Overview
Open-source web analytics platform (formerly Piwik). Available as self-hosted or cloud-hosted. Provides page view tracking, event analytics, heatmaps, and session recording. Designed with privacy as a core feature, offering full data ownership when self-hosted.
Detection Capabilities
- Signature count
- 5
- Detection methods
- pagenetwork
Performance Impact
Performance Impact
- Script size
- 25 KB
- Requests per page
- 2
Common Mistakes
- 1 Claiming CNIL consent exemption without meeting all the required conditions (IP anonymisation, no cross-site tracking, limited retention)
- 2 Assuming self-hosted deployment automatically qualifies for consent exemption without proper configuration
- 3 Not enabling IP anonymisation by default, which is required for the CNIL exemption
Compliance Considerations
When self-hosted with IP anonymisation and without cross-site tracking, Matomo can potentially operate without consent under the CNIL's exemption for audience measurement tools. This exemption is jurisdiction-specific — verify applicability in your market. Cloud-hosted Matomo processes data in the EU (Germany/France). Always configure IP anonymisation and disable cross-site user linking.
Related Services
Amplitude
Med Amplitude
Product analytics and customer data platform. Tracks user behaviour events, builds behavioural cohorts, and provides funnel, retention, and journey analysis. Used by product teams for feature adoption analysis, experimentation, and data governance.
1 detection signature
Azure Application Insights
High Azure Application Insights
Azure Application Insights is a performance monitoring and diagnostics service within Microsoft Azure Monitor that provides real user monitoring (RUM), application performance management (APM), and error tracking for web applications. Its JavaScript SDK collects browser-side telemetry including page load times, dependency call performance, unhandled exceptions, and user session data. Application Insights is widely deployed by enterprise organisations that use the Microsoft Azure cloud platform, particularly in financial services, healthcare, and public sector contexts. While primarily a development and operations tool, its client-side SDK collects data from end-user browsers that may constitute personal data under GDPR, placing it in scope for governance review.
3 detection signatures
Cloudflare Analytics
Med Cloudflare Analytics
Privacy-focused web analytics from Cloudflare that measures page views and visitors without using client-side cookies or collecting personal data. Built into the Cloudflare network infrastructure, providing basic traffic metrics.
2 detection signatures
Contentsquare
High Contentsquare
Contentsquare is a digital experience analytics platform that captures detailed user interaction data including clicks, scrolls, hovers, and session replays to provide insights into how visitors navigate websites and mobile apps. The platform uses zone-based heatmaps, journey analysis, and frustration scoring to identify UX issues and conversion bottlenecks. Following its acquisition of Hotjar in 2021, Contentsquare operates across both enterprise and SMB segments. Contentsquare's deep interaction capture makes it one of the most data-intensive analytics tags commonly deployed on regulated websites, and its ability to record detailed session behaviour requires careful governance to prevent inadvertent capture of sensitive personal data.
1 detection signature
Need help governing Matomo?
Our governance diagnostic identifies compliance gaps across your entire tag estate.
Start your Governance Diagnostic