Ackee
MIT ↻ 2026-04-08 Self-host ✓ Free
← All tools

Ackee Review (2026)

MIT Node.js + MongoDB self-host-only OSS analytics — solo German maintainer Tobias Reich. GraphQL API + 14 framework integrations. No SaaS option, no paid tier

🇩🇪 Germany Since 2014 MIT

Self-host-only, no SaaS — and that's the point. Ackee is the only tool in this directory authored by a solo German developer (Tobias Reich) who has deliberately chosen not to offer a hosted version. There is no $9 plan, no 'starter' tier, no managed cloud. You run it on your VPS or you don't run it. The MIT license mea

— Mark Sutton, editor
Ackee self-hosted analytics dashboard — Overview with active visitors, average views, duration, views today/month/year
Live demo (demo.ackee.electerious.com) — Overview
Editor score 3.5/5
From Free Cloud + self-host
GitHub ★ 4,646 387 forks · last commit 2026-04-08
Hosting Self-host ✓ EU hosted
Privacy passport

Ackee compliance at a glance

GDPR posture, sub-processors under DPA, per-jurisdiction stance, and encryption — everything a procurement team checks.

GDPR Compliant EU General Data Protection Regulation EU's omnibus privacy law requiring a lawful basis for processing personal data (consent, legitimate interest, etc.). Applies to anyone handling EU-resident data. Ackee's posture: Legitimate interest.
CA
CCPA Compliant California Consumer Privacy Act California Consumer Privacy Act — rights for California residents (access, deletion, opt-out of sales). Triggered at $25M revenue or 50k+ CA-consumer records.
UK PECR Compliant UK Privacy and Electronic Communications Regulations UK Privacy and Electronic Communications Regulations sit on top of GDPR specifically for cookies and electronic marketing. PECR Reg 6 governs analytics-cookie consent.
SOC 2 · II Not held SOC 2 Type II SOC 2 Type II — independent audit verifying security/availability controls operate effectively over 6+ months. Standard B2B procurement requirement.
ISO27001
ISO 27001 Not held ISO/IEC 27001 information-security ISO/IEC 27001 — international information-security management standard, certified by accredited bodies on a 3-year renewal cycle.
HIPAA Not held US HIPAA (with BAA) US health-data law requiring a Business Associate Agreement (BAA) for any tool touching protected health information. Without BAA the tool cannot legally process PHI.

Per-jurisdiction posture

🇫🇷
France CNIL No banner Self-hosted with cookieless + EU-deployable infrastructure; customer controls jurisdiction.
France · CNIL Self-hosted with cookieless + EU-deployable infrastructure; customer controls jurisdiction.
🇬🇧
United Kingdom UK ICO / PECR No banner PECR Reg 6 trigger avoided (no cookies).
United Kingdom · UK ICO / PECR PECR Reg 6 trigger avoided (no cookies).
🇩🇪
Germany TTDSG No banner German maintainer — strong home-jurisdiction position. TTDSG §25 trigger avoided.
Germany · TTDSG German maintainer — strong home-jurisdiction position. TTDSG §25 trigger avoided.
🇮🇹
Italy Garante No banner Self-host gives customer full control over data residency.
Italy · Garante Self-host gives customer full control over data residency.

Collected

  • URLs visited and page titles
  • HTTP referrer + UTM parameters
  • (opt-in via detailed: true) browser, OS, device, screen size, language
  • Custom events (button clicks, form submits, custom actions)
  • clientId hash (SHA of IP + UA + domainId + daily salt)

Explicitly NOT collected

  • Cookies on visitor devices
  • IP addresses (used as hash input only, daily salt never persisted)
  • Browser/OS/device details by default (must be explicitly enabled)
  • Cross-site tracking identifiers
Data retention

Customer-configurable in self-hosted MongoDB. Vendor: 'aggressive forgetting — Ackee removes personal data from previous records when a new record with existing identification gets added.'

Encryption
  • In transit: Customer-controlled (self-host)
  • At rest: Customer-controlled MongoDB
DPA Not available
AI & Modern Capabilities

How Ackee works with AI agents

Tier 3 — no AI yet — vendor focuses on classic privacy-first analytics; no AI/MCP features advertised.

AI Chat Not yet

Conversational natural-language interface

Not advertised by vendor

MCP Server Not yet

Model Context Protocol — Claude / Cursor / Codex

Not advertised by vendor

Agent API Not yet

Programmatic AI-agent endpoints

Not advertised by vendor

AI Insights Not yet

Anomaly detection / hypothesis / summaries

Not advertised by vendor

Export for AI Not yet

Structured export formatted for LLM ingestion

Not advertised by vendor

Strengths & weaknesses

What makes Ackee worth a look — and where it falls short.

Strengths 8

  • MIT license — most permissive among Node.js OSS in directory
  • Full GraphQL API (rare in directory)
  • 14 official framework integrations
  • Self-host only — full data sovereignty, customer-controlled jurisdiction
  • 12-year project history (created 2014)
  • Cookieless with daily-rotated salt + hashed IP+UA+domainId
  • Aggressive forgetting — removes personal data from previous records
  • Detailed mode (browser/OS/device) opt-in only

Weaknesses 8

  • NO SaaS option — self-host only
  • Single-user by design (no team/multi-user accounts)
  • Tracker 8.3 KB gzipped — heavier than Plausible/GoatCounter/Pirsch
  • 24h salt rotation — less aggressive than GoatCounter 8h
  • No funnels, A/B, heatmaps, errors, session recording
  • No DNT honoring native
  • Recently revived after 3-year quiet period (v3.4.2 Dec 2022 → v3.5.0 Nov 2025)
  • MongoDB-only (vs Umami flexible Postgres/MySQL/ClickHouse)

Feature matrix

All 38 verified checks across 4 categories. Hover any row for the editor's note.

Tracking & Reporting 15

  • Pageviews & visitors Yes
  • Live visitor count ~Partial
  • Top pages report Yes
  • Top referrers Yes
  • UTM campaign tracking Yes
  • Country & city breakdown ~Partial
  • Device, browser, OS ~Partial
  • Bounce / engagement ~Partial
  • Time on site Yes
  • Custom events Yes
  • Goals / conversions ~Partial
  • Funnels No
  • Outbound link tracking ~Partial
  • File download tracking ~Partial
  • 404 / error tracking No

Privacy & Compliance 9

  • Cookieless by default Yes
  • No personal data collected Yes
  • GDPR-compliant out of the box Yes
  • Data hosted in EU Yes
  • Data hosted in US Yes
  • Self-hostable Yes
  • Open source Yes
  • Data retention period ·
  • Bot & spam filtering Yes

Setup & Integrations 10

  • Script weight (KB) 8
  • Single-snippet install Yes
  • WordPress plugin ~Partial
  • Proxy / first-party domain Yes
  • Public API Yes
  • Data export (CSV/JSON) Yes
  • Google Search Console connector No
  • Email digests No
  • Slack / webhook alerts No
  • Public shareable dashboard ~Partial

Pricing & Plans 4

  • Free tier exists Yes
  • Entry price ($/mo) Free
  • Price at 100k pageviews Free
  • Unlimited sites on entry plan Yes

Ackee vs alternatives

How it compares to the closest 3 rivals on key buyer-decision fields.

Umami

Umami

Open-source self-hosted privacy analytics

  • FromFree
  • HostingSelf-host ✓
  • EU-hostedYes
  • CookielessYes
GoatCounter

GoatCounter

Solo-developer cookieless analytics — single binary on SQLite, EUPL-1.2 license

  • FromFree
  • HostingSelf-host ✓
  • EU-hostedYes
  • CookielessYes
Counter.dev

Counter.dev

Minimalist OSS hit-counter — solo-dev project, 1.1KB tracker, Pay-What-You-Want free model, no IP processed at backend

  • FromFree
  • HostingSelf-host ✓
  • EU-hostedYes
  • CookielessYes

Pricing tiers

Real plans, real numbers — pulled from ackee.electerious.com (verified May 2026).

MIT Open Source

Free/forever

Unlimited (your infra)

  • ✓ Self-host only
  • ✓ MIT license
  • ✓ GraphQL API
  • ✓ 14 framework integrations
  • ✓ Donations: GitHub Sponsors / PayPal / Buy Me a Coffee

Tech specs

Stack, repo health, deployment options — for engineers evaluating self-host.

Stack

  • Written inJavaScript (Node.js 24+)
  • DBMongoDB 4.4+
  • ServerHapi (HTTP) + GraphQL
  • FrontendStatic HTML/CSS/JS dashboard
  • LicenseMIT
  • Min specsNode.js 24 + MongoDB

GitHub github.com/electerious/Ackee

  • Stars★ 4,646
  • Forks387
  • Open issues45
  • Last commit2026-04-08

Deploy

  • · Docker Compose
  • · Docker
  • · Helm
  • · Native (no Docker)
  • · Netlify
  • · Vercel
  • · Heroku
  • · Qovery
  • · Render
  • · Railway
  • · Koyeb
  • · Zeabur
Mark Sutton

Editor review

Independently reviewed by Mark Sutton, cross-checked against vendor documentation. Click any panel to expand.

+ What it does well

Self-host-only, no SaaS — and that's the point. Ackee is the only tool in this directory authored by a solo German developer (Tobias Reich) who has deliberately chosen not to offer a hosted version. There is no $9 plan, no 'starter' tier, no managed cloud. You run it on your VPS or you don't run it. The MIT license means you can fork, modify, and ship it inside a commercial product without contaminating your codebase the way AGPL would.

Node.js + MongoDB is a stack choice you'll either love or skip. The directory has one other MIT Node.js analytics tool — Umami — but Umami uses PostgreSQL/MySQL/ClickHouse and offers a hosted plan. Ackee picks MongoDB and stays purely self-hosted. If your stack already runs Mongo, this slots in naturally; if you'd have to install Mongo just for analytics, GoatCounter (Go single binary) or Umami (Postgres/MySQL) are lighter operational lifts.

The GraphQL API is the differentiator. Unusual in the analytics-tool space — most rivals expose REST or no API at all. Anything you see in the dashboard is also available programmatically. The vendor demo even ships a GraphQL Playground at /api. Useful for embedding stats in admin panels, building custom CLI reporters, or piping data into your own warehouse.

Privacy: cookieless with daily salt rotation. Hashes IP + user-agent + domain + 24h-rotating salt to derive clientId. Salt never persisted to disk — stolen DB backup cannot reconstruct browsing history. GoatCounter rotates every 8h (more aggressive), but Ackee's 24h is still strong. Detailed browser/screen/OS tracking is OFF by default — vendor explicitly recommends asking user permission first.

Weaknesses & gotchas

Mid-weight tracker. 21 KB minified / 8.3 KB gzipped (verified from unpkg). Heavier than Plausible (1KB), Pirsch (1.5KB), GoatCounter (1KB), Fathom (2KB). Earns bytes via richer client-side API but if your site is JS-budget-conscious, pick a 1KB rival.

Single-user by design. Unlike Matomo or Plausible, Ackee has NO concept of teams, role-based access, or invited users. FAQ explicitly states this is intentional and not on the roadmap. Vendor's recommendation for multi-user: run separate Ackee instances against the same MongoDB — viable for small agency, awkward at scale.

Activity revived in late 2025 after a quiet stretch. Between v3.4.2 (Dec 2022) and v3.5.0 (Nov 2025), Ackee shipped no public releases. Three releases since November 2025 (v3.5.0, v3.5.1, v3.6.0 with Node.js 24 bump) — so the project is back in active maintenance, but anyone evaluating today should note the gap and watch the release cadence.

No SaaS option. If you want hosted analytics without operating Node.js + MongoDB yourself, every other Tier 2 tool has a managed Cloud option. Ackee deliberately does not.

No DNT honoring. No 'dnt' option in tracker — only ignoreLocalhost and ignoreOwnVisits config. Among directory peers, only Fathom honors DNT explicitly.

No funnels, no A/B, no heatmaps, no error tracking. Pure analytics + custom events.

Best for

Best for: developer-operators who already have a Node + MongoDB stack, want a free MIT (not AGPL/GPL) license to keep code-share clean, want events tracking without a SaaS dependency, and value GraphQL API access more than the lowest-possible tracker bundle size.

Real value at $0 (the only tier): MIT-licensed self-host. You pay for your own VPS + MongoDB. Donations via GitHub Sponsors / PayPal / Buy Me a Coffee — entirely optional.

Skip if: you want a hosted service (every other Tier 2 tool here offers one); you need multi-user/team accounts; you require DNT honoring at the tracker level; you want funnels/heatmaps/A-B built-in; or you need a tracker under 5 KB.

Closest siblings in directory: Counter.dev (no-entity AGPL solo-dev, has SaaS, more privacy-extreme), GoatCounter (Irish sole-trader EUPL, has SaaS, 8h salt rotation more aggressive), Umami (Delaware corporation MIT, has SaaS, more flexible DB).

Setup walkthrough

1. Self-host requires: Node.js 24+, MongoDB 4.4+, reverse proxy (nginx/Caddy/Traefik).
2. Deploy options documented: Docker Compose, Docker, Helm, native (no Docker), Netlify, Vercel, Heroku, Qovery, Render, Railway, Koyeb, Zeabur.
3. Easiest path: clone github.com/electerious/Ackee, docker-compose up -d, set environment variables (DB URL, JWT secret, etc).
4. Add tracker to your site:
`html

`
~8.3 KB gzipped.
5. Custom events via JS: ackeeInstance.action(eventId, {key: 'signup', value: 1}).
6. GraphQL API at /api — full schema + Playground available. Use for programmatic stats, custom dashboards, CLI reporters.
7. Detailed mode (browser/OS/device tracking) is OFF by default — opt-in via detailed: true per pageview if you need it. Vendor recommends asking user consent first.

Framework integrations: Gatsby plugin, Nuxt module, Vue, React (use-ackee), Svelte, Angular wrapper, VuePress, Gridsome, Django, Flutter/Dart, PHP class, WordPress (Soapberry plugin community), ackee-bitbar (macOS menubar), ackee-lighthouse, ackee-report (CLI).

Migrating from GA4

From self-hosted Plausible Community Edition. Both are AGPL/MIT OSS but very different stacks (Plausible Elixir + ClickHouse vs Ackee Node.js + MongoDB). No migration path for historical data — re-tag from cutover date.

From hosted analytics (GA4, Plausible Cloud, Fathom). Cabin/Ackee/etc don't import GA4 history. Drop GA4 + cookie banner — Ackee's cookieless design typically removes consent-banner requirement.

1. Stand up Ackee instance (Docker Compose easiest).
2. Add tracker to site, run alongside existing analytics for 2-4 weeks.
3. Map any custom events to Ackee's ackeeInstance.action() API.
4. (Optional) Enable detailed mode if you need browser/OS/device data — opt-in only.
5. (Optional) Build custom dashboards via GraphQL API.
6. Drop existing analytics + cookie banner.

Watch out: no built-in funnel/conversion-flow visualization. No multi-user — if you need team access, run multiple Ackee instances. Tracker is 8.3 KB gzipped — for ultra-light sites, GoatCounter or Plausible CE are lighter.

Help & FAQ

Where to get help with Ackee and the questions buyers email us about.

Support

HoursAsync (solo developer Tobias Reich)Europe/Berlin
ChannelsGithub issues
LanguagesEnglish, German

FAQ (7)

Is Ackee really self-host-only?

Yes. There is no SaaS, no managed cloud, no $9 plan, no 'starter' tier. The demo at demo.ackee.electerious.com is read-only showcase, not a multi-tenant service. You run it on your VPS or you don't run it. The MIT license means you can fork, modify, and ship it inside a commercial product without contaminating your codebase the way AGPL would.

What's the stack?

Node.js 24+ (as of v3.6.0, April 2026) + MongoDB 4.4+ + Hapi (HTTP) + GraphQL API + static dashboard. Tracker is ackee-tracker npm package (MIT). Deploy targets documented: Docker Compose, Helm, native, Netlify, Vercel, Heroku, Qovery, Render, Railway, Koyeb, Zeabur.

How does the privacy mechanism compare to GoatCounter?

Both use salted-hash for visitor uniqueness, but GoatCounter rotates salt every 8 hours vs Ackee's 24 hours — so GoatCounter is more conservative on cross-day re-identification. Both are MIT-permissive (Ackee MIT, GoatCounter EUPL — slightly different but both permissive).

Is the tracker really small?

Mid-weight. Verified: 21 KB minified / 8.3 KB gzipped from unpkg. Larger than Plausible (1KB), Pirsch (1.5KB), GoatCounter (1KB), Fathom (2KB). Earns bytes via richer client-side API: events, programmatic instance creation, manual record control, automatic SPA detection. If your site is already 500KB of JS, the delta is invisible; if you obsess over Lighthouse, pick a 1KB rival.

Does Ackee support multi-user?

NO. Single-user by design. FAQ: 'Ackee only works with one user and it's not planned to add support for multiple user-accounts. Ackee is however lightweight enough to create one Ackee instance per user.' For team/agency usage, run separate Ackee instances against same MongoDB.

Does it have funnels, A/B, heatmaps?

None. Pure analytics + custom events. For funnels look at Plausible Business+ ($39), Umami v3.1+ Custom Boards, OpenPanel, Swetrix. For heatmaps: only Humblytics in directory.

How active is development?

Recently revived. Latest release v3.6.0 published 2026-04-08 (Node.js 24 bump + Vercel deploy fixes). Prior: v3.5.1 (Nov 2025), v3.5.0 (Nov 2025). Before that, last release was v3.4.2 in December 2022 — a 3-year quiet period broken by Tobias Reich's renewed activity since November 2025. 4,646 GitHub stars.