A GA4 alternative for the web, mobile, and backends. No cookies, so no consent banner. Identifiers are hashed on-device before anything leaves it. One script tag, or a first-party SDK for Flutter, React Native, Swift, Kotlin, or Node.js — and nothing that slows your app down.
10,000 events/month free — no credit card, no trial clock
Paid plans from $7
Funnels & webhooks included, not upsold
Privacy infrastructure
Clear trust signals designed to feel premium and easy to scan, without changing your existing color system.
DPDP Act 2023
AlignedIndia-first privacy handling for consent-led, purpose-limited data collection.
Learn moreGDPR-Ready
PreparedSupports minimization, lawful-basis workflows, and privacy-conscious retention.
Learn moreePrivacy-Friendly
LeanNo non-essential cookies by default for a leaner, cleaner collection experience.
Learn moreEncrypted At Rest & In Transit
TLS + AES-256TLS on every endpoint, and production storage encrypted at rest via Azure Storage Service Encryption (AES-256, platform-managed keys).
Learn moreClient-Side Hashing
VerifiableUser identifiers are hashed with SHA-256 in the SDK, before a request ever leaves the browser or device.
Learn morePII Detection at Ingest
AutomaticCustom event properties are scanned at ingest for PII-shaped values and hashed in place before they're ever written to storage.
Learn moreCCPA / CPRA Aligned
AlignedNative respect for global consumer privacy rules, prioritizing right-to-know and do-not-sell workflows.
Learn moreRight to Erasure & Export
Built-inSite owners can permanently delete a visitor's data or export it on request, with every action written to an audit trail.
Learn moreMicro-Bundle Footprint
FeatherlightUltra-lightweight Dart and JavaScript footprint, preventing performance taxes or app size bloat.
Learn moreEvery visitor signal passes through a cryptographic one-way transformation before it ever touches a database. No raw identity. No cookies. No consent banners. Just clean, compliant analytics.
Input Gateway
Raw IP · User-Agent · Device ID
Three ephemeral signals concatenated into a single pre-image string. Never persisted in this form.
Anonymised Token
Deterministic · Irreversible · Stateless
A pseudonymous visitor ID with zero PII. No back-calculation is mathematically possible.
e3b0c442…98f6bcd4 Want the full technical breakdown — sub-processors, retention, and a side-by-side comparison with cookie-based analytics? Read the Trust & Compliance page →
Type a user ID or email below. This is exactly what happens inside
the SDK before identify() ever sends a request — your
raw identifier never leaves the browser.
Funnels, webhooks, and traffic alerts — included on every plan, free tier too. Zero cookies. Zero consent banners. Built for developers who respect their users.
Privacy Shield
100%
Cookies Blocked
0
PII Intercepted
GDPR
✓ Aligned
⚙ How it works: Deterministic SHA-256 hash of IP + UA + daily salt — no persistent identifiers ever stored.
Realtime Pulse
⚙ How it works: Server-Sent Events stream page pings aggregated in a 30s rolling window — no polling.
Traffic Metrics
SDK Integration Hub
Acquisition
Insights
Country, region & city — no third-party lookup call
Browser
Performance
Conversion
Management
Shared Access
Reliability
Brave Shields, uBlock Origin, and Firefox ETP block direct cross-domain analytics calls by default. Route the SDK through a proxy on your own domain and it's indistinguishable from any other first-party API request — no dropped events, no undercounted traffic.
Every plan, including the free tier, gets these — not locked behind an enterprise add-on.
See exactly where visitors drop off across a sequence of steps — and unlike most privacy-first tools, a funnel can span both your website and your Flutter app.
Learn more →Get notified by email, webhook, or Slack the moment your traffic spikes or drops against your 7-day trend — no dashboard-refreshing required.
Learn more →Forward any tracked event to Slack, a CRM, or your own backend in real time. HMAC-signed, automatically retried, with a full delivery log.
Learn more →Country, region, and city for every event — self-hosted via DB-IP, no third-party lookup call per request. Most privacy-first tools stop at country.
Learn more →Drop one package, call one function. The Mayabheda Engine initialises automatically — no configuration file, no tracking IDs to rotate, no cookie consent banner to wire up.
<!-- Paste once, before </head> or </body>. Auto-tracks page views. -->
<script src="https://mitranalytics.dev/vendor/mitr.js"
data-site-id="YOUR_SITE_ID"
async defer></script>
// Optional explicit API, once loaded
Mitr.track('signup_completed', plan: 'pro' );
Mitr.identify('user_42'); // hashed in-SDK# Add to pubspec.yaml (vendored from mitr-sdk-suite)
dependencies:
mitr_flutter:
path: ../mitr-sdk-suite/mitr_flutter
// main.dart
import 'package:mitr_flutter/mitr_flutter.dart';
await MitrAnalytics.instance.initialize(
siteId: 'YOUR_SITE_ID',
secretKey: 'YOUR_SECRET_KEY',
);
await MitrAnalytics.instance.track('purchase_completed');$ npm install @mitr/react-native @react-native-async-storage/async-storage
import MitrAnalytics from '@mitr/react-native';
export const mitr = new MitrAnalytics(
siteId: 'YOUR_SITE_ID',
secretKey: 'YOUR_SECRET_KEY',
);
await mitr.track('signup_completed');// Swift Package: point at mitr-sdk-suite/mitr-swift
import MitrAnalytics
let mitr = MitrAnalytics(options: .init(
siteId: "YOUR_SITE_ID",
secretKey: "YOUR_SECRET_KEY"
))
await mitr.track("purchase_completed", metadata: ["value": 49.99])// app/build.gradle.kts
dependencies
implementation(project(":mitr-kotlin:android"))
val mitr = MitrAnalytics(
context = applicationContext,
options = MitrAnalyticsOptions(siteId = "YOUR_SITE_ID", secretKey = "YOUR_SECRET_KEY"),
)$ npm install @mitr/node
import MitrAnalytics from '@mitr/node';
const mitr = new MitrAnalytics( siteId: 'YOUR_SITE_ID', secretKey: 'YOUR_SECRET_KEY' );
await mitr.track('checkout_completed', userId: 'user_42' );
await mitr.close(); // before process exitHave questions about integration or security? Drop us a line directly.