With over 37,000 GitHub stars and used by teams at Y Combinator, Airbus, and Phantom, PostHog replaces an entire stack of paid analytics tools — Mixpanel, Amplitude, Heap, LaunchDarkly, Hotjar, and Google Analytics — with a single open-source platform where every tool shares a common event layer and user context. Product analytics captures events automatically or via manual instrumentation with HogQL (SQL) access for custom queries, while web analytics provides GA-like dashboards for traffic, conversions, and Core Web Vitals. Session replay records user interactions with DOM snapshots and network waterfall analysis, linking directly to errors and feature flag exposures. Feature flags safely roll out changes to specific cohorts with multivariate support and instant rollback, while experiments run A/B tests with automatic Bayesian significance calculations and revenue attribution. Error tracking captures stack traces linked to session replays and user properties for immediate reproduction context. AI observability monitors LLM generations, traces, token usage, latency, and costs across model versions. The managed data warehouse syncs 120+ external sources including Stripe, Postgres, Salesforce, and HubSpot alongside product events, queryable through a unified SQL editor. An MCP server enables AI agents in Cursor, Claude Code, or VS Code to query analytics and execute SQL directly. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Known as the open-source Mixpanel alternative that respects user privacy, OpenPanel delivers a unified web and product analytics platform combining Mixpanel's behavioral analysis with the simplicity of Plausible and full data ownership through self-hosting. Cookieless tracking eliminates consent banners entirely while still capturing events, page views, sessions, user journeys, funnels, retention cohorts, and custom properties with full GDPR compliance by design. The 2.3 KB async script loads without blocking page rendering, and 16 official SDKs cover Next.js, React, Vue, Astro, Remix, Nuxt, Angular, Svelte, React Native, Swift, Kotlin, Python, PHP, Laravel, Express, and REST API for custom integrations. Real-time dashboards display live visitor counts, active sessions, and event streams as they happen. Custom chart builders create tailored visualizations from any tracked event with breakdowns by property, time period, and user segment. Session replay reconstructs individual user journeys showing every page visited, event triggered, and interaction recorded. Funnel analysis identifies conversion drop-offs with step-by-step breakdown and property filtering. Retention analysis measures how often users return with customizable time windows and cohort comparisons. A/B testing and variant tracking enable experiment measurement directly within the platform. Event notifications alert when specific events occur or thresholds are crossed. The self-hosted deployment uses Docker Compose with ClickHouse for high-speed analytical queries, PostgreSQL for metadata, and Redis for real-time processing — deployable on any VPS or Kubernetes cluster. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Traffic analytics, real-user performance monitoring, and client-side error tracking - normally three tools - in one cookieless, privacy-first dashboard: Swetrix. The Community Edition ships the same core engine as the cloud product - a NestJS API with ClickHouse for high-volume event storage, MySQL for relational data, and Redis for caching, fronted by a React dashboard and a ~5 KB tracking script with official packages for 20+ frameworks including Next.js, WordPress, and Shopify. Traffic analytics cover pageviews, referrers, UTM campaigns, geolocation, sessions with page flows, funnels, and custom events - all anonymized server-side with no cookies, no cross-device tracking, and no consent banner required for GDPR compliance. Performance monitoring records real-user metrics per pageview: TTFB, DNS and TLS timing, and render times, so regressions surface in the same place as traffic. Error tracking captures unhandled JavaScript exceptions automatically with formatted stack traces, filename/line metadata, affected browsers and pages, first/last-seen timestamps, and a resolve workflow - replacing a separate error monitoring subscription for many teams. Alerts fire to email, Slack, Telegram, Discord, or webhooks on traffic spikes, new errors, and custom events. If Plausible covers your traffic questions but you also want to know why the site broke, Swetrix answers both.

Several EU data protection authorities have ruled Google Analytics deployments unlawful; Matomo (formerly Piwik) is the most complete open-source replacement - a full analytics platform with 30+ report types across visitors, actions, referrers, goals, and ecommerce. The self-hosted PHP/MySQL edition is free and keeps every byte of visitor data on your infrastructure, which matters more each year: several EU data protection authorities have ruled Google Analytics deployments unlawful, while Matomo configured for cookieless tracking is approved by France's CNIL for use without a consent banner. All reporting runs on 100% unsampled data - no extrapolation at high traffic volumes. The GDPR Manager handles data subject requests and deletion, with IP anonymization, retention controls, and Do Not Track support built in. A dedicated importer pulls your historical Google Analytics data so years of trends survive the migration. Core analytics cover campaigns, custom variables and dimensions, entry/exit pages, downloads, site search, and full ecommerce tracking with a comprehensive HTTP API for reporting and ingestion. Premium plugins extend the platform into Hotjar-class behavioral tooling - click and scroll heatmaps, session recordings, conversion funnels, form analytics, A/B testing - plus a tag manager and SAML SSO. For teams that need GA-equivalent depth with actual data ownership, Matomo is the realistic drop-in replacement.

Page views, funnels, session replays, error reports, Core Web Vitals, and uptime checks share one cookieless dashboard in Betterlytics, so teams stop stitching several tools together. The overview charts visitors, page views, bounce rate, and visit duration against the previous period, and annotations mark launches or campaigns right on the timeline. Breakdowns cover referrers, channels, UTM campaigns, browsers, devices, and operating systems, with visitor locations on a world map once an optional MaxMind key is added. Custom events, global properties such as plan or app version, and outbound link tracking show what visitors actually do, while user journey diagrams and funnels reveal where they drift away. Session replay is opt-in per tracking script, masks text and form inputs by default, and can keep recordings in your own S3-compatible bucket. Error tracking groups JavaScript errors with stack traces, a session trail, and a link to the matching replay. Uptime and SSL monitors alert through Slack, Discord, Teams, or webhooks and feed public status pages on your own domain. Teammates join by invitation, two-factor login is available, and a built-in MCP server lets Claude, Cursor, or Codex answer traffic questions. A script of about 3.5 KB or a WordPress plugin handles installation. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

When you want honest traffic numbers without tracking cookies or stored IP addresses, Liwan puts a real-time analytics dashboard on your own server. The dashboard ranks pages, referrers, countries, browsers, platforms, and devices, charts visitors over time, and filters out bot traffic by default. Session metrics add bounce rate, average time on site, and entry and exit pages, while UTM fields attribute visits to campaigns. Collection is adjustable globally and per site: choose how visitors are grouped, whether to store country and city, country only, or no location, and how long events are kept. Drop rules discard internal, test, and local traffic before storage, and a pruning tool applies new settings to history after a dry-run preview. Tracking is one line of HTML, or your own server can send events with custom names and properties. Location can come from a MaxMind database or from Cloudflare, Vercel, and other proxy headers. One instance holds several projects and sites, with team accounts and single sign-on through Google Workspace, Microsoft Entra ID, or an OpenID Connect provider such as Keycloak or Dex. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Founders do not need another chart of pageviews; they need to know which visit became money, and Talivia is a self-hosted, revenue-first analytics platform that fuses website traffic with payment data so every metric answers in dollars. Connect Stripe, LemonSqueezy, Polar, Dodo, or Yolfi, and the dashboard pairs visitor counts with revenue, conversion rate, revenue per visitor, refunds, and disputes, so a traffic spike that never buys anything stops masquerading as success. Referrers, campaigns, keywords, and countries are ranked by the money they produce, which reduces budget decisions to one question: which channel brought customers who actually paid? When a page underperforms, session replay shows what visitors actually did there and the moment they gave up, so you debug journeys instead of guessing from aggregates. Events and multi-step funnels trace the path from landing page to checkout, while bot traffic detection stops crawlers from inflating your conversion statistics. The live visitor feed shows who is browsing right now, with country, device, browser, acquisition source, events, and spend for each session as it unfolds. Public links publish any dashboard as a read-only page for investors or clients, and teammates join the workspace with their own accounts when they need to dig deeper. Visitors, replays, and payment records all stay in your own PostgreSQL database, so customer journeys never pass through a third-party analytics cloud. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

GEOInflow is a self-hosted analytics platform that shows website owners which AI crawlers visit their pages, what those crawlers read, and how much traffic and revenue AI search actually sends back. Import a sitemap, CSV, or JSON inventory and the coverage report compares it against observed crawl logs, flagging important pages that no AI crawler has ever requested and directories where coverage keeps dropping. The built-in catalog recognizes 61 AI crawler identities, including crawlers from OpenAI, Anthropic, Perplexity, Google, Microsoft, ByteDance, Baidu, Kimi, and Tencent Hunyuan, and separates training, AI search, and user-triggered visits. Verification combines declared user agents with official IP ranges and DNS evidence, so a spoofed crawler name never counts as a confirmed visit. Browser tracking connects AI search referrals to landing pages, custom events, goals, funnels, and conversions, letting teams measure whether visibility in AI answers turns into signups and sales. Alongside the GEO reports, teams get pageviews, unique visitors, referrers, geography, devices, heatmaps, retention, and visitor paths, with CSV, JSON, and ZIP exports for any selected scope. Workspaces, team permissions, and public sharing links let agencies and publishers give each client or department its own dashboards without exposing raw data or other sites. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Track website traffic and conversion funnels with sub-second precision while guaranteeing visitors total anonymity with Medama, a privacy-first web analytics platform operating without cookies, IP storage, or consent banners. Site owners embed a sub-kilobyte tracking script into web headers to record page views, session duration, referrers, screen resolutions, browser user agents, and geographic countries anonymously. Built-in caching header mechanisms determine unique daily visitors without generating persistent hashes or storing cross-site identifiers that violate privacy regulations. The web dashboard visualizes hourly traffic trends with interactive area charts and provides multi-dimensional data tables breaking down top-performing pages, search engine referrers, operating systems, and campaign UTM parameters. Developers can instrument custom click events and page attributes using simple HTML data attributes to measure conversions, document downloads, button interactions, and user subscription states. Administrators manage multiple websites from a single interface, configure curated anti-spam blocklists using Firehol and Tor exit node feeds, and monitor server CPU, memory, and disk usage in real time. Full OpenAPI specification endpoints allow teams to export analytics data directly into internal business intelligence pipelines and custom executive dashboards. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

GoatCounter delivers meaningful web traffic insights — pageviews, referrers, browsers, screen sizes, country-level geolocation — without setting a single cookie, without collecting personal data, and without forcing GDPR consent banners on your visitors. Written entirely in Go and distributed as a single compiled binary consuming roughly 25MB of RAM, it adds just 3.5KB to your pages via the tracking script, with a JavaScript-free tracking pixel alternative for sites that avoid scripts entirely, plus backend middleware integration and log file import for server-side collection. The dashboard displays pageview counts per path with hourly resolution, referrer sources grouped by domain with full URL on hover, browser and OS version breakdowns, screen size distributions, and country-level location data derived from IP addresses that are immediately discarded after geolocation. Campaign tracking supports UTM parameters and custom data attributes. A public stats option exposes your dashboard at a shareable URL for build-in-public transparency. SQLite serves as the default database requiring zero administration, while PostgreSQL handles higher-traffic deployments with multi-site setups. Built-in ACME and TLS certificate management eliminates reverse proxy requirements for HTTPS — no Nginx or Caddy needed. The REST API provides programmatic access to all analytics data. Deploy as a single binary, via Docker with the official arp242/goatcounter image, or through native packages. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. EUPL-1.2 licensed.

Web analytics tools ignore native mobile, desktop, and game apps; Aptabase was built for exactly those. If Firebase Analytics would force a privacy-policy footnote you don't want to write, this is the alternative - session-based metrics with no cookies, no IDFA or GAID, no device fingerprinting, and a daily-rotated salt that makes cross-day re-identification mathematically impossible. That design means GDPR, CCPA, and PECR compliance out of the box and "Data Not Collected" App Store privacy labels without ATT prompts. The SDK coverage is the widest in its category: eleven first-party libraries spanning Swift, Kotlin, Flutter, React Native, Tauri, Electron, .NET MAUI, NativeScript, Unity, Unreal Engine, and JavaScript for web - each MIT-licensed, following platform conventions, and accepting a custom host parameter that points at your instance. Integration is minutes: initialize with an app key, call trackEvent with optional properties, and the dashboard shows sessions, events, app versions, OS breakdowns, and country-level geography. The self-hosted stack is a .NET server over PostgreSQL for metadata and ClickHouse for high-volume event ingestion, giving cloud-parity features under an AGPL license. For indie iOS/Android apps, Electron and Tauri tools, and Unity or Unreal games, it replaces Firebase without the Google entanglement.

Built as a direct rejection of the adtech model, Plausible is the best-known privacy-first web analytics tool - lightweight, cookie-free, and open-source. It sets no cookies and stores no personal data: unique visitors are counted via a hash of IP plus User-Agent that rotates every 24 hours and is never stored raw, so no consent banner is required and GDPR compliance is structural rather than contractual. The tracking script is under 1 KB - orders of magnitude lighter than GA - and the dashboard is a deliberate contrast to GA4's sprawl: one fast-loading page with visitors, sources, top pages, countries, devices, and UTM breakdowns, filterable by any dimension. Custom events and goals track signups and clicks, Google Search Console integration pulls in search queries, scheduled email reports keep stakeholders updated, and the Stats API (v2) plus CSV export feed data anywhere. This is the AGPL-licensed Community Edition, the same Elixir codebase that powers Plausible's cloud service, running as three containers: the web app, PostgreSQL for accounts, and ClickHouse for event storage - which means self-hosters get direct SQL access to raw analytics data the cloud version never exposes. Traffic data stays entirely on your server, with no visitor caps or per-pageview pricing.

Own every visitor metric without cookies, consent banners, or external database clusters through Vince, a self-hosted web analytics platform engineered for fast multi-site traffic intelligence. Zero cookies. Sub-kilobyte tracking script. Unlimited domains and events. You can point existing Plausible Analytics tracker snippets directly at your instance and immediately begin recording unique visitors, total sessions, pageviews, views per visit, bounce rates, and visit durations across all of your properties. Interactive dashboards break down incoming traffic by referral sources, UTM campaign parameters, entry and exit pages, countries, regions, cities, device categories, browsers, and operating systems. Behavior analytics go beyond simple pageviews by capturing outbound link clicks, file downloads, 404 error pages, pageview goals, and custom event conversions with custom properties. Period-over-period comparisons let you benchmark current traffic and conversion rates against previous date ranges or custom calendar intervals with a single click. Dashboards stay private by default, but you can open public stats views or generate unique, optionally password-protected shared links for clients and stakeholders, as well as query metrics programmatically over the REST API. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Traffic Source answers the three questions every site owner actually asks: who showed up, where did they come from, and did they pay. The live dashboard counts visitors in real time alongside pageviews, sessions, bounce rate, and session duration, with no cookie banner required because tracking uses no cookies at all. Referrer and UTM breakdowns show exactly which campaigns, newsletters, and posts earn their traffic, while country and city data arrives through proxy headers. Visitor journeys replay every page a person viewed before converting, so you can see the path from first click to checkout instead of guessing. Connect Stripe once and payments are matched to the sessions that produced them automatically, with no webhook plumbing to maintain. The affiliate system lets you create partners with custom commission rates and shareable referral links, and each affiliate gets a public dashboard showing their own clicks and earnings. Search Console data is pulled into the same screen, where a keyword explorer shows the pages, countries, and devices behind any query. One tiny tracking script covers all your sites, including single-page apps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Google Analytics without the cookie banner or the maze of menus: Rybbit puts web and product analytics for every site you run on one readable dashboard, hosted on your own server. Pageviews, sessions, unique users, bounce rate, session duration, traffic sources, campaigns, devices, and countries update in real time beside a live visitor count. Session replay lets you watch the visits behind the numbers, and user profiles tie identified visitors to their sessions and events. Funnels pinpoint where conversions leak, journeys chart the paths people take through a site, retention reports show who comes back, and goals track conversions from page visits, custom events, and autocaptured clicks. Custom events carry JSON properties, filters slice every report across more than 15 dimensions, saved segments reapply them in one click, and location tracking drills from country to region to city on interactive maps, with optional 3D globe views through a Mapbox token. Error tracking connects JavaScript failures to the affected sessions, so a spike in errors leads straight to the visits that explain it. One install serves unlimited sites and organizations with role-based access, public dashboards share a site's stats through a link, and a tracking script of about 11 KB compressed collects data with no cookies and no consent banner. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

No cookies, no fingerprinting, no cross-site tracking, no personal data collection - Umami's privacy contract is the foundation of the open-source web analytics platform. IP addresses are hashed rather than stored, which makes it GDPR, CCPA, and PECR compliant by default - the consent banner can come off the site entirely. The tracking script is under 2 KB, roughly 20x smaller than Google Analytics, so measurement stops being a page-weight tax. The dashboard covers the core metrics - pageviews, visitors, bounce rate, visit duration, referrers, browsers, devices, and countries - with any date range and filtering by country or device. Beyond pageviews, custom events track clicks, form submissions, and signups via a data attribute or one JavaScript call, and advanced reports add funnels, user journeys, retention and cohort analysis, goals, and automatic UTM campaign tracking. Anonymous session views show individual visitor activity without identifying anyone. Teams share websites with role-based access, one instance manages unlimited sites, and a full REST API exposes every metric programmatically. MIT-licensed and self-hosted on PostgreSQL or MySQL via Docker, your analytics data never leaves your infrastructure.

Pageviews tell you someone arrived; Pug is an open-source product analytics platform that shows what people actually did next, across events, funnels, retention, and user flows. Capture events from browser, Android, Flutter, Node, Go, or Ruby SDKs into an ingestion pipeline that enriches each hit with geography, user agent, bot detection, and web attribution automatically. Identify and alias the users behind events, then open a profile to see traits, sessions, and the full activity history of a person. Build insights as trends, funnels, retention cohorts, segmentation, Sankey user flows, and top-K breakdowns, with filters and period-over-period comparison on every chart. A web analytics overview is generated from your events with visitors, sessions, pageviews, bounce rate, and traffic sources, requiring no tile wiring. The live view plots every current visitor on a real-time world map, down to the person and the event they just fired. Compose dashboards from insight and markdown tiles on a time-windowed grid that analysts rearrange without touching ingestion. Erase a person's events and profile on request to satisfy GDPR and DPDP data-subject obligations. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

GoAccess processes millions of web log entries in seconds and renders the results as interactive dashboards that update every 200 milliseconds in the terminal or every second via WebSocket-connected HTML reports. Written entirely in C with only ncurses as a dependency, it achieves exceptional performance even on resource-constrained servers, reducing memory usage by approximately 20% and parsing time by 35% in recent releases through optimized in-memory hash tables with on-disk persistence support. The analyzer parses virtually every web log format out of the box (Apache Combined and Common, Nginx, Amazon CloudFront, Amazon S3, AWS Elastic Load Balancing, Google Cloud Storage, Squid, W3C IIS, Caddy JSON, and Traefik) while supporting fully custom log format strings for non-standard configurations. The self-contained HTML dashboard displays 15+ interactive panels covering unique visitors, requested files, static files, 404 errors, referring sites, search keyphrases, geographic location with city-level GeoIP resolution, operating systems, browsers, HTTP status codes, time distribution, and virtual host metrics. WebSocket authentication via JWT provides secure remote access, and incremental log processing ensures data continuity across daemon restarts. Docker deployment requires a single command with volume-mapped access logs. Over 20,800 stars with active development since 2010. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.