Privacy-first analytics.
Built to perform.
Every feature in GhostlyX is designed to give you exactly the data you need, without compromising your visitors' privacy or your site's performance.
Start here
Core analytics
Start with the reporting every team needs: live visitors, traffic sources, locations, and conversion goals.
Real-time dashboard
See who is on your site right now, which pages they are viewing, and where each visit came from.
Traffic Map
Understand where visitors come from with a world map, city-level hotspots, and privacy-safe reporting.
Custom event goals
Track signups, forms, downloads, and outbound clicks without rebuilding your analytics setup.
Understand behavior
See what visitors actually do
Use heatmaps, replays, funnels, and geography to understand why visitors move through your site the way they do.
Privacy & performance
Analytics that respect everyone
No cookies. No fingerprinting. No consent banners. A sub-2 kB script that your Lighthouse scores will never notice.
Privacy by design
No cookies, no fingerprinting, no personal data stored. Fully GDPR, CCPA, and PECR compliant out of the box.
Lightweight script
Under 2 kB gzipped. Virtually zero impact on your page load speed or Lighthouse scores.
Uptime monitoring
Get alerted the moment your site goes down. Minute-by-minute response time checks.
AI & integrations
Your data, anywhere
Query your analytics in plain English, connect AI tools via MCP, or pull data into any system using the REST API.
Migration
Bring your history with you
Import years of historical analytics from GA4, Universal Analytics, Plausible, Fathom, Matomo, Simple Analytics, or any CSV file. All imported data is automatically sanitised to remove PII before it ever enters your dashboard.
acme-corp.com
Import Data
Source
Drop your CSV export here
Rows imported
Skipped
PII
Stripped
Import history
Team & sharing
Built for teams
Share dashboards with clients, invite your team, and set up automated reports without handing out account credentials.
Everything included
No hidden extras.
All features, one platform.
Every tool you need to understand your audience, improve performance, and respect your users' privacy.
Real-time visitors
See exactly who is on your site at any moment. The live visitor count updates every 30 seconds and shows which page each visitor is on.
No cookie banner needed
Because GhostlyX stores no personal data and uses no cookies, you are not required to show a cookie consent banner. Your visitors will thank you.
Shareable dashboards
Generate a public link to share your analytics dashboard with clients or teammates. No login required on their end.
Traffic spike notifications
Get instantly notified when your site experiences an unexpected traffic surge. Useful for viral content and product launches.
UTM campaign tracking
Automatically parse and display UTM parameters so you can measure the effectiveness of every email, ad, and social campaign.
REST API
Pull your analytics data into any tool with the authenticated REST API. Build custom dashboards, automate reports, and connect GhostlyX to your existing stack. All endpoints secured with scoped API tokens.
MCP server for AI assistants
Connect AI tools like OpenCode, Claude Desktop, and Cursor to your analytics through the Model Context Protocol. Ten built-in tools let AI assistants query site stats, traffic sources, goals, funnels, uptime, and more.
Click and scroll heatmaps
See where visitors click and how far they scroll on any page. Heatmaps are fully anonymous with no cookies, no session recordings, and no visitor identifiers.
A/B testing
Run privacy-first split tests on your pages without cookies or personal data. Deterministic variant assignment ensures consistent experiences. Bayesian statistics give you clear probability scores instead of confusing p-values.
Session replay
Watch real visitor sessions replayed in your browser with every text node masked by default. No cookies, no personal data stored, and full GDPR compliance. Mouse movements, clicks, scrolls, and page navigations are recorded anonymously. Rage clicks, dead clicks, and JavaScript errors are detected automatically.
Server-side tracking
Send pageviews and custom events directly from your backend using a scoped API token. Track SSR pages, API routes, queue jobs, and any server context where a browser script cannot run. The same privacy guarantees apply: IP addresses are never stored, and every visitor is identified by an anonymous daily-rotating hash. Available on Business and above.
Ready to replace
your analytics?
Join thousands of developers who switched to privacy-first analytics.