Three Analytics Platforms, Three Privacy Models
Google Analytics dominates web analytics, but its reliance on cookies and cross-site tracking puts website owners in a difficult compliance position. Plausible, Fathom, and Matomo have emerged as the three most credible privacy-focused alternatives, each with a distinct philosophy.
Plausible and Fathom are cookieless by design. Neither platform stores personal data or sets cookies on visitor devices. Matomo sits in a different category: it offers a full-featured analytics suite that can operate with or without cookies, depending on configuration. That flexibility brings power but also complexity.
The right choice depends on what you need from your analytics, how much control you want over your data, and whether you need analytics cookies at all.
Cookie Usage and Tracking Mechanisms
The most fundamental difference between these three platforms is how they identify visitors.
Plausible sets zero cookies. It uses no persistent identifiers and collects no personal data. Visitor counts rely on a hash of the visitor's IP address and User-Agent string, rotated every 24 hours. The raw IP is never stored. This approach means Plausible cannot track individual users across sessions or days.
Fathom also operates without cookies. It uses a sophisticated hashing mechanism designed to prevent identification of individual users. Like Plausible, it collects no personally identifiable information. Fathom holds both SOC 2 and ISO 27001 certifications, which independently verify its data handling practices.
Both Plausible and Fathom argue that because they set no cookies and store no personal data, the ePrivacy Directive does not apply to their tracking scripts. This means, in their view, no cookie banner is needed.
Matomo uses cookies by default - including _pk_id (13-month expiry) and _pk_ses (30-minute expiry) - to identify returning visitors and track sessions. These are first-party cookies set on your domain, not third-party trackers. Matomo does offer a cookieless tracking mode that disables all cookies and relies on a fingerprint-free daily hash similar to what Plausible and Fathom use.
GDPR and ePrivacy Compliance Positions
All three platforms claim GDPR compliance, but the legal reasoning differs.
Plausible and Fathom take the position that consent under Article 6(1)(a) of the GDPR is not required because they process no personal data. They also argue that Article 5(3) of the ePrivacy Directive does not apply since no information is stored on or read from the visitor's device. The CNIL in France has acknowledged that certain cookieless analytics configurations can operate without consent, though this depends on the specific implementation.
The legal picture is not entirely settled. The EDPB's finalised guidelines on consent (adopted in 2023) set a high bar for what constitutes tracking without consent. Some data protection lawyers have argued that even cookieless analytics scripts that read browser properties could fall under Article 5(3). Plausible disputes this interpretation, but the safest approach is to consult a lawyer familiar with your specific jurisdiction.
Matomo's cookieless mode occupies similar legal ground to Plausible and Fathom. When cookies are enabled, Matomo requires consent under both the GDPR and ePrivacy Directive, just like Google Analytics. Matomo provides built-in consent management tools, including support for opt-in and opt-out models, making it straightforward to integrate with a CMP.
Feature Comparison at a Glance
| Feature | Plausible | Fathom | Matomo |
|---|---|---|---|
| Cookies by default | No | No | Yes (cookieless mode available) |
| Personal data collected | None | None | Configurable (IP anonymisation available) |
| Self-hosted option | Yes (Community Edition) | No | Yes (free, open source) |
| Cloud-hosted option | Yes | Yes (only option) | Yes (paid) |
| Real-time dashboard | Yes | Yes | Yes |
| Goal and event tracking | Yes | Yes | Yes (advanced) |
| Heatmaps and session recordings | No | No | Yes (premium plugin) |
| Ecommerce tracking | Revenue goals only | No | Yes (full ecommerce reports) |
| A/B testing | No | No | Yes (premium plugin) |
| Funnel analysis | Yes (basic) | No | Yes (premium plugin) |
| API access | Yes | Yes | Yes (extensive) |
| Data ownership | EU servers (cloud) or self-hosted | EU or US servers | Full ownership (self-hosted) or EU cloud |
| Open source | AGPL-3.0 | No | GPL-3.0 |
Self-Hosted vs Cloud: Control and Maintenance
Self-hosting gives you complete control over your data. No third party processes visitor information. For organisations bound by strict data sovereignty requirements, self-hosting can simplify compliance.
Matomo is the strongest self-hosted option. It runs on a standard PHP/MySQL stack, making deployment straightforward on most servers. The self-hosted version is free and includes the core analytics features. Premium plugins for heatmaps, session recordings, and A/B testing require a separate licence. The trade-off is maintenance: you handle updates, performance tuning, database management, and security patches.
Plausible offers a self-hosted Community Edition built on Elixir and ClickHouse. It is lightweight and performs well, though some cloud-only features are not available in the self-hosted version.
Fathom is SaaS-only. There is no self-hosted option. All data processing happens on Fathom's infrastructure, with the option to keep data exclusively within EU data centres.
Pricing Breakdown
Pricing models vary significantly between the three platforms.
Plausible Cloud starts at EUR 9 per month for up to 10,000 monthly pageviews. Pricing scales based on pageview volume. A site with 1 million monthly pageviews pays roughly EUR 69 per month. All features are included at every tier.
Fathom starts at USD 15 per month for up to 100,000 monthly pageviews. It is the most affordable option at higher traffic levels. A site with 1 million monthly pageviews pays approximately USD 60 per month. Like Plausible, all features are available on every plan.
Matomo Cloud starts at EUR 23 per month for 50,000 hits. Premium features such as heatmaps, session recordings, and A/B testing cost extra. Matomo On-Premise is free to download and run, though you bear hosting costs and maintenance. For medium-traffic sites, self-hosted Matomo on a VPS can be the cheapest long-term option.
Cost Comparison for 100,000 Monthly Pageviews
| Platform | Monthly Cost | Notes |
|---|---|---|
| Plausible Cloud | ~EUR 19/month | All features included |
| Fathom | USD 15/month | All features included |
| Matomo Cloud | ~EUR 23/month | Premium plugins extra |
| Matomo Self-Hosted | EUR 0 + hosting | Hosting typically EUR 5-20/month |
When to Choose Each Platform
Choose Plausible if you want simple, cookieless analytics with a clean dashboard and no consent banner obligation. It suits blogs, marketing sites, and small-to-medium businesses that need pageview, referrer, and goal data without the complexity of a full analytics suite. The self-hosted option appeals to privacy-conscious developers.
Choose Fathom if you want a polished, SaaS-only cookieless solution with strong compliance credentials. The SOC 2 and ISO 27001 certifications matter for organisations that need to demonstrate security posture to clients or auditors. Fathom is often the most cost-effective choice for high-traffic sites.
Choose Matomo if you need feature parity with Google Analytics. Ecommerce tracking, heatmaps, session recordings, funnel analysis, and A/B testing are available through Matomo's plugin ecosystem. Self-hosting Matomo gives you full data ownership at minimal cost. The trade-off is configuration complexity and the need to manage cookie consent if cookies are enabled.
What About Google Consent Mode?
If you use Google Analytics alongside a privacy-focused tool, Google Consent Mode v2 becomes relevant. Consent Mode allows Google tags to adjust behaviour based on visitor consent, filling data gaps with conversion modelling.
None of the three privacy-focused platforms discussed here require Consent Mode, because they do not rely on Google's advertising ecosystem. Switching entirely to Plausible, Fathom, or Matomo (in cookieless mode) removes the need for Consent Mode integration altogether.
For sites that run both Google Analytics and a privacy-preserving analytics tool in parallel, cookie consent still applies to the Google tags. The privacy-focused tool simply provides a baseline dataset unaffected by consent rates.
Frequently Asked Questions
Do Plausible and Fathom really not need a cookie banner?
Both platforms set no cookies and collect no personal data, which is why they argue Article 5(3) of the ePrivacy Directive does not apply. The CNIL has acknowledged that certain cookieless configurations may operate without consent. Consult a data protection lawyer for advice specific to your jurisdiction.
Can Matomo run without cookies?
Yes. Matomo offers a cookieless tracking mode that disables all cookies and uses a daily rotating hash instead. In this mode, Matomo's privacy position is similar to Plausible and Fathom, though returning visitor accuracy decreases.
Which privacy-focused analytics tool is cheapest for high-traffic sites?
Fathom tends to be the most affordable cloud option at higher traffic levels, charging approximately USD 60 per month for 1 million pageviews. Self-hosted Matomo can be cheaper if you already have server infrastructure.
Is Plausible open source?
Yes. Plausible is released under the AGPL-3.0 licence. The Community Edition can be self-hosted. Matomo is also open source under GPL-3.0. Fathom is proprietary and cloud-only.
Can I migrate from Google Analytics to Plausible, Fathom, or Matomo?
Plausible and Fathom allow you to import historical Google Analytics data into their dashboards. Matomo also supports GA data imports. The migration process is straightforward for all three platforms.
Do these analytics tools work with Google Tag Manager?
Matomo integrates fully with GTM. Plausible and Fathom recommend embedding their lightweight script directly in the page rather than loading it through GTM, though GTM deployment is technically possible for both.
Take Control of Your Cookie Compliance
Switching to a privacy-focused analytics platform can simplify your consent obligations, but most websites still run other scripts that set cookies. A free cookie scan reveals exactly which cookies your site sets, so you can decide which tools require consent and which do not.
