Analytics built for GDPR
Analytics built for GDPR, hosted in the EU
Most analytics make GDPR your problem: add a banner, sign a DPA, hope you configured retention correctly. Satsu is built for GDPR — it sets no cookies, keeps no persistent identifiers, and stores analytics events on Hetzner servers in Finland, so there's far less to get wrong.
No cookies, no persistent IDs
GDPR governs personal data. Satsu writes no IP or user-agent to its analytics database, sets no persistent ID and builds no cross-site profile. In our assessment that means no consent banner to maintain; check with your own counsel for your site.
- No cookies and no persistent visitor identifiers
- Raw IP and user-agent never written to the analytics database
- Analytics events are stored on Hetzner servers in Finland
- Events deleted after 60 months; your plan sets how far back you can read
Hosted in Finland
Analytics events are stored on Hetzner servers in Finland, and there is no transfer to a US ad company.
ePrivacy too
The same design — no device storage and no persistent identifiers — means, in our assessment, no ePrivacy consent requirement. Check with your own counsel for your site.
Frequently asked questions
Is Satsu GDPR compliant out of the box?
Satsu is built for GDPR: it sets no cookies, keeps no persistent identifiers and stores events on Hetzner servers in Finland, so in our assessment you need no consent banner. Check with your own counsel for your site.
Do I need a Data Processing Agreement?
Satsu acts as a processor for your site's analytics; we provide a DPA on request. Email hello@satsu.pro.
Where is my data hosted?
Analytics events are stored on Hetzner servers in Finland, and are never sold or shared with advertisers.