Datascale ResourcesGDPR Stack Calculator

Free · no login · nothing gets sent

GDPR Stack Calculator

Seven questions, then your stack stands layer by layer. Per layer: one recommendation, one alternative, and what you give up for it.

Your situation

Your sector

How hard is your EU requirement?

Weight of paid media

Events per month

Operations and licence budget

Warehouse already in place

What should the stack do?

Everything stays in your browser.

Your blueprint

Your profile carries no open conflict. The blueprint below is the straightforward build.

US transfer, as things stand

The EU-US Data Privacy Framework is in force. The EU General Court dismissed the Latombe annulment action on 03/09/2025; the appeal is pending at the CJEU as C-703/25 P. On 31/07/2026 the European Data Protection Board asked the Commission to assess whether Trump v. Slaughter of 29/06/2026, on the independence of the FTC, affects the adequacy finding. Sound today, with a named tipping risk.

Technical assessment, not legal advice.

Consent & CMP

Cookiebot

Collects consent and passes it on as a signal to everything downstream.

Recommendation

Cookiebot

GDPR-configurableEUchecked 2026-07-02

When one domain with a standard stack needs a solid banner fast.

Alternative

Usercentrics

GDPR-readyEUchecked 2026-06-12

When you steer enterprise consent centrally across many domains, languages, and jurisdictions.

What you give up

When multi-domain, geo rules or TCF requirements demand central control.

Server-Side & Tag Management

stape.io

Decides where your tags execute: in the visitor's browser or on your server.

Recommendation

stape.io

GDPR-configurableEUchecked 2026-05-23

When you need sGTM live fast in the EU region without your own GCP setup.

Alternative

Google Tag Manager

GDPR-configurableUSGlobalchecked 2026-07-02

When tags, triggers and the dataLayer need central, versioned management.

What you give up

When volume and compliance justify your own GCP container in your cloud.

Event Collection & CDI

RudderStack

Receives your own events before any tool gets to interpret them.

Recommendation

RudderStack

GDPR-configurableSelf-hostedEUUSchecked 2026-06-01

When a developer team collects first-party events and wants full control over the pipeline.

Alternative

Snowplow

GDPR-readySelf-hostedEUchecked 2026-06-01

When you capture cleanly structured behavioral events and want to own the data in your warehouse.

What you give up

When marketers should build audiences themselves. Then Hightouch Customer Studio fits better.

Web & Marketing Analytics

GA4

Answers what actually happens on your website and in your apps.

Recommendation

GA4

GDPR-criticalUSGlobalchecked 2026-07-02

When you work in the Google marketing ecosystem, need Ads audiences or maintain an existing setup.

Alternative

Matomo

GDPR-configurableEUchecked 2026-06-30

When full data ownership or public-sector rules demand self-hosting.

What you give up

When consent-free measurement is mandatory or you need raw event data without sampling limits.

Ingestion & Connectors

funnel.io

Pulls cost, impressions and clicks back out of the ad platforms.

Recommendation

funnel.io

GDPR-configurableEUchecked 2026-05-23

When marketing data from many sources should flow harmonised into the warehouse.

Alternative

Fivetran

GDPR-configurableEUUSchecked 2026-06-01

When you want a broad, managed connector portfolio and end-to-end data movement from one vendor.

What you give up

When only two or three standard sources count; then native exports cost less.

Data Warehouse

BigQuery

Brings your numbers together so they can be compared.

Recommendation

BigQuery

GDPR-configurableEUchecked 2026-05-23

When marketing data from GA4, sGTM and connectors should converge in one queryable place.

Alternative

Snowflake

GDPR-configurableEUGlobalchecked 2026-05-23

When multi-cloud, data sharing or in-house Snowflake skills tip the scales.

What you give up

When a Microsoft or Snowflake stack already exists. Then we build there, not in parallel.

Transformation

dbt

Turns raw data into the metrics your team argues about.

Recommendation

dbt

Self-hostedUSchecked 2026-05-23

When SQL transformations should be versioned, tested and documented.

We currently list no real alternative for this layer.

What you give up

When there is only one report and nobody maintains SQL.

BI & Dashboards

Data Studio

Puts the numbers where decisions actually get made.

Recommendation

Data Studio

GDPR-configurableUSGlobalchecked 2026-05-23

When marketing dashboards should appear fast and free on BigQuery.

Alternative

Metabase

GDPR-configurableEUchecked 2026-06-30

When business teams need self-service BI on the warehouse, self-hosted and affordable.

What you give up

When data blending, versioning or performance become the bottleneck.

Measurement & Incrementality

Google Meridian

Measures effect where click paths stop working.

Recommendation

Google Meridian

GDPR-readySelf-hostedchecked 2026-06-01

When you need cross-channel marketing contribution without user-level tracking and have geo or time-series data.

Alternative

Meta Robyn

GDPR-readySelf-hostedchecked 2026-06-01

When your team works in R and has enough ad-spend volume for stable estimates, often social and direct-response heavy.

What you give up

When no data-science team can maintain the model. An unmaintained MMM decays.

Experimentation

GrowthBook

Assigns variants and logs who saw which one.

We build the assignment layer, the flag service and the exposure pipeline. Variant, design and copy stay with your team.

Recommendation

GrowthBook

GDPR-configurableSelf-hostedEUchecked 2026-05-23

When you want flags and experiments in your own infrastructure, without handing user data to a vendor.

Alternative

AB Tasty

GDPR-configurableEUchecked 2026-06-01

When marketing and UX teams want to test and personalise without deep developer involvement.

What you give up

When nobody on the team runs the instance. Self-hosted means updates, scaling and a database you own.

Limits of this recommendation

Seven questions do not replace an inventory. Migration effort, running contracts and the question of whether your tracking concept holds at all decide more in the end than the choice of tool. Switching is rarely the fix; the data contract in front of it is.

The analytics layer in depth: GA4, Matomo, Piwik PRO and Plausible compared · All GDPR tools in the catalog

Unsure about the migration? The Audit Sprint says what carries over and what has to be rebuilt.

Request an Audit Sprint

How it works

Five questions, one concrete recommendation:

How many monthly visitors does your website have?
Do you process sensitive data?
Are you actively running ad campaigns?
How large is your technical team?
How important is data sovereignty to you?

Based on your answers, the calculator recommends one of four tools, with a reason, not a blanket statement.

The four possible recommendations

Plausible CE, for small to medium sites without paid ads. EU hosting included.

Piwik PRO, for mid-size companies that need compliance and run ads.

Matomo, self-hosted alternative to Piwik PRO for teams with IT resources.

GA4 + Consent Mode V2, when advertising is central and a DPA with Google is in place.

No affiliate model

We recommend what fits. No commission on tool licences, no hidden preference.

Last updated: 11 August 2026

Frequently asked

How is the recommendation calculated?

From the five answers about traffic volume, sensitive data, ad networks, team size, and data-sovereignty stance. There's no per-vendor weighting, the recommendation follows a deterministic decision tree that captures the trade-offs between GDPR effort, feature depth, and self-hosting burden.

Why isn't GA4 automatically excluded?

Correctly configured (EU endpoint via Google Tag Manager Server-Side, signed Google DPA, IP anonymisation, Consent Mode V2), GA4 is GDPR-compliant, when advertising is central and the team can carry the configuration load. Blanket claims that 'GA4 is illegal' are not legally accurate.

What does Plausible CE cost vs. Piwik PRO?

Plausible CE is open-source, free in licence, with hosting cost on top (a €5/month Hetzner box is enough for most setups). Piwik PRO starts at around €600/month for enterprise features and EU cloud hosting. The calculator recommends by use-case, not by price.

Does the tool work for apps or e-commerce shops?

The recommendation is optimised for websites. For apps, app-specific topics come into play (Firebase Analytics as the standard, app consent architecture); for shops, conversion tracking and e-commerce reporting. In both cases the recommendation is a good starting point, not a complete stack decision.

More free checks

All resources →

GDPR Stack Calculator

Your situation

Your blueprint

Consent & CMP

Server-Side & Tag Management

Event Collection & CDI

Web & Marketing Analytics

Ingestion & Connectors

Data Warehouse

Transformation

BI & Dashboards

Measurement & Incrementality

Experimentation

How it works

The four possible recommendations

No affiliate model

More free checks

Tracking Check

Consent Loss Calculator

EU AI Act Quick Check