🐸 Rybbit - open-source and privacy-friendly alternative to Google Analytics that is 10x more intuitive.
12.5k
Stars
690
Forks
171
Open issues
30
Contributors
AI Analysis
Rybbit is an open-source, privacy-friendly analytics platform designed as a direct alternative to Google Analytics, featuring session replays, cookieless tracking, and support for self-hosting. It serves organizations and individual site owners who prioritize data privacy and want intuitive analytics without vendor lock-in. It is not suitable for users requiring deep integration with existing Google ecosystem tools or those needing proprietary SaaS guarantees.
Inferred from signals mentioned in the README (tests, CI, type safety) — not a review of the actual code.
AI's overall editorial judgment — not an average of the bars above, can weigh other factors too.
Rybbit: A privacy-first, self-hostable web analytics platform with session replay and product analytics built in
Rybbit is an open-source, cookieless web and product analytics platform targeting developers, indie hackers, and privacy-conscious teams who want more than basic pageview tracking without Google Analytics or expensive SaaS products. It bundles session replay, funnels, user journeys, retention analysis, error tracking, and real-time dashboards into a single self-hostable package. At 12K+ stars in roughly 18 months, it has attracted meaningful GitHub attention, though verified production adoption at scale is not fully documented publicly. Both a hosted cloud tier and self-hosted deployment are offered.
Created in January 2025, Rybbit entered an already-contested space of privacy-friendly analytics alternatives. It positioned itself as a more feature-rich option compared to minimalist tools like Plausible, targeting teams that wanted product analytics depth alongside web analytics.
Rybbit grew rapidly in its first year, likely driven by ProductHunt exposure (it earned a top post badge), developer community sharing, and the sustained demand for GDPR-friendly Google Analytics replacements. Star growth appears to have normalized—48 stars in the last 7 days suggests the initial viral spike has passed and it is settling into organic, slower growth. The breadth of features relative to comparable TypeScript-based alternatives likely aided differentiation.
A live demo is available at demo.rybbit.com showing the tool running on a real production site, and a hosted cloud service exists at rybbit.com. A ProductHunt top post badge indicates public launch traction. However, independently verifiable production deployments at scale (case studies, major user testimonials, npm download data for the tracking script) are not documented in the available README. Adoption not verified beyond what the hosted service and demo imply.
Appears to be a TypeScript monorepo with a Next.js or similar React frontend, a backend API layer, and likely ClickHouse or a columnar store for analytics data based on the feature set (high-cardinality filtering, session-level data). Session replay implies a client-side recording library and server-side storage component. Multi-tenant organization support suggests a structured auth and data isolation layer. All architectural claims are inferred from README feature descriptions — source code not reviewed.
Not documented in README.
Last push was 2026-06-26, two days before the evaluation date, indicating very active development. The repository is 18 months old and has sustained regular commits. Presence of a CONTRIBUTE.md, documentation site, Discord community, and demo environment all suggest an actively maintained project, not an abandoned prototype.
ADOPT IF: you need cookieless, self-hostable web analytics with product analytics features (funnels, session replay, retention) and want to avoid GA4's privacy concerns or Plausible's feature ceiling — especially for EU-regulated environments or developer-run products. AVOID IF: you need proven, enterprise-grade stability with documented SLAs, extensive third-party integrations, or are running extremely high-traffic sites where the storage and infra requirements of session replay and event tracking at scale are a concern. MONITOR IF: you are evaluating open-source analytics for a team product and want to see whether the hosted tier and support story matures over the next 6–12 months before committing.
Independent dimensions
Mainstream potential
5/10
Technical importance
7/10
Adoption evidence
3/10
- As an 18-month-old project with AGPL-3.0 licensing, long-term commercial sustainability is uncertain — the hosted tier must generate enough revenue to sustain full-time development.
- Session replay and user profiling features significantly increase data storage and compliance surface area; teams in regulated industries must audit data residency and GDPR/CCPA implications carefully.
- The AGPL license is a hard blocker for some organizations that want to embed or white-label the software without releasing modifications.
- Breadth of features (replays, funnels, journeys, error tracking, maps) increases maintenance burden and may lead to uneven polish across features — impossible to verify without code review.
- Star growth has apparently normalized; if community momentum does not convert to a sustainable paid user base, maintenance intensity may decrease over time.
Rybbit is likely to consolidate as a credible mid-tier option in privacy-friendly analytics, potentially capturing teams that find Plausible too minimal and Mixpanel too expensive. It may struggle to reach Plausible's adoption level but could become a durable niche leader for self-hosters wanting full product analytics.
Newsletter
Get analyses like this every Monday
Free weekly digest of the most interesting open-source discoveries.
Languages
Information
- Website
- https://rybbit.com
- Language
- TypeScript
- License
- AGPL-3.0
- Last updated
- 17h ago
- Created
- 18mo ago
- Analyzed with
- anthropic/claude-haiku-4-5
Stars over time
Contributors over time
Top 100 contributors only — repos with more will plateau at 100.
Open issues
v2.7.0 silently breaks visitor identification behind chained reverse proxies (X-Real-IP now takes precedence over X-Forwarded-For) — not in release notes
CORS misconfiguration + SameSite=None cookies enable cross-origin CSRF
Ingestion endpoints have no protection
Add CSP headers for better security
Cloudflare Workers proxy on Rybbit Cloud geolocates visitors as United States
Top contributors
Recent releases
Similar repos
electerious/Ackee
Ackee is a self-hosted, privacy-focused analytics platform built on Node.js and...
| Repository | Stars | Week Δ | Language | Score | Updated |
|---|---|---|---|---|---|
|
rybbit-io/rybbit
this
|
12.5k | +74 | TypeScript | 8/10 | 17h ago |
|
electerious/Ackee
|
4.7k | — | JavaScript | 8/10 | 1w ago |
 Swetrix/swetrix
|
1.1k | — | TypeScript | 8/10 | 14h ago |
 IgnisDa/ryot
|
3.4k | — | TypeScript | 8/10 | 2d ago |
 plausible/analytics
|
27.6k | — | Elixir | 8/10 | 21h ago |
 databuddy-analytics/Databuddy
|
1.1k | — | TypeScript | 7/10 | 15h ago |
Plausible (27K stars, Elixir) is the more established privacy-first alternative and has significantly broader adoption. However, its community edition is deliberately minimal. Rybbit offers session replay, user journeys, retention, and error tracking that Plausible does not, making Rybbit more suitable for teams wanting product analytics depth. Plausible's paid cloud is mature and battle-tested; Rybbit's is newer.
GoatCounter (5.7K stars, Go) is extremely lightweight and focused purely on simple page analytics with minimal server requirements. Rybbit targets a different segment: teams that want feature richness, not minimal footprint. They serve different use cases rather than competing directly.
Swetrix (1K stars, TypeScript) occupies a similar niche with a similar stack. Rybbit has significantly more GitHub traction and a more extensive feature set based on README descriptions, suggesting Rybbit has pulled ahead in developer mindshare in this sub-segment.
Databuddy (1K stars, TypeScript) is a close architectural peer—open source, TypeScript, analytics-focused. Both are relatively young. Rybbit currently has roughly 10x the star count, suggesting greater community momentum, though both are early-stage.
GA4 is the default choice for most web properties, free, and deeply integrated with Google Ads. Rybbit cannot match its ecosystem integrations or machine learning features. However, GA4's privacy implications, data sampling, and UX complexity are real pain points Rybbit directly addresses for privacy-sensitive or EU-based deployments.
