Mitr - 2026 Pricing, Features, Reviews & Alternatives

Mitr Analytics is a cookie-free analytics platform for websites, mobile apps, and backends — architected so raw visitor data never has to leave the visitor's device in the first place. User identifiers are hashed with SHA-256 client-side before any request is sent; the backend only ever stores the hash. No cookie is set, so there's no consent banner requirement to build or maintain, and no third-party ID pool to manage.

Core functions: a real-time activity dashboard (active users, live event stream, 7-day traffic), session and engagement tracking (duration, bounce), pageview and custom event tracking, and self-serve conversion funnels — define a sequence of pages and/or events and get entered/converted/conversion-rate/drop-off at every step, computed live over any date range. Traffic acquisition is broken out by referrer, UTM campaign, and channel. Geolocation (country/region/city) is resolved against a self-hosted DB-IP dataset refreshed on a schedule, not a per-request third-party API call, so no visitor IP or location data is shared with an external geolocation vendor.

Specs and integrations: ingestion is a documented REST API (batched JSON events) behind SDKs for JavaScript (zero-dependency, no build step), Flutter (iOS/Android/desktop/web from one package), React Native, native Swift, native Kotlin, and Node.js (for server-side and webhook/cron use). Outbound integration is via HMAC-signed webhooks with retries and a delivery log — configurable per event type (e.g. purchase, signup) to Slack, a CRM, or your own backend. Multiple sites/apps are managed under one workspace with per-user roles and permissions. Data can be exported as CSV or JSON, and automated traffic-anomaly alerts (spike/drop, configurable threshold) notify by email, webhook, or Slack.

Security and compliance: dashboard sessions are authenticated with PASETO v4 tokens (not JWT), passwords are hashed with Argon2id, all traffic is TLS-encrypted, and no session cookie is ever set — the dashboard's own login screen surfaces this security posture directly to users. Because no raw identifier or cookie is ever collected, Mitr is built to align with GDPR, CCPA/CPRA, and India's DPDP Act 2023 by default, including per-visitor data erasure and export.

Free tier: 10,000 events/month, no credit card required. Paid tiers add events, connected sites, and webhook endpoints.