API and data pipelines, a query API and an ingestion API, CSV exports of reports and user lists, warehouse connectors with a Snowflake partner, no sampling at ingestion, and data made available for 30 days after termination before destruction with a certificate of destruction available. We found no public information on an open-source or self-hosted edition, so the data leaves with the customer but the platform stays with the vendor. 9 10 4 7 2
The Growth Analyst
This is what decides a migration for me, and it is documented: a raw data export API with a dedicated EU endpoint, a Data Pipelines API, warehouse connectors with Snowflake among the listed partners, and separate query and ingestion APIs — enough for a nightly warehouse sync — with all events ingested without sampling. On termination, personal information is made available for 30 days and then destroyed, and a certificate of destruction is available. We found no public information on a self-hosted or open-source edition or on importing historical data from Google Analytics. 2 4 7 9 10
The Public-Sector Site Owner
A Raw Data Export API, Query and Ingestion APIs with EU endpoints, warehouse connectors including Snowflake, CSV export with stated limits of 10,000 rows for most reports and up to 50,000 for insights non-line charts, and clear termination terms — data available for 30 days after termination, then destroyed with a certificate of destruction available — are all documented, and no sampling occurs at ingestion. We found no public information on a self-hosted or on-premise edition that could run in our municipal data centre, which is what our procurement would need to own the chain end to end. 9 10 7 4
The Skeptic
A raw data export API with separate EU endpoints, a Data Pipelines API, warehouse partners such as Snowflake, and CSV export of reports (10,000 rows for most, 50,000 for some) are documented; nothing is sampled at ingestion, and on termination data is made available for 30 days then destroyed with a certificate on request. The DPA states data is stored "for the duration of an active Subscription Plan" — the history is the subscription unless exported — and we found no public information on a self-hosted edition, open-source code, or importing historical data from another tool. 9 10 7 4
Installation, integrations & performance
Show reasoningHide reasoning
How this is scored
What it takes to install and run: the size and loading of the tracking script, plugins and documented set-ups for named CMS and shop systems (WordPress, TYPO3, Shopify, Shopware, WooCommerce), single-page apps and mobile SDKs, a tag manager or Google Tag Manager template, server-side tracking and first-party proxying to avoid ad blockers, team roles and permissions, client and agency accounts, single sign-on, and an uptime or status page.
0 — No documented way to install the product on a website or app.
3 — A tracking snippet to paste into the site; plugins, SDKs, server-side options and roles are basic or not described.
5 — A documented snippet with its size stated, plugins or guides for several named CMS and shop systems, support for single-page apps, team members with roles, and an agency or multi-site account.
8 — A lightweight script or server-side collection documented, a first-party proxy or own tracking domain, SDKs for iOS, Android and named frameworks, a tag manager integration, granular roles per site, single sign-on (SAML), and a public status page with uptime history.
10 — Installation that scales across an organisation: server-side and client-side tracking with an equal feature set, an infrastructure-as-code or API-driven site set-up, white-label for agencies, SLA and support terms published, and the performance impact of the script measured and stated.
The E-Commerce Marketing Lead
Libraries and SDKs are documented — initialising them with an EU server location is explained step by step — and there is an integrations directory with 100+ marketing tools, docs and Mixpanel University, first-party tracking domains on the Enterprise plan, and sign-on configuration described for EU logins. For a shop like mine, I found no public information on the essentials: plugins or setup guides for named shop systems such as Shopware, WooCommerce or Shopify, script size or performance impact, or a public status page with uptime. 2 4 5 9
The Data Protection Officer
The integrations directory lists partners across categories from CRM and experimentation to data warehouse, the marketing pages claim integrations with more than 100 marketing tools, and the libraries require an EU server location at initialisation. Single sign-on with role-based access is documented, and the Enterprise plan includes first-party tracking domains. We found no public information on script size or loading performance, plugins for named CMS and shop systems, single-page-app support, named mobile SDKs, a tag manager template, agency or multi-site accounts, or a public status page. 2 4 5 7 9
The Agency Developer
Single sign-on with role-based access, permissions inherited through shared boards, SDKs whose server location is set at initialisation, a first-party tracking domain option on the Enterprise plan, and a directory of 100+ integrations are documented. We found no public information on plugins or guides for named CMS and shop systems like WordPress, TYPO3 or Shopify, on script size, on an agency or multi-site account, or on a public status page. 7 9 5 10 4 2
The Growth Analyst
The integration directory lists 100+ marketing tools across some 25 categories, SDKs are initialised with an explicit region setting, single sign-on is supported with a documented EU routing detail, and the Enterprise plan adds first-party tracking domains, which is what survives ad blockers. We found no public information on the tracking script's size, plugins for named CMS or shop systems, single-page-app support, or a public status page with uptime history. 2 4 5 9
The Public-Sector Site Owner
A partner directory with 100+ marketing tool integrations spanning CRM to data warehouse, SDKs that must be set to the EU server at initialization, single sign-on with role-based access, and first-party tracking domains on the Enterprise plan are documented, with Docs & Guides and Mixpanel University as support resources. We found no public information on tracking script size, on plugins or guides for named CMS systems such as WordPress or TYPO3, or on a public status page with uptime history. For a large public site, the install specifics are simply not described. 4 9 7 5 2
The Skeptic
SDKs you initialise with a server location, a claimed 100+ marketing integrations with a partner directory, SSO with role-based access, and first-party tracking domains on the Enterprise plan are the documented extent. We found no public information on the tracking script's size, plugins or guides for named CMS and shop systems, single-page app or mobile SDK details, a tag manager template, or a public status page. 9 5 7 2
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where visitor data is collected, stored and processed, and who the subprocessors are (script CDN, collection endpoint, hosting, email reports, support and payment tools). Independently sourced by the sovereignty pipeline; visitor data is personal data under European rulings, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (CDN, collection endpoint, email, support, payment) run through non-EU providers without a stated safeguard, or EU processing relies on a proxy in front of a non-EU service.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every visitor record on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The E-Commerce Marketing Lead
EU data residency is a documented programme with dedicated EU endpoints, an EU representative in Barcelona, a published data processing agreement with Standard Contractual Clauses, and a public subprocessor list. The chain behind it stays American: the contracting entity is Mixpanel, Inc. of San Francisco, data sits on US servers via Google Cloud by default with transfers relying on the Data Privacy Framework, and the documentation states that ingestion through a customer data platform cannot be guaranteed to stay within the EU. 6 7 8 9
The Data Protection Officer
The contracting entity is a San Francisco company with US storage on Google Cloud Platform as the default, while the EU Data Residency Program provides dedicated European endpoints for ingestion, query, export and pipelines chosen at project creation; an EU representative sits in Barcelona and a UK representative in London. A published data processing agreement offers Standard Contractual Clauses and relies on the EU-US Data Privacy Framework, a subprocessor list is published with thirty days' notice and objection rights, and the certifications cited on the security page belong to the cloud provider rather than to Mixpanel itself. The documentation itself warns that data arriving through a customer data platform cannot be guaranteed to stay within the EU region — the kind of gap I look for in the whole chain, not only the database. 6 7 8 9
The Agency Developer
An EU Data Residency Program with dedicated EU ingestion, export, query and pipeline endpoints exists, alongside an EU representative in Barcelona, a published data processing agreement with Standard Contractual Clauses and Data Privacy Framework certification, and a published subprocessor list with notice and objection rights. But data is stored on US servers by default, the contracting entity is a US company, the vendor states data coming via a customer data platform cannot be guaranteed to stay within the EU, and a project created with the wrong residency cannot be migrated with assistance — a real operational risk when forty client projects are set up. 9 6 7 8
The Growth Analyst
EU residency is a native program rather than a proxy — dedicated EU ingestion, query, export and pipelines endpoints, enabled at project creation — backed by a published DPA, EU Standard Contractual Clauses and a subprocessor list with 30 days' notice and an objection right. But the contracting entity is the San Francisco company with only a Barcelona representative, hosting defaults to US servers on Google Cloud Platform, the documentation states EU-only ingestion cannot be guaranteed when a customer data platform sits in front, and I found no public information on the individual subprocessors' locations. 6 7 9
The Public-Sector Site Owner
The contracting entity is Mixpanel, Inc., and by default data is stored on US servers via Google Cloud Platform; an opt-in EU Data Residency Program with EU endpoints for ingestion, query and export, an EU data protection representative in Barcelona, a published DPA with Standard Contractual Clauses and a subprocessor list with 30 days' notice give a partial European chain. Two caveats matter to us: transfers rely on the EU-US Data Privacy Framework, and the documentation states that CDP ingestion cannot be guaranteed to stay within the EU and that Mixpanel cannot assist with migrating a project created with the wrong residency. We found no public information on a self-hosted edition keeping every visitor record on our own servers. 6 7 9 8
The Skeptic
Storage defaults to US servers on Google Cloud Platform, the contracting entity is Mixpanel, Inc. of San Francisco, and the cloud provider named in both regions is Google; the EU Data Residency Program is opt-in but documented down to separate EU ingestion, query and export endpoints, with an EU representative in Barcelona, a published DPA and a subprocessor list URL. The vendor's own documentation concedes CDP ingestion "cannot be guaranteed" to stay within the EU and that Mixpanel "cannot assist with migrating" a project created with the wrong residency — an opt-in EU region on a US hyperscaler, not a European chain. 9 6 8 7
Pricing transparency
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per tier by monthly page views or events, what happens when traffic exceeds the tier, the number of sites and users included, which features (e-commerce, funnels, raw export, API, SSO, longer retention) cost extra, the free tier and its limits, the self-hosted edition and its support, minimum term and setup.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with traffic, sites or features is unclear.
5 — Tiers are public with their price per traffic band and main inclusions, but at least one commonly needed piece (overage, extra sites, raw export, SSO, longer retention) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (page views, events, sites, users), overage handling stated, add-ons priced, the self-hosted edition's cost or licence stated, minimum term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given traffic volume, site count and feature set, with every add-on, setup, support and overage fee and the cancellation and data-return terms published.
The E-Commerce Marketing Lead
The free tier is unusually concrete — "Free forever", up to 1M events / month, unlimited seats, 10K session replays / month, five saved reports per user — and the event bands for Growth (up to 20M events / month) and Enterprise (up to 1T events / month) are published. But Growth is shown only as "Starts at $0", no price is shown for the Enterprise tier, and I found no public information on overage charges, extra sites, minimum terms or VAT treatment, so I cannot work out my annual cost from these pages. 5 10
The Data Protection Officer
The free tier is public and detailed — unlimited seats, up to 1M events / month, 10K session replays / month — and Growth is quoted as "Starts at $0" with "Volume discounts available"; the Enterprise plan lists inclusions such as up to 1T events / month and a custom retention policy but no price. How cost scales with traffic, seats or features beyond the free limits, and what happens on overage, is not derivable from the captured pages. A buyer cannot compute a real annual cost for a given traffic volume from public information alone. 5 10
The Agency Developer
A free tier is public with clear limits (unlimited seats, up to 1M events and 10K session replays per month), and Growth and Enterprise inclusions are listed by event volume with Growth quoted as "Starts at $0" and volume discounts available. How the price scales with events, what happens when a client site exceeds its tier, Enterprise pricing, minimum term and VAT treatment are not stated, so the annual cost for a busy client shop is not computable from the captured pages. 5 10
The Growth Analyst
The free tier is unusually well specified — unlimited seats, up to 1M events per month, 10K session replays — and each plan's event ceilings, alerts, saved-report limits and version-history retention are public. But the only stated price is free: Growth is listed as "Starts at $0" with volume discounts available and Enterprise runs on custom volumes, so I cannot compute a real annual cost for our traffic, and we found no public information on overage handling, add-on pricing, minimum terms or VAT. 5 10
The Public-Sector Site Owner
The pricing page publishes a free tier with precise limits — unlimited seats, up to 1M events per month, 10K session replays, 5 saved reports per user — and Growth plan limits of up to 20M events per month described as "Starts at $0" with volume discounts available. We found no public information on the Enterprise price, on overage handling, on the number of sites included, on minimum terms or on VAT treatment. A procurement office could not compute the real annual cost from these pages alone. 5 10
The Skeptic
The free tier is properly specified — 1M events, 10k session replays, unlimited seats, five saved reports per user — and Growth and Enterprise publish their volume limits (up to 20M and up to 1T events per month respectively). Growth is priced as "Starts at $0" with "volume discounts available", Enterprise volumes are "custom", and we found no public information on overage handling, minimum term, setup fees or VAT — the buyer can read the limits but not compute the bill. 5 10
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Mixpanel
Is Mixpanel European?
No. whats-best.ai classifies Mixpanel as Rest of world.
Where does Mixpanel store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Mixpanel have a free plan?
Yes. Mixpanel has a free plan, per the vendor’s page captured 29 Oct 2026.
What are the best alternatives to Mixpanel?
As of 4 Nov 2026, the panel rates Matomo (4/5), Piwik PRO Analytics Suite (3.5/5) and Pirsch Analytics (3.5/5) highest among the other 17 Web Analytics products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Piwik PRO Analytics Suite (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Mixpanel alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 29 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Hosting location, Hosting options. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 24 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 14 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 12 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 9 support facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 8 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 hosting fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (19)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage mixpanel.com Checked 29 Oct 2026 Details →
- 2 Features page (web analytics) mixpanel.com Checked 29 Oct 2026 Details →
- 3 Features page (product analytics) mixpanel.com Checked 29 Oct 2026 Details →
- 4 Integrations page mixpanel.com Checked 29 Oct 2026 Details →
- 5 Pricing page mixpanel.com Checked 29 Oct 2026 Details →
- 6 Privacy policy mixpanel.com Checked 29 Oct 2026 Details →
- 7 Data processing agreement (dpa) mixpanel.com Checked 29 Oct 2026 Details →
- 8 Security / trust page mixpanel.com Checked 29 Oct 2026 Details →
- 9 Documentation (EU data residency) docs.mixpanel.com Checked 29 Oct 2026 Details →
- 10 Traffic, sources & campaign reports — found from sitemap docs.mixpanel.com Checked 29 Oct 2026 Details →
- 11 Traffic, sources & campaign reports — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 12 Goals, events, funnels & e-commerce — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 13 Goals, events, funnels & e-commerce — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 14 Consent-free operation & data minimisation — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 15 Consent-free operation & data minimisation — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 16 Data access, export & self-hosting — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 17 Data access, export & self-hosting — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 18 Installation, integrations & performance — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →
- 19 Installation, integrations & performance — found from sitemap docs.mixpanel.com Checked 1 Nov 2026 Details →