webtracking.org
B 84/100

Umami

Free, open-source, self-hostable, cookieless. Minimal collection; you control the database entirely.

verified 2026-06-08 · grade set per the published methodology

How the grade breaks down

Data minimization 4/5

How little it collects, and whether collection is purpose-bound.

Consent honoring 4/5

Whether it respects GPC, consent state, and tracking-prevention signals.

Identifier strategy 4/5

Cookieless vs. persistent IDs, cross-site linkage, fingerprinting risk.

Residency & sharing 5/5

Where data lives and whether it is shared with third parties.

Transparency 4/5

How verifiable and documented its real behavior is.

At a glance

Category analytics
Cookieless by-default
Consent for lawful use not-required
Data residency self-hosted
Shares w/ third parties no
Sends PII by default no
Honors GPC not-applicable
Open source yes

Umami is an open-source, self-hostable, cookieless analytics tool. Self-hosting means full data ownership and no third-party transmission. It collects minimal aggregate data and uses no cookies or cross-site identifiers. It has fewer built-in consent/governance features than enterprise tools, but for a self-hosted cookieless deployment that is largely unnecessary.

Sources & basis for grade

Grades reflect documented behavior, vendor documentation, and ad.rip scans as of the date above. Each assessment is reproducible and vendors may request correction.

  • Umami open-source repository
  • Umami documentation on data collected