Plausible Analytics Privacy Setup for Indie Websites

Install the script with a rollback path

Create the site in Plausible with the production domain and protocol. Add the official script to the global application template rather than only the homepage. A site with Content Security Policy must allow the required script and event endpoints. After deployment, open the real-time dashboard and visit two or three pages in a clean browser without an analytics blocker.

Keep the prior analytics source for two weeks. Counts will not match exactly: Plausible filters bots, measurement definitions differ, and blockers can stop either script. Compare trend direction, major sources, and top landing pages. Exact session parity is the wrong acceptance gate.

Configure conversion goals and UTMs, not total surveillance

Start with three business outcomes: completed signup, submitted contact form, and paid-checkout handoff. Prefer a page goal when a unique success URL exists; add a custom event only for completion without a URL. Standardize utm_source, utm_medium, and utm_campaign for newsletters, social posts, and partners so one channel does not fragment into five spellings.

Validate each conversion by traveling from a real campaign URL to completion. Confirm the goal fires once, attribution survives, and revenue currency plus refund treatment are documented. A button click followed by an API error is not a purchase. Put the goal as close as possible to a verifiable completed state.

Privacy-friendly is not automatic compliance

Plausible says its hosted service avoids cookies and persistent user identifiers and keeps processing on European infrastructure. Your site may still load advertising pixels, embedded video, chat, payment, A/B testing, or server logs. Those systems have independent notice or consent implications. Whether a banner is required depends on the whole deployment, not one analytics vendor.

Maintain a processing inventory with fields, purpose, retention, location, vendor, and deletion path. The privacy notice should match the real configuration. Do not copy a “cookie-free” slogan while ignoring unrelated third parties.

Traffic spikes, overages, and dashboard locking

Official documentation says a single over-limit month causes no surprise charge or statistics interruption. After two consecutive months above the tier, Plausible asks you to upgrade and prorates the difference. If no action follows within a week, dashboards can be temporarily locked while collection continues. They unlock in the next cycle if usage falls, or immediately after an appropriate upgrade; later downgrades are prorated too.

This is gentler than instant overage billing, but somebody must read notices. Review usage near 70 and 90 percent of tier capacity and forecast campaigns. A one-off Hacker News spike is not necessarily a reason for a permanent annual upgrade.

Failure modes and when not to choose it

Installing only on the homepage undercounts content. Missing SPA route tracking drops virtual pageviews. Mixing www and apex domains fragments data. Internal visits can dominate a tiny site's chart. Excess custom events inflate usage. Public shared links can expose business metrics. Put each item in the launch checklist.

Do not choose hosted Plausible if software cost must be zero and you accept a more complex free stack. Do not use it as a user-level product analytics or precise advertising-audience system. Do not self-host only because the code is open source when nobody owns upgrades, backups, and alerting. Zero license cost is not zero operations cost.

Launch acceptance and scenario recommendation

Acceptance means: pageviews appear across the whole site; three goals fire exactly once; campaign UTMs resolve to expected channels; two-week trend direction agrees with the previous source; permissions, shared links, and retention are recorded; and the next traffic tier is budgeted from pageviews plus custom events.

Default recommendation: trial Starter for one site and essential metrics; choose Growth for multiple sites, teammates, or client sharing; choose Business only when funnels, journeys, revenue, properties, or API access create measurable value. Use the 30-day trial to prove decisions improve before paying against real usage.