GA4 Alternative: How We Use Rybbit and Matomo for GDPR-Compliant, Cookieless Analytics

The Hidden Costs of Sticking with Google Analytics

If your website is still running Google Analytics in 2026, you are carrying more legal and technical overhead than you might realize. Multiple EU data protection authorities have already ruled that standard GA4 usage does not comply with GDPR. The cookie consent banners you rely on are not just annoying your users, they also often are misconfigured.

We use a two-tool analytics stack: Rybbit and Matomo . This gives our clients clean, accurate, privacy-first data without a single cookie banner. Here is exactly how we do it and why it works.

Why Google Analytics Is Increasingly a Liability

Google Analytics is free because you are part of the product. Every pageview, session, and click you collect feeds into Google’s advertising ecosystem. That is not speculation. That is the business model.

For European businesses, this creates a genuine legal problem. GDPR requires that personal data is not transferred to third countries without adequate safeguards. The Irish DPC, French CNIL, Austrian DSB, and Italian Garante have all found GA transfers to US servers to be non-compliant in various rulings. Even with Consent Mode v2, you are adding complexity, accepting modeled rather than real conversion data, and still depending on a platform that profits from your users’ behavior.

Beyond the legal angle, GA4 itself is simply hard to use. The interface requires significant training. Reports are scattered across dozens of views. Data sampling on the free tier means your dashboards might not reflect reality at scale.

Google Analytics is increasingly difficult to justify from a legal, ethical, and practical perspective, especially in the EU.

Our Two-Tool Approach: Rybbit and Matomo

Rather than finding one tool that tries to do everything, we match the right tool to the right client need. Here is how we split it.

Rybbit: The Modern, Cookieless Layer

Rybbit is an open-source, cookieless web analytics platform built on a modern TypeScript and ClickHouse stack. It launched in early 2025 and has grown to over 12,000 GitHub stars and 4,000+ organizations in under two years. That tells you something about how badly the market needed it.

What Makes Rybbit Different

Zero cookies. Zero consent banners. Rybbit does not use persistent identifiers or cookies at all. This means GDPR and CCPA compliance is built in by default, not bolted on. Your visitors never see a cookie banner because there is nothing to consent to.

One-screen dashboard. Everything you need is visible on a single page: sessions, unique visitors, bounce rate, top pages, traffic sources, geographic breakdown, and device data. No hunting through nested reports.

Session replays and user journeys. This is where Rybbit pulls ahead of tools like Plausible. You can watch real users navigate your site, see exactly where they drop off in a funnel, and trace the path from landing page to conversion, all without identifying them personally.

Lightweight script. The tracking snippet has a minimal footprint, around 1KB. It does not slow your page load or hurt your Core Web Vitals score, which matters for both user experience and Google’s ranking signals.

Self-hostable or cloud. Rybbit can be deployed on your own VPS via Docker Compose, giving you complete data sovereignty. Or use their hosted version: a free tier covers 3,000 pageviews per month with no credit card required.

How We Use Rybbit for Clients

For most of our clients, especially smaller businesses, startups, and content-driven sites, Rybbit is the primary analytics layer. We configure it to track:

• Custom events for form submissions, CTA clicks, and key interactions
• Conversion funnels to visualize drop-off points in checkout or signup flows
• Session replays to identify UX friction that would not be obvious from numbers alone
• Real-time traffic during campaigns and product launches
• Web Vitals as part of our ongoing performance monitoring

The setup is genuinely fast. One script tag and you are collecting data. We can onboard a new client site in under 30 minutes. Because the dashboard is intuitive, clients can log in themselves and understand what they are looking at without us having to explain every metric.

Rybbit’s session replay feature is a game-changer for conversion rate optimization work. Showing a client a three-minute session replay of a confused user is worth ten pages of analytics reports.

Rybbit Installation Code

<!-- Rybbit: One-line install -->
<script src="https://app.rybbit.com/api/script.js" data-site-id="YOUR_SITE_ID" defer></script>

Matomo: The Power Layer for Complex Needs

Matomo (formerly Piwik) has been around since 2007 and is the most feature-complete open-source analytics platform available. We use it for clients who need enterprise-grade depth: e-commerce tracking, heatmaps, A/B testing, advanced segmentation, and long-term data retention.

What Matomo Excels At

Full data ownership. When self-hosted, all data lives on your server. No third party has access, ever. For clients in regulated industries like healthcare, finance, or legal, this is non-negotiable.

E-commerce analytics. Matomo’s WooCommerce and custom e-commerce integrations track revenue, cart abandonment, and product performance in detail that rivals GA4’s enhanced e-commerce.

Heatmaps and form analytics. Included as plugins, these tools show exactly where users are clicking, scrolling, and where they abandon forms, without external services.

Advanced segmentation. Matomo lets you build granular audience segments and compare their behavior over time. This is invaluable for clients who want to understand how different user cohorts convert.

100% unsampled data. Unlike GA4’s free tier, Matomo never samples your data. You see every single session, which matters enormously for smaller sites where sampled reports would be statistically meaningless.

GDPR compliance tooling. Matomo has built-in features for cookie consent management, data anonymization, and right-to-erasure requests. These are helpful for clients who need documented compliance workflows. Plus, their 1-Click CNIL compliance feature, launched in April 2026, simplifies French regulatory adherence.

How We Use Matomo for Clients

We deploy Matomo for clients where the complexity is justified, typically:

• E-commerce businesses that need revenue attribution and product funnel analysis
• Enterprise or regulated clients requiring full data sovereignty and audit trails
• Multi-site organizations that need centralized reporting across several web properties
• Clients migrating from GA4 who want to import historical data and maintain familiar reporting structure

We self-host Matomo on dedicated infrastructure, which means complete control and no per-hit cloud pricing surprises. The PHP and MySQL stack is mature and runs reliably even on modest servers.

Matomo Installation Code (Self-Hosted)

<!-- Matomo: Self-hosted install -->
<script>
  var _paq = window._paq = window._paq || [];
  _paq.push(['trackPageView']);
  _paq.push(['enableLinkTracking']);
  (function() {
    var u="https://analytics.yourdomain.com/";
    _paq.push(['setTrackerUrl', u+'matomo.php']);
    _paq.push(['setSiteId', '1']);
    var d=document, g=d.createElement('script'), s=d.getElementsByTagName('script')[0];
    g.async=true; g.src=u+'matomo.js'; s.parentNode.insertBefore(g,s);
  })();
</script>

Rybbit vs Matomo: How We Choose

Here is the practical decision matrix we use internally:

The short version: Rybbit is our default. We reach for Matomo when a client’s use case genuinely requires the additional depth.

Migrating from GA4: A Practical Four-Step Process

1. Audit your current GA4 setup: Export key reports, note custom dimensions and events
2. Install Rybbit or Matomo alongside GA4: Run both tools in parallel for two to four weeks to validate data
3. Map GA4 events to the new tool: Use Rybbit’s custom events or Matomo’s event tracking
4. Switch reporting and sunset GA4: Update dashboards, train your team, remove the GA4 snippet

Pro tip: Keep GA4 data exports for historical reference. Neither Rybbit nor Matomo can import GA4 historical data, but you can archive reports as PDFs.

The GDPR Case for Cookieless Analytics

Both tools give us a clean answer to a question every European client eventually asks: “Are we GDPR compliant with our analytics?”

With Rybbit, the answer is simply yes. Because no personal data is collected and no cookies are set, there is nothing that triggers GDPR’s consent requirements. With Matomo self-hosted and properly configured, the answer is also yes. Data never leaves the client’s own infrastructure.

Contrast this with Google Analytics, where the answer requires a lengthy explanation involving Consent Mode, server-side tagging, data processing agreements, US data transfers, and ongoing regulatory uncertainty. That is not a conversation we want to have with clients every six months as new DPA rulings come out.

Note for EU businesses: Several EU data protection authorities have issued decisions finding standard Google Analytics implementations non-compliant with GDPR. If you are serving European users, cookieless alternatives are worth evaluating seriously, not just as an ethical preference, but as a legal one.

What Clients Actually See Improve

The switch to privacy-first analytics is not just about compliance. The data quality genuinely improves.

Cookie consent banners depress opt-in rates, sometimes dramatically. When a meaningful share of visitors reject analytics cookies, you are making decisions based on a systematically biased sample. Users who opted in may behave very differently from those who did not. With cookieless tracking, you see everyone.

Ad blockers are another issue. Many block Google Analytics by default. Rybbit’s lightweight, first-party script is far less likely to be filtered out, which means your session counts are more accurate.

Getting Started

If you want to explore either tool:

• Rybbit has a generous free tier: 3,000 pageviews per month, no credit card required. You can also self-host with Docker. rybbit.io
• Matomo offers both a self-hosted open-source version (free) and a managed cloud option. matomo.org

If you are an agency or business and want a professional setup, including configuration, custom event tracking, funnel design, and ongoing support, that is exactly what we do.

Summary

Replacing Google Analytics does not have to mean losing insight. With Rybbit’s modern, cookieless simplicity and Matomo’s enterprise-grade depth, we give clients complete visibility into their users’ behavior, legally, transparently, and without annoying consent banners degrading the experience.

The era of “just use Google Analytics” is over. Privacy regulations, ad blocker prevalence, and data quality concerns have made the case for alternatives too strong to ignore. The tools exist, they are mature, and they work. The only question is when you make the switch.

Have questions about our analytics setup or want to talk through your specific situation? Reach out to our team.