8 ms·
RybbitL Open source Google Analytics replacement
- indiantinker 1y agoUmami works for me. I just want that dopamine kick that someone clicked on my page so I dont feel lonely on the internet.
- bitbasher 1y agoIt was only a bot, but if it makes you feel better... :)
- 1dom 1y agoMy experience is that out of my other logs/metrics (cloudflare & server logs) Umami was the only one that didn't overinflate by counting bots and crawlers. I know the true state of my site visitors: the vast majority of legit visitor traffic is from my own home IP, and my own mobile IP. Umami was the only one to show that.
- threatripper 1y agoWould you be interested in a service that occasionally reads your page and sends you thoughtful comments?
- ray023 1y agoWell, obvious question: How does it compare to Plausible and all the other open source analytics.
- colesantiago 1y agoPlausible is too needlessly expensive as one grows and it essentially punishes you for growing. And some features aren't available 1:1 with the CE version of Plausible either.
- bill_yang 1y agoYea, funnels are not open source for Plausible
- bill_yang 1y agoCheck out our demo at https://demo.rybbit.io/1 https://demo.rybbit.io/1. We have a lot more features than Plausible, but they're still presented in a way that is intuitive to use. You shouldn't need to read pages and pages of documentation to be able to set up funnels on rybbit, for example.
- AndrewStephens 1y agoThe documentation states that rybbit does not use cookies and is compliant with the GDPR. The first part is true but, looking at the code (very nice to have it available), the tracking is done by IP address, trading one piece of tracking data for another. I realize that this is probably the only way it could work but it is not clear to me that tracking by IP address (even over a single session and shredding the data once a day) is any better from a GDPR standpoint.
- 9283409232 1y agoI deal with GDPR daily and the truth is that GDPR enforcement doesn't understand what is acceptable from a GDPR standpoint and that is likely why they are in the process of revamping it. You can also anonymize data and that is no longer considered personal data under GDPR so it is possible to hash an IP address and that be acceptable.
- Fraaaank 1y ago> You can also anonymize data and that is no longer considered personal data under GDPR so it is possible to hash an IP address and that be acceptable. That's not completely true. Recital 26 of GDPR stipulates that > “information which does not relate to an identified or identifiable natural person or to personal data rendered anonymous in such a manner that the data subject is not or no longer identifiable.” Hashing does not meet this threshold. If the same IP address is hashed using the same method, the result will always be the same, meaning it can be matched. Hashing is therefore considered pseudonimization and under GDPR, pseudonymized data is still considered personal data. Moreover, the act of anonymization itself is a form of processing and therefore falls under the scope of GDPR. So even attempting to anonymize personal data doesn't remove GDPR obligations for the anonimyzation itself.
- robbie-c 1y agoDisclaimer: IANAL > If the same IP address is hashed using the same method, the result will always be the same, meaning it can be matched. The way people get around this is by using an ephemeral salt, that is deleted e.g. daily. After enough time has passed, it'd be impossible to reverse the hash as the salt would be lost.
- dkga 1y agoInteresting!
- Apreche 1y agoFor me, the best Google analytics replacement has been nothing. Just don’t do analytics at all. Your web site will still work without it. In fact, it will work better!
- deleted 1y ago[deleted]
- dylan604 1y agoThat's just not realistic though. People with marketing departments need analytics. Otherwise, they atrophy and reveal to everyone they are not as necessary as led to believe. People without marketing departments probably never look at the logs like you.
- jsheard 1y agoTrue, but for personal/hobby sites you probably are just better off just not knowing. Nothing good comes of tying your self-worth to how much attention you think you're getting.
- sneak 1y agoThere is nothing to suggest that people who want to measure (and perhaps increase) their publishing reach are “tying [their] self-worth to how much attention [they] think [they’re] getting”. This is sort of like assuming everyone who is taking photos at a tourist attraction is doing so to show off their holiday for social status. If your site or content is truly valuable, it is a public good to monitor, analyze, and improve upon its reach and usability.
- cortesoft 1y agoI think most people are talking about for business websites
- crazygringo 1y agoWhy would you jump to the conclusion that any of it is about "self-worth"? Maybe you're writing for an audience and you want to see what resonates most with them. Sometimes popularity is a good thing to measure, not for your ego, but by how much you are helping others. It is sad when people assume metrics are about vanity, rather than about how much we're helping others.
- autoexec 1y agoIf people insist on tracking users with analytics, the least folks can do is use something other than google to do it.
- kull 1y agoWhy not Matomo?
- tacker2000 1y agoUpvote for matomo! This project here looks interesting, but is quite new. Lets see how it evolves in the future.
- ordersofmag 1y agoMatomo is an evolution of Piwik which was first released in 2007. So not 'quite new'.
- tacker2000 1y agoIm talking about the project OP posted, not matomo.
- karolist 1y agoI'm hosting my blog on cloudflare pages, it's analytics show 80 or so uniques every day consistently even though I barely write there. Installed Umami - 0 visitors. None. Internet is just LLM crawlers hungry for content now?
- lmkg 1y agoWe passed the tipping point where bot traffic outnumbered human traffic fifteen years ago. LLMs are an order of magnitude worse by most first-hand accounts, but it's just a continuation of a very long trend.
- sltr 1y agoI see this too on my CF Pages-hosted blog. Analytics only work if the agent runs JS. CF on the other hand counts file fetches, which can't be circumvented. There's always a baseline of bot traffic.
- karolist 1y agoah, that explains it, I think. I expected them to sessionize the file transfers under one unique somehow still, even without JS.
- tonyhart7 1y ago"Internet is just LLM crawlers hungry for content now?" its been that way for a few years, real users using mobile app and access social media now the percentage internet user who "surfing" on the web is dwindling and more likely diminish in near future
- nm980 1y agoThe market for Google Analytics alternatives is crowded. There's Plausible, Ahrefs web analytics, onedollarstats.com, PostHog, Matomo, Unami, Grafana, Microsoft Clarity (free at any scale), and so many others. Despite minor differences these products all compete for the same users (e.g. if someone is a PostHog customer they probably won't be using Ahref web analytics) yet most of these companies offer generous free tiers while rybbit only a free trial. How do products like rybbit.io stay competitive without a similar free tier or major differentiation? Is rybbit generating revenue for its hosted plan?
- neves 1y agoAre these open source and locally hosted? Or you must share your data with a big corporation to use them?
- pc86 1y agoIs sharing your data with a startup or small company any better than sharing it with a big corporation?
- haswell 1y agoPotentially yes, but depends very much on the privacy policy and data handling promises being made. I think the instinct to distrust big companies is at least partly because many of them have already proven not to be good stewards of data which when combined with their scale has more worrisome implications. With a smaller/newer player, at least there’s some hope that they’re not capable of the same harms at a smaller scale, and in some cases may market themselves specifically as a more private alternative. Whether or not this turns out to be true in practice and over the long run is another thing.
- betterThanTexas 1y agoHope ain't the same thing as trust, though. A small player would need to make a pretty significant effort to suggest they wouldn't abuse your usage-patterns.
- nadermx 1y agoIf you don't want to roll your own and don't care if its open source, I've used clicky.com for years. Simple, and shows everything I need. As others have said, it's a crowded market. Still cool though that people are launching these projects.
- slig 1y ago+1. And it's dirty cheap. I pay about $200/m for 800k daily events.
- dhosek 1y agoThere were a gajillion of these things before Google Analytics. Probably the best options were those that relied on log analysis rather than having a JavaScript bug on every page.
- bill_yang 1y agoHey I built this! I was meaning to launch Rybbit on show HN tomorrow morning but I guess you beat me to it haha.
- dotandgtfo 1y agoPlausible, Fathom, Umami and the others all do cookie-less tracking too. Why don't you add an option to track through cookies? Most serious businesses have the consent for putting analytics cookies there, especially if it's a first-party cookie. This will differentiate you and instantly make this a more serious option for self-hosters who want simple but reliable tracking. Especially if you can set this as a serverside first-party HTTPS cookie. Alternatively, add an identify() call and let others roll their own solution for this. Then I would actually trust your retention numbers. Great stuff though! Impressive launch.
- codazoda 1y agoBecause I like minimalist tools, onedollarstats.com looks interesting to me. I can’t find much info about their privacy posture (which prevents me from using Google Analytics). I use my own counter, but it’s got very limited features.
- VladVladikoff 1y agoIs there any server side only analytics software that is open source and decent? I really don’t want to add any more JavaScript to my pages that I don’t need.
- CliffyA 1y agoI have some static websites on S3 and CloudFront. I use https://goaccess.io/ https://goaccess.io/ to parse the logs and generate a html report. As mentioned elsewhere in the thread, there is a lot of bot activity there, that using JS might cleanup a bit. If you are interested, I have a write up of my setup here, with the report generation down at the bottom: https://gamestrut.com/Blog/2022-06-08-static-site-hosting-on-aws-s3-cloudfront/ https://gamestrut.com/Blog/2022-06-08-static-site-hosting-on...
- ksec 1y agoGoAccess?
- GordonS 1y agoUmami has an API, so it can be used server-side, without any JavaScript (I use it like that).
- Sephr 1y agoCan the creator /user/bill_yang explain this contradiction in the readme? It claims to support tracking unique users, but then immediately afterwards claims not to track users. Do you mean that you don't do any user tracking by default? > Key Features > - All key web analytics metrics including sessions, unique users, pageviews, bounce rate, session duration > - No cookies or user tracking - GDPR & CCPA compliant
- internetter 1y agothe industry has decided that unique users can be done without being tracking. you can decide differently. Often times how they do it is some combination of - Hashing IPs with other data to form a non-reversible UUID - Not tracking across multiple host domains - Not setting cookies or storing any information in the browser
- cyberax 1y agoIs there anything that can work with the request logs instead of the usual transparent pixels and/or script inclusions?
- miragecraft 1y agoA couple of days ago I was researching website analytics and GDPR/cookie law, and it seems clear that you need user consent even if IP addresses are only processed or temporarily stored before being discarded. Arguing otherwise is like claiming it’s legal to steal from a store as long as you return the goods the next day - it’s legal fantasy. I don’t think the EU is eager to go after these “ethical” analytics companies or their users, since they have bigger fish to fry. But if you think you’re legally in the clear using these solutions without user consent, you’re fooling yourself.
- dns_snek 1y ago> it seems clear that Can you elaborate?
- miragecraft 1y agoThe logic is simple, as soon as you collected and/or processed IP addresses, you need user consent as it is personal data. You don’t get to “undo” this requirement by discarding the IP address afterwards, the law doesn’t care. Others have come to the same conclusion: https://github.com/plausible/analytics/discussions/1963 https://github.com/plausible/analytics/discussions/1963
- dns_snek 1y agoI see, I was confused because you mentioned GDPR but it has everything to do with ePD and I wasn't aware of this issue, thanks for sharing! > Arguing otherwise is like claiming it’s legal to steal from a store as long as you return the goods the next day - it’s legal fantasy. That said, this strongly implies that these privacy-focused analytics platforms are unquestionably breaking the GDPR and behaving in an unethical way, but that seems like a huge overstatement. I've read the linked blog post and it seems like the analysis hinges on the precise wording of the ePD rather than GDPR. By their own admission, these analytics solutions seem to be in line with both the letter and the spirit of GDPR. The author even agrees that the wording of the ePD should be addressed and notes: > Unfortunately I came to the rather demotivating conclusion that there simply isn’t any way to implement web analytics without running afoul of the ePrivacy Directive. > This was a surprising conclusion at the time. Morally we can go very far: we can put a lot of smart stuff together and create a system that can’t be used to track individual users. But legally, that doesn’t particularly matter. The ePrivacy Directive is written as it is. > Even the EU Data Protection Working Party decries this. In their 2012 opinion they write: > the Working Party considers that first party analytics cookies are not likely to create a privacy risk when they are strictly limited to first party aggregated statistical purposes and when they are used by websites that already provide clear information about these cookies in their privacy policy as well as adequate privacy safeguards. […] In this regard, should article 5.3 of the Directive 2002/58/EC be re-visited in the future, the European legislator might appropriately add a third exemption criterion to consent for cookies that are strictly limited to first party anonymized and aggregated statistical purposes. So it's not that these companies are doing anything inherently immoral or unethical as far as their handling of personal data goes, but they might be behaving unethically by making claims that run afoul of other legislation (ePD) that clashes with the GDPR.
- ksec 1y agoThis seems, very similar to Umami. Is this a fork from them? TypeScript / Next.JS and similar design?
- gitroom 1y agoso many takes here tbh, i always end up just picking the simplest tool and hoping for the best - you think real privacy or just ease of use is what ends up mattering more long-term?
- nh2 1y agoProbably one of the coolest logos I've seen so far. How did you come up with it?
- curtisszmania 1y ago[dead]
- newusertoday 1y agovery nice demo. I saw that you are using threejs but when i checked network logs its not downloading it which is great. Are you doing SSR?
- bill_yang 1y agoThank you. I am using https://globe.gl/ https://globe.gl/ which wraps three.js. The page realtime page is still pretty slow to load so though. I'm using Next.js but I'm using all client-side components. The tooling around SPA client side state is just really good so I don't see a huge reason to go full SSR, especially when SEO doesn't matter for the actual app.
- Zoethink 1y ago[dead]
- ceving 1y agoIs GeoLite2 reliable? https://github.com/rybbit-io/rybbit/blob/master/server/GeoLite2-City.mmdb https://github.com/rybbit-io/rybbit/blob/master/server/GeoLi...
- marvinblum 1y agoI keep recommending it, but you can check out https://european-alternatives.eu/category/web-analytics-services https://european-alternatives.eu/category/web-analytics-serv... for a more complete list of EU based web analytic services. I'm one of the co-founders of Pirsch, and a bit worried because the space is getting really crowded :D
- vanschelven 1y agoI love it, too bad the author of that project seems to have become overwhelmed with the requests for updates/additions.
- BaudouinVH 1y agoThere are at least 60 alternatives : https://umami.is/blog/a-mega-list-of-google-analytics-alternatives https://umami.is/blog/a-mega-list-of-google-analytics-altern...
- XCSme 1y agoI didn't make it on that list :(
- Stem0037 1y ago[dead]
- dragganaitool 1y ago[dead]