> Hubalz is a privacy first analytics tool. Cookieless tracking, EU hosting, CNIL exemption pathway, and how to deploy Hubalz without a cookie banner. > > Canonical: https://www.flowconsent.com/en/services/analytics/hubalz Analytics # Hubalz Analytics · [Official website](https://www.hubalz.com) Hubalz is an EU based, privacy first web analytics platform aimed at SaaS founders, agencies and small to mid sized publishers who want a simple alternative to Google Analytics. The product runs cookieless by default, derives a daily session identifier from a salted hash of IP plus user agent, and stores aggregated data only. Hubalz hosts everything on EU infrastructure and does not integrate with advertising networks, which makes it one of the most compliance friendly analytics tools for European websites. [Block Hubalz until consent](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=analytics) · [Scan my site](https://www.flowconsent.com/en/scan) At a glance - Category [Analytics](https://www.flowconsent.com/en/services/analytics) - Consent Analytics - Prior consent Not required - Documented cookies 1 - Third-party domains 3 - Servers Hubalz is operated as an EU based SaaS analytics product. Production hosting uses EU regions (typically Hetzner Falkenstein, Germany, and OVHcloud Gravelines, France). The dashboard, API and event ingestion all run on EU infrastructure. Overview ## What does Hubalz do? ## **What Hubalz is** Hubalz is an EU based privacy first analytics platform built for SaaS founders, agencies and small to mid sized publishers. It ships as a lightweight JavaScript snippet, a managed back end and a clean dashboard. The product is positioned against Google Analytics 4 with the explicit goal of being deployable without a cookie banner across the EU. ## **What data Hubalz collects** Hubalz collects page views, referrer, country derived from the IP, device class, browser, screen breakpoint, time on page and custom events declared by the site owner. The session identifier is derived server side from a salted hash of IP and user agent and the salt rotates every 24 hours, so the value cannot be linked across days. The full IP address is not stored. ## **GDPR and ePrivacy implications** Because Hubalz does not write to or read from the device, Article 5(3) of the ePrivacy Directive does not apply to the analytics path. The cookieless session ID, the IP anonymisation and the absence of third party sharing make the default deployment compatible with the CNIL exemption for audience measurement. Custom events that capture personal data still fall under the GDPR. ## **Consent and exemption** In the default configuration, Hubalz can be deployed without a cookie banner across the EU, including in France under the CNIL exemption and in Germany under the TTDSG essential cookie test. Site owners must still provide a transparent privacy notice that explains what is measured and how to object. Activating the optional first party cookie or capturing identifying custom events can move the deployment back into the consent regime. ## **Data transfers and hosting** Hubalz is hosted on EU infrastructure (Hetzner Germany, OVHcloud France). No data leaves the European Union. There are no Google or Meta dependencies, no IAB TCF participation and no advertising profiling. Sub processors are limited to EU based hosting and notification providers. ## **Practical compliance steps** Sign the Hubalz DPA, document the Legitimate Interest Assessment for cookieless audience measurement, mention Hubalz and the EU hosting in the privacy notice, avoid sending personal data through custom events without an opt in and re evaluate the configuration if you decide to enable the optional first party cookie or to bridge Hubalz data with a CRM. Compliance ## Hubalz and the GDPR - Legal basis Legitimate interest (Art. 6(1)(f) GDPR) for the cookieless audience measurement, supported by a documented Legitimate Interest Assessment. The default Hubalz configuration meets the CNIL exemption criteria for analytics without consent because no persistent identifier is stored on the device, IP addresses are anonymised before storage and no data is shared with third parties. - Risk level low - Applicable regulations GDPR, ePrivacy Directive, French CNIL guidelines on audience measurement exemption, German TTDSG, Spanish LSSI, Italian Garante guidelines ### Impact assessment (DPIA) A DPIA is generally not required for Hubalz in its default cookieless configuration. It may become relevant if the deployment is enriched with custom event tracking that captures personal data fields, behavioural scoring or integration with external CRM systems. ### Sample text for your banner > This site uses Hubalz Analytics in cookieless mode to count visitors and understand which content works. No cookies are set, no personal data is shared with third parties, and analytics data is stored on EU servers. No consent is required for this configuration. Cookies and trackers ## What Hubalz sets and contacts - Tracking method Lightweight JavaScript snippet loaded from hubalz.com that records page views, referrers, country derived from IP, device class and custom events. Cookieless by default with a daily salted hash for session derivation. Optional first party cookie for higher precision on returning visitors. - Server location Hubalz is operated as an EU based SaaS analytics product. Production hosting uses EU regions (typically Hetzner Falkenstein, Germany, and OVHcloud Gravelines, France). The dashboard, API and event ingestion all run on EU infrastructure. - Cookieless mode available Yes ### Cookies set (1) | Name | Type | Duration | Purpose | | ---------- | ---------- | --------- | --------------------------------------------------------------------------------------------------------------------------------- | | hubalz\_id | persistent | 12 months | Optional first party identifier set only when the customer explicitly enables cookie based session tracking. Disabled by default. | ### Third-party domains contacted (3) - `hubalz.com` - `app.hubalz.com` - `cdn.hubalz.com` Questions ## Frequently asked questions about Hubalz Can't find your question? Write to us, we answer fast. [Write to us](https://www.flowconsent.com/en/demo) ### What cookies does Hubalz set? In its default configuration Hubalz sets no cookies at all. Sessions are derived server side from a daily rotating salted hash of IP and user agent. Customers can optionally enable a first party hubalz\_id cookie for higher accuracy on returning visitors, in which case Article 5(3) ePrivacy applies and consent becomes required. ### Do I need consent to use Hubalz? Not in the default cookieless configuration. Hubalz can be deployed without a cookie banner across the EU under the CNIL exemption for audience measurement and the TTDSG essential cookie test in Germany. A clear privacy notice is still required. ### What is the legal basis for Hubalz? Legitimate interest (Art. 6(1)(f) GDPR) for the cookieless audience measurement, supported by a documented Legitimate Interest Assessment. Consent (Art. 6(1)(a) GDPR) becomes the legal basis if the optional first party cookie is enabled or if custom events capture personally identifying data. ### Does Hubalz transfer data to the US? No. Hubalz is hosted on EU infrastructure and data does not leave the EU. There are no Google or Meta dependencies and no IAB TCF participation. ### Do I need a DPIA for Hubalz? Generally no. Cookieless analytics on EU servers, with no advertising integration and no third party sharing, do not meet the DPIA threshold. A DPIA may become relevant if you bridge Hubalz with a CRM, capture sensitive personal data through custom events or operate at very large scale. ### How do I implement Hubalz compliantly? Use the cookieless default, sign the Hubalz DPA, write a privacy notice that mentions Hubalz and the EU hosting, set a sensible data retention (12 months by default) and avoid sending personal data through custom events without an opt in. ### What are the alternatives to Hubalz? Other privacy first analytics tools include Plausible (EU hosted, cookieless), Fathom (EU hosted), Umami (self hosted), Matomo (self hosted, cookieless mode), Pirsch (Germany), Simple Analytics (Netherlands), Rybbit and GoatCounter (open source). All can be deployed without a cookie banner under the CNIL exemption when configured correctly. ### How do I update the cookie policy for Hubalz? List Hubalz with the publisher, the purpose (audience measurement), the legal basis (legitimate interest in cookieless mode), the storage location (EU), the cookies (none by default, optional hubalz\_id if enabled) and the retention period. Same category ## More services: Analytics [See the whole category](https://www.flowconsent.com/en/services/analytics) ### [Acoustic Experience Analytics](https://www.flowconsent.com/en/services/analytics/acoustic-experience-analytics) [Acoustic Experience Analytics is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Acoustic Experience Analytics offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Acoustic Experience Analytics empowers organizations to optimize strategy and maximize.](https://www.flowconsent.com/en/services/analytics/acoustic-experience-analytics) [Analytics](https://www.flowconsent.com/en/services/analytics/acoustic-experience-analytics) · ### [CNZZ](https://www.flowconsent.com/en/services/analytics/cnzz) [CNZZ is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. CNZZ supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, CNZZ enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/cnzz) [Analytics](https://www.flowconsent.com/en/services/analytics/cnzz) · ### [OpinionBar](https://www.flowconsent.com/en/services/analytics/opinionbar) [OpinionBar is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. OpinionBar supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, OpinionBar enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/opinionbar) [Analytics](https://www.flowconsent.com/en/services/analytics/opinionbar) · ### [Cux](https://www.flowconsent.com/en/services/analytics/cux) [Cux is a digital analytics solution that helps businesses measure and understand their online performance through comprehensive data collection and analysis. It provides visitor tracking, behavioral insights, and conversion metrics across websites and applications. Cux supports custom event tracking, audience segmentation, and automated reporting. With intuitive dashboards and visualization tools, Cux enables informed decisions that improve experience and drive results.](https://www.flowconsent.com/en/services/analytics/cux) [Analytics](https://www.flowconsent.com/en/services/analytics/cux) · ### [Pyze](https://www.flowconsent.com/en/services/analytics/pyze) [Pyze is an analytics and measurement platform providing deep insights into digital ecosystem performance. It tracks user interactions, measures campaign effectiveness, and identifies optimization opportunities across web and mobile. Pyze offers customizable dashboards, automated alerts, and data export capabilities. By transforming raw data into actionable intelligence, Pyze empowers organizations to optimize strategy and maximize return on investment.](https://www.flowconsent.com/en/services/analytics/pyze) [Analytics](https://www.flowconsent.com/en/services/analytics/pyze) · ### [Topic Intelligence](https://www.flowconsent.com/en/services/analytics/topic-intelligence) [Topic Intelligence is an AI-powered platform that leverages artificial intelligence and machine learning to help businesses automate processes, generate insights, and enhance digital experiences. It provides intelligent automation, natural language processing, and predictive analytics. Topic Intelligence integrates with existing workflows and tools to deliver AI-driven optimization across marketing, customer service, and operations. With scalable infrastructure, Topic Intelligence makes advanced AI.](https://www.flowconsent.com/en/services/analytics/topic-intelligence) [Analytics](https://www.flowconsent.com/en/services/analytics/topic-intelligence) ## Make your site compliant today. Free up to 25,000 sessions a month. No credit card, no commitment. [Create my banner](https://app.flowconsent.com/auth/sign-up?utm_source=flowconsent.com\&utm_medium=referral\&utm_campaign=general) · [Scan my site](https://www.flowconsent.com/en/scan)