Web analytics services

umami

Open source, self-hosted web analytics

Open sourceOpen sourceHigh non-EU dependency

Operational dependency warning

Relies heavily on non-European providers

Current public evidence shows 6 non-European infrastructure or email dependencies across 5 providers: Cloudflare, Google, HubSpot, Mailgun, Twilio SendGrid. The reviewed operational path is therefore not entirely European.

Review dependencies ↓

umami is an open source web analytics project that you run on your own infrastructure. It collects visitor statistics for websites without the tracking apparatus of the large commercial platforms, and the documentation includes hosting guides for a range of cloud platforms, so getting an instance running does not require much groundwork.

umami is listed here as open source and self-hosted, which means the project itself is not necessarily European: where your data lives depends entirely on the server you choose. Hosted on European infrastructure it becomes a European alternative to hosted analytics services, and it suits developers and site owners who prefer to keep their own numbers.

Data and operations

Infrastructure and email path

Verified operational dependencies, shown separately from ownership and from the service's core data hosting.

Public website

Cloudflare

Non-European provider
Observed
A 104.26.0.192, 172.67.70.186, 104.26.1.192 · AS13335

Why this matters

Public DNS routes website visits through Cloudflare. Visitor IP addresses and request metadata can reach this non-European provider; this does not identify the core service's data location.

Incoming business email

Google Workspace

Non-European provider
Observed
MX 1 aspmx.l.google.com · 5 alt2.aspmx.l.google.com · 10 alt3.aspmx.l.google.com · 10 alt4.aspmx.l.google.com

Why this matters

Published MX records route incoming business email through Google Workspace. Correspondent details and message content can therefore enter this non-European provider's systems; MX does not reveal the configured storage region.

Authorised outbound email

Google Workspace

Non-European provider
Observed
SPF _spf.google.com

Why this matters

This domain authorises Google Workspace to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Twilio SendGrid

Non-European provider
Observed
SPF sendgrid.net

Why this matters

This domain authorises Twilio SendGrid to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

Mailgun

Non-European provider
Observed
SPF mailgun.org

Why this matters

This domain authorises Mailgun to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Authorised outbound email

HubSpot

Non-European provider
Observed
SPF 43963749.spf07.hubspotemail.net

Why this matters

This domain authorises HubSpot to send email. If active, recipient details and message content can be processed by this non-European provider. SPF does not reveal its configured storage region.

Public DNS records identify visible providers and routes, not every backend location or private data-region setting.

Infrastructure checked:

More in Web analytics services

View all →