Flat pricing nobody else offers. $14/mo Pro covers up to 100k events with no traffic-tier punishment. Plausible jumps from $9 → $19 → $39 → $59 across the same range; Fathom and Simple Analytics scale similarly. For a SaaS with spiky launches, Seline's flat model is the predictability play.
GDPR posture, sub-processors under DPA, per-jurisdiction stance, and encryption — everything a procurement team checks.
?GDPR✓ CompliantEU General Data Protection Regulation
EU's omnibus privacy law requiring a lawful basis for processing personal data (consent, legitimate interest, etc.). Applies to anyone handling EU-resident data. Seline's posture: Legitimate interest. ?CCPA✓ CompliantCalifornia Consumer Privacy Act
California Consumer Privacy Act — rights for California residents (access, deletion, opt-out of sales). Triggered at $25M revenue or 50k+ CA-consumer records. ?UK PECR✓ CompliantUK Privacy and Electronic Communications Regulations
UK Privacy and Electronic Communications Regulations sit on top of GDPR specifically for cookies and electronic marketing. PECR Reg 6 governs analytics-cookie consent. ?SOC 2 · II✕ Not heldSOC 2 Type II
SOC 2 Type II — independent audit verifying security/availability controls operate effectively over 6+ months. Standard B2B procurement requirement. ?ISO 27001✕ Not heldISO/IEC 27001 information-security
ISO/IEC 27001 — international information-security management standard, certified by accredited bodies on a 3-year renewal cycle. ?HIPAA✕ Not heldUS HIPAA (with BAA)
US health-data law requiring a Business Associate Agreement (BAA) for any tool touching protected health information. Without BAA the tool cannot legally process PHI.
Per-jurisdiction posture
🇫🇷
FranceCNILNo banner
Cookieless + no PII storage aligns with CNIL exemption for analytics. No CNIL-specific assessment published by vendor.
?France · CNIL
Cookieless + no PII storage aligns with CNIL exemption for analytics. No CNIL-specific assessment published by vendor. 🇬🇧
United KingdomUK ICO / PECRNo banner
PECR Reg 6 applies to cookies/local storage; Seline uses neither for visitor tracking, so no consent trigger.
?United Kingdom · UK ICO / PECR
PECR Reg 6 applies to cookies/local storage; Seline uses neither for visitor tracking, so no consent trigger. 🇩🇪
GermanyTTDSGNo banner
TTDSG §25 applies to terminal-device storage; cookieless mechanism avoids the §25 trigger.
?Germany · TTDSG
TTDSG §25 applies to terminal-device storage; cookieless mechanism avoids the §25 trigger. 🇮🇹
ItalyGaranteBanner recommended
Italian Garante is the strictest EU DPA on analytics. Vendor has no Garante-specific ruling; conservative reading suggests disclosure recommended.
?Italy · Garante
Italian Garante is the strictest EU DPA on analytics. Vendor has no Garante-specific ruling; conservative reading suggests disclosure recommended.
Sub-processors (4)
GDPR Art. 28 disclosure — third parties under DPA that may receive data.
Cloudflare
IP→country header lookup (CF-IPCountry); CDN/edge-proxy role implied but not explicitly stated by vendor
United States
🇺🇸
Postmark
Transactional email delivery (account email)
United States
🇺🇸
Stripe
Payment processing (account billing)
United States
● Collected
URLs visited and page titles
HTTP referrer + UTM parameters
Browser, OS, device type
Country (derived from Cloudflare edge headers — IP not stored)
Custom events and conversions
Optional: user identification via seline.identify() (email/user_id), if you opt in
● Explicitly NOT collected
IP addresses (hashed daily, never stored)
Cookies or local storage entries on visitor devices
Cross-site tracking identifiers
City-level geolocation
type=password form fields (auto-skipped)
Data retention
Deleted data purged from backups after 30 days (per /gdpr). Per-tier retention split (Free 1y / Pro "Forever") referenced in third-party listings (Capterra) but not on /privacy, /gdpr, or /pricing as of fact-check 2026-05-01 — verify with vendor support before relying on it.
Real plans, real numbers — pulled from seline.com (verified May 2026).
Free
Free/mo
3,000 events
✓ 1 project
✓ 1-year retention
✓ No credit card
Pro
$14/mo
100,000 events
✓ All features unlocked
✓ Funnels + user profiles
✓ Stripe revenue attribution
✓ AI chat assistant
✓ Unlimited projects
✓ "Forever" retention
✓ 7-day free trial
Tech specs
Stack, repo health, deployment options — for engineers evaluating self-host.
Stack
Written inTypeScript
DatabaseClickHouse + Postgres
HostingHetzner Germany
CDNCloudflare
LicenseClosed-source SaaS (tracker MIT)
Min specsN/A — SaaS only
GitHub github.com/getseline/seline-js
Stars★ 42
Forks5
Open issues0
Last commitwithin last year
Deploy
· Cloud SaaS only
· WordPress plugin (<10 active installs)
Used by
Companies and projects that publicly trust Seline.
Dub.co
Vercel
Cloudscope
Seino
ODF
Edcafe AI
Waddling Technology
Ekaproeka
Editor review
Independently reviewed by Mark Sutton, cross-checked against vendor documentation. Click any panel to expand.
+What it does well▾
Flat pricing nobody else offers. $14/mo Pro covers up to 100k events with no traffic-tier punishment. Plausible jumps from $9 → $19 → $39 → $59 across the same range; Fathom and Simple Analytics scale similarly. For a SaaS with spiky launches, Seline's flat model is the predictability play.
SaaS depth without leaving privacy-first territory. Funnels, user profiles with churn analytics, Stripe revenue attribution, and a natural-language AI chat assistant — features Plausible/Fathom either gate behind their top tier or don't ship at all. Seline is closer to early Mixpanel than to early Plausible.
~2 KB tracker on Hetzner Germany. EU-only data residency, daily-rotating IP+UA hash, country-only geo via Cloudflare CF-IPCountry header. Clean Schrems II story, no cookie banner.
−Weaknesses & gotchas▾
No self-host, ever. Server is closed-source SaaS — only the JS tracker is MIT on github.com/getseline/seline-js. If you need air-gap or on-premise, Plausible CE / Matomo / Umami / Rybbit are the only options.
No SOC 2 / ISO 27001 / HIPAA. A 4-person bootstrapped team in Warsaw founded in 2024 — vendor self-attests GDPR / CCPA / PECR but holds zero third-party security certifications. Procurement teams with attestation requirements should look at Matomo Cloud (ISO 27001) or Piwik PRO (ISO 27001 + SOC 2 + HIPAA BAA).
Behavior past 100k events not documented publicly. Vendor markets Pro as "no surprise invoices" but doesn't publish overage policy, soft caps, or enterprise tiers. Verify with [email protected] if your traffic regularly exceeds the displayed cap.
Country-level geo only. No city-level data — Cloudflare CF-IPCountry is the only geographic signal. Local-marketing analytics will need Plausible (Growth tier or higher) or Matomo. No DPA self-serve, no public status page, DNT handling not stated.
★Best for▾
Best for indie SaaS founders who want one tool covering web analytics + product funnels + revenue attribution without three subscriptions. Real endorsers include Steven Tey (Dub.co), Guillermo Rauch (Vercel CEO), Chris Williams (Cloudscope) — that's the developer-founder crowd it's built for.
Real value kicks in at the $14 Pro tier — funnels, user profiles, churn analytics, Stripe integration, AI chat. The free 3,000-events tier is enough for a personal site or pre-launch SaaS to validate fit.
Not for enterprises with SOC 2 procurement requirements, teams that need self-host, content sites that don't care about funnels (Plausible is cheaper for plain pageviews), or anything past ~100k events/mo without a vendor conversation.
⚡Setup walkthrough▾
Add a snippet, done. One tag from your dashboard, ~2 KB. Auto-tracks pageviews and SPA route changes. Works on any frontend — React, Next.js, Vue, plain HTML.
Custom events via seline.track('event_name', {prop: 'value'}) JS API or data-sln-event HTML attributes for click tracking. Form-tracking auto-skips type=password fields.
WordPress plugin at wordpress.org/plugins/seline-analytics — official, but <10 active installs as of the last update. Most users go with the snippet directly.
First-party proxy via Cloudflare or a custom subdomain is documented for ad-blocker resilience. Public REST API at api.seline.com (Bearer token, 100 req/min) for export and integrations.
↔Migrating from GA4▾
No native GA4 importer. Seline doesn't ship a "click here, pull your GA4 history" flow — historical data stays in GA4 if you want it. The migration path is forward-looking: drop the snippet, optionally run dual-tagging for a few weeks to align metrics, then sunset GA4.
Re-tag custom events. GA4 events don't map 1:1 — Seline's funnel/profile model is closer to Mixpanel than to GA4's hit-based schema. Plan to redefine 5-15 critical events using seline.track() and rebuild conversions from scratch.
Cookie banner removal is the immediate win. Vendor positions Seline as banner-free for GDPR/CCPA/PECR. If you migrate fully and drop GA4, the consent prompt comes off — measurable conversion-rate lift on most sites within 2-4 weeks.
For SaaS-specific migration (revenue, churn, user identification), connect Stripe via the dashboard and call seline.identify({user_id, email}) after login. That replaces GA4 user_id custom dimensions cleanly.
Help & FAQ
Where to get help with Seline and the questions buyers email us about.
Yes for visitor tracking. Seline does not place any cookies on visitors' devices; it uses a daily-rotating non-reversible hash of IP + user agent + device for unique-visitor counts. A first-party session cookie exists only inside the Seline app itself when you log in to your dashboard.
Do I need a cookie banner with Seline?▾
Per vendor, no. Seline claims GDPR / CCPA / PECR compliance without consent banners because it stores no cookies, no IP addresses, and no cross-site identifiers. The Italian Garante is the strictest EU regulator and disclosure is recommended there as a conservative reading.
Where is my Seline data stored?▾
On Hetzner servers in Germany. ClickHouse holds events and Postgres holds account data — both on EU infrastructure. Visitor analytics data does not leave the EU; only billing (Stripe) and transactional email (Postmark) touch US sub-processors.
How does pricing work above 100k events per month?▾
Seline's Pro plan is $14/mo flat with 100k events/mo as the displayed default. Vendor markets it as "no surprise invoices" but the exact behavior past 100k (overage, soft cap, contact-sales) is not documented publicly. Verify with [email protected] if traffic regularly exceeds the cap.
Can I self-host Seline?▾
No. The Seline server is closed-source SaaS-only. The JavaScript tracker SDK is open-source MIT (github.com/getseline/seline-js), but the analytics backend cannot be self-hosted. For self-host options, see Plausible CE, Matomo, Umami, or Rybbit.
Does Seline offer SOC 2 or ISO 27001 certification?▾
No. Seline is a 4-person bootstrapped team founded in 2024 and holds no third-party security certifications. Vendor self-attests GDPR / CCPA / PECR compliance only. Enterprises with procurement requirements typically pick Matomo Cloud (ISO 27001) or Piwik PRO (ISO 27001 + SOC 2 + HIPAA BAA) instead.
What happens to my data if I cancel my Seline subscription?▾
Per /privacy, deleted account data is purged from backups within 30 days. Vendor does not document a self-serve export-on-cancellation flow — contact [email protected] to request CSV export before closing your account.
