Umami
Open-source, cookie-free website and product analytics you can self-host or use as a cloud service
Our verdict
#2 of 4 in Self-hosted web analytics · Best for most business sites
Pros
- No cookies by default, and the project says no cookie banner is required
- Funnels, goals and revenue reports in the free self-hosted edition
- One app plus PostgreSQL, with a prebuilt Docker image for the app
- Its API covers every action you can take in the app
- MIT license
Cons
- No documented way to import past data into a self-hosted install
- Server log import and mobile SDKs aren't documented
- Single sign-on isn't documented
Who should skip:Sites that need to bring their Google Analytics history with them.
Rankings and alternatives
- #2 of 4 Self-hosted web analytics Best for most business sites
- Matomo #1 For Google Analytics depth on your own server
- GoatCounter #3 Lightest to run
- Plausible Analytics #4 For a one-page dashboard with your GA4 history
Self-hosted web analytics scores
Evaluated Nov 7, 2026 Evidence ↓- Setup and upkeep 4
4/5 means: One program plus one required service, such as a database server
The app (built with Node.js, or the prebuilt Docker image) plus one required service, a PostgreSQL database.
- Tracking without a consent banner 5
5/5 means: No cookies and no stored personal data by default, and the project states that no consent banner or notice is needed
The tracker uses no cookies and Umami does not automatically collect personal information; the features page states that no cookie banner is required. The FAQ adds that a site may still need a notice because of other services it uses.
- Reports beyond page views 5
5/5 means: All six
All six: custom events, goals, funnels, UTM reports and revenue are listed as included in the self-hosted edition, and the dashboard shows new visits and events as they happen.
- Ways to collect data 3
3/5 means: Two of the four
Two of the four: tracking pixels for places without JavaScript, and an HTTP API (/api/send) for pageviews and events. No server log import or official mobile SDK is documented.
- Import from other tools 1
1/5 means: No import of past data into the self-hosted edition
The only documented import is a service of Umami Cloud, which Umami's team runs. Nothing in the self-hosted documentation imports past data.
Rests partly on what the sources don't mention, which is a weaker signal than what they say.
- Export and API 4
4/5 means: Three of the four
Three of the four: every operation in the app is in the API, which covers report statistics, managing websites, and the Sessions screen's individual visits. The documented data export (a download link sent by email) belongs to Umami Cloud; no report file download is documented for self-hosting.
- Team access 4
4/5 means: Four of the five
Four of the five: teams with role-based permissions including View Only, public Share URLs, and two-factor login that admins can require. No single sign-on is documented.
Rests partly on what the sources don't mention, which is a weaker signal than what they say.
- Interface languages 5
5/5 means: 45 or more languages
The repository has 54 interface translation files, which make 50 languages once regional variants (two each of English, German, Portuguese and Chinese) count once.
- Active maintenance 5
5/5 means: Within the last month
Latest release v3.4.1 on 2026-10-23, within a month of this evaluation.
Evidence and sources
Self-hosted web analytics scores
Setup and upkeep 3 quotes
-
“A server with Node.js version 20.19 or newer (22 LTS recommended).”
umami.is/docs/install · checked -
“A database. Umami supports PostgreSQL (minimum v12.14) databases.”
umami.is/docs/install · checked -
“Using a Docker image: Download a pre-built Docker image.”
umami.is/docs/install · checked
Tracking without a consent banner 3 quotes
-
“Umami does not use any cookies so no annoying cookie banner is required.”
umami.is/features · checked -
“Umami does not automatically collect personal information from your visitors, supporting GDPR and CCPA compliance out of the box.”
umami.is/features · checked -
“Umami's web tracker does not use cookies. Whether your website needs a cookie notice depends on the other services you use and applicable requirements.”
umami.is/docs/faq · checked
Reports beyond page views 4 quotes
-
“The open-source platform and Umami Cloud share the same analytics features.”
umami.is/docs/cloud · checked -
“Funnels, goals, journeys, retention, UTM, revenue, and attribution”
umami.is/docs/cloud · checked -
“Track everything that happens on your website like signups and cart checkouts using custom events.”
umami.is/features · checked -
“See new visits and events the moment they happen — no waiting for batch processing.”
umami.is/features · checked
Ways to collect data 2 quotes
-
“This is especially useful for tracking email opens and content views where JavaScript is not supported.”
umami.is/docs/pixels · checked -
“Send pageviews, custom events, and visitor data to Umami directly over HTTP with the /api/send and /api/batch endpoints.”
umami.is/docs/api/sending-stats · checked
Import from other tools 1 quote
-
“Our team will coordinate the import process and notify you when it is complete.”
umami.is/docs/cloud/import-data · checked
Export and API 4 quotes
-
“When the export is complete, you will be emailed a link to download your data.”
umami.is/docs/cloud/export-data · checked -
“Any operation you can do through the application is available in the API. All data is returned in JSON format.”
umami.is/docs/api · checked -
“When self-hosting, the API endpoints are available at http://<your-umami-instance>/api.”
umami.is/docs/api · checked -
“Each row shows the visitor's country, browser, operating system, and the pages they viewed during their session.”
umami.is/docs/sessions · checked
Team access 4 quotes
-
“View Only View only.”
umami.is/docs/using-teams · checked -
“By default your website's metrics are private. When you want to share insights, you can generate a public Share URL for specific views.”
umami.is/docs/enable-share-url · checked -
“Each user can enable 2FA for their own account, and admins can require it globally, for individual users, or for specific teams.”
umami.is/docs/two-factor-authentication · checked -
“Give team members secure access to specific websites with role-based permissions.”
umami.is/features · checked
Interface languages 1 quote
-
“54 files: ar-SA.json az-AZ.json be-BY.json bg-BG.json bn-BD.json bs-BA.json ca-ES.json cs-CZ.json da-DK.json de-CH.json de-DE.json el-GR.json en-GB.json en-US.json es-ES.json fa-IR.json fi-FI.json fo-FO.json fr-FR.json ga-ES.json he-IL.json hi-IN.json hr-HR.json hu-HU.json id-ID.json it-IT.json ja-JP.json ka-GE.json km-KH.json ko-KR.json lt-LT.json mn-MN.json ms-MY.json my-MM.json nb-NO.json nl-NL.json pl-PL.json pt-BR.json pt-PT.json ro-RO.json ru-RU.json si-LK.json sk-SK.json sl-SI.json sv-SE.json ta-IN.json th-TH.json tr-TR.json uk-UA.json ur-PK.json uz-UZ.json vi-VN.json zh-CN.json zh-TW.json”
api.github.com/repos/umami-software/umami/contents/public/intl/messages · checked
Active maintenance 1 quote
-
“tag_name: v3.4.1, published_at: 2026-10-23T08:26:44Z”
api.github.com/repos/umami-software/umami/releases/latest · checked
Facts
License 1 quote
-
“MIT License”
github.com/umami-software/umami/blob/master/LICENSE · checked
Runs on 2 quotes
-
“A server with Node.js version 20.19 or newer (22 LTS recommended).”
umami.is/docs/install · checked -
“Using a Docker image: Download a pre-built Docker image.”
umami.is/docs/install · checked
Needs 1 quote
-
“A database. Umami supports PostgreSQL (minimum v12.14) databases.”
umami.is/docs/install · checked
Other quotes
Not cited by a score or fact 2 quotes
-
“Keep ad blockers from blocking Umami by proxying the tracker and collection endpoint, self-hosting the script, or renaming them.”
umami.is/docs/bypass-ad-blockers · checked -
“Self-hosted Umami instances (PostgreSQL database exports)”
umami.is/docs/cloud/import-data · checked