An open-source analytics project doesn’t usually hit 10,000 GitHub stars in under a year. Rybbit did exactly that, and the momentum hasn’t slowed down. If you’ve been watching the privacy-first analytics space, you’ve probably noticed this newcomer generating serious buzz among developers and privacy-conscious teams alike.
So what’s driving the hype? I spent several weeks testing Rybbit’s self-hosted and cloud offerings to find out whether this is a genuine GA4 alternative or just another open-source project riding a wave of GitHub stars. Here’s what I found.
What Is Rybbit Analytics?
Rybbit is an open-source web analytics platform designed as a lightweight, privacy-respecting alternative to Google Analytics 4. It focuses on simplicity, speed, and giving website owners actionable data without the complexity that makes GA4 frustrating for most users.
Unlike GA4’s event-based model that requires a data science degree to navigate, Rybbit presents your traffic data in a clean, real-time dashboard that anyone can understand. Moreover, it does this without cookies, meaning you can skip consent banners entirely in most jurisdictions.
The project launched on GitHub in early 2025 and quickly gained traction. As a result, it became one of the fastest-growing analytics projects in recent memory, attracting contributions from developers who were tired of both GA4’s bloat and the limitations of existing alternatives.
Key Features That Set Rybbit Apart
Cookieless Tracking
Rybbit doesn’t use cookies at all. Instead, it relies on a privacy-friendly hashing method that can identify unique visitors without storing anything in the browser. Therefore, in most EU jurisdictions, you won’t need a cookie consent banner. That’s a real advantage when you consider how much consent banners affect user experience and conversions.
Real-Time Dashboard
The dashboard updates in real time, showing active visitors, current pages, and traffic sources as they happen. It’s fast. Impressively fast. Pages load in under 200ms, which is something I can’t say about GA4’s sluggish interface. For teams that need to monitor campaigns or content performance live, this is a standout feature — similar to what I’ve covered in my guide to real-time analytics reporting.
Session Replay
This is where Rybbit separates itself from tools like Plausible and Fathom. It includes built-in session replay functionality, allowing you to watch how users interact with your pages. However, the implementation is privacy-conscious — it automatically masks sensitive form fields and personal data by default.
Core Web Vitals Monitoring
Rybbit tracks Core Web Vitals (LCP, FID, CLS, INP, TTFB) directly within the dashboard. Consequently, you don’t need a separate performance monitoring tool. For site owners who care about SEO, having these metrics alongside traffic data is genuinely useful.
Funnel and Event Tracking
Custom event tracking is straightforward, using a simple JavaScript API. You can also build conversion funnels to visualize where users drop off — something that typically requires significant setup in GA4. If you’re interested in funnel optimization, this pairs well with the strategies in our funnel analysis guide.
Self-Hosted vs Cloud: Which Should You Choose?
Rybbit offers two deployment options, and your choice depends on your technical comfort and data sovereignty requirements.
| Factor | Self-Hosted | Cloud (Rybbit-hosted) |
|---|---|---|
| Setup time | 15-30 minutes with Docker | Under 5 minutes |
| Cost | Server costs only (~$5-20/mo) | Starts at $12/mo |
| Data location | Your server, your control | Rybbit’s infrastructure |
| Maintenance | You handle updates and backups | Fully managed |
| Best for | Developers, strict data sovereignty | Teams wanting simplicity |
For developers and privacy-focused organizations, the self-hosted option is compelling. The Docker deployment is well-documented, and I had a working instance running in about 20 minutes. In contrast, the cloud version is ideal if you just want to add a script tag and start collecting data immediately.
The AGPL License: What It Means for You
Rybbit uses the AGPL-3.0 license, which is worth understanding before you commit. In essence, if you modify Rybbit’s source code and run it as a service, you must make those modifications publicly available. For most users simply running the software as-is, this isn’t an issue.
However, if you’re a SaaS company planning to embed Rybbit into your own product with custom modifications, the AGPL requires you to release those changes. This is the same license used by projects like Grafana and MongoDB, so it’s well-established in the open-source world.
Setup Experience: How Easy Is It Really?
I tested both deployment paths. Here’s what to expect:
Cloud Setup
- Create an account at rybbit.io
- Add your website domain
- Copy the tracking script (a single
<script>tag) - Paste it into your site’s
<head>
That’s it. Data started flowing within seconds. The entire process took under three minutes.
Self-Hosted Setup
- Clone the GitHub repository
- Copy the example environment file and configure your domain
- Run
docker compose up -d - Point your DNS to the server
- Add the tracking script to your sites
The self-hosted path requires basic Docker knowledge, but the documentation is thorough. I encountered no issues on a fresh Ubuntu VPS with 2GB RAM. Specifically, the ClickHouse database that powers Rybbit handles analytics queries efficiently even on modest hardware.
Dashboard Walkthrough and UX
First impressions matter, and Rybbit’s dashboard makes a strong one. The dark-mode interface is clean, with your key metrics immediately visible: visitors, pageviews, bounce rate, and average session duration. Additionally, the left sidebar organizes everything logically — pages, sources, locations, devices, and events.
What I particularly appreciate is the filtering system. You can segment data by country, device, browser, referrer, or UTM parameters with a single click. Then, those filters persist as you navigate between sections. This kind of thoughtful UX design is something GA4 still hasn’t figured out.
The session replay feature lives in its own tab and shows recordings with automatic privacy masking. Meanwhile, the Core Web Vitals section provides clear pass/fail indicators based on Google’s thresholds. Both features feel well-integrated rather than bolted on.
That said, Rybbit’s reporting capabilities are still maturing. You won’t find the depth of custom reports or advanced segmentation available in GA4. For most website owners, though, what Rybbit provides is more than sufficient — and far more accessible.
Privacy and GDPR Compliance
Privacy is where Rybbit genuinely shines. The platform was built with GDPR compliance as a core principle, not an afterthought. Here’s what that means in practice:
- No cookies — eliminates the need for consent banners in most cases
- No personal data collection — IP addresses are hashed and never stored in raw form
- Data minimization — only collects what’s needed for analytics
- Self-hosting option — keeps data entirely within your infrastructure
- EU data residency — cloud version offers EU-based servers
For organizations operating under strict privacy requirements, the self-hosted option is particularly attractive. Your analytics data never leaves your servers. As a result, you maintain complete control over data processing — an important consideration given the ongoing regulatory differences between EU and US analytics approaches.
Pricing Comparison: Rybbit vs Plausible vs Fathom
Let’s look at how Rybbit stacks up against the two most popular privacy-first analytics tools on the market.
| Feature | Rybbit | Plausible | Fathom |
|---|---|---|---|
| Starting price | Free (self-hosted) / $12/mo | $9/mo | $15/mo |
| Pageview limit (starter) | 100K/mo | 10K/mo | 100K/mo |
| Self-hosted option | Yes (AGPL) | Yes (AGPL) | No |
| Session replay | Yes | No | No |
| Core Web Vitals | Yes | No | No |
| Cookieless | Yes | Yes | Yes |
| Real-time dashboard | Yes | Yes | Yes |
| API access | Yes | Yes | Yes |
| Custom events | Yes | Yes (Goals) | Yes |
| Funnel analysis | Yes | Yes | No |
Rybbit’s value proposition becomes clear when you factor in the self-hosted option and the included session replay. Plausible remains the most affordable cloud option for low-traffic sites, while Fathom offers the most polished managed experience. However, Rybbit gives you the most features per dollar, especially if you’re comfortable with Docker.
Who Is Rybbit Best For?
Based on my testing, Rybbit is an excellent fit for:
- Developers and technical teams who want full control over their analytics stack and appreciate open-source software
- Privacy-conscious organizations that need GDPR compliance without compromise, especially those requiring data sovereignty
- Startups and SaaS companies looking for session replay and analytics in one tool rather than paying for separate services
- Website owners frustrated with GA4 who want meaningful data presented clearly
Conversely, Rybbit may not be the best choice if you need advanced attribution modeling, deep e-commerce analytics, or enterprise-grade support with SLAs. Similarly, non-technical users who want a completely hands-off experience might prefer Fathom’s simpler approach.
Verdict: Pros, Cons, and Recommendation
Pros
- Generous feature set including session replay and Core Web Vitals at no extra cost
- Truly cookieless — no consent banners needed
- Fast, intuitive dashboard that’s a joy to use
- Self-hosted option with straightforward Docker deployment
- Active open-source community and rapid development pace
- Competitive pricing with high pageview limits
Cons
- Still a young project — some features are less mature than established competitors
- AGPL license may concern some commercial users who want to modify the code
- Limited integrations compared to Plausible or Fathom
- Documentation, while good, still has gaps in advanced configurations
- No dedicated mobile app yet
The Bottom Line
Rybbit has earned those 10,000 GitHub stars. It’s not just hype — this is a well-built analytics platform that offers features you’d normally need multiple paid tools to match. The combination of cookieless tracking, session replay, Core Web Vitals monitoring, and a genuinely fast dashboard makes it a compelling choice for developers and privacy-focused teams.
Is it ready to replace GA4 for everyone? Not yet. It lacks the depth of reporting and integrations that large enterprises need. But for small to mid-sized websites, developer-led projects, and organizations that prioritize privacy, Rybbit is one of the strongest open-source analytics options available today.
If you’re evaluating your analytics stack, Rybbit deserves a spot on your shortlist. The self-hosted option means you can test it risk-free, and the cloud offering makes it easy to get started in minutes. In a space dominated by Google, having a viable open-source challenger is exactly what the web needs.
