Web Analytics
Simple Analytics
EU-Made Report an error0–5 in half steps. 5 means the rubric's top anchor is met on the evidence.
by Simple Analytics B.V. · www.simpleanalytics.com
Compare with Plausible Analytics → Report an error on this page Is this your product? →
Link to this page
Add ?theme=dark to the image address for dark backgrounds.
The badge shows the category and the month of the latest evaluation, and EU-Made where
that is the product’s provenance. It never shows a score.
Simple Analytics at a glance
- Vendor
- Simple Analytics B.V.
- Headquarters
- Not stated on the vendor’s pages as of 1 Nov 2026
- Data hosting
- Default not stated; pages mention the EU source, captured 29 Oct 2026
- Free plan
- Yes, per the vendor’s own page source, captured 29 Oct 2026
- Panel verdict
- The AI panel rates Simple Analytics 3/5, the mean of 6 judges. Simple Analytics is a cookieless web analytics tool from a Dutch vendor. how scores are made
- As of
- Vendor pages captured 29 Oct 2026 to 1 Nov 2026; evaluated by the panel 30 Oct 2026. all sources
Read this page as one judge. Each weighs the same scores by what they care about.
The panel's verdict
Simple Analytics is a cookieless web analytics tool from a Dutch vendor. Its strongest criterion is consent and privacy, where scores cluster at 8: no cookies or browser storage, IP addresses dropped rather than stored or hashed, no fingerprinting, a published counting method, and a consent-free position argued against named law including ePrivacy Article 5(3), Germany's TTDSG and the UK PECR. Data ownership and sovereignty cluster at 7–8, splitting on repeated grounds: we found no public information on a self-hosted edition, SOC 2 is stated as in progress, and the captured pages give different figures for the contracting entity — Simple Analytics B.V. with KvK 88269922 versus a sole proprietorship with KvK 60978856. Conversions and events is weakest, clustering at 5, with no public information on e-commerce revenue tracking, attribution models or cohorts; traffic reporting and pricing transparency cluster at 6, the latter with no price ladder above €20 /month on the captured pages. The public-sector site owner's column reads 0 on all seven criteria even though the rationale text discusses strengths; scores are reported as computed.
Speaks for it
- Runs without cookies, browser storage or fingerprinting, with the visit-counting method published and the collection script open source
- Terms state the customer owns the analytics data, with raw exports in CSV, JSON, Parquet and other formats via dashboard and API, and deletion after a stated 90-day backup window
- States that analytics data is collected, processed and stored by EU-based providers, with a published subprocessor list naming each provider's location and the data it sees
- Installs with a single async script stated at under 5 KB, with an official WordPress plugin, a Google Tag Manager container and guides for frameworks from Next.js to Django
- Publishes the free plan limits (1 user, 5 websites, 1 month history), the paid tier at €20 /month, extra users at +€20/mo per extra user, and cancellation at any moment
Held against it
- We found no public information on e-commerce order and revenue tracking, attribution models, cohorts and retention, or conversions sent back to ad platforms
- We found no public information on date comparisons, configurable channel grouping or roll-up reporting across several sites
- We found no public information on a price ladder above €20 /month, on which plans include the export API, or on VAT treatment
- We found no public information on an external audit or authority recognition of the consent-free mode, and SOC 2 is stated as in progress
- We found no public information on a self-hosted edition, single sign-on, per-site team roles or a public status page with uptime history
Best for
- You need traffic and UTM campaign reporting without a cookie banner or consent management overlay
- You run client or department sites on WordPress or Google Tag Manager and want a single small script with automatic pageviews, client email reports and shareable dashboards
- You want your analytics data in your own tools — raw exports and APIs into Looker Studio, Power BI or a warehouse via CloudQuery, with a Google Analytics historical import
- You want the visitor-data path on named EU infrastructure — primary infrastructure in the Netherlands — with a published subprocessor list naming each provider's location
Avoid if
- You need every visit recorded — the vendor states plainly that it cannot guarantee every visit is recorded
- Your procurement requires a completed security certification — SOC 2 is listed as in progress
- You need firm, predictable monthly costs — usage-based billing on data points can trigger an automatic plan upgrade after a one-week overage notice
- You cannot tolerate analytics access being paused over payment — the terms state you may be unable to view your data when a payment term of an invoice has expired
The scores
| Criterion | Panel median |
|---|---|
| Traffic, sources & campaign reports | 3 of 5 |
| Goals, events, funnels & e-commerce | 2.5 of 5 |
| Consent-free operation & data minimisation | 4 of 5 |
| Data access, export & self-hosting | 4 of 5 |
| Installation, integrations & performance | 3.5 of 5 |
| European sovereignty | 3.5 of 5 |
| Pricing transparency | 3 of 5 |
Traffic, sources & campaign reports
panel disagrees
Show reasoningHide reasoning
How this is scored
What the standard reports show: page views, visits and visitors, entry and exit pages, referrers, search engines and social networks as sources, campaigns tagged with UTM parameters, countries, devices and browsers, a real-time view, date comparisons, segments and filters, custom dashboards, scheduled email reports, shared or public dashboards, and whether reports are sampled or complete.
0 — Not a web analytics product; website traffic cannot be measured with it.
3 — Page views and visitors over time with top pages and referrers; campaign parameters, segments and report sharing are basic or not described.
5 — A dashboard with pages, referrers, UTM campaigns, countries and devices, a real-time view, date comparison, filters across all reports, email reports, and dashboards shared with clients or colleagues.
8 — Custom segments and saved views, custom dashboards and report builders, channel grouping that can be configured, Search Console or ad platform data shown beside the traffic, unsampled reports stated, several sites and roll-up reporting in one account, and annotations.
10 — Reporting that a whole organisation runs on: custom dimensions and calculated metrics, anomaly alerts, multi-site and multi-brand roll-ups with roles per site, report accuracy and how visitors are counted explained in a published methodology, and every report reproducible from the raw data.
The E-Commerce Marketing Lead
Campaign reporting is the strong suit: UTM sources, mediums, campaigns and content appear in the dashboard, clicking a UTM source drills into devices, browsers and countries, and filters cover country, referrer, UTM and device type, with annotations, saved filtered views, weekly or monthly email reports and a live-stats embed. We found no public information on date comparisons, configurable channel grouping, roll-up reporting across several sites, or ad platform and Search Console data shown beside the traffic. 1 2 10 11
The Data Protection Officer
Pages, referrers, UTM sources, mediums, campaigns and content, countries and devices are reported with filters across all of them, weekly or monthly email reports, shared and public dashboards, chart annotations, bot and referral-spam filtering, and a published account of how a visit is counted — a unique pageview starts a session, an external referrer starts a new one. We found no public information on date comparison, configurable channel grouping or roll-up reporting across several sites, so the evidence sits above a basic dashboard but short of an organisation-wide reporting suite. 1 2 3 11 12
The Agency Developer
The documented dashboard covers pageviews, referrers, UTM campaigns with a generator tool, country and device breakdowns, filters across reports, weekly or monthly email reports, shared and public dashboards, even annotations on charts, and the session-counting method is published. I found no public information on roll-up reporting across several sites, custom segments or a report builder, and that roll-up gap matters when running forty client sites from one login. 1 2 3 10 11
The Growth Analyst
The dashboard covers pageviews, referrers, full UTM support for source, medium, campaign and content, with drilldown from a UTM source into devices, browsers and countries, filters across reports, saved filtered views with shared access, email reports and annotations. I found no public information on date comparison, roll-up reporting across several sites, or a real-time view beyond embeddable live visitor stats, which keeps it short of organisation-grade reporting. 1 2 5 10 11 12
The Public-Sector Site Owner
The dashboard covers pages, referrers and UTM campaigns with drill-down into devices, browsers and countries, filters across reports, annotations, weekly or monthly email reports, embedded and public dashboards, and a published method for how visits and sessions are counted from recorded events, with bot and referral-spam filtering. For a district site serving 400,000 residents I would also want date comparisons and roll-up reporting across department subdomains, and we found no public information on either, nor on which internal search terms visitors use. The honest statement that not every visit can be recorded builds trust, but the package sits below a full custom-report-builder level. 1 2 3 10 11 12
The Skeptic
Pages, referrers, UTM source/medium/campaign/content, countries and device breakdowns are shown with cross-report filters, UTM drilldown into devices and countries, weekly or monthly client email reports, shared and public dashboards, annotations, and one-click bot and referral-spam removal. We found no public information on date comparisons, configurable channel grouping or roll-up reporting across sites, and the vendor states plainly that it cannot guarantee every visit is recorded. 2 3 10 11
Goals, events, funnels & e-commerce
panel disagrees
Show reasoningHide reasoning
How this is scored
How the product measures what visitors do: goals for pages and events, custom events with properties, outbound links, downloads, form submissions and scroll depth tracked without code, funnels with drop-off, e-commerce tracking of orders, revenue and products, attribution of conversions to channels and campaigns, cohorts and retention, and conversion data passed back to ad platforms.
0 — Counts page views only; no goals, events or conversions can be defined.
3 — Goals for a page or a custom event; funnels, revenue and attribution are basic or not described.
5 — Goals and custom events with properties, outbound links and file downloads tracked, funnels with drop-off per step, revenue attached to goals or orders, and conversions broken down by source and campaign.
8 — Full e-commerce tracking (products, cart, checkout, orders, revenue) with plugins for named shop systems, several attribution models compared, cohorts and retention, user journeys or paths, forms and scroll depth tracked without code, and conversions sent back to Google Ads, Meta or other ad platforms server to server.
10 — Conversion analysis to the level of a product analytics suite: multi-touch attribution explained, funnels and cohorts on any event or property, revenue reconciled with the shop system, predictive or anomaly metrics with their method stated, and every conversion traceable to the raw event.
The E-Commerce Marketing Lead
Custom events with metadata via sa event, automated outbound clicks, emails and downloads, goals built on events and multi-step funnels with per-step drop-off are documented, which would cover a signup or checkout flow. For a shop like mine, though, we found no public information on order and revenue tracking, plugins for named shop systems such as Shopware, attribution models, cohorts and retention, or conversions sent back to Google Ads and Meta server to server. 2 12 13
The Data Protection Officer
Goals built on defined events, custom events through the sa event function with metadata, outbound clicks and downloads tracked automatically, and multi-step funnels showing where visitors drop off are all documented in the guides. We found no public information on e-commerce and revenue tracking, attribution models, or cohorts and retention, which is where the evidence stops. 2 12 13
The Agency Developer
Custom events via a documented function, automated tracking of outbound clicks, emails and downloads, goals built on those events and multi-step funnels with drop-off are all documented. I found no public information on e-commerce tracking of orders and revenue, cohorts, or sending conversions back to ad platforms, which is the gap for our Shopify clients. 2 12 13
The Growth Analyst
Goals built on custom events, the sa event function with metadata, automated outbound clicks and downloads, multi-step funnels with drop-off, and conversion-rate tracking for signup clicks and completed signups are all documented. For my campaign-click-to-invoice trace, I found no public information on e-commerce orders and revenue, cohort retention, attribution models, or conversions sent back to ad platforms. 2 12 13 17 18
The Public-Sector Site Owner
Goals defined on events, custom events via a JavaScript function with metadata, automatic tracking of outbound clicks, emails and downloads, and multi-step funnels with drop-off per step give us exactly the form-abandonment picture we need for vehicle registration and daycare applications. We found no public information on revenue or e-commerce tracking, cohort and retention analysis, or attribution models. 2 12 13
The Skeptic
Goals are built on defined events, custom events go through a documented function with metadata, outbound clicks, emails and downloads are tracked automatically, and multi-step funnels show where visitors drop off, with conversion rates on signup events and an events explorer. We found no public information on e-commerce revenue tracking, shop-system plugins, attribution models, cohorts, or conversions sent back to ad platforms. 2 12 13
Consent-free operation & data minimisation
panel disagrees
Show reasoningHide reasoning
How this is scored
What is collected and whether a consent banner is needed: a cookieless mode with how visitors are counted (daily hash, server-side fingerprint, no identifier), IP addresses truncated or not stored, no cross-site or cross-device profile and no use of data for the vendor's own purposes, data retention settings, opt-out and Do Not Track, a consent mode for features that do need consent, the vendor's stated reading of §25 TDDDG, the CNIL consent exemption and the authorities' rulings on Google Analytics, and guidance for the site's privacy policy. Where the data is processed is scored under sovereignty.
0 — Requires consent for every visit and sets tracking cookies with no privacy settings at all, or shares visitor data for advertising by default.
3 — IP anonymisation or a cookie setting exists and the product is described as GDPR-compliant; how visitors are identified, retention and the consent position are basic or not described.
5 — A documented cookieless or consent-free mode that states how visitors are counted, IP addresses truncated before storage, no cross-site tracking, retention configurable, an opt-out, a consent mode for the features that need one, and a data protection page explaining when a banner is required.
8 — The consent position stated against named law (§25 TDDDG, the ePrivacy Directive, the CNIL exemption or a DPA ruling), identifiers rotated or never created and the method published, personal data never stored by default, pseudonymisation and retention settings per data type, a legal opinion or external audit of the consent-free mode cited, and wording for the privacy policy supplied.
10 — Data minimisation that can be verified: the collection script and processing open to inspection, exactly which fields are stored documented, a consent-free mode recognised by a named authority or certified, accuracy with and without consent stated, and every privacy setting the customer controls listed with its effect.
The E-Commerce Marketing Lead
This is the core pitch and it is documented in depth: no cookies or browser storage, IP addresses dropped rather than hashed, no fingerprinting, no cross-site or cross-device tracking, the session-counting method published, and the consent-free position argued against named law including the German TTDSG, PECR and ePrivacy Article 5(3). The collection scripts are open source and the stored fields are listed; we found no public information on a named authority recognising the mode or an external legal opinion, and SOC 2 is only listed as in progress. 3 8 14 15 18
The Data Protection Officer
No cookies, no local storage, no fingerprinting, IP addresses dropped rather than truncated or hashed, no visitor identifiers at all, and exactly which fields are stored (page URL, referrer, UTM parameters, time zone as a country proxy, anonymised user agent values) documented — with the collection script open source on GitHub. The consent position is argued against named law — ePrivacy Article 5(3), the German TTDSG, the UK PECR — including the frank statement that cookieless is a technical choice, not a legal exemption. What holds it below the highest level: no named authority or completed certification recognises the consent-free mode (SOC 2 is listed as in progress), and we found no public information on retention settings per data type or on supplied wording for the customer's own privacy policy. 3 7 14 15 18
The Agency Developer
The consent-free position is argued against named law — ePrivacy Article 5(3), the German TTDSG, the UK PECR and the GDPR — with IP addresses dropped rather than hashed, no identifiers ever created, the collection script open source and the stored fields listed field by field. A Do Not Track setting exists and they will still sign a customer-provided agreement; I found no cited audit or legal opinion, with SOC 2 only stated as in progress. 3 6 8 14 15 18
The Growth Analyst
No cookies, no local storage, no fingerprinting, IP addresses dropped rather than hashed, and the visitor-counting method published — a new visit comes from an external referrer, no session timeout, no persistent identity. The consent-free position is argued against named law including the ePrivacy Directive, Germany's TTDSG, UK PECR and CCPA, with open-source collection scripts and the stored fields listed, though they state plainly that not every visit is guaranteed to be recorded. No named authority recognition, cited legal opinion or stated accuracy figures keep it off the top level. 1 3 8 14 15 18
The Public-Sector Site Owner
This is the strongest area for a council that will not show a cookie banner: no cookies, IP addresses neither stored nor hashed, no fingerprinting, no visitor identifiers of any kind, with the counting method published and the consent-free position stated against Germany's TTDSG, the ePrivacy Directive's Article 5(3) and the CNIL line — plus a Do Not Track setting and an open-source collection script whose stored fields are listed one by one. The vendor's reading is that no personal data is collected at all, so no consent and, in most cases, no data processing agreement is required, though they will review and sign customer-provided agreements. We found no public information on configurable retention per data type for paid plans, supplied wording for our privacy notice, or an external audit of the consent-free mode. 1 3 8 14 15 18
The Skeptic
No cookies or browser storage, IP addresses dropped rather than stored or hashed, no fingerprinting or device identifiers, no cross-site profiles, and the per-visit fields are listed (page URL, referrer, UTM, time zone as country proxy, anonymised user agent) with the counting method published — no session timeout, an external referrer starts a visit. The position is argued against named law (ePrivacy Article 5(3), PECR, TTDSG), the collection script is open source, and the vendor candidly writes that cookieless is a technical choice, not a legal exemption. No external audit or authority recognition of the consent-free mode is cited — SOC 2 is stated as in progress — and retention appears only as plan history length rather than settings per data type. 3 8 14 15 18
Data access, export & self-hosting
panel disagrees
Show reasoningHide reasoning
How this is scored
Whether the data stays the customer's and can leave with them: a reporting API and a raw event export, CSV export of every report, a scheduled export or sync to a data warehouse or BI tool (BigQuery, Snowflake, Looker Studio), no data sampling or limits on history, import of historical data from Google Analytics or another tool, open-source code, and a self-hosted or on-premise edition the customer runs on its own servers.
0 — No export of any kind; the data can only be viewed in the vendor's dashboard.
3 — A CSV export of reports; an API, raw data and history limits are basic or not described.
5 — A documented reporting API, CSV export of all reports, the retention period for raw data stated, and an import of historical data from Google Analytics or a stated migration path.
8 — Raw event data exportable or streamed to a named warehouse or BI tool, an API covering both reporting and data collection, no sampling stated, a self-hosted or on-premise edition with its own documentation, and the data returned or deleted on termination under stated terms.
10 — The customer owns the data end to end: open-source code under a named licence that runs fully self-hosted with feature parity stated, a complete raw export in an open format that another tool can import, and the deletion of every copy on termination documented.
The E-Commerce Marketing Lead
Raw pageviews and events are exportable in CSV, JSON and Parquet through an export API, with Looker Studio, Power BI and CloudQuery connectors, a Google Analytics historical import, customer ownership stated in their terms, and deletion of visitor data on account closure after a 90-day backup window. We found no public information on a self-hosted or on-premise edition, and the export API requires a plan that includes it without the fact stating which plans those are. 5 7 16 17 19
The Data Protection Officer
The terms state the customer owns the analytics data; raw page views and events export through a dedicated API in open formats including CSV, JSON, NDJSON, Avro and Parquet with field selection; connectors are named for CloudQuery, Looker Studio, Power BI and Chartbrew; historical Google Analytics import exists; and deletion on account closure is documented with a 90-day backup window. We found no public information on a self-hosted or on-premise edition, so every visitor record remains on the vendor's servers. 7 16 17 19
The Agency Developer
A stats API, a raw export API and an admin API, raw exports from CSV to Parquet with field selection, a Google Analytics historical import, connectors for Looker Studio, Power BI and CloudQuery warehouses, customer ownership written into their terms, and deletion of data within 90 days of account deletion. The export API requires a plan that includes it, and I found no public information on a self-hosted edition. 1 2 7 16 17 19
The Growth Analyst
Raw pageviews and events export through a documented Export API and the dashboard in CSV, Excel CSV, TSV, JSON, NDJSON, Avro and Parquet with field selection, next to a Stats API, an Admin API, warehouse export via CloudQuery, Looker Studio and Power BI connectors, and a Google Analytics historical import — so a migration does not restart history from zero. The terms state the customer owns the analytics data, and deletion on termination with a 90-day backup horizon is documented. I found no public information on a self-hosted edition, and unsampled reporting is not explicitly stated. 1 2 7 16 17 19
The Public-Sector Site Owner
Ownership is explicit — the vendor's terms state the customer owns the analytics data — and raw page views and events can be exported from the dashboard or via an export API in open formats including CSV, JSON, NDJSON and Parquet, with connectors to Looker Studio, Power BI, Chartbrew and warehouse loading via CloudQuery, plus a historical Google Analytics import. Everything including backups is permanently deleted within 90 days of account deletion. We found no public information on a self-hosted or on-premise edition for our municipal data centre; only the user-facing scripts are open source. 7 16 17 18 19 1
The Skeptic
Raw page views and events export through the dashboard and a raw export API in CSV, JSON, Parquet and four other formats with field selection, alongside stats, export and admin APIs, warehouse export via CloudQuery, BI connectors, and a GA4 historical import; the terms state the customer owns the analytics data and everything is deleted on account deletion after a stated 90-day backup window. We found no public information on a self-hosted edition, and the export API requires a plan that includes it without the captured pages showing which plans those are. 2 7 16 17 19
Installation, integrations & performance
panel disagrees
Show reasoningHide reasoning
How this is scored
What it takes to install and run: the size and loading of the tracking script, plugins and documented set-ups for named CMS and shop systems (WordPress, TYPO3, Shopify, Shopware, WooCommerce), single-page apps and mobile SDKs, a tag manager or Google Tag Manager template, server-side tracking and first-party proxying to avoid ad blockers, team roles and permissions, client and agency accounts, single sign-on, and an uptime or status page.
0 — No documented way to install the product on a website or app.
3 — A tracking snippet to paste into the site; plugins, SDKs, server-side options and roles are basic or not described.
5 — A documented snippet with its size stated, plugins or guides for several named CMS and shop systems, support for single-page apps, team members with roles, and an agency or multi-site account.
8 — A lightweight script or server-side collection documented, a first-party proxy or own tracking domain, SDKs for iOS, Android and named frameworks, a tag manager integration, granular roles per site, single sign-on (SAML), and a public status page with uptime history.
10 — Installation that scales across an organisation: server-side and client-side tracking with an equal feature set, an infrastructure-as-code or API-driven site set-up, white-label for agencies, SLA and support terms published, and the performance impact of the script measured and stated.
The E-Commerce Marketing Lead
Installation is a single async script stated at under 5 KB with a light version, a WordPress plugin, a Google Tag Manager template, guides for React, Vue, Next.js and other frameworks, automatic pageviews in single-page apps, a first-party proxy and own subdomain to get past ad blockers, plus a setup wizard and browser testing on real devices. We found no public information on a Shopware or Shopify plugin, mobile SDKs, team roles and permissions, single sign-on, or a public status page with uptime history. 2 6 18 19
The Data Protection Officer
A single script under 5 KB with the size and page-speed claim published, automatic pageviews in single-page apps, an official WordPress plugin, guides for Webflow, Squarespace, Wix, Ghost, Cloudflare, Netlify and Google Tag Manager as well as frameworks like Next.js and Django, a first-party proxy or custom subdomain against ad blockers, server-side events from the backend, and a setup wizard to verify installation. We found no public information on iOS or Android SDKs, per-site roles, single sign-on, or a public status page with uptime history, which is what separates an agency install from an organisational one. 1 2 6 18 19
The Agency Developer
Parts of this are exactly my checklist: an official WordPress plugin, a GTM container, automatic pageviews in single-page apps, server-side events from a backend, a script under 5 KB with a light version, and an own subdomain or custom domain to survive ad blockers, with help offered on proxies. I found no public information on TYPO3 or Shopify plugins, mobile SDKs, single sign-on, granular roles or a public status page, and each extra user is a separate monthly charge. 2 5 6 12 18 19
The Growth Analyst
A script under 5 KB with the size claimed publicly, automatic pageviews in React, Vue and Angular, an official WordPress plugin, guides for Webflow, Squarespace, Wix, Ghost, Netlify and Google Tag Manager, first-party proxying on your own subdomain, server-side ingestion from a backend, and a setup wizard make web installation easy. I found no public information on iOS or Android SDKs — the mobile app is a viewing app with widgets — nor on single sign-on, granular per-site roles, or a public status page with uptime history. 1 2 5 6 18 19
The Public-Sector Site Owner
Installation is a single asynchronous script under 5 KB with a stated no-impact performance claim, an official WordPress plugin, guides for Webflow, Squarespace, Wix, Ghost, Netlify and Google Tag Manager plus frameworks like React, Vue and Next.js, automatic page views in single-page apps, a first-party proxy or own subdomain against ad blockers, server-side event sending, and a setup wizard with browser testing on real devices. We found no public information on team roles per site, single sign-on, or a public status page with uptime history — a gap for our IT department. 2 6 18 19
The Skeptic
Installation is one async script stated at under 5 KB with a lighter variant, automatic pageviews in single-page apps, an official WordPress plugin and guides for Webflow, Squarespace, Wix, Ghost, Cloudflare, Netlify, Google Tag Manager and frameworks from Next.js to Django, an own-subdomain proxy to bypass ad blockers, server-side event sending from the backend, a setup wizard, and a candid warning that the noscript fallback increases bot traffic. We found no public information on mobile SDKs, granular per-site roles, single sign-on, or a public status page with uptime history. 2 6 18 19
European sovereignty
panel opinion
panel disagrees
Show reasoningHide reasoning
How this is scored
Who the contracting entity and the parent company are, where visitor data is collected, stored and processed, and who the subprocessors are (script CDN, collection endpoint, hosting, email reports, support and payment tools). Independently sourced by the sovereignty pipeline; visitor data is personal data under European rulings, so the whole chain counts, not only the database. A self-hosted or open-source edition the customer runs on its own European servers counts as the customer's chain, whatever the vendor's seat.
0 — Non-EU vendor and contracting entity, hosting unstated, subprocessors unnamed, and no data processing agreement offered.
3 — A privacy policy and a data processing agreement exist, but hosting location is unstated or non-EU and the subprocessors are not listed.
5 — EU hosting available and an EU contracting entity or EU representative, but parts of the chain (CDN, collection endpoint, email, support, payment) run through non-EU providers without a stated safeguard, or EU processing relies on a proxy in front of a non-EU service.
8 — EU hosting on named infrastructure, EU contracting entity, subprocessors listed with their locations, a data processing agreement published, and security certifications (ISO 27001, SOC 2) stated — or a self-hosted edition documented that keeps every visitor record on the customer's own servers.
10 — Sovereign end to end and evidenced: European ownership, entity, hosting and every subprocessor, or a self-hosted open-source edition with no call home, data export and deletion documented, and certifications published with their scope rather than implied.
The E-Commerce Marketing Lead
Simple Analytics B.V. is registered in the Netherlands, the analytics infrastructure is named and EU-based (Hetzner in Germany, Leaseweb and Worldstream in the Netherlands, primary infrastructure in the Netherlands), a subprocessor list with locations is published, and they state visitor data never leaves the EU apart from opt-in features like the AI assistant. The chain still runs through US companies for payments, code hosting and email reports (Stripe, GitHub, Mailgun's parent, legacy DigitalOcean), SOC 2 is only in progress, and the captured pages give different figures for the contracting entity — a B.V. in Amsterdam versus a sole proprietorship in Bussum. 5 6 7 9 14
The Data Protection Officer
The visitor-data chain is documented end to end: primary infrastructure in the Netherlands on named providers (Hetzner, Leaseweb, Worldstream, Bunny CDN), a subprocessor list giving each provider's location and the data it sees, the statement that visitor data is never transferred outside the EU, and non-EU processing (OpenAI, Google) only after opt-in. Two things hold it back: the captured pages give different figures for the contracting entity — a Dutch private company under KvK 88269922 on the company page versus a sole proprietorship under number 60978856 in the privacy policy — and the only certification named is SOC 2 in progress, while billing runs through Stripe in the US and email reports through Mailgun, a US company on EU servers. 5 6 7 8 9 14
The Agency Developer
The subprocessor list names every provider with its location and the data it touches, the visitor-data chain sits on named EU infrastructure in the Netherlands and Germany, analytics data is stated never to leave the EU except for opt-in features, and a data processing agreement page exists. SOC 2 is only in progress, payment (Stripe) and support (Zoom, Cal.com) run through US providers and Mailgun has a US parent despite EU-region servers; also the captured pages give different figures for the contracting entity, a B.V. in Amsterdam versus a sole proprietorship in Bussum. 1 5 7 8 9 14
The Growth Analyst
Analytics data stays in the EU by design: primary infrastructure in the Netherlands on named hosts (Hetzner, Leaseweb, Worldstream, Bunny), European providers only since 2018, a Dutch contracting entity with KvK number and VAT ID, a published subprocessor list with locations, and a data processing agreement page that will also sign customer agreements. The captured pages give different figures for the contracting entity — Simple Analytics B.V. with KvK 88269922 versus a sole proprietorship with KvK 60978856 — though both are Dutch. Non-EU subprocessors sit in the billing and support chain (Stripe, Cal.com, Zoom, GitHub, opt-in OpenAI) rather than the visitor-data path, and SOC 2 is only stated as in progress. 5 6 7 8 9 14
The Public-Sector Site Owner
The contracting entity is Dutch with a chamber-of-commerce registration, hosting runs on named EU infrastructure — Hetzner in Germany, Leaseweb and Worldstream in the Netherlands, primary infrastructure in the Netherlands — and a subprocessor list with every provider's location is published alongside a data processing agreement page; visitor analytics data is stated to be collected, processed and stored by EU providers only. The list is frank about US exposure outside the analytics path: Stripe for payments, Cal.com for call scheduling, GitHub with no customer data, Mailgun with a US parent despite EU-region servers, and OpenAI or Google only after we opt in. Two captured pages give different figures for the registered company form — a private limited company with one chamber-of-commerce number, a sole proprietorship with another — and no completed security certification is published, with SOC 2 marked in progress. 1 6 7 8 9 14
The Skeptic
Dutch entity and VAT ID, EU-owned and self-funded, primary infrastructure in the Netherlands on named hosts (Hetzner, Leaseweb, Worldstream, Bunny), and a subprocessor list that names each provider's location and exactly which data it sees, with the stated boundary that visitor data is collected, processed and stored by EU providers only. US subprocessors are confined to billing (Stripe), scheduling, code hosting and an opt-in AI feature sending aggregated data to OpenAI, and a data processing agreement page is published with signing of customer agreements offered. The captured pages give different figures for the contracting entity — a B.V. in Amsterdam under one Chamber of Commerce number, a sole proprietorship in Bussum under another — and the only certification mentioned is SOC 2 in progress. 6 7 8 9 14
Pricing transparency
panel disagrees
Show reasoningHide reasoning
How this is scored
Whether a buyer can compute the real annual cost from public pages alone: price per tier by monthly page views or events, what happens when traffic exceeds the tier, the number of sites and users included, which features (e-commerce, funnels, raw export, API, SSO, longer retention) cost extra, the free tier and its limits, the self-hosted edition and its support, minimum term and setup.
0 — No public prices at all; every customer is a sales call.
3 — A starting price or a free tier exists, but how cost scales with traffic, sites or features is unclear.
5 — Tiers are public with their price per traffic band and main inclusions, but at least one commonly needed piece (overage, extra sites, raw export, SSO, longer retention) is unpriced or "on request".
8 — Every tier priced publicly with its scaling rule (page views, events, sites, users), overage handling stated, add-ons priced, the self-hosted edition's cost or licence stated, minimum term and VAT treatment stated.
10 — Complete price computability: annual cost derivable for a given traffic volume, site count and feature set, with every add-on, setup, support and overage fee and the cancellation and data-return terms published.
The E-Commerce Marketing Lead
The free plan's limits (1 user, 5 websites, 1 month history), the €20 /month paid tier, +€20/mo per extra user, usage-based billing on data points with a three-month average, overage handling by email notice with one week before an automatic upgrade, annual billing at 2 months free and cancel-anytime terms are all public. Enterprise is custom-quoted, we found no public information on VAT treatment of the prices, and the export API is only described as requiring a plan that includes it. 5 17 19
The Data Protection Officer
The free tier is published exactly — one user, five websites, one month of history, unlimited pageviews under a fair-use policy — the paid price is €20 /month with extra users at +€20/mo per extra user, billing is usage-based on data points averaged over the previous three months, overage handling is stated (email notice, one week to adjust, then automatic upgrade), annual payment gives two months free, and cancellation is possible at any moment. We found no public information on what the €20 /month plan includes in data points or websites, on further tiers beyond it, or on which plans include the export API, so a buyer cannot compute a full year's cost for a known traffic volume; enterprise pricing is on request. 5 17 19
The Agency Developer
A free plan with stated limits (one user, five websites, one month of history, unlimited pageviews under fair use), paid at €20 /month, two months free annually, +€20/mo per extra user, overage handled by email notice and automatic upgrade after a week, cancellation at any moment, and payment surcharges stated. How the data-point tiers are priced, what each paid tier includes and the VAT treatment are not in the captured pages, and enterprise pricing is custom quoted. 5 6 17
The Growth Analyst
The starting point is public: €20 /month, a free plan with 1 user, 5 websites, 1 month of history and unlimited pageviews under fair use, extra users at +€20/mo, annual billing with 2 months free, cancellation at any moment, and stated overage handling with an email notice, one week to adjust, then an automatic upgrade. The scaling rule is only described as usage-based on data points with a three-month average without published price bands per volume, the enterprise tier is custom quoted on a call, and the export API requires a plan that includes it without that plan's price shown. A buyer can price a hobby site exactly but not a scaling B2B funnel. 5 6 17
The Public-Sector Site Owner
A paid price of €20 per month, annual billing at two months free, a free plan with 1 user, 5 websites and one month of history with unlimited page views under fair use, a stated data-point scaling rule averaged over three months, overage handled by email notice with a week to adjust before automatic upgrade, and extra users at €20 per month give my procurement office much of the arithmetic. The rest is thin: we found no public information on which plans include the export API or at what price, on VAT treatment, or on a minimum term beyond cancel-anytime, and enterprise is custom quoted on a call. 5 17
The Skeptic
A free tier with stated limits (one user, five websites, one month history), a paid entry at "€20 /month", usage-based scaling on data points with the averaging method described, overage handling (email notice, one week to raise the limit, then automatic upgrade), "+€20/mo per extra user", published surcharges (Bitcoin +10%, bank transfers from €500 at an additional 10%), three currencies, and cancellation at any time with access until the paid period ends. The price ladder above the entry tier, the plan mapping for features such as the export API, and VAT treatment are not on the captured pages, and enterprise is custom quoted. 5 17 19
European sovereignty — proven facts
0 of 6 dimensions provenBuilt only from facts shown on the vendor's own pages. A dimension we could not prove is left open, not scored as zero.
| Legal entity | Not determined ⚠ unverified | — | uncited Report an error |
|---|---|---|---|
| Hosting location | Not determined ⚠ unverified | — | uncited Report an error |
| Hosting options | Not determined | — | uncited Report an error |
| Open source | Not determined | — | uncited Report an error |
| Data processing agreement | Not determined ⚠ unverified | — | uncited Report an error |
| Transfer impact assessment | Not determined | — | uncited Report an error |
Questions about Simple Analytics
Is Simple Analytics European?
Yes. whats-best.ai classifies Simple Analytics as EU-Made.
Where does Simple Analytics store data?
The default storage location for customer data is not stated on the vendor’s pages as of 1 Nov 2026. The vendor’s pages mention the EU as hosting location, per the vendor’s page captured 29 Oct 2026.
Does Simple Analytics have a free plan?
Yes. Simple Analytics has a free plan, per the vendor’s page captured 29 Oct 2026.
What are the best alternatives to Simple Analytics?
As of 4 Nov 2026, the panel rates Matomo (4/5), Piwik PRO Analytics Suite (3.5/5) and Pirsch Analytics (3.5/5) highest among the other 17 Web Analytics products evaluated. Ratings that look equal are rounded to half stars; the order uses the unrounded rating, then the name. The highest-rated European alternative is Piwik PRO Analytics Suite (EU-Made). Ratings are the AI panel’s opinion, formed from public evidence: how scores are made. The full list, with European products first: Simple Analytics alternatives.
Where this could be wrong
- Evidence ages. The oldest capture behind this page is from 29 Oct 2026. Vendors change pricing and policies without notice; every fact reflects its source as of the capture date shown in the registry.
- Weak sourcing — Data processing agreement, Legal entity, Hosting location. Not confirmed on the vendor’s own pages as captured.
- AI can misread a source. Extraction and judgement are automated; a citation guarantees traceability, not infallibility. If something here is wrong, say so — no account needed, every report is decided within 5 business days, and accepted corrections are published.
What we left out
A claim that does not survive our checks costs us the claim, not the page. This is what was taken off this one.
- 11 legal facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 8 hosting facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 5 product facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 compliance facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 3 subprocessors facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 2 integrations facts could not be confirmed on the vendor’s page as captured and were left out of this page and of the panel’s material. Know more? Tell us
- 1 pricing fact could not be confirmed on the vendor’s page as captured and was left out of this page and of the panel’s material. Know more? Tell us
- 3 sovereignty dimensions could not be confirmed on the vendor’s own pages and are shown as unknown. Know more? Tell us
- 6 of the readings below were written against an earlier fact sheet — a fact has been corrected, added or pulled since. Until the panel next runs on this product you are reading the older judgement. Know more? Tell us
Sources (20)
The pages every claim on this page was read from — each one checked, dated, and kept verifiable.
- 1 Vendor homepage www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 2 Features page www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 3 Features page (analytics without consent) www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 4 API documentation www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 5 Pricing page www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 6 Legal notice (company details) www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 7 Privacy policy www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 8 Data processing agreement (dpa) www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 9 Subprocessor list www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 10 Traffic, sources & campaign reports — found from sitemap www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 11 Traffic, sources & campaign reports — found from sitemap www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 12 Goals, events, funnels & e-commerce — found from sitemap www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 13 Goals, events, funnels & e-commerce — found from sitemap www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 14 Consent-free operation & data minimisation — found from sitemap docs.simpleanalytics.com Checked 29 Oct 2026 Details →
- 15 Consent-free operation & data minimisation — found from sitemap docs.simpleanalytics.com Checked 29 Oct 2026 Details →
- 16 Data access, export & self-hosting — found from sitemap docs.simpleanalytics.com Checked 29 Oct 2026 Details →
- 17 Data access, export & self-hosting — found from sitemap docs.simpleanalytics.com Checked 29 Oct 2026 Details →
- 18 Installation, integrations & performance — found from sitemap docs.simpleanalytics.com Checked 29 Oct 2026 Details →
- 19 Installation, integrations & performance — found from sitemap www.simpleanalytics.com Checked 29 Oct 2026 Details →
- 20 Security / trust page — found from the homepage www.simpleanalytics.com Checked 1 Nov 2026 Details →