Web Analytics
Pirsch Analytics
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Emvi Software GmbH · pirsch.io
Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Pirsch Analytics at a glance
- Vendor
- Emvi Software GmbH
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Not stated on the vendor’s pages as of 1 Nov 2026
- Free plan
- Not stated on the vendor’s pages as of 1 Nov 2026
- Panel verdict
- The AI panel rates Pirsch Analytics 3.5/5, the mean of 6 judges. Pirsch Analytics is a cookieless web analytics product from Emvi Software GmbH in Rheda-Wiedenbrück, Germany. how scores are made
- As of
- Vendor pages captured 29 Oct 2026 to 1 Nov 2026; evaluated by the panel 30 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Pirsch Analytics is a cookieless web analytics product from Emvi Software GmbH in Rheda-Wiedenbrück, Germany. It scores highest on consent and privacy, implementation and sovereignty, each at 7: the counting method is published (a 16-digit visitor ID hashed from IP address, user agent, date and a per-site salt; IP addresses never persisted; recognition capped at 24 hours), first-party deployment is well documented with server-side tracking, custom domains and open-source proxies in Go and PHP, and the privacy notice states data is stored only on servers in Germany at Hetzner, with subprocessors listed — two of them US-based, Stripe for payments and Intuition Machines for CAPTCHA. Conversions and events and data ownership score 6: e-commerce goes no further than revenue tracking, raw-data export is only on request via support, and the judges found no public information on raw-data retention or data return on termination. Traffic reporting sits at 6-7. Judges' scores fell in a narrow band, and pricing transparency, at 2-3, is the lone low mark, with no per-tier prices published and Enterprise listed as "Individuell".
Speaks for it
- Cookieless counting published in detail — a 16-digit hash of IP address, user agent, date and per-site salt, with no consent banner required
- Server-side integration, custom domains and open-source Go, PHP and Cloudflare Workers proxies documented for first-party, blocker-resistant collection
- Privacy notice states data is stored only on servers in Germany, with a data processing agreement published in German and English and subprocessors listed with addresses
- Aggregated statistics export to CSV with selectable period and data, a documented RESTful API with SDKs, webhooks, and imports from Google Analytics, Plausible and Fathom
- Funnels of up to eight steps with drop-off rate and conversion rate per step documented
Held against it
- E-commerce tracking documented only as revenue tracking on the Plus tier, with no public information on product, cart or checkout tracking
- Raw-data export offered only upon request via support rather than self-service
- No public information on raw-data retention, a warehouse or BI sync, or data return and deletion on termination
- No public information on security certifications such as ISO 27001 or SOC 2
- No per-tier prices, traffic bands or overage handling published, with the Enterprise tier listed as 'Individuell'
Best for
- You need analytics without a consent banner and want a published counting method to show your privacy or legal team, with a template paragraph supplied for your privacy policy
- Your agency runs many client sites and needs first-party collection that resists blockers, roll-up views across sites, and white-labelling
- You are a German public body that requires a German processor, a published data processing agreement in German and English, and an on-premise option on the Enterprise tier
Avoid if
- You need product-, cart- or checkout-level e-commerce tracking or shop-system plugins — the captured pages document revenue tracking only
- Your data stack depends on self-service raw-data export or an automated sync to a named warehouse — raw data is available only on request via support
- You must compute an annual cost before contacting the vendor — the captured pricing pages show tier names but no price figure for any paid tier
The scores
| Criterion | Panel median |
|---|---|
| Traffic, sources & campaign reports | 3.5 of 5 |
| Goals, events, funnels & e-commerce | 3 of 5 |
| Consent-free operation & data minimisation | 3.5 of 5 |
| Data access, export & self-hosting | 3 of 5 |
| Installation, integrations & performance | 3.5 of 5 |
| European sovereignty | 3.5 of 5 |
Traffic, sources & campaign reports
Show reasoningHide reasoning
How this is scored
What the standard reports show: page views, visits and visitors, entry and exit pages, referrers, search engines and social networks as sources, campaigns tagged with UTM parameters, countries, devices and browsers, a real-time view, date comparisons, segments and filters, custom dashboards, scheduled email reports, shared or public dashboards, and whether reports are sampled or complete.
0 — Not a web analytics product; website traffic cannot be measured with it.
3 — Page views and visitors over time with top pages and referrers; campaign parameters, segments and report sharing are basic or not described.
5 — A dashboard with pages, referrers, UTM campaigns, countries and devices, a real-time view, date comparison, filters across all reports, email reports, and dashboards shared with clients or colleagues.
8 — Custom segments and saved views, custom dashboards and report builders, channel grouping that can be configured, Search Console or ad platform data shown beside the traffic, unsampled reports stated, several sites and roll-up reporting in one account, and annotations.
10 — Reporting that a whole organisation runs on: custom dimensions and calculated metrics, anomaly alerts, multi-site and multi-brand roll-ups with roles per site, report accuracy and how visitors are counted explained in a published methodology, and every report reproducible from the raw data.
The E-Commerce Marketing Lead
UTM campaigns with source, medium and campaign panels, gclid and msclkid shown as referrers, a real-time view, date comparison, filters with saved views, e-mail reports and public or shared dashboards give me the weekly campaign review I need, and roll-up views would merge my German and Austrian shops in one place. Search Console data sits beside the traffic numbers and tags allow segmentation. We found no public information on custom dashboard builders, configurable channel grouping, unsampled reports or annotations. 1 2 3 8 9 16 17
The Data Protection Officer
The dashboard covers what I ask a client to check: a real-time view, date comparison, filters with saved views, public dashboards with one-time access links, email reports, and Search Console data shown beside the traffic. UTM campaigns including click identifiers, referrer parameters and tags that filter the whole dashboard for segmentation are documented, and roll-up views combine several sites. We found no public information on custom dashboards or report builders, configurable channel grouping, or a statement that reports are unsampled. 2 3 8 9 16
The Agency Developer
Pages, referrers and campaign panels including click IDs like gclid and msclkid, a real-time view, date comparison, filters, saved views, scheduled email reports and public or link-shared dashboards are all documented, with Search Console data available beside the traffic and roll-up views combining several sites. That covers nearly everything I bill clients for. We found no public information on device and browser breakdowns, custom dashboards, or whether reports are sampled. 2 8 1 16 3
The Growth Analyst
The captured pages show a dashboard with filters across all reports, period comparison, saved views, public dashboards with one-time access links, automatic email reports, a real-time view, country and city localisation, plus documented UTM campaigns, referrer parameters and Google or Microsoft click identifiers and a Search Console plugin. Saved views, tag-based segmentation that filters the whole dashboard and roll-up views across several sites push it past the basics. We found no public information on custom dashboards or report builders, configurable channel grouping, unsampled reports or annotations. 2 3 8 16
The Public-Sector Site Owner
Real-time views, date comparison, filters across the dashboard, saved views, email reports, public and embedded dashboards, essential and optional UTM parameters with click identifiers, a Google Search Console plugin beside the traffic, and roll-up views combining several sites are all documented. That reaches well past a standard dashboard; we found no public information on configurable channel grouping, annotations, or a statement that reports are unsampled. 2 8 9 3 16
The Skeptic
The dashboard is documented with pages, visitors and sessions, referrer handling and all essential UTM parameters plus optional ones, click identifiers shown as gclid and msclkid, filters with saved views, period comparison, a real-time view, email reports, public and embedded dashboards, and roll-up views across sites, with Google Search Console data alongside the traffic. We found no public information on custom dashboards or a report builder, on whether reports are unsampled, on annotations, or on a published visitor-counting methodology. That is upper-middle reporting, not what a whole organisation runs on. 2 3 8 9 16
Goals, events, funnels & e-commerce
Show reasoningHide reasoning
How this is scored
How the product measures what visitors do: goals for pages and events, custom events with properties, outbound links, downloads, form submissions and scroll depth tracked without code, funnels with drop-off, e-commerce tracking of orders, revenue and products, attribution of conversions to channels and campaigns, cohorts and retention, and conversion data passed back to ad platforms.
0 — Counts page views only; no goals, events or conversions can be defined.
3 — Goals for a page or a custom event; funnels, revenue and attribution are basic or not described.
5 — Goals and custom events with properties, outbound links and file downloads tracked, funnels with drop-off per step, revenue attached to goals or orders, and conversions broken down by source and campaign.
8 — Full e-commerce tracking (products, cart, checkout, orders, revenue) with plugins for named shop systems, several attribution models compared, cohorts and retention, user journeys or paths, forms and scroll depth tracked without code, and conversions sent back to Google Ads, Meta or other ad platforms server to server.
10 — Conversion analysis to the level of a product analytics suite: multi-touch attribution explained, funnels and cohorts on any event or property, revenue reconciled with the shop system, predictive or anomaly metrics with their method stated, and every conversion traceable to the raw event.
The E-Commerce Marketing Lead
Goals for pages and events with metadata, tracked outbound links and downloads, and funnels of up to eight steps with drop-off rate and conversion rate per step are documented — enough to build my checkout funnel and see where carts die. E-commerce revenue tracking exists on the Plus tier and tags support channel attribution. We found no public information on product-, cart- or checkout-level tracking, plugins for shop systems such as Shopware, cohort or retention reports, or conversions sent back to Google Ads and Meta. 1 2 10 11 16
The Data Protection Officer
Goals can be defined on path patterns, events or both, outbound links, file downloads and custom events with metadata are tracked from the snippet, and funnels of up to eight steps with drop-off per step can be built on pages, patterns, events and tags; e-commerce revenue tracking sits on the higher tier and sessions are summarised as journeys. We found no public information on full shop-system tracking, attribution models, cohorts and retention, or conversion data sent back to ad platforms. 2 9 10 11
The Agency Developer
Goals on page patterns, events or both, custom events with metadata, outbound links and file downloads are documented, and funnels of up to eight steps show drop-off and conversion rate per step with flexible step filters. E-commerce shows up as revenue tracking; we found no public information on product, cart and checkout tracking, shop plugins for WooCommerce or Shopify, attribution models or cohorts. 11 10 2 5
The Growth Analyst
Conversion goals on path patterns, events or both, custom events with metadata, custom metrics, and outbound-link and download tracking are documented, and the funnel documentation is unusually detailed with up to eight steps, drop-off and conversion rates per step, and steps built from pages, events and tags. E-commerce revenue tracking and individual session journeys exist as paid-tier features, alongside A/B testing via tags. We found no public information on cohorts and retention, full e-commerce objects like carts and checkout flows, compared attribution models, or conversions passed back to ad platforms. 1 2 10 11
The Public-Sector Site Owner
Conversion goals on path patterns, events and custom metrics, custom events with metadata, outbound links and file downloads tracked without code, funnels of up to eight steps with drop-off and conversion rates per step, session summaries and e-commerce revenue tracking are all documented. Full product-level e-commerce with shop plugins, attribution models, cohorts, form submissions and scroll depth, and conversions passed back to ad platforms are things we found no public information on — for form-abandonment work I would lean on the funnels and events, which are thoroughly described. 2 10 11 16 9
The Skeptic
Goals on path patterns, events or both, custom events with metadata, outbound links and file downloads tracked without code, funnels up to eight steps with drop-off and conversion rate per step (a paid-tier feature), session journeys, and e-commerce revenue tracking are all documented. E-commerce stops at revenue: we found no public information on shop-system plugins, cart or checkout tracking, attribution models, cohorts and retention, or conversions sent back to ad platforms. Depth in funnels and journeys, thin in e-commerce and attribution. 2 5 10 11
Consent-free operation & data minimisation
Show reasoningHide reasoning
How this is scored
What is collected and whether a consent banner is needed: a cookieless mode with how visitors are counted (daily hash, server-side fingerprint, no identifier), IP addresses truncated or not stored, no cross-site or cross-device profile and no use of data for the vendor's own purposes, data retention settings, opt-out and Do Not Track, a consent mode for features that do need consent, the vendor's stated reading of §25 TDDDG, the CNIL consent exemption and the authorities' rulings on Google Analytics, and guidance for the site's privacy policy. Where the data is processed is scored under sovereignty.
0 — Requires consent for every visit and sets tracking cookies with no privacy settings at all, or shares visitor data for advertising by default.
3 — IP anonymisation or a cookie setting exists and the product is described as GDPR-compliant; how visitors are identified, retention and the consent position are basic or not described.
5 — A documented cookieless or consent-free mode that states how visitors are counted, IP addresses truncated before storage, no cross-site tracking, retention configurable, an opt-out, a consent mode for the features that need one, and a data protection page explaining when a banner is required.
8 — The consent position stated against named law (§25 TDDDG, the ePrivacy Directive, the CNIL exemption or a DPA ruling), identifiers rotated or never created and the method published, personal data never stored by default, pseudonymisation and retention settings per data type, a legal opinion or external audit of the consent-free mode cited, and wording for the privacy policy supplied.
10 — Data minimisation that can be verified: the collection script and processing open to inspection, exactly which fields are stored documented, a consent-free mode recognised by a named authority or certified, accuracy with and without consent stated, and every privacy setting the customer controls listed with its effect.
The E-Commerce Marketing Lead
The product is cookieless with no consent banner needed, the counting method is published — a 16-digit hash of IP address, user agent, date and a per-site salt, with the IP never persisted and visitors re-identifiable for at most 24 hours and never across sites — and a privacy-policy template is supplied. We found no public information on retention settings, an opt-out mechanism, or the consent position argued against named law such as §25 TDDDG or the CNIL exemption. 3 7 12 13 16
The Data Protection Officer
The identification method is published in a way I can check: the visitor is a 16-digit hash of IP address, user agent, date and a per-site salt, the IP address is never persisted in whole or in part, recognition ends after 24 hours and cannot cross sites, and the vendor states no consent banner is needed while citing GDPR, CCPA and PECR and supplying wording for the site's privacy policy, with granular switches to drop referrer, resolution, query parameters, downloads and outbound links. I hold back because we found no public information on a stated reading of §25 TDDDG, the CNIL exemption or an external audit of the consent-free mode, nor on retention settings per data type or an opt-out. 3 7 12 13 16
The Agency Developer
The visitor counting method is published in detail: a sixteen-digit hash of IP address, user agent, date and a per-site salt, with the IP never stored, no recognition beyond 24 hours and no tracking across sites, plus a paragraph template for the client's privacy policy. No consent banner is claimed necessary because no cookies are set. We found no public information on retention settings, a visitor opt-out, a stated position against named German or French law, or an external audit of the consent-free mode. 13 7 16 12
The Growth Analyst
The consent-free mode is documented in detail: a 16-digit visitor ID hashed from IP address, user agent, date and a per-site salt, IP addresses neither wholly nor partly persisted, recognition capped at 24 hours with cross-site tracking ruled out, and no consent banner needed, with GDPR, CCPA and PECR compliance claimed and a privacy-policy paragraph template provided. What the pages leave open for a marketer like me: we found no public information on configurable retention per data type, an opt-out mechanism, or an external audit or legal opinion on the consent-free mode. 3 7 12 13 16
The Public-Sector Site Owner
The cookie-free mode is documented in real depth: the visitor ID is a sixteen-digit hash of IP address, user agent, date and a per-site salt, so IP addresses are never persisted, visitors are re-identified for at most 24 hours and cannot be tracked across sites, no consent banner is needed, and a privacy-policy paragraph template is supplied. Compliance is claimed against GDPR, CCPA, PECR and Schrems II; we found no public information on the vendor's reading of the German telecommunication-telemedia privacy provision, configurable retention periods, an opt-out mechanism, or an external audit or legal opinion on the consent-free mode. 13 7 16 1 3
The Skeptic
This is the rare case where the vendor publishes exactly how visitors are counted: a 16-digit hash of IP address, user agent, date and a per-site salt, IP addresses never persisted, recognition capped at 24 hours, no cross-site tracking, no cookies, no consent banner required, and a template paragraph for the customer's privacy policy. What holds it back: we found no public information on retention settings per data type, on opt-out or Do Not Track handling, on a stated position against named law such as §25 TDDDG or the CNIL exemption, or on an external audit of the consent-free mode. The method is published and verifiable in outline; the surrounding legal positioning is generic. 3 7 12 13 16
Data access, export & self-hosting
Show reasoningHide reasoning
How this is scored
Whether the data stays the customer's and can leave with them: a reporting API and a raw event export, CSV export of every report, a scheduled export or sync to a data warehouse or BI tool (BigQuery, Snowflake, Looker Studio), no data sampling or limits on history, import of historical data from Google Analytics or another tool, open-source code, and a self-hosted or on-premise edition the customer runs on its own servers.
0 — No export of any kind; the data can only be viewed in the vendor's dashboard.
3 — A CSV export of reports; an API, raw data and history limits are basic or not described.
5 — A documented reporting API, CSV export of all reports, the retention period for raw data stated, and an import of historical data from Google Analytics or a stated migration path.
8 — Raw event data exportable or streamed to a named warehouse or BI tool, an API covering both reporting and data collection, no sampling stated, a self-hosted or on-premise edition with its own documentation, and the data returned or deleted on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete raw export in an open format that another tool can import, and the deletion of every copy on termination documented.
The E-Commerce Marketing Lead
Aggregated statistics export to CSV with selectable period and data, a REST API with SDKs is documented, and historical imports from Google Analytics, Plausible and Fathom are offered; raw data and custom formats are available but only on request from support. An on-premise edition exists on the Enterprise tier, but we found no public information on its documentation, raw-data retention, or what happens to the data on termination. 1 2 4 14 15
The Data Protection Officer
A documented RESTful API with SDKs and a guide, CSV export with period and data selectable, and imports from Google Analytics, Plausible and Fathom give the customer a real way out, and an on-premise tier exists on Enterprise with an open-source core claimed. Raw data export is offered only on request through support. We found no public information on the retention period for raw data, a named warehouse or BI target, or terms for returning or deleting data on termination. 1 2 5 14 15
The Agency Developer
Aggregated statistics export to CSV with selectable period and data, historical imports from Google Analytics, Plausible and Fathom are a few clicks, and a documented API with SDKs exists. Raw data exports and custom formats are only offered upon request via support, the on-premise edition is an Enterprise feature with an open-source core mentioned, and we found no public information on retention periods for raw data, sampling, or data return on termination. 15 14 2 1
The Growth Analyst
A documented RESTful API with SDKs, CSV export of aggregated statistics with selectable period and data, imports from Google Analytics, Plausible and Fathom, native webhooks, plus an on-premise edition and an open-source core are all public. For my nightly-warehouse use case the gap is the raw event stream: raw data exports are offered only upon request via support, and we found no public information on a sync to a named warehouse or BI tool, the retention period for raw data, or data return and deletion on termination. 1 2 5 14 15
The Public-Sector Site Owner
A documented RESTful API with SDKs, CSV export of aggregated statistics with selectable period and data, raw-data exports offered on request, imports from Google Analytics, Plausible and Fathom, an open-source core, full data-ownership claims and an on-premise Enterprise option are all evidenced. We found no public information on the retention period for raw data, streaming to a named warehouse or BI tool, a stated no-sampling guarantee, dedicated documentation for the self-hosted edition, or the deletion of every copy on termination. 15 14 2 1
The Skeptic
CSV export of aggregated statistics with selectable period and data, an export claim of full ownership at any time, a documented RESTful API with SDKs (version 1 current, version 2 expected end of 2026), imports from Google Analytics, Plausible and Fathom, webhooks, an open-source core, and an on-premise edition confined to the Enterprise tier. Raw data export is offered only upon request through support rather than self-service, and we found no public information on the retention period for raw data, any statement on sampling, or terms for returning or deleting data when a contract ends. The door out exists, but you have to knock. 1 2 5 14 15
Installation, integrations & performance
Show reasoningHide reasoning
How this is scored
What it takes to install and run: the size and loading of the tracking script, plugins and documented set-ups for named CMS and shop systems (WordPress, TYPO3, Shopify, Shopware, WooCommerce), single-page apps and mobile SDKs, a tag manager or Google Tag Manager template, server-side tracking and first-party proxying to avoid ad blockers, team roles and permissions, client and agency accounts, single sign-on, and an uptime or status page.
0 — No documented way to install the product on a website or app.
3 — A tracking snippet to paste into the site; plugins, SDKs, server-side options and roles are basic or not described.
5 — A documented snippet with its size stated, plugins or guides for several named CMS and shop systems, support for single-page apps, team members with roles, and an agency or multi-site account.
8 — A lightweight script or server-side collection documented, a first-party proxy or own tracking domain, SDKs for iOS, Android and named frameworks, a tag manager integration, granular roles per site, single sign-on (SAML), and a public status page with uptime history.
10 — Installation that scales across an organisation: server-side and client-side tracking with an equal feature set, an infrastructure-as-code or API-driven site set-up, white-label for agencies, SLA and support terms published, and the performance impact of the script measured and stated.
The E-Commerce Marketing Lead
A JavaScript snippet tracks single-page apps by default, a server-side integration is documented, and first-party collection is well covered with custom domains plus two open-source proxies and a Cloudflare Workers option that keep ad blockers from eating my numbers. Member roles, teams, SAML single sign-on and a WordPress plugin are listed, while we found no public information on plugins for Shopware or other shop systems, a tag manager template, mobile SDKs, the script size, or a public status page. 2 5 16 17
The Data Protection Officer
The script loads deferred from a single endpoint and single-page-application navigation is tracked by default, with a server-side integration and open-source proxies in Go, PHP and Cloudflare Workers plus custom domains so collection runs first-party and past blockers. Member roles, teams, SAML single sign-on, white-labelling and a WordPress plugin are documented. We found no public information on the script's size, mobile SDKs, a tag manager template or a public status page. 2 3 16 17
The Agency Developer
A defer-loaded snippet, a server-side alternative, a WordPress plugin and single-page-app tracking by default cover my standard installs, and two open-source proxies (Go and PHP, plus Cloudflare Workers and custom domains) give exactly the first-party setup that stops ad blockers cutting client numbers in half. Team and member roles with client invitations by email, SAML single sign-on at Enterprise and white-labeling are listed. We found no public information on the script's file size, plugins for TYPO3 or Shopify, a tag manager template, mobile SDKs or a public status page. 16 17 2 1
The Growth Analyst
The JavaScript snippet is documented down to attributes for single-page-app URL changes, page exclusions and switching off individual data points, with server-side integration and custom domains as alternatives, plus two open-source proxy servers in Go and PHP, Cloudflare Workers guidance and a WordPress plugin. Member roles, teams for multiple websites and people, SAML single sign-on and white-labelling round it out. The script is described as lightweight without a stated size, and we found no public information on mobile SDKs, a tag manager integration or a public status page. 1 2 12 16 17
The Public-Sector Site Owner
A documented JavaScript snippet with fine-grained data attributes (disabling page views, downloads, outbound links, query, referrer, resolution), single-page-app tracking by default, a server-side alternative, two open-source self-hosted proxies in Go and PHP plus Cloudflare Workers, custom domains, a WordPress plugin, member roles, teams, SAML single sign-on and white-labelling are documented. We found no public information on a stated script size, mobile SDKs for iOS and Android, a tag-manager integration, or a public status page with uptime history. 16 17 2 1 12
The Skeptic
A documented script snippet served from api.pirsch.io, single-page-app tracking on by default, a WordPress plugin, a server-side integration as an alternative to JavaScript, open-source proxies in Go and PHP plus Cloudflare Workers to serve the script first-party and resist blockers, custom domains, member roles, teams and Enterprise SAML single sign-on. The gaps: the script is called lightweight with no size stated, we found no public information on iOS or Android SDKs or a tag-manager template, and none on a public status page with uptime history. 1 2 12 16 17
European sovereignty
panel opinion
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where visitor data is collected, stored and processed, and who the subprocessors are (script CDN, collection endpoint, hosting, email reports, support and payment tools). Independently sourced by the sovereignty pipeline; visitor data is personal data under European rulings, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (CDN, collection endpoint, email, support, payment) run through non-EU providers without a stated safeguard, or EU processing relies on a proxy in front of a non-EU service.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every visitor record on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The E-Commerce Marketing Lead
The vendor is a German GmbH with a published data processing agreement in German and English, storage stated only on German servers on named Hetzner infrastructure, and a subprocessor list with locations: Hetzner and Datev in Germany, AWS SES in Luxembourg and Google Cloud in Ireland, alongside Intuition Machines (USA, CAPTCHA) and Stripe (USA, payments) for the vendor's own website operations. We found no public information on ISO 27001 or SOC 2 certifications, which is what keeps this one level short of the top. 2 6 7 12 13
The Data Protection Officer
Contracting entity and controller are Emvi Software GmbH in Rheda-Wiedenbrück with a German register entry, customer data is stored only on German servers at a named data centre in Gunzenhausen, and a data processing agreement is published in German and English with the processor role under Article 28 GDPR stated. The chain is listed with addresses, but two US providers appear in it: Intuition Machines as CAPTCHA service on the website and Stripe for payment. We found no public information on ISO 27001 or SOC 2 certification, which I would want named with its scope before sign-off. 2 6 7 12 13
The Agency Developer
The contracting entity is a German GmbH with commercial register entry and VAT ID, the privacy policy states data is stored only on servers in Germany, Hetzner is named as the data centre, subprocessors are listed with addresses and purposes, and a data processing agreement is published in German and English. Two listed subprocessors sit in the USA (a CAPTCHA service and payment processing via Stripe), and we found no public information on the vendor's ownership or on security certifications. 6 13 7 12
The Growth Analyst
The contracting entity is Emvi Software GmbH with a commercial register entry in Gütersloh and a German VAT ID, the privacy notice states data is stored only on servers in Germany, Hetzner in Germany is named for the datacenter and hosting, subprocessors are listed with their addresses, and a data processing agreement is published in German and English. Two listed processors sit in the USA — a CAPTCHA service and Stripe for payments — and we found no public information on security certifications such as ISO 27001 or SOC 2. 6 7 13
The Public-Sector Site Owner
The contracting entity is Emvi Software GmbH in Rheda-Wiedenbrück (HRB 11575, Amtsgericht Gütersloh), the privacy policy states data is stored only on servers in Germany with the data centre named as Hetzner Online GmbH, a data processing agreement is published in German and English, and subprocessors are listed with addresses — though that list includes Intuition Machines (USA, CAPTCHA) and Stripe (USA, payments). We found no public information on security certifications such as ISO 27001 or SOC 2 or on the ownership structure, so procurement would still need to ask; the on-premise Enterprise edition could keep every visitor record on our own municipal servers. 13 7 6 2 5
The Skeptic
Emvi Software GmbH in Rheda-Wiedenbrück with the register entry shown, data stored only on servers in Germany on Hetzner, a data processing agreement in English and German, processor role under Article 28 GDPR, a named data protection officer and supervisory authority, and a full subprocessor list with locations — including two US processors (Stripe for payment, Intuition Machines for CAPTCHA). We found no public information on ISO 27001 or SOC 2 certifications, and the on-premise edition appears only as an Enterprise feature line without documented evidence. Transparent chain, German core, certifications unproven. 1 2 6 7 13
Pricing transparency
not rated — the vendor publishes no price
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per tier by monthly page views or events, what happens when traffic exceeds the tier, the number of sites and users included, which features (e-commerce, funnels, raw export, API, SSO, longer retention) cost extra, the free tier and its limits, the self-hosted edition and its support, minimum term and setup.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with traffic, sites or features is unclear.
5 — Tiers are public with their price per traffic band and main inclusions, but at least one commonly needed piece (overage, extra sites, raw export, SSO, longer retention) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (page views, events, sites, users), overage handling stated, add-ons priced, the self-hosted edition's cost or licence stated, minimum term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given traffic volume, site count and feature set, with every add-on, setup, support and overage fee and the cancellation and data-return terms published.
The E-Commerce Marketing Lead
The pricing pages show a 30-day free trial without credit card, that all prices exclude VAT, features tiered as Standard, Plus and Enterprise, and an individually priced Enterprise tier. We found no public information on the price of each tier, how cost scales with traffic, overage handling, extra sites, or the cost of the on-premise edition, so I cannot compute my annual cost from the captured pages. 2 5 13
The Data Protection Officer
What is public: a 30-day free trial without a credit card, prices quoted without applicable sales tax such as VAT, a feature comparison across the Standard, Plus and Enterprise tiers, and Enterprise priced individually. We found no public information on per-tier prices by page views or events, on what happens when traffic exceeds a tier, or on costs for add-ons, extra sites or the on-premise edition. 5 7 13
The Agency Developer
A 30-day free trial without credit card and the VAT treatment are public — prices are stated as "ohne anwendbare Umsatzsteuern" — and the Enterprise tier is quoted as "Individuell". Beyond that we found no public information on prices per tier, traffic bands, overage handling or what extra sites and users cost, so I cannot compute what forty client sites would pay or what happens when one of them goes viral. 5 12
The Growth Analyst
A 30-day free trial without a credit card, a public feature comparison across the Standard, Plus and Enterprise tiers, and a statement that all prices exclude applicable sales taxes such as VAT are documented, while the Enterprise tier is listed as "Individuell". We found no per-tier prices, traffic bands or overage handling on the captured pricing pages, so a buyer cannot compute a real annual cost from them alone. 2 5 13
The Public-Sector Site Owner
The tier names Standard, Plus and Enterprise with their feature assignments, a thirty-day free trial without credit card, a feature comparison table and the statement that all prices exclude applicable VAT such as sales tax are public, while Enterprise is listed as "Individuell". We found no public information on the price of any tier, how cost scales with traffic, or the number of sites and users included, so my procurement office cannot compute an annual cost from what is published. 5 2 12
The Skeptic
The captured pricing pages show tier names (Standard, Plus, Enterprise priced as "Individuell"), a feature comparison table, the VAT treatment ("Alle Preise sind ohne anwendbare Umsatzsteuern wie MwSt.") and a 30-day trial without credit card — but no price figure for any paid tier. We found no public information on how cost scales with traffic, sites or users, on overage handling, or on the cost of the self-hosted edition, so a buyer cannot compute an annual cost from these pages. 2 5 13
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined ⚠ unverified | — | uncited Report an error |
| Open source | Not determined ⚠ unverified | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Pirsch Analytics
Is Pirsch Analytics European?
Yes. whats-best.ai classifies Pirsch Analytics as EU-Made.
Where does Pirsch Analytics store data?
Not stated on the vendor’s pages as of 1 Nov 2026.
Does Pirsch Analytics have a free plan?
Not stated on the vendor’s pages as of 1 Nov 2026.
What are the best alternatives to Pirsch Analytics?
As of 4 Nov 2026, the panel rates Matomo (4/5), Piwik PRO Analytics Suite (3.5/5) and etracker Analytics (3/5) highest among the other 17 Web Analytics products evaluated. The highest-rated European alternative is Piwik PRO Analytics Suite (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Pirsch Analytics alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 29 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Open source, Hosting location, Hosting options, Legal entity. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 6 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 data facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 pricing facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 legal fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 5 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (18)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage pirsch.io Checked 29 Oct 2026 Details →
- 2 Features page pirsch.io Checked 29 Oct 2026 Details →
- 3 Features page (cookieless tracking) pirsch.io Checked 29 Oct 2026 Details →
- 4 API documentation docs.pirsch.io Checked 29 Oct 2026 Details →
- 5 Pricing page pirsch.io Checked 29 Oct 2026 Details →
- 6 Legal notice pirsch.io Checked 29 Oct 2026 Details →
- 7 Privacy policy pirsch.io Checked 29 Oct 2026 Details →
- 8 Traffic, sources & campaign reports — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 9 Traffic, sources & campaign reports — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 10 Goals, events, funnels & e-commerce — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 11 Goals, events, funnels & e-commerce — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 12 Consent-free operation & data minimisation — found from sitemap pirsch.io Checked 29 Oct 2026 Details →
- 13 Consent-free operation & data minimisation — found from sitemap pirsch.io Checked 29 Oct 2026 Details →
- 14 Data access, export & self-hosting — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 15 Data access, export & self-hosting — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 16 Installation, integrations & performance — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 17 Installation, integrations & performance — found from sitemap docs.pirsch.io Checked 29 Oct 2026 Details →
- 18 Code repository (open-source licence) — found from the homepage github.com Checked 1 Nov 2026 Details →