Countly
AGPL-3.0 with Section 7 brand restriction ↻ recently Self-host ✓ Free
← All tools

Countly Review (2026)

Mobile-first product analytics platform — 11+ SDKs, ISO 27001 + SOC 2, AGPL+brand-clause self-host, MAU pricing, founded 2012

🇬🇧 United Kingdom Since 2012 AGPL-3.0 with Section 7 brand restriction

Countly is the only tool in this directory built mobile-first. Started in June 2012, incorporated as NIS Ltd in London early 2013 — predates virtually every other tool here by several years. 11+ official platform SDKs (iOS, Android, React Native, Flutter, Unity, Windows, C++, Node, Java, Dart, Web), tvOS / watchOS / ma

— Mark Sutton, editor
Countly mobile-first product analytics dashboard with funnels, cohorts, push notifications
Main dashboard view
Editor score 3.6/5
From Free Cloud + self-host
GitHub ★ 5,856 981 forks · last commit recently
Hosting Self-host ✓ EU hosted · US hosted
Privacy passport

Countly compliance at a glance

GDPR posture, sub-processors under DPA, per-jurisdiction stance, and encryption — everything a procurement team checks.

GDPR Compliant EU General Data Protection Regulation EU's omnibus privacy law requiring a lawful basis for processing personal data (consent, legitimate interest, etc.). Applies to anyone handling EU-resident data. Countly's posture: Consent or legitimate interest.
CA
CCPA Compliant California Consumer Privacy Act California Consumer Privacy Act — rights for California residents (access, deletion, opt-out of sales). Triggered at $25M revenue or 50k+ CA-consumer records.
UK PECR Compliant UK Privacy and Electronic Communications Regulations UK Privacy and Electronic Communications Regulations sit on top of GDPR specifically for cookies and electronic marketing. PECR Reg 6 governs analytics-cookie consent.
SOC 2 · II Compliant SOC 2 Type II SOC 2 Type II — independent audit verifying security/availability controls operate effectively over 6+ months. Standard B2B procurement requirement.
ISO27001
ISO 27001 Compliant ISO/IEC 27001 information-security ISO/IEC 27001 — international information-security management standard, certified by accredited bodies on a 3-year renewal cycle.
HIPAA Compliant US HIPAA (with BAA) US health-data law requiring a Business Associate Agreement (BAA) for any tool touching protected health information. Without BAA the tool cannot legally process PHI.

Per-jurisdiction posture

🇫🇷
France CNIL Banner recommended Default mode uses cookies + localStorage; consent typically required. Anonymous mode is configurable.
France · CNIL Default mode uses cookies + localStorage; consent typically required. Anonymous mode is configurable.
🇬🇧
United Kingdom UK ICO / PECR Banner recommended Default cookies trigger PECR Reg 6 consent.
United Kingdom · UK ICO / PECR Default cookies trigger PECR Reg 6 consent.
🇩🇪
Germany TTDSG Banner recommended TTDSG §25 applies to localStorage default; Anonymous mode bypasses.
Germany · TTDSG TTDSG §25 applies to localStorage default; Anonymous mode bypasses.
🇮🇹
Italy Garante Banner required Italian Garante is strictest. Default mode requires consent banner.
Italy · Garante Italian Garante is strictest. Default mode requires consent banner.

Sub-processors (1)

GDPR Art. 28 disclosure — third parties under DPA that may receive data.

Cloud provider (not disclosed) Flex managed cloud — vendor markets per-customer private cloud in region of choice but does NOT name the underlying IaaS provider on public pages

Collected

  • Device identifiers (cookie/localStorage-based device-id by default)
  • Session events with custom properties
  • User profiles with arbitrary metadata (per-user timeline)
  • Crash reports (mobile)
  • Heatmap interactions (web)

Explicitly NOT collected

  • (in anonymous/temporary-id mode) persistent device identifiers
  • (when consent_required: true is set) any data without explicit user consent
Data retention

Configurable per tier. Specific defaults not disclosed publicly.

Encryption
  • In transit: HTTPS (Flex managed cloud)
  • At rest: Independently audited (ISO 27001 + SOC 2) but specific algorithms not published
DPA Yes · manual
AI & Modern Capabilities

How Countly works with AI agents

Tier 2 — AI add-ons — 2 available. Selective AI footprint vs full suite.

AI Chat Available

Conversational natural-language interface

"AI Agent Cee" — natural-language analytics concierge, builds cohorts/funnels from plain English Source ↗

MCP Server Not yet

Model Context Protocol — Claude / Cursor / Codex

Not advertised by vendor

Agent API Not yet

Programmatic AI-agent endpoints

Not advertised by vendor

AI Insights Available

Anomaly detection / hypothesis / summaries

AI-powered analytics generates reports, dashboards, recommendations Source ↗

Export for AI Not yet

Structured export formatted for LLM ingestion

Not advertised by vendor

Strengths & weaknesses

What makes Countly worth a look — and where it falls short.

Strengths 7

  • Most extensive mobile SDK matrix — 11+ platforms
  • ISO 27001 + SOC 2 certified
  • Full kitchen-sink: funnels + cohorts + heatmaps + A/B + push + surveys
  • 14-year track record (founded June 2012)
  • Private-cloud regional pinning on Flex
  • AGPL self-host (Lite) with same code as Cloud
  • In-app messaging + remote config + crash reporting bundled

Weaknesses 7

  • Largest open-source tracker — ~36 KB gzipped (~132 KB raw min)
  • AGPL Section 7 brand-restriction prohibits Countly-logo removal
  • No public sub-processor list
  • Cloud provider behind Flex not disclosed
  • Pricing opacity — Flex calculator and Enterprise contact-sales only
  • Default mode uses cookies + localStorage (anonymous mode is downgrade)
  • DNT not addressed in public docs

Feature matrix

All 38 verified checks across 4 categories. Hover any row for the editor's note.

Tracking & Reporting 15

  • Pageviews & visitors Yes
  • Live visitor count ~Partial
  • Top pages report Yes
  • Top referrers Yes
  • UTM campaign tracking ~Partial
  • Country & city breakdown Yes
  • Device, browser, OS Yes
  • Bounce / engagement Yes
  • Time on site Yes
  • Custom events Yes
  • Goals / conversions Yes
  • Funnels Yes
  • Outbound link tracking ~Partial
  • File download tracking ~Partial
  • 404 / error tracking Yes

Privacy & Compliance 9

  • Cookieless by default ~Partial
  • No personal data collected ~Partial
  • GDPR-compliant out of the box ~Partial
  • Data hosted in EU Yes
  • Data hosted in US Yes
  • Self-hostable Yes
  • Open source ~Partial
  • Data retention period ·
  • Bot & spam filtering Yes

Setup & Integrations 10

  • Script weight (KB) 36
  • Single-snippet install Yes
  • WordPress plugin ~Partial
  • Proxy / first-party domain Yes
  • Public API Yes
  • Data export (CSV/JSON) Yes
  • Google Search Console connector No
  • Email digests Yes
  • Slack / webhook alerts Yes
  • Public shareable dashboard Yes

Pricing & Plans 4

  • Free tier exists Yes
  • Entry price ($/mo) $40/mo
  • Price at 100k pageviews $40/mo
  • Unlimited sites on entry plan ~Partial

Countly vs alternatives

How it compares to the closest 3 rivals on key buyer-decision fields.

Matomo

Matomo

Open-source self-hosted analytics, formerly Piwik

  • From$29/mo
  • HostingSelf-host ✓
  • EU-hostedYes
  • Cookieless
Piwik PRO

Piwik PRO

Enterprise GDPR-strict analytics suite — ISO 27001 + SOC 2 Type II + HIPAA BAA, multi-region SaaS, Polish closed-source (forked from Matomo 2016)

  • From$38/mo
  • HostingSaaS only
  • EU-hostedYes
  • CookielessYes
OpenPanel

OpenPanel

Open-source bridge web→product analytics — Mixpanel power, Plausible simplicity, $2.50 entry, EU-hosted Sweden

  • From$2/mo
  • HostingSelf-host ✓
  • EU-hostedYes
  • CookielessYes

Pricing tiers

Real plans, real numbers — pulled from count.ly (verified May 2026).

Lite

Free/free

Self-hosted only

  • ✓ AGPL-3.0+brand-clause
  • ✓ MongoDB
  • ✓ You manage everything
  • ✓ Some features gated
Flex Free

Free/mo

500 MAU

  • ✓ Private cloud region of choice
  • ✓ Core analytics
  • ✓ No card
Flex paid

$40/mo

MAU-based scaling

  • ✓ Private cloud
  • ✓ Add-on features
  • ✓ Custom add-ons
Enterprise

Custom

Custom

  • ✓ Dedicated CSM
  • ✓ On-prem option
  • ✓ HIPAA self-attest
  • ✓ Custom SLA

Tech specs

Stack, repo health, deployment options — for engineers evaluating self-host.

Stack

  • Written inJavaScript / Node.js
  • DatabaseMongoDB
  • CloudFlex private-cloud (provider not disclosed)
  • Self-hostHelm chart / Docker
  • LicenseAGPL-3.0 with Section 7 brand restriction
  • Min specsMongoDB-backed; per-deployment specs

GitHub github.com/Countly/countly-server

  • Stars★ 5,856
  • Forks981
  • Open issues0
  • Last commitrecently

Deploy

  • · Lite self-host (free, AGPL+brand-clause)
  • · Flex managed cloud
  • · Enterprise on-premises
Mark Sutton

Editor review

Independently reviewed by Mark Sutton, cross-checked against vendor documentation. Click any panel to expand.

+ What it does well

Countly is the only tool in this directory built mobile-first. Started in June 2012, incorporated as NIS Ltd in London early 2013 — predates virtually every other tool here by several years. 11+ official platform SDKs (iOS, Android, React Native, Flutter, Unity, Windows, C++, Node, Java, Dart, Web), tvOS / watchOS / macOS via the iOS umbrella.

AI Agent "Cee" — natural-language analytics concierge that builds cohorts and funnels from plain English. Plus AI-powered analytics generates reports, dashboards, and recommendations (countly.com/feature/ai-agent-cee). Two genuine AI capabilities, marked NEW on the Analyze section.

ISO 27001 + SOC 2 certified — third tool in this directory with formal third-party security attestations after Matomo Cloud and Piwik PRO. Serves enterprise mobile/IoT customers where audit-trail compliance is non-negotiable.

The product surface goes far beyond pageviews: event-based product analytics, funnels, cohorts, retention reports, per-user timelines, heatmaps, in-app messaging, push notifications (mobile), surveys, feature flags / remote config, A/B content testing, and crash reporting.

Weaknesses & gotchas

Countly's web SDK is the largest tracker among open-source peers — ~36 KB gzipped (~132 KB raw min) vs Plausible's 1 KB or Umami's 2 KB. It bundles content-testing, heatmaps, form analytics, error tracking, and scroll/click tracking in one file. For Core Web Vitals on slow connections this dents performance noticeably. Only Piwik PRO at ~86 KB is heavier in the directory.

The AGPL-3.0 license has a Section 7 modification that prohibits removing Countly's branding from any deployed UI — a real consideration for white-label SaaS plans. Pure-AGPL peers (Plausible, Rybbit, Swetrix, OpenPanel) don't have this restriction.

Pricing transparency is the worst in the directory's certified-tools cohort. Flex starts at $40/month MAU-based, but the exact per-MAU price curve and feature-by-add-on breakdown require expanding the calculator on /pricing or contacting sales. Compare to Matomo Cloud's published €29/mo entry with full ladder.

Sub-processor disclosure is minimal — the cloud provider behind Flex private-cloud, email/support tooling, and payment processor are NOT disclosed on public pages. Plausible publishes 8 sub-processors; Piwik PRO publishes 15+. Countly's DPA exists but doesn't list specific sub-processors publicly.

DNT browser-signal honoring not advertised. Default identity model uses cookies + localStorage; Anonymous mode is configurable but a deliberate downgrade.

Best for

Best for: mobile-app-heavy organizations that want one analytics platform across native (iOS/Android/Flutter/RN/Unity), desktop (Windows/.NET), and web. Strong fit for app studios, gaming companies, IoT/embedded teams (C++ SDK), regulated industries that need ISO 27001 + SOC 2 attestations.

Real value at Flex paid ($40+/mo) or Enterprise tier: That's where you unlock private-cloud regional pinning, full feature set (push, A/B, heatmaps), and ISO 27001 + SOC 2 evidence. Lite (free self-host) gives you analytics + funnels but gates push, content testing, and some engagement features.

Not for: sub-5KB-tracker requirements (look at Plausible, Pirsch, GoatCounter, Rybbit, OpenPanel); pure web analytics where Matomo or Piwik PRO fit better; teams that need transparent published pricing across all tiers; DNT-honoring requirements (only Fathom does in this directory); white-label rebrand use cases (Section 7 brand-protection clause prohibits Countly-logo removal).

Setup walkthrough

Cloud Flex: sign up at count.ly, choose region for private-cloud deployment (vendor doesn't publish underlying provider). Drop one snippet for web tracking; integrate one of 11+ SDKs for native apps.

Web SDK: standard Countly snippet — Countly.q.push(['init', { app_key: '...', url: 'https://...' }]) then Countly.q.push(['track_pageview']). ~36 KB gzipped on first paint.

iOS / Swift: add Countly Cocoapod or SPM package. Countly.sharedInstance().startWithConfig(config). Crash reporting is automatic.

Android / Kotlin: Gradle dependency on ly.count.android.sdk. Init in Application.onCreate().

Self-host (Lite): clone github.com/Countly/countly-server, deploy via Helm chart (countly/helm) or Docker — MongoDB-backed. AGPL-3.0 + Section 7 brand-clause means you cannot remove Countly's logo from source or UI.

Migrating from GA4

From GA4 (web): Countly's web SDK supports event-based tracking similar to GA4 (custom events, custom segments, goals). Migration is fresh-tag — drop the GA4 snippet, install Countly snippet, redefine events using Countly's Countly.q.push(['add_event', {...}]) API. Funnels are recreated in Countly's UI.

From Firebase Analytics (mobile): Countly's mobile SDKs are deeper than Firebase's — crash reporting, push notifications, A/B testing, surveys all bundled. Migration: replace Firebase SDK with Countly SDK in your app, port event names + properties (Countly accepts arbitrary key-value maps).

From Mixpanel (product analytics): Countly's funnel/cohort/retention model maps closely to Mixpanel. Identity layer differs (Countly uses configurable device_id; Mixpanel uses identify()). Plan to re-implement user-identity bindings.

For ISO 27001 / SOC 2 procurement: request the audit reports under NDA from your account executive after signing the DPA at /dpa.

Help & FAQ

Where to get help with Countly and the questions buyers email us about.

Support

HoursBusiness hours + Enterprise 24/7Europe/London (UTC+0/+1)
ChannelsEmail · Support portal
LanguagesEnglish

FAQ (7)

Is Countly really mobile-first?

Yes. Founded June 2012 as a mobile analytics SDK and incorporated as NIS Ltd in London in early 2013 — Countly predates virtually every other tool in this directory by several years. 11+ official platform SDKs (iOS, Android, React Native, Flutter, Unity, Windows, C++, Node, Java, Dart, Web), with tvOS / watchOS / macOS via the iOS SDK.

What are Countly's certifications?

ISO 27001 + SOC 2 per /security page. HIPAA self-attestation (BAA availability not explicitly confirmed on public pages — Enterprise tier likely required). This makes Countly the third directory tool with third-party attestations after Matomo Cloud (ISO 27001) and Piwik PRO (ISO 27001 + SOC 2 + HIPAA BAA).

What's the difference between Lite, Flex, and Enterprise?

Lite is free self-host (AGPL-3.0 with Section 7 brand restriction). Flex Free is $0 cloud for 500 MAU. Flex paid starts at $40/mo (MAU-based scaling). Enterprise is custom-quoted with private-cloud + dedicated CSM. Some advanced features (push, A/B, heatmaps) are gated to Flex/Enterprise — not all in Lite.

Where is Flex hosted?

Vendor markets per-customer 'private cloud in region of choice'. The specific underlying cloud provider (AWS / GCP / Azure / Hetzner / OVH) is NOT disclosed on public pages. This is a notable transparency gap vs Plausible (Hetzner DE, named) or Piwik PRO (Microsoft Azure multi-region, named).

Does Countly's AGPL license restrict me?

Yes — uniquely among the directory's AGPL tools. Countly's license is AGPL-3.0 with a modified Section 7 that prohibits removing Countly logo or branding from source code or UI. Pure-AGPL tools (Plausible, Rybbit, Swetrix, OpenPanel) don't have this restriction. Verify if you plan to fork or white-label.

Does Countly honor Do Not Track?

Not explicitly documented on public pages. The web SDK has a consent_required flag for opt-in tracking but DNT browser-signal auto-respect is not advertised. Among directory peers, only Fathom explicitly honors DNT.

What's the tracker size impact?

Countly's web SDK is ~36KB gzipped (132KB raw min) — the largest tracker among directory open-source tools. For comparison: Plausible 1KB, Pirsch 1.5KB, Umami 2KB, Matomo 22-25KB, Piwik PRO 86KB. Countly bundles content-testing, heatmaps, form analytics, error tracking, scroll tracking in one file.