Free whiteglove setup from a ConsentStack Concierge
Umami

Umami

Umami is an open-source, privacy-focused web analytics tool designed as a simple alternative to Google Analytics. Scripts collect page views and custom events without cookies or cross-site tracking. All data is self-hosted and anonymized, making it inherently GDPR-compliant.

Back to Vendor Library

Overview

Umami is an open-source, privacy-focused web analytics tool designed as an alternative to Google Analytics. Its script collects page views and custom events without using cookies or performing cross-site tracking. All data can be self-hosted and is anonymized by default.

What This Script Does

  • Loads a lightweight tracking script that records page views and custom events
  • Collects page URL, referrer, browser type, OS, device type, and country (derived from IP, which is not stored)
  • Does not set any cookies or use local storage for visitor identification
  • Does not perform cross-site or cross-device tracking
  • Sends anonymized event data to the Umami instance (self-hosted or cloud)
  • Respects Do Not Track browser settings by default

Consent & Compliance

  • Category: Analytics
  • GDPR: Designed for GDPR compliance by default. No cookies, no personal data storage, no cross-site tracking. IP addresses are used only for country-level geolocation and are not stored. Can operate under legitimate interest.
  • CCPA: Does not collect, sell, or share personal information. Anonymized analytics data does not trigger CCPA obligations.
  • ePrivacy: Does not set cookies or access device storage. Exempt from the ePrivacy cookie consent requirement.

Should You Block This Without Consent?

No. Umami is specifically designed to be privacy-compliant by default. It does not use cookies, does not store personal data, and does not track users across sites. It can operate without consent under legitimate interest for website analytics.

Is Umami GDPR compliant?

Umami typically loads analytics trackers, which are not strictly necessary for your site to work. Under the GDPR and the ePrivacy Directive, non-essential cookies and trackers must stay blocked until a visitor gives clear opt-in consent. So Umami can be fully GDPR compliant, but only if your site holds its scripts until consent is granted and lets visitors decline just as easily. Compliance depends on how your site loads Umami, not on Umami itself.

Visit website

Consent Categories

Analytics

Also Known As

Umamiumami analyticscookie-free analyticsopen source analyticsprivacy analyticsGoogle Analytics alternativeself-hosted analytics

Industries

Programming and Developer SoftwareComputers Electronics and Technology

Tracked Domains (1)

cloud.umami.isAnalytics

cloud.umami.is is an analytics domain operated by Umami, used to measure visits, sessions, and on-site behavior.

Frequently Asked Questions

Related Vendors

Contact Form 7
Contact Form 7
Contact Form 7 is a WordPress plugin that renders and processes contact forms on WordPress pages via AJAX. Scripts handle field validation, spam filtering through optional reCAPTCHA, and form submission. Only data entered by the user is collected and transmitted to the site administrator.
Drupal
Drupal
Drupal is an open-source CMS whose pages load core JavaScript for UI components, form handling, and AJAX requests. Additional scripts depend on installed modules and site configuration; analytics, advertising, or tracking may be present based on the site operator's module and theme choices.
Adloox
Adloox
Adloox deploys measurement scripts on publisher and advertiser pages to verify ad viewability, detect invalid traffic, and enforce brand safety standards. Scripts observe ad rendering, measure on-screen exposure time, and transmit impression data to Adloox servers for fraud analysis and campaign verification.
GrowthBook
GrowthBook
GrowthBook is an open-source feature flagging and A/B testing platform. Its scripts assign website visitors to experiment variants using deterministic hashing, track conversion events, and report results. Scripts set cookies or use local storage to persist variant assignments across sessions for consistent experiences.
Datorama
Datorama
Datorama (Salesforce Marketing Cloud Intelligence) aggregates marketing data from multiple advertising and analytics platforms into unified dashboards. Primarily a SaaS reporting tool with no scripts embedded in end-user browsers; data flows through server-to-server API connections.
Freshpaint
Freshpaint
Freshpaint is a HIPAA-compliant customer data infrastructure for healthcare companies. Scripts capture user behavior events from web applications and route them to analytics, marketing, and CRM tools while enforcing patient data protection rules. Designed to let healthcare organizations use modern analytics without violating HIPAA.

Manage consent for Umami

ConsentStack automatically detects and manages Umami trackers so your site stays compliant with global privacy regulations.

Get started free