Self-Hosted Control
Run HitKeep on-prem, on a low-cost VPS, or inside regulated environments. You keep direct control over data residency, backups, updates, and infrastructure policy.
Sovereign Web Analytics — Self-Hosted or Managed Cloud
Open Source · Managed Cloud · MIT Licensed
Sovereign Web Analytics.
Self-host HitKeep or use managed cloud in the EU or US. Privacy-first analytics, AI visibility, funnels, and reports in one auditable binary.
Single binaryZero external dependenciesCookie-free by defaultAir-gap readyWebAuthn + 2FAEU / US cloud regions
The main dashboard stays compact while still covering goals, funnels, AI visibility, audience context, and traffic trends in one place. Click around. It is a real product, not a mockup.
Deployment Choice
Your Analytics. Your Deployment Model.
HitKeep is not SaaS-only. Run it on your own infrastructure when you need full operational control, or let us run the same product for you in managed EU or US regions when you want less operational overhead. The ownership model stays the same either way.
Managed Cloud Option
Use HitKeep Cloud when you want the same product without handling updates, backups, patching, or day-to-day operations yourself.
Open Exports, No Lock-In
Export your analytics history in JSON, CSV, or Parquet. Keep your data portable whether you self-host, migrate, or move between environments.
Security-First Access
Keep the operational model flexible without compromising on hardware-key authentication, team isolation, and infrastructure-level auditability.
Features
Everything Needed. Nothing Extra.
HitKeep focuses on the reporting and controls engineering teams actually need: conversions, traffic diagnostics, AI visibility, security, and recurring reports without bolting on more infrastructure.
Conversions without plugin sprawl
Track goals, compare periods, and understand attribution from one dashboard instead of stitching together separate analytics and reporting tools.
Funnels and user flow context
See where traffic converts, where it drops off, and how landing pages perform without shipping your data to an external event pipeline.
Modern visibility signals built in
Track AI visibility and chatbot traffic alongside normal web analytics so teams can monitor how discovery is shifting without adopting a separate observability stack.
Reports that do not depend on third parties
Built-in email digests and shareable dashboards keep stakeholders informed without external queue services, third-party cron infrastructure, or another reporting layer.
Compliance
Compliant by Design. Clear About Trade-Offs.
HitKeep is built for privacy-conscious teams, but it does not pretend compliance is magic. The product gives you sane defaults, infrastructure control, and documented boundaries so your legal and operational decisions stay explicit.
Cookie-free by default
Default tracking avoids cookies and unnecessary personal identifiers, helping teams reduce implementation overhead for privacy-first analytics.
Zero telemetry from the server process
HitKeep does not phone home. Traffic data, user accounts, and reporting data stay under your control unless you export it.
EU / US region choice or full self-hosting
Choose your jurisdiction based on your requirements instead of accepting a vendor-defined default region.
Air-gap and controlled-network friendly
A single binary with zero external service dependencies is easier to review, deploy, and operate inside tightly controlled environments.
WebAuthn, passkeys, and team controls
Security controls are part of the product instead of a paid upgrade, which keeps the deployment model aligned with the access model.
Open source auditability
The full codebase is MIT licensed, so procurement, security, and engineering teams can inspect what actually runs in production.
Architecture
One Binary. Everything Included.
The installation story should look as simple as the architecture actually is. One binary, embedded DuckDB and NSQ, and no external database or queue to provision before you can get value out of the product.
01
Download
One Linux binary for amd64 and arm64. No runtime. No package manager. No container required.
curl -L .../hitkeep-linux-amd64 -o hitkeep && chmod +x hitkeep02
Configure
Point HitKeep at your public URL and set a JWT secret. DuckDB and NSQ are already embedded, so there is no separate service provisioning step.
./hitkeep -public-url="https://analytics.example.com" -jwt-secret="..."03
Track and own the data
Add the lightweight tracking snippet, then keep analytics, retention, and exports under your own control from day one.
<script async src="https://analytics.example.com/hk.js"></script>Why HitKeep
Built Different. On Purpose.
HitKeep is opinionated about what a modern analytics stack should avoid: unnecessary infrastructure, hidden lock-in, and privacy features sold as enterprise upsells.
DuckDB and NSQ are embedded directly into the binary, so installation and operations stay compact from day one.
Your analytics live in a file you control. Export everything in open formats whenever you need to migrate, audit, or archive.
Track conversion performance without layering on separate analytics infrastructure.
Keep stakeholders informed with built-in reports instead of outsourcing the reporting layer.
Start on your own infrastructure, then choose managed cloud if you want the same product without managing updates, backups, and uptime yourself.
Passkeys, WebAuthn, RBAC, and team-level controls are part of the base product, not hidden behind enterprise packaging.
Ready to own your analytics?
Deploy in minutes or let HitKeep Cloud run the same stack for you in managed EU or US regions.