Wide Angle Analytics
Closed-source SaaS SaaS only From $15/mo
← All tools

Wide Angle Analytics Review (2026)

Strict EU-only privacy-first analytics on OVHcloud — German GmbH, external DPO, 50-100 sites per plan, $15 entry

🇩🇪 Germany Since 2021 Closed-source SaaS

Wide Angle Analytics is the strictest German privacy-first option in this directory. Where Plausible runs Hetzner Germany with a Slovenian CDN and Fathom multi-regions through AWS EU + US, Input Objects GmbH plants its entire stack on OVHcloud's EU Public Cloud and refuses third-country transfers — which makes it one o

— Mark Sutton, editor
Wide Angle Analytics demo dashboard — Total Views 203,708, Total Users 133,136, Bounce 79%, Median Visit 32s, Views vs Users area chart (interactive demo)
Dashboard captured via puppeteer
Editor score 3.5/5
From $15/mo Cloud only
GitHub ★ 0 0 forks · last commit —
Hosting SaaS only EU hosted
Privacy passport

Wide Angle Analytics compliance at a glance

GDPR posture, sub-processors under DPA, per-jurisdiction stance, and encryption — everything a procurement team checks.

GDPR Compliant EU General Data Protection Regulation EU's omnibus privacy law requiring a lawful basis for processing personal data (consent, legitimate interest, etc.). Applies to anyone handling EU-resident data. Wide Angle Analytics's posture: Legitimate interest.
CA
CCPA Compliant California Consumer Privacy Act California Consumer Privacy Act — rights for California residents (access, deletion, opt-out of sales). Triggered at $25M revenue or 50k+ CA-consumer records.
UK PECR Compliant UK Privacy and Electronic Communications Regulations UK Privacy and Electronic Communications Regulations sit on top of GDPR specifically for cookies and electronic marketing. PECR Reg 6 governs analytics-cookie consent.
SOC 2 · II Not held SOC 2 Type II SOC 2 Type II — independent audit verifying security/availability controls operate effectively over 6+ months. Standard B2B procurement requirement.
ISO27001
ISO 27001 Not held ISO/IEC 27001 information-security ISO/IEC 27001 — international information-security management standard, certified by accredited bodies on a 3-year renewal cycle.
HIPAA Not held US HIPAA (with BAA) US health-data law requiring a Business Associate Agreement (BAA) for any tool touching protected health information. Without BAA the tool cannot legally process PHI.

Per-jurisdiction posture

🇫🇷
France CNIL No banner Cookieless + no PII pattern aligns with GDPR Recital 26. No CNIL-specific endorsement letter published; relies on legitimate-interest theory.
France · CNIL Cookieless + no PII pattern aligns with GDPR Recital 26. No CNIL-specific endorsement letter published; relies on legitimate-interest theory.
🇬🇧
United Kingdom UK ICO / PECR No banner PECR Reg 6 applies to cookies/local storage; Wide Angle uses neither for visitor tracking.
United Kingdom · UK ICO / PECR PECR Reg 6 applies to cookies/local storage; Wide Angle uses neither for visitor tracking.
🇩🇪
Germany TTDSG No banner TTDSG §25 applies to terminal-device storage; cookieless mechanism avoids the §25 trigger.
Germany · TTDSG TTDSG §25 applies to terminal-device storage; cookieless mechanism avoids the §25 trigger.
🇮🇹
Italy Garante Banner recommended Italian Garante is strictest. No Garante-specific ruling. Conservative reading recommends disclosure.
Italy · Garante Italian Garante is strictest. No Garante-specific ruling. Conservative reading recommends disclosure.

Sub-processors (6)

GDPR Art. 28 disclosure — third parties under DPA that may receive data.

OVHcloud Hosting & backend infrastructure (EU Public Cloud, Open Trusted Cloud partner program) France
Paddle Payment processing & merchant of record United Kingdom
Infomaniak Network SA Contact / messaging management CH
iubenda Privacy policy hosting (marketing site only) Italy
dpo-consulting.com External Data Protection Officer Luxembourg

Collected

  • URLs visited and page titles
  • HTTP referrer + UTM parameters
  • Browser, OS, device type
  • Country and region (derived from IP, then IP discarded)
  • Custom Actions (event tracking)
  • Daily-rotating anonymous session hash

Explicitly NOT collected

  • IP addresses (used as hash input only, not stored)
  • Cookies or local storage entries on visitor devices
  • Cross-site tracking identifiers
  • Browser fingerprints (off by default; data-waa-fingerprint='true' opt-in)
Data retention

Plan-tied retention: Starter 12mo / Plus 24mo / Advanced unlimited (Forever). Default not separately specified outside plan tiers.

Encryption
  • In transit: HTTPS via Let's Encrypt; internal SSL between services
  • At rest: AES-XTS for storage volumes, AES-256 for password vaults; XSalsa20+Poly1305 for backups; HSM-managed keys
DPA Yes · manual
AI & Modern Capabilities

How Wide Angle Analytics works with AI agents

Tier 3 — no AI yet — vendor focuses on classic privacy-first analytics; no AI/MCP features advertised.

AI Chat Not yet

Conversational natural-language interface

Not advertised by vendor

MCP Server Not yet

Model Context Protocol — Claude / Cursor / Codex

Not advertised by vendor

Agent API Not yet

Programmatic AI-agent endpoints

Not advertised by vendor

AI Insights Not yet

Anomaly detection / hypothesis / summaries

Not advertised by vendor

Export for AI Not yet

Structured export formatted for LLM ingestion

Not advertised by vendor

Strengths & weaknesses

What makes Wide Angle Analytics worth a look — and where it falls short.

Strengths 8

  • Strictest EU-only data plane — OVHcloud Open Trusted Cloud
  • Cookieless mechanism documented verbatim — SHA-256(site+IP+UA+Daily-Salt)
  • External DPO oversight from dpo-consulting.com (Luxembourg)
  • 10 / 20 / 100 sites per Starter / Plus / Advanced — agency-friendly
  • Explicit encryption details (AES-XTS, XSalsa20+Poly1305, HSM keys)
  • GDPR/CCPA/PECR/COPPA self-attested with external DPO
  • 1M events at $40/mo — competitive at high volume
  • Forever retention on Advanced tier

Weaknesses 7

  • Closed-source — no auditable repo
  • No free tier — only 14-day trial
  • No public sub-processor page (only iubenda marketing-site policy)
  • Tiny team — bus-factor risk, no Crunchbase / funding disclosure
  • No public status page
  • No funnels, public dashboard, GSC connector, Slack webhooks, email digests
  • Tracker KB weight not published by vendor

Feature matrix

All 38 verified checks across 4 categories. Hover any row for the editor's note.

Tracking & Reporting 15

  • Pageviews & visitors Yes
  • Live visitor count Yes
  • Top pages report Yes
  • Top referrers Yes
  • UTM campaign tracking Yes
  • Country & city breakdown ~Partial
  • Device, browser, OS Yes
  • Bounce / engagement Yes
  • Time on site Yes
  • Custom events Yes
  • Goals / conversions Yes
  • Funnels No
  • Outbound link tracking Yes
  • File download tracking Yes
  • 404 / error tracking No

Privacy & Compliance 9

  • Cookieless by default Yes
  • No personal data collected Yes
  • GDPR-compliant out of the box Yes
  • Data hosted in EU Yes
  • Data hosted in US No
  • Self-hostable No
  • Open source No
  • Data retention period 12
  • Bot & spam filtering ~Partial

Setup & Integrations 10

  • Script weight (KB) ·
  • Single-snippet install Yes
  • WordPress plugin Yes
  • Proxy / first-party domain Yes
  • Public API Yes
  • Data export (CSV/JSON) ~Partial
  • Google Search Console connector No
  • Email digests No
  • Slack / webhook alerts No
  • Public shareable dashboard No

Pricing & Plans 4

  • Free tier exists No
  • Entry price ($/mo) $15/mo
  • Price at 100k pageviews $40/mo
  • Unlimited sites on entry plan ~Partial

Wide Angle Analytics vs alternatives

How it compares to the closest 3 rivals on key buyer-decision fields.

Pirsch

Pirsch

Cookieless EU-hosted analytics built in Germany, with open-source AGPLv3 core

  • From$6/mo
  • HostingSaaS only
  • EU-hostedYes
  • CookielessYes
Plausible

Plausible

Privacy-first GA alternative, EU-hosted, simple dashboard

  • From$9/mo
  • HostingSelf-host ✓
  • EU-hostedYes
  • CookielessYes
Simple Analytics

Simple Analytics

No-cookie analytics with AI-powered insights

  • FromFree
  • HostingSaaS only
  • EU-hostedYes
  • CookielessYes

Pricing tiers

Real plans, real numbers — pulled from wideangle.co (verified May 2026).

Trial

Trial/14 days

Full Plus access

  • ✓ No card on signup
Starter

$15/mo

50K events

  • ✓ 10 sites
  • ✓ 12-month retention
  • ✓ 1 user
  • ✓ Email support
Plus

$40/mo

1M events

  • ✓ 20 sites
  • ✓ 24-month retention
  • ✓ 10 users
  • ✓ User Tags
  • ✓ Live chat
Advanced

$150/mo

10M events

  • ✓ 100 sites
  • ✓ Forever retention
  • ✓ 100 users
  • ✓ Permissions
  • ✓ Priority support

Tech specs

Stack, repo health, deployment options — for engineers evaluating self-host.

Stack

  • Written inClosed-source (no public stack disclosure)
  • HostingOVHcloud Public Cloud (EU-only, Open Trusted Cloud partner)
  • EncryptionAES-XTS storage · AES-256 vaults · XSalsa20+Poly1305 backups · HSM keys
  • LicenseClosed-source SaaS
  • Min specsN/A — SaaS only

GitHub github.com/wideangleanalytics

  • Stars★ 0
  • Forks0
  • Open issues0
  • Last commit

Deploy

  • · Cloud SaaS only
Mark Sutton

Editor review

Independently reviewed by Mark Sutton, cross-checked against vendor documentation. Click any panel to expand.

+ What it does well

Wide Angle Analytics is the strictest German privacy-first option in this directory. Where Plausible runs Hetzner Germany with a Slovenian CDN and Fathom multi-regions through AWS EU + US, Input Objects GmbH plants its entire stack on OVHcloud's EU Public Cloud and refuses third-country transfers — which makes it one of the cleanest Schrems II answers you can buy without going self-host.

The cookieless mechanism is also unusually well-documented. Most rivals say "we hash visitors" and stop there. Wide Angle publishes the literal formula: SHA-256(site + IP + User-Agent + Daily-Salt) — and explains that the daily salt lives in transient memory and rotates every 24 hours, which means yesterday's session ID cannot be reconstructed even by them. That kind of transparency is what your DPO actually wants to read.

You also get an external DPO from dpo-consulting.com signing off on the legitimate-interest legal theory, which is rare at the $15/mo entry tier and matters when you have to defend the "no banner" decision to procurement. And the per-plan site allowances are generous: 10 sites on Starter, 20 on Plus, 100 on Advanced — agencies and portfolio operators get more sites for less than per-site rivals.

Weaknesses & gotchas

The team is tiny, the source is closed, and the price floor is high. Input Objects GmbH does not publish a team page, a Crunchbase profile, or any funding announcements — the support page openly admits "you may chat with the CEO, developer, or designer," which is delightful when it works and a bus-factor problem when it doesn't. There is no public status page; outages are documented after the fact on the blog.

The product is closed-source. The github.com/inputobjects organization is empty; only thin SDK wrappers (Nuxt, Vue) are published. If your compliance team requires auditable code, Matomo, Umami, GoatCounter, or Plausible (AGPL) all win here.

There is no free tier — Starter is $15/mo, which is the highest entry price among the major privacy-first names ($9 Plausible, $10 Simple Analytics, free GoatCounter/Umami self-host). Funnel reports, GSC connector, Slack webhooks, public dashboards, email digests, and a published tracker script weight are all either missing or undisclosed. And the canonical sub-processor list is gated behind the DPA — only the marketing-site iubenda policy is public.

Best for

Best for: EU SMBs and agencies with a German/French DPO who must rule out third-country transfers entirely; portfolio operators running 5-50 sites who hate per-site billing; teams that already trust OVH for hosting.

Real value at $40/mo (Plus): 1M events, 20 sites, 24-month retention, 10 users, live chat — this is the sweet spot. Below 50k events/mo Starter is fine, but most operators will outgrow it within a quarter.

Not for: US-only customers (no US hosting); hobbyists wanting a free tier (none); engineering teams that need self-host or open source (closed); marketers needing funnel reports, GSC integration, or Slack alerts (not shipped).

Setup walkthrough

Install is a single async-defer tag — there's no SDK to bundle. WordPress, Wix, Squarespace, Webflow, Ghost, Carrd are documented as one-click integrations.

The interesting setup option is the first-party proxy via custom domain — point a subdomain (e.g., analytics.yoursite.com) at Wide Angle's tracker host so the script and beacon hit your origin, which side-steps ad-blockers and content-security-policies.

Per-script tracking flags are configurable inline: data-waa-fingerprint='true' enables canvas-fingerprint mode (off by default), data-waa-cid='...' injects a logged-in customer ID, data-waa-inc-params='id,session' whitelists URL params, data-waa-exc-paths='/wp-admin/*' excludes paths. All of this is server-validated against the per-site config in the dashboard.

Migrating from GA4

There is no GA4 importer. Migration is re-tagging-only: drop the GA4 tag, drop in the Wide Angle script, restart from zero. There is no historical-data ingest path, which is the same posture as Plausible/Fathom.

The banner-removal lift is meaningful: because Wide Angle ships under legitimate-interest with no PI collection, EU sites can typically retire their analytics-purpose cookie banner entirely (marketing/ad cookies remain a separate question). Belt-and-braces operators may want their counsel to validate the legitimate-interest balancing test, though Wide Angle's blog post makes the standard case publicly.

Custom-event mapping requires planning. GA4 has 1000s of automatic events; Wide Angle ships with pageviews + outbound + downloads + named "Custom Actions." You'll need to inventory which GA4 events you actually use, then wire each one to Wide Angle's waa('track', 'event_name', {...}) call. UTM tracking is automatic.

For agencies migrating multiple sites: the 10-site Starter tier or 20-site Plus tier supports portfolio-style migration without per-site billing — replicate the script across all clients, then audit each dashboard.

Help & FAQ

Where to get help with Wide Angle Analytics and the questions buyers email us about.

Support

HoursAsync (small team — CEO/dev/designer self-described)Europe/Berlin (UTC+1/+2)
ChannelsEmail · Live chat
LanguagesEnglish, German
Response SLA~48h

FAQ (7)

Is Wide Angle Analytics actually banner-free in France/Germany/Italy?

Vendor claims EU-wide banner-free deployment under legitimate-interest legal basis with no PI collection by default. They do not name CNIL, TTDSG, or Garante endorsement letters — the legal theory is shared with Plausible/Fathom-style cookieless analytics. External DPO from dpo-consulting.com signs off on the approach.

Where is my data physically stored?

OVHcloud Public Cloud, EU-only. Vendor explicitly states all services reside within OVH EU datacenters. No US edge nodes for analytics data.

Is there a free plan?

No. Only a 14-day trial. Starter at $15/€10 monthly is the entry tier.

Can I self-host Wide Angle?

No. SaaS only — closed-source. The github.com/inputobjects organization page is empty; only thin SDK wrappers (Nuxt, Vue) are public.

What's the cookieless mechanism?

Daily-salted SHA-256 hash of (site + IP + User-Agent + Daily-Salt). The daily salt rotates every 24h and never persists, so unique-visitor counting works only inside a 24h window — by design.

Is there a public API?

Yes — events ingestion API documented at wideangleanalytics.github.io/wideangle-api. Read-API for pulling reports is implied via the same spec.

How big is the tracker script?

Vendor does not publish a KB number. Independent measurement required.