Use a configuration-first scorecard
Record the purpose, exact fields, browser storage, identity window, IP handling, consent behavior, collection domain, processor, hosting region, subprocessors, default and maximum retention, export path, access roles, deletion method, and contract. Score the configuration you plan to run, not the most restrained setup a vendor could theoretically support.
Then add product fit: real-time detail, campaigns, conversions, ecommerce, apps, heatmaps, replay, alerts, multi-site roll-ups, client access, API, data warehouse, and operating effort. A privacy-minimal tool that cannot answer the required decision invites shadow tracking; a broad tool without governance invites overcollection.
How the five common options differ
Plausible and Fathom center aggregate, no-persistent-cookie hosted analytics; Plausible also publishes open-source code and a self-host route. Clicky centers hosted live visitor and action detail, with a default privacy mode and optional more persistent settings. Matomo spans managed Cloud and self-hosted On-Premise with extensive privacy and platform configuration.
GA4 standard has no direct subscription fee and integrates deeply with Google advertising, app, audience, exploration, and BigQuery workflows. Its breadth, identity, consent, regional, and advertising settings require deliberate governance. These descriptions identify starting positions, not final compliance outcomes.
Shortlist by the actual job
For a publication that needs page, source, campaign, country, and signup trends with low identity, begin with Plausible or Fathom. For a small site that needs granular live paths, alerts, heatmaps, and uptime at a low public price, evaluate Clicky. For infrastructure control or a broad self-hosted platform, evaluate Matomo.
For app analytics, Google Ads audiences, advanced explorations, and raw BigQuery export, GA4 may remain necessary. Some organizations use a privacy-minimal aggregate tool for everyday publishing decisions and a consented, narrowly scoped platform for advertising or product analysis. Document why each exists.
Run a responsible bake-off
Choose one representative site and a defined period. Configure the same campaign convention and two or three outcomes. Test consent states, single-page navigation, cross-domain flow, blockers, bots, internal traffic, time zones, exports, roles, deletion, and the intended retention. Record setup and maintenance time.
Do not choose the tool with the largest visitor total. Compare the data to server and business records, explain expected gaps, and ask whether the interface enabled the decisions in the brief. Recheck public pricing and policies on the final purchase date because plan structures change.
Questions this guide answers
What is the best privacy-focused web analytics tool?
For simple aggregate analytics, start with Plausible or Fathom; for self-hosting consider Matomo or Plausible; for granular live paths evaluate Clicky. Verify each configuration.
Which analytics tools do not use cookies?
Plausible and Fathom describe no-cookie core models. Clicky’s default privacy mode is cookie-free, while optional settings exist. Other tools depend on configuration.
Is self-hosted analytics automatically more private?
No. Self-hosting increases control but also makes the operator responsible for collection, security, access, retention, backups, and deletion.
Primary-source ledger
- Clicky privacy configurationClicky · accessed 30 July 2026
- Plausible privacy modelPlausible Analytics · accessed 30 July 2026
- Fathom product featuresFathom Analytics · accessed 30 July 2026
- Matomo plan and hosting optionsMatomo · accessed 30 July 2026
- GA4 data retention controlsGoogle Analytics Help · accessed 30 July 2026
Scope note: This is an educational shortlist, not legal advice, certification, or a universal ranking. Product statements and prices require verification for the intended configuration.
Found an outdated fact or a material omission?Read the corrections and recheck policy.