Wide Angle Analytics
Closed-source SaaS SaaS only From $15/mo
← All tools

Wide Angle Analytics Review (2026)

Shut down on 31 August 2026 (announced May 2026). Was: strict EU-only privacy-first analytics on OVHcloud — German GmbH, $15 entry

🇩🇪 Germany Since 2021 Closed-source SaaS

Wide Angle Analytics shut down on 31 August 2026; this profile is kept for reference and the service can no longer be bought. It was the strictest German privacy-first option in this directory. Where Plausible runs Hetzner Germany with a Slovenian CDN and Fathom multi-regions through AWS EU + US, Input Objects GmbH pla

— Mark Sutton, editor
Wide Angle Analytics demo dashboard — Total Views 203,708, Total Users 133,136, Bounce 79%, Median Visit 32s, Views vs Users area chart (interactive demo)
Dashboard captured via puppeteer
Editor score 3.5/5
From $15/mo Cloud only
GitHub ★ 0 0 forks · last commit —
Hosting SaaS only EU hosted
Privacy passport

Wide Angle Analytics compliance at a glance

GDPR posture, sub-processors under DPA, per-jurisdiction stance, and encryption — everything a procurement team checks.

GDPR Compliant EU General Data Protection Regulation EU's omnibus privacy law requiring a lawful basis for processing personal data (consent, legitimate interest, etc.). Applies to anyone handling EU-resident data. Wide Angle Analytics's posture: Legitimate interest.
CA
CCPA Compliant California Consumer Privacy Act California Consumer Privacy Act — rights for California residents (access, deletion, opt-out of sales). Triggered at $25M revenue or 50k+ CA-consumer records.
UK PECR Compliant UK Privacy and Electronic Communications Regulations UK Privacy and Electronic Communications Regulations sit on top of GDPR specifically for cookies and electronic marketing. PECR Reg 6 governs analytics-cookie consent.
SOC 2 · II Not held SOC 2 Type II SOC 2 Type II — independent audit verifying security/availability controls operate effectively over 6+ months. Standard B2B procurement requirement.
ISO27001
ISO 27001 Not held ISO/IEC 27001 information-security ISO/IEC 27001 — international information-security management standard, certified by accredited bodies on a 3-year renewal cycle.
HIPAA Not held US HIPAA (with BAA) US health-data law requiring a Business Associate Agreement (BAA) for any tool touching protected health information. Without BAA the tool cannot legally process PHI.

Per-jurisdiction posture

🇫🇷
France CNIL No banner Cookieless + no PII pattern aligns with GDPR Recital 26. No CNIL-specific endorsement letter published; relies on legitimate-interest theory.
France · CNIL Cookieless + no PII pattern aligns with GDPR Recital 26. No CNIL-specific endorsement letter published; relies on legitimate-interest theory.
🇬🇧
United Kingdom UK ICO / PECR No banner PECR Reg 6 applies to cookies/local storage; Wide Angle uses neither for visitor tracking.
United Kingdom · UK ICO / PECR PECR Reg 6 applies to cookies/local storage; Wide Angle uses neither for visitor tracking.
🇩🇪
Germany TTDSG No banner TTDSG §25 applies to terminal-device storage; cookieless mechanism avoids the §25 trigger.
Germany · TTDSG TTDSG §25 applies to terminal-device storage; cookieless mechanism avoids the §25 trigger.
🇮🇹
Italy Garante Banner recommended Italian Garante is strictest. No Garante-specific ruling. Conservative reading recommends disclosure.
Italy · Garante Italian Garante is strictest. No Garante-specific ruling. Conservative reading recommends disclosure.

Sub-processors (6)

GDPR Art. 28 disclosure — third parties under DPA that may receive data.

OVHcloud Hosting & backend infrastructure (EU Public Cloud, Open Trusted Cloud partner program) France
Paddle Payment processing & merchant of record United Kingdom
Infomaniak Network SA Contact / messaging management CH
iubenda Privacy policy hosting (marketing site only) Italy
dpo-consulting.com External Data Protection Officer Luxembourg

Collected

  • URLs visited and page titles
  • HTTP referrer + UTM parameters
  • Browser, OS, device type
  • Country and region (derived from IP, then IP discarded)
  • Custom Actions (event tracking)
  • Daily-rotating anonymous session hash

Explicitly NOT collected

  • IP addresses (used as hash input only, not stored)
  • Cookies or local storage entries on visitor devices
  • Cross-site tracking identifiers
  • Browser fingerprints (off by default; data-waa-fingerprint='true' opt-in)
Data retention

Plan-tied retention: Starter 12mo / Plus 24mo / Advanced unlimited (Forever). Default not separately specified outside plan tiers.

Encryption
  • In transit: HTTPS via Let's Encrypt; internal SSL between services
  • At rest: AES-XTS for storage volumes, AES-256 for password vaults; XSalsa20+Poly1305 for backups; HSM-managed keys
DPA Yes · manual
AI & Modern Capabilities

How Wide Angle Analytics works with AI agents

Tier 3 — no AI yet — vendor focuses on classic privacy-first analytics; no AI/MCP features advertised.

AI Chat Not yet

Conversational natural-language interface

Not advertised by vendor

MCP Server Not yet

Model Context Protocol — Claude / Cursor / Codex

Not advertised by vendor

Agent API Not yet

Programmatic AI-agent endpoints

Not advertised by vendor

AI Insights Not yet

Anomaly detection / hypothesis / summaries

Not advertised by vendor

Export for AI Not yet

Structured export formatted for LLM ingestion

Not advertised by vendor

Strengths & weaknesses

What makes Wide Angle Analytics worth a look — and where it falls short.

Strengths 8

  • Strictest EU-only data plane — OVHcloud Open Trusted Cloud
  • Cookieless mechanism documented verbatim — SHA-256(site+IP+UA+Daily-Salt)
  • External DPO oversight from dpo-consulting.com (Luxembourg)
  • 10 / 20 / 100 sites per Starter / Plus / Advanced — agency-friendly
  • Explicit encryption details (AES-XTS, XSalsa20+Poly1305, HSM keys)
  • GDPR/CCPA/PECR/COPPA self-attested with external DPO
  • 1M events at $40/mo — competitive at high volume
  • Forever retention on Advanced tier

Weaknesses 7

  • Closed-source — no auditable repo
  • No free tier — only 14-day trial
  • No public sub-processor page (only iubenda marketing-site policy)
  • Tiny team — bus-factor risk, no Crunchbase / funding disclosure
  • No public status page
  • No funnels, public dashboard, GSC connector, Slack webhooks, email digests
  • Tracker KB weight not published by vendor

Feature matrix

All 38 verified checks across 4 categories. Hover any row for the editor's note.

Tracking & Reporting 15

  • Pageviews & visitors Yes
  • Live visitor count Yes
  • Top pages report Yes
  • Top referrers Yes
  • UTM campaign tracking Yes
  • Country & city breakdown ~Partial
  • Device, browser, OS Yes
  • Bounce / engagement Yes
  • Time on site Yes
  • Custom events Yes
  • Goals / conversions Yes
  • Funnels No
  • Outbound link tracking Yes
  • File download tracking Yes
  • 404 / error tracking No

Privacy & Compliance 9

  • Cookieless by default Yes
  • No personal data collected Yes
  • GDPR-compliant out of the box Yes
  • Data hosted in EU Yes
  • Data hosted in US No
  • Self-hostable No
  • Open source No
  • Data retention period 12
  • Bot & spam filtering ~Partial

Setup & Integrations 10

  • Script weight (KB) ·
  • Single-snippet install Yes
  • WordPress plugin Yes
  • Proxy / first-party domain Yes
  • Public API Yes
  • Data export (CSV/JSON) ~Partial
  • Google Search Console connector No
  • Email digests No
  • Slack / webhook alerts No
  • Public shareable dashboard No

Pricing & Plans 4

  • Free tier exists No
  • Entry price ($/mo) $15/mo
  • Price at 100k pageviews $40/mo
  • Unlimited sites on entry plan ~Partial

Wide Angle Analytics vs alternatives

How it compares to the closest 3 rivals on key buyer-decision fields.

Pirsch

Pirsch

Cookieless EU-hosted analytics built in Germany, with open-source AGPLv3 core

  • From$6/mo
  • HostingSaaS only
  • EU-hostedYes
  • CookielessYes
Plausible

Plausible

Privacy-first GA alternative, EU-hosted, simple dashboard

  • From$9/mo
  • HostingSelf-host ✓
  • EU-hostedYes
  • CookielessYes
Simple Analytics

Simple Analytics

No-cookie analytics with AI-powered insights

  • From$20/mo
  • HostingSaaS only
  • EU-hostedYes
  • CookielessYes

Pricing tiers

Real plans, real numbers — pulled from wideangle.co (verified Aug 2026).

Trial

Trial/14 days

Full Plus access

  • ✓ No card on signup
Starter

$15/mo

50K events

  • ✓ 10 sites
  • ✓ 12-month retention
  • ✓ 1 user
  • ✓ Email support
Plus

$40/mo

1M events

  • ✓ 20 sites
  • ✓ 24-month retention
  • ✓ 10 users
  • ✓ User Tags
  • ✓ Live chat
Advanced

$150/mo

10M events

  • ✓ 100 sites
  • ✓ Forever retention
  • ✓ 100 users
  • ✓ Permissions
  • ✓ Priority support

Tech specs

Stack, repo health, deployment options — for engineers evaluating self-host.

Stack

  • Written inClosed-source (no public stack disclosure)
  • HostingOVHcloud Public Cloud (EU-only, Open Trusted Cloud partner)
  • EncryptionAES-XTS storage · AES-256 vaults · XSalsa20+Poly1305 backups · HSM keys
  • LicenseClosed-source SaaS
  • Min specsN/A — SaaS only

GitHub github.com/wideangleanalytics

  • Stars★ 0
  • Forks0
  • Open issues0
  • Last commit

Deploy

  • · Cloud SaaS only
Mark Sutton

Editor review

Reviewed by Mark Sutton, cross-checked against vendor documentation. Click any panel to expand.

+ What it does well

Wide Angle Analytics shut down on 31 August 2026; this profile is kept for reference and the service can no longer be bought. It was the strictest German privacy-first option in this directory. Where Plausible runs Hetzner Germany with a Slovenian CDN and Fathom multi-regions through AWS EU + US, Input Objects GmbH planted its entire stack on OVHcloud's EU Public Cloud and refused third-country transfers — which made it one of the cleanest Schrems II answers you could buy without going self-host.

The cookieless mechanism was also unusually well-documented. Most rivals say "we hash visitors" and stop there. Wide Angle published the literal formula: SHA-256(site + IP + User-Agent + Daily-Salt) — and explained that the daily salt lived in transient memory and rotated every 24 hours, which meant yesterday's session ID could not be reconstructed even by them. That kind of transparency is still what a DPO wants to read, and it is the part worth copying from this product.

An external DPO from dpo-consulting.com signed off on the legitimate-interest legal theory, which was rare at the $15/mo entry tier and mattered when the "no banner" decision had to be defended to procurement. The per-plan site allowances were generous: 10 sites on Starter, 20 on Plus, 100 on Advanced — agencies and portfolio operators got more sites for less than per-site rivals.

Weaknesses & gotchas

The team was tiny, the source was closed, and the price floor was high — and the shutdown on 31 August 2026 is the bus factor arriving. Input Objects GmbH did not publish a team page, a Crunchbase profile, or any funding announcements — the support page openly admitted "you may chat with the CEO, developer, or designer," which was delightful when it worked and a single point of failure when it did not. There was no public status page; outages were documented after the fact on the blog.

The product was closed-source. The github.com/inputobjects organization is empty; only thin SDK wrappers (Nuxt, Vue) were ever published. If your compliance team requires auditable code, Matomo, Umami, GoatCounter, or Plausible (AGPL) all win here — and code you can run yourself does not disappear when a vendor stops trading.

There was no free tier — Starter was $15/mo, the highest entry price among the major privacy-first names ($9 Plausible, $20 Simple Analytics, free GoatCounter or self-hosted Umami). Funnel reports, GSC connector, Slack webhooks, public dashboards, email digests, and a published tracker script weight were all either missing or undisclosed. The canonical sub-processor list sat behind the DPA — only the marketing-site iubenda policy was public.

Best for

Closed on 31 August 2026 — this section describes who it suited while it was trading, and what to look for in a replacement.

It suited: EU small and mid-size businesses and agencies with a German or French DPO who had to rule out third-country transfers entirely; portfolio operators running 5–50 sites who disliked per-site billing; teams that already trusted OVH for hosting.

The shape of the sweet spot: the $40/mo Plus plan carried 1M events, 20 sites, 24-month retention, 10 users and live chat. If you are replacing it, that combination — generous site count on one bill, EU-only hosting, long retention — is the thing to match, and it is what most per-site rivals price badly.

It never suited: US-only customers (no US hosting); hobbyists wanting a free tier (there was none); engineering teams needing self-host or open source (closed); marketers needing funnel reports, GSC integration or Slack alerts (never shipped).

Setup walkthrough

Nothing here is actionable any more — the service closed on 31 August 2026. Kept because the approach is worth borrowing.

Install was a single async-defer tag — there was no SDK to bundle. WordPress, Wix, Squarespace, Webflow, Ghost and Carrd were documented as one-click integrations.

The interesting setup option was the first-party proxy via custom domain — you pointed a subdomain (e.g. analytics.yoursite.com) at Wide Angle's tracker host so the script and beacon hit your own origin, which side-stepped ad-blockers and content-security-policies. Several live vendors offer the same thing today, and it is the setting worth looking for when you replace this product.

Per-script tracking flags were configurable inline: data-waa-fingerprint='true' enabled canvas-fingerprint mode (off by default), data-waa-cid='...' injected a logged-in customer ID, data-waa-inc-params='id,session' whitelisted URL params, data-waa-exc-paths='/wp-admin/*' excluded paths. All of it was server-validated against the per-site config in the dashboard.

Migrating from GA4

The migration that matters now is off Wide Angle, not onto it: the service stopped operating on 31 August 2026 and the vendor issued a downloadable snapshot of customer data rather than an in-app export. If you still hold one of those snapshots, keep it — there is no way to pull the data again.

Moving in never had a GA4 importer. Migration was re-tagging-only: drop the GA4 tag, drop in the Wide Angle script, restart from zero. There was no historical-data ingest path, which is the same posture as Plausible and Fathom.

The banner-removal argument was the real draw: because the product shipped under legitimate interest with no personal data collected, EU sites could typically retire the analytics-purpose cookie banner entirely (marketing and advertising cookies stayed a separate question). Any replacement you pick has to carry the same legal reasoning if you want to keep the banner off.

Custom-event mapping required planning. GA4 has thousands of automatic events; Wide Angle shipped pageviews, outbound clicks, downloads and named "Custom Actions", wired through waa('track', 'event_name', {...}). UTM tracking was automatic.

Help & FAQ

Where to get help with Wide Angle Analytics and the questions buyers email us about.

Support

HoursAsync (small team — CEO/dev/designer self-described)Europe/Berlin (UTC+1/+2)
ChannelsEmail · Live chat
LanguagesEnglish, German
Response SLA~48h

FAQ (7)

Is Wide Angle Analytics actually banner-free in France/Germany/Italy?

Vendor claims EU-wide banner-free deployment under legitimate-interest legal basis with no PI collection by default. They do not name CNIL, TTDSG, or Garante endorsement letters — the legal theory is shared with Plausible/Fathom-style cookieless analytics. External DPO from dpo-consulting.com signs off on the approach.

Where is my data physically stored?

OVHcloud Public Cloud, EU-only. Vendor explicitly states all services reside within OVH EU datacenters. No US edge nodes for analytics data.

Is there a free plan?

No. Only a 14-day trial. Starter at $15/€10 monthly is the entry tier.

Can I self-host Wide Angle?

No. SaaS only — closed-source. The github.com/inputobjects organization page is empty; only thin SDK wrappers (Nuxt, Vue) are public.

What's the cookieless mechanism?

Daily-salted SHA-256 hash of (site + IP + User-Agent + Daily-Salt). The daily salt rotates every 24h and never persists, so unique-visitor counting works only inside a 24h window — by design.

Is there a public API?

Yes — events ingestion API documented at wideangleanalytics.github.io/wideangle-api. Read-API for pulling reports is implied via the same spec.

How big is the tracker script?

Vendor does not publish a KB number. Independent measurement required.