Website profiles · Technology insights · Alternatives

stealth.qleapventures.com

No paid content found
Visit website
Profile views 5 Outbound visits 3 Normal
Stealth Analytics Full homepage screenshot

At a glance

Category
Data & Analytics
Language
English
Paid-content signal
No paid content foundObserved
Registered
2025
Hosting
CloudflareInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is Stealth Analytics?

Stealth Analytics is a developer-focused, privacy-first web and product analytics service built around raw event ingestion rather than browser-only tracking. Its core pitch is flexibility: if a system can make a POST request, it can send telemetry, whether that comes from a website, a background worker, a payment funnel, or a hardware project. The site positions it as a lightweight alternative to traditional platforms, with a 0.7 KB frontend script, a REST API for direct JSON payloads, and support for backend system events beyond simple pageviews.

What it actually does

  • Universal ingestion: Accepts data from a small frontend script or directly via API, so you are not limited to browser sessions.
  • Backend and custom events: You can send strict event payloads from servers to track processes, conversions, or anything else that matters.
  • Mobile-friendly dashboard: The interface is designed to be responsive and fast on phones, for checking traffic or verifying cron jobs on the go.
  • Usage-based, portfolio-wide pricing: Plans are based on event volume rather than domains, so multiple sites count toward one limit.

Who it is for

The product is aimed at developers and technical teams who want control over what they send and how. Hobbyists can start on a free tier with 5,000 events and 30-day retention. Indie hackers and small projects fit the $14/mo tier with 50,000 events and unlimited retention. Scaling SaaS and ecommerce teams are directed to the $39/mo tier with 250,000 events and more custom events per project.

Practical trade-offs

The appeal is speed, low overhead, and freedom from per-domain billing. The trade-off is that a raw event model puts more responsibility on you: you define payloads and wire up ingestion yourself, rather than relying on a plug-and-play CMS or ecommerce integration. If you want automatic pageview tracking with zero setup, this is more work. If you want to track server-side conversions, background jobs, or non-web telemetry alongside web traffic, it is a better fit.

A useful next step is to decide what your first event should be. For a typical SaaS, that might be a sale or signup event fired from your backend after payment confirmation, which avoids ad blockers and gives you a cleaner conversion count than a browser-only pixel.

How does Stealth Analytics compare to Google Analytics 4 in terms of script size and performance?

Stealth Analytics is built to be far lighter than Google Analytics 4. The product page advertises a 0.7 KB payload and a one-line install, and it explicitly compares this to Google Analytics 4 at roughly 45.0 KB — about 60–65× smaller. For anyone whose Core Web Vitals or Lighthouse scores are sensitive to third-party JavaScript, that difference is the headline: a smaller script means less parsing, less blocking risk, and fewer bytes competing with your own assets.

What the size gap actually buys you

Google Analytics 4's larger bundle exists because it carries a broad feature set — enhanced measurement, consent-mode plumbing, cross-domain configuration and a full tag framework. Stealth Analytics trades that breadth for a minimal ingestion layer: the page says you can drop a script in your HTML head for web traffic, or skip the browser entirely and POST JSON to its edge endpoint. The practical performance argument is not that GA4 is badly engineered, but that you are paying a download and execution cost for capabilities you may never switch on.

Aspect Stealth Analytics Google Analytics 4
Advertised script size 0.7 KB ~45.0 KB
Install model 1 line, or direct REST/JSON POST Tag or gtag.js snippet, tag manager optional
Ingestion scope Browser, backend workers, payment funnels, devices that can POST Primarily browser and app SDKs
Billing model Usage buckets, unlimited sites Free tier with sampling/limits; paid 360 tier

Where the comparison gets more nuanced

Smaller is not automatically better for every team. GA4's weight comes with integrations — ad platforms, BigQuery export, audience building and reporting that non-technical marketers can use without writing code. Stealth Analytics is aimed at developers who want raw event ingestion and "absolute freedom" over their telemetry, so the trade-off is control and speed versus out-of-the-box ecosystem depth. If your analytics are read mostly by engineers and your main worry is page performance, the lighter option is compelling. If your growth team lives inside GA4's reports and ad linkages, migrating means rebuilding that workflow.

The page also positions Stealth Analytics as usable beyond the browser — "if it can make a POST request, we can track it" — which matters for backend cron jobs, payment funnel events and even hobby hardware. GA4 can receive server-side events via the Measurement Protocol, but that is a more involved setup than firing a plain JSON payload at an endpoint.

A practical next step

Run a quick test before committing: load your site with GA4 installed and record the transfer size and main-thread time attributed to its script in Chrome DevTools' Coverage or Performance panel. Then repeat with the Stealth Analytics snippet on a staging page. If your analytics needs are mostly pageviews plus a handful of custom events, the 0.7 KB footprint is likely to show up as a measurable improvement in script evaluation time. If you rely on GA4's audience exports or ad-platform syncing, treat the size difference as a real but secondary factor and weigh it against the reporting you would lose.

For broader context on lightweight alternatives, Plausible Analytics and Simple Analytics occupy similar privacy-first, small-script territory, while Google Analytics documentation covers what GA4's larger bundle provides.

Can I send backend events from my server to Stealth Analytics without using a browser?

Yes. Stealth Analytics is built around a REST endpoint that accepts standard JSON POST requests, so your server, worker, cron job, or queue consumer can send events directly without any browser or frontend script involved. The page's own examples show exactly this pattern, including a backend call that posts a named event such as sale from arbitrary code.

What "browserless" actually means here

  • No SDK required. You format a JSON payload and POST it to the edge endpoint from any language or framework.
  • Ingestion is transport-agnostic. The stated rule of thumb is that anything capable of making a POST request can be tracked, which covers web servers, background workers, payment funnels, and even hardware projects.
  • Backend system events are a first-class use case, not a workaround. This is how you record database processes, server-side conversions, and other things the browser never sees.
  • The frontend script is optional. The 0.7 KB script exists for web traffic; you can skip it entirely if all your events originate server-side.

A practical starting point

Send one real event from your server before wiring up anything else. Pick something you already trust, such as a completed checkout or a nightly job finishing, POST it as JSON with a clear event name, then confirm it appears in the dashboard. That single round trip tells you whether your payload shape, endpoint, and event naming conventions are right, and it costs far less time than instrumenting a dozen call sites first.

Two design decisions worth making early:

  1. Event naming. Since custom events are capped per project on the lower tiers, choose a small, stable vocabulary rather than emitting one event name per code path.
  2. Volume awareness. Pricing is usage-based across your whole portfolio, not per domain, so a chatty backend loop can consume your event allowance quickly. Sampling or batching high-frequency internal events is usually the sensible move.

How it compares in practice

Approach Browser needed Typical fit
Frontend script only Yes Pageviews, client-side interactions
Direct REST POST from your server No Conversions, jobs, system events
Both combined Partly Full-funnel visibility across client and server

If you want a point of comparison for server-side event handling, Plausible Analytics and PostHog both document their own event APIs, though their emphasis differs: Plausible leans lightweight and privacy-focused, while PostHog bundles product analytics and session tooling. Stealth Analytics positions itself on raw ingestion speed, a very small footprint, and unlimited sites under one usage bucket.

For a solo developer running a side project plus a client site, the appeal is straightforward: one endpoint, no per-domain accounting, and the ability to track server activity that browser-only tools simply cannot see.

What are the pricing plans and event limits for Stealth Analytics?

Stealth Analytics prices by monthly event volume rather than by number of websites, and all three published tiers allow unlimited sites. A portfolio of several small projects therefore counts against one shared event allowance instead of multiplying the cost.

Plan Price Monthly events Retention Custom events per project
Free $0 5,000 30 days 2
Indie Hackers $14 50,000 Unlimited 10
Pro $39 250,000 Unlimited 50

All tiers include full CSV exports, so leaving the free plan is mainly about volume, retention and how many custom event types you need per project.

Choosing a tier

The deciding factor is usually total traffic across everything you run, not any single site. A hobbyist with a personal blog and a side project will rarely leave the free tier. A builder with a few small products that together draw steady traffic may find 50,000 events comfortable. A scaling SaaS or ecommerce store sending backend events — signups, payment funnel steps, cron job completions — can burn through events quickly, since server-side telemetry counts too.

If you are unsure, start free and watch how fast the 5,000-event allowance drains over a normal month, then scale up. Retention is the other consideration: the free plan keeps 30 days of history, so anything you want to compare year over year requires a paid tier.

Stealth Analytics is one option among several lightweight, privacy-oriented tools. Plausible Analytics and Simple Analytics take similar approaches with different plan structures, and Matomo suits teams that want to self-host.

How do I install Stealth Analytics on my website or application?

Install Stealth Analytics either by dropping its frontend script in the <head> of your HTML or by sending JSON payloads directly to its REST API from any language or framework. The site describes a one-line web install and an API-first path for backend, mobile and non-browser telemetry.

Web pages: the one-line path

Place the provided script tag in your document head. The page claims a 0.7 KB payload that loads in milliseconds without blocking rendering, which matters if you already watch Core Web Vitals or mobile performance. After that, page traffic appears in the dashboard without further configuration.

Everything else: the REST API path

If your source can make a POST request, it can send events. The documented pattern is a standard JSON body to an edge endpoint:

await fetch('https://api.stealth...', {
  method: 'POST',
  body: JSON.stringify({ name: 'sale' })
});

Use this for server-side conversions, background workers, payment funnels, cron jobs or hardware projects. The site also notes custom event limits per project by plan, so check that ceiling before instrumenting a long list of backend events.

Choose based on what you need to measure

What you are tracking Recommended route Practical trade-off
Marketing pages and web traffic Frontend script in <head> Simplest, but ad blockers and client-side failures can drop events
Checkout, signup or payment events REST API from your server More reliable and harder to spoof, but requires backend code
Cron jobs, queues or robotics REST API from any runtime Works outside the browser, but you own retries and error handling
Mobile app telemetry REST API No native SDK is mentioned, so you manage the client yourself

A concrete first step

Pick one high-value event, such as a completed purchase, and send it server-side before expanding. That validates your endpoint, payload shape and dashboard visibility with the least risk. For a broader comparison of lightweight analytics options, see Plausible and Simple Analytics, both of which the page uses as script-size benchmarks.

Is Stealth Analytics suitable for tracking mobile app telemetry and server-side processes?

Yes. Stealth Analytics is designed for exactly that mix: it accepts any client that can send an HTTP POST request, so mobile apps and backend workers are first-class sources rather than workarounds. The page's own framing is "If it can make a POST request, we can track it," and it explicitly lists backend system events, payment funnels and even robotics projects alongside ordinary web traffic.

What that means in practice

  • Mobile apps: you are not limited to a vendor SDK. A mobile client can POST a JSON event to the edge endpoint from any language or framework, which suits teams that want to avoid shipping a heavy analytics library inside an app binary.
  • Server-side processes: you can send strict event payloads from your server to record database jobs, cron completions and custom conversions — the things that actually matter to a business but that browser-only tools miss.
  • Web alongside the rest: if you also want pageviews, a small frontend script covers that, so web, mobile and server events can land in the same project.

Trade-offs to weigh

The universal-ingestion model shifts work onto you. There is no auto-instrumentation for mobile screens or server frameworks, so you define event names and payloads yourself and keep them consistent across clients. That is good for control and data hygiene, but it means more upfront schema discipline than a plug-and-play SDK would require.

Pricing is usage-based rather than per-site, which helps if you run several apps and services. The free tier caps at 5,000 events with 30-day retention and 2 custom events per project — fine for a hobby project, tight if mobile and server telemetry both flow in. Paid tiers raise event volume and custom-event counts, so check your expected monthly event total before committing.

A concrete way to decide

Sketch your event volume for one month: app sessions plus server jobs plus web pageviews. If that number sits well inside a tier and you are comfortable writing your own POST calls, Stealth Analytics fits. If you need automatic screen tracking or framework-specific SDKs, compare against a tool built around those integrations first.

For a second opinion on the lightweight end of the market, Plausible Analytics and Simple Analytics are useful reference points, though both lean toward web analytics rather than general telemetry ingestion.

Related questions

More questions →
Stealth Analytics Script Size vs. GA4, Simple Analytics, and Plausible

Stealth Analytics ships a 0.7 KB frontend payload, the smallest of the four tools compared on its own site. That number matters if you are trying to protect a Lighthouse performance score or a Core Web Vitals budget: a smaller script downloads, parses, and executes faster, and Stealth Analytics states its script is engineered to load in milliseconds without blocking rendering. The comparison below uses the figures published on Stealth Analytics' own site, so treat the other vendors' numbers as Stealth's characterization rather than independently verified measurements.

Script size comparison

Tool Payload size (as listed by Stealth Analytics)
Google Analytics 4 ~45.0 KB
Simple Analytics ~3.0 KB
Plausible ~1.2 KB
Stealth Analytics 0.7 KB

The gap between GA4 and the rest is roughly an order of magnitude. GA4 is also the only tool here that is typically loaded through Google Tag Manager or a gtag.js snippet, which can pull in additional requests beyond the base script. Stealth Analytics, Simple Analytics, and Plausible all position themselves as lightweight alternatives, and their listed sizes cluster within a few kilobytes of each other.

What the 0.7 KB figure does and does not cover

Stealth Analytics describes its frontend script as "microscopic" and says it is "virtually invisible to the browser." The 0.7 KB refers to that frontend script. The product also supports a second ingestion path: you can skip the browser script entirely and send a standard JSON payload via POST to its edge endpoint from any language or framework. In that mode there is no frontend script at all, so the 0.7 KB does not apply to your page weight.

The site's headline is "If it can make a POST request, we can track it," and it lists REST API ingestion, backend system events, and mobile-optimized dashboards as first-class features rather than add-ons.

Why script size is only part of the performance question

A small script is necessary but not sufficient for a clean performance score. Three things determine the real cost:

  1. Transfer size vs. parse/execute cost. A 0.7 KB file is trivial to download, but the JavaScript still has to be parsed and run. Stealth Analytics claims millisecond load times and no render blocking; those are the claims to verify with your own Lighthouse or WebPageTest run.
  2. Request count. One small script is better than one small script plus a tag manager plus a consent wrapper. If you use Stealth's API path instead of the script, you can remove the request from the critical path entirely.
  3. What you actually measure. If you only need pageviews, a 0.7 KB script is plenty. If you need custom events, Stealth Analytics supports them, but the free tier caps you at 2 custom events per project, so the practical ceiling depends on your plan.

Choosing based on this comparison

  • If your priority is the smallest possible browser payload, Stealth Analytics at 0.7 KB is the lowest number in this set, and its API-first design lets you avoid a frontend script altogether.
  • If you want a mature, widely documented ecosystem and can absorb the weight, GA4 is the heaviest option here by a wide margin.
  • If you want a lightweight script with a longer track record in the privacy-first analytics space, Simple Analytics (~3.0 KB) and Plausible (~1.2 KB) sit between the two extremes.

One caveat on pricing: Stealth Analytics lists a free tier (5,000 events, 30-day retention) and paid tiers at $14/mo and $39/mo, and its pricing section mentions "upgrade" but no payment platform details are given on the page. Confirm current terms on the site before committing, and note that the free tier's 2-custom-events limit may matter more to your setup than the 0.7 KB script size.

What is Stealth Analytics?

Stealth Analytics is a privacy-first, developer-oriented analytics platform built around one core idea: if a system can make a POST request, it can send telemetry to Stealth. Instead of limiting tracking to browser pageviews, it accepts raw event payloads from a tiny frontend script or directly from backend services, edge workers, payment funnels, or hardware projects. It is aimed at developers who want speed, minimal footprint, and freedom from per-domain pricing.

What makes it different from traditional analytics

Most analytics platforms are built around the browser. They assume your data comes from a JavaScript snippet watching page loads. Stealth Analytics treats the browser as just one possible source.

The site states its core capability plainly: "If it can make a POST request, we can track it." That means the same platform can ingest:

  • Web traffic from a frontend script
  • Backend system events from a server
  • Custom conversions from a payment funnel
  • Telemetry from a background worker or a robotics project

This is a meaningful shift. Traditional tools often require a specific SDK or software kit. Stealth's documented approach is to accept a standard JSON payload sent to an edge endpoint, so any language or framework that can issue an HTTP POST can participate.

How ingestion works

There are two documented channels, and you can use either or both.

Frontend script

A small script is dropped into the HTML <head> for web traffic. The site describes the payload as 0.7 KB and the install as 1 line.

REST API

You bypass the browser entirely and hit the edge workers directly. The documented pattern is a standard JSON payload:

await fetch('https://api.stealth...', {
  method: 'POST',
  body: JSON.stringify({ name: 'sale' })
});

The expected result is that the event lands in your dashboard, whether it originated from a browser, a server cron job, or a custom backend process. The site frames this as "two minutes to first event."

Footprint and performance

Analytics scripts can hurt performance scores if they are heavy or block rendering. Stealth positions its script as "virtually invisible to the browser," loading in milliseconds without blocking rendering.

The site provides a direct size comparison:

Tool Script size
Google Analytics 4 ~45.0 KB
Simple Analytics ~3.0 KB
Plausible ~1.2 KB
Stealth Analytics 0.7 KB

If page speed or Core Web Vitals matter to you, the 0.7 KB figure is the headline number. Smaller scripts generally mean less main-thread work and less render-blocking risk, though real-world impact also depends on how and where the script is loaded.

Pricing and usage model

Stealth does not charge per domain. Its usage-based buckets cover your entire portfolio, so tracking one site or fifty counts toward the same event limit. The site lists three tiers:

Plan Price Events Retention Custom events per project
Free $0/mo 5,000 30 days 2
Indie Hackers $14/mo 50,000 Unlimited 10
Pro $39/mo 250,000 Unlimited 50

All tiers include full CSV exports. The "upgrade" signal on the page points to the paid tiers, so the free plan is a real entry point but with a 30-day retention cap and a low custom-event ceiling.

Who it is for

Stealth Analytics fits developers and small teams who:

  • Want to track events beyond pageviews, including server-side and backend processes
  • Prefer a REST API over a vendor-specific SDK
  • Care about a minimal frontend footprint
  • Run multiple sites and do not want per-domain billing
  • Are comfortable formatting JSON payloads and making HTTP requests

It is less suited to non-technical users who expect a plug-and-play dashboard with no code, or to teams that need the deep out-of-the-box integrations and reporting ecosystem of a larger platform.

Mobile and dashboard

The dashboard is described as fully responsive and engineered to feel like a native app, so you can check active web traffic on a commute or verify a server cron job from your phone. This matters if you monitor systems away from a desk.

What to verify before committing

The site does not publish details on data residency, retention enforcement mechanics, or how privacy compliance is handled beyond the "privacy first" positioning. If those are hard requirements for you, confirm them directly before migrating. The free tier is the lowest-risk way to test whether the ingestion model fits your stack: send one frontend event and one backend event, then confirm both appear in the dashboard.

How to Send Events to Stealth Analytics from a Website or Backend

Stealth Analytics accepts any event that can be sent as a POST request, so you can track from a browser script, a backend worker, a payment funnel, or any other system that speaks HTTP. The frontend path is a one-line script in your HTML head; the backend path is a standard JSON payload fired at the edge endpoint from any language or framework. No SDK is required, and the site claims you can reach a first event in about two minutes.

Frontend: one line in the head

For web traffic, drop the provided script into the <head> of your HTML. The site describes the payload as 0.7 KB, compared with roughly 45.0 KB for Google Analytics 4, 3.0 KB for Simple Analytics, and 1.2 KB for Plausible, and says it loads in milliseconds without blocking rendering.

Steps:

  1. Copy the script tag from the Stealth Analytics dashboard or guides.
  2. Paste it into your HTML <head>.
  3. Load the page and confirm the event appears in the dashboard.

Expected result: page traffic shows up in your dashboard without additional configuration.

Backend: POST a JSON payload

To track server-side processes, custom conversions, or anything outside the browser, send a standard JSON payload directly to the edge endpoint. The site's example uses fetch:

await fetch('https://api.stealth...', {
  method: 'POST',
  body: JSON.stringify({ name: 'sale' })
});

The same pattern works from any language or framework that can make an HTTP POST request — the site's framing is "If it can make a POST request, we can track it."

Steps:

  1. Build a JSON body with at least an event name, e.g. { "name": "sale" }.
  2. POST it to the edge endpoint from your server, worker, or script.
  3. Verify the event lands in the dashboard alongside your web traffic.

Expected result: backend events such as database processes and custom conversions appear in the same dashboard as pageviews.

What you can track

Source Method Example
Website Frontend script in <head> Pageviews
Background worker REST API POST Cron job verification
Payment funnel REST API POST { "name": "sale" }
Other systems REST API POST Robotics or custom projects

Plan limits that affect event volume

Custom events per project and event volume are capped by plan, so check your tier before wiring up many event types.

Plan Price Events Retention Custom events per project
Free $0/mo 5,000 30 days 2
Indie Hackers $14/mo 50,000 Unlimited 10
Pro $39/mo 250,000 Unlimited 50

All tiers include full CSV exports, and pricing is per usage bucket rather than per domain — one site or fifty count toward the same limit.

Common snags

  • Custom event cap. The Free plan allows 2 custom events per project. If your backend sends more distinct event names than your plan supports, some will not be tracked.
  • Retention window. Free retention is 30 days; older events are not available for export on that tier.
  • Endpoint details. The example endpoint is truncated in the source. Use the exact URL from your dashboard or guides rather than the abbreviated form shown here.
Can Stealth Analytics Track Backend, Mobile, and Non-Browser Events?

Yes. Stealth Analytics accepts telemetry from anything that can make a POST request, not just browsers. You can send events from a website, a background worker, a payment funnel, a server process, or a hardware project, either through the small frontend script or by hitting the edge endpoint directly with a JSON payload. The only requirement stated on the site is that the source can issue a POST request.

What "non-browser" tracking actually means here

Most analytics platforms assume a browser is the source of every event. Stealth Analytics separates ingestion from the browser entirely. Its stated position is: "If it can make a POST request, we can track it."

That opens up three categories the site explicitly calls out:

  • Backend system events — send strict event payloads from your server to track database processes and custom conversions.
  • Payment funnel events — fire events at points in a checkout or conversion flow that never render a page.
  • Non-web projects — the site names "that robotics project in your garage" as a valid source.

How to send an event without a browser

The site describes two ingestion paths.

1. Frontend script (for web traffic)

Drop the script in your HTML <head>. This is the standard path for pageviews and browser-side activity.

2. REST API / edge workers (for everything else)

Bypass the browser completely and hit the edge endpoint directly. No SDK or software kit is required — format a standard JSON payload and send it from any language or framework.

The example the site provides:

await fetch('https://api.stealth...', {
  method: 'POST',
  body: JSON.stringify({ name: 'sale' })
});

The site frames the whole setup as "two minutes to first event": script in the head for web traffic, API for everything else.

Checking non-browser events from a phone

The dashboard is described as engineered to feel like a native app and fully responsive. The stated use cases are checking active web traffic on a commute or verifying a server cron job from the gym — so mobile viewing is treated as a first-class scenario, not an afterthought.

What this means for your setup

Source Path Notes
Website pageviews Frontend script in <head> 0.7 KB payload
Server / background worker REST API POST No SDK required
Payment funnel REST API POST Custom conversion events
Hardware / robotics REST API POST Any system that can POST

Custom events are capped per plan: 2 per project on Free, 10 on Indie Hackers, 50 on Pro. If your backend tracking depends on many distinct event names, that per-project limit is the constraint to check before choosing a tier.

Where to look next

If you are deciding between plans based on event volume and site count, the usage buckets cover your whole portfolio rather than charging per domain — one site or fifty count toward the same limit. If you want to compare the script's footprint against other tools, the site lists GA4 at ~45.0 KB, Simple Analytics at ~3.0 KB, Plausible at ~1.2 KB, and Stealth Analytics at 0.7 KB.

Which Stealth Analytics Plan Fits My Event Volume and Number of Sites?

Stealth Analytics charges by total event volume across your whole portfolio, not by domain — so the number of sites you run never changes your bill. Pick a plan by matching your combined monthly events and your retention and custom-event needs: Free ($0, 5,000 events, 30-day retention, 2 custom events per project) for hobby projects, Indie Hackers ($14/mo, 50,000 events, unlimited retention, 10 custom events) for projects with real traction, and Pro ($39/mo, 250,000 events, unlimited retention, 50 custom events) for scaling SaaS and ecommerce.

The three plans side by side

Free Indie Hackers Pro
Price $0/mo $14/mo $39/mo
Events 5,000 50,000 250,000
Retention 30 days Unlimited Unlimited
Custom events per project 2 10 50
Sites Unlimited Unlimited Unlimited
CSV exports Full Full Full

The only things that scale with price are event volume, retention, and the custom-event ceiling per project. Everything else — unlimited sites, full CSV exports — is identical across tiers.

Why site count doesn't decide your plan

The pricing page states it directly: "We do not charge you per domain. Our usage based buckets cover your entire portfolio. Track one site or fifty, it all counts toward the same limit."

That means a single 5,000-event bucket covers every property you own. If you run five small sites that each generate 900 events a month, you're at 4,500 total and still on Free. If one site alone pushes 6,000 events, you've outgrown Free regardless of how many other domains you have.

The practical consequence: consolidate your thinking. Add up events across all sites, workers, and backend systems before choosing a tier.

What counts as an event

Stealth Analytics is built around raw event ingestion, not just pageviews. The homepage describes sending telemetry "from your website, your background worker, your payment funnel, or that robotics project in your garage," and notes you can "bypass the browser completely and hit our edge workers directly" via a standard JSON POST request.

So your event count isn't just traffic. It includes:

  • Frontend pageviews from the 0.7 KB script
  • Backend system events from your server
  • Custom conversions and funnel steps
  • Any other POST payload you send to the edge endpoint

If you're tracking server-side database processes or payment funnel steps alongside web traffic, those all draw from the same bucket. A site with modest traffic but heavy backend instrumentation can burn through events faster than raw pageview counts suggest.

Matching your situation to a plan

Free — hobbyists and side projects. The page labels it "Perfect for hobbyists." Choose it if your combined monthly events stay under 5,000, you only need 30 days of history, and two custom events per project covers your tracking. The 30-day retention is the real constraint here: if you want to compare this month to six months ago, Free won't have the data.

Indie Hackers — projects with traction. At $14/mo you get 10x the events (50,000), unlimited retention, and 10 custom events per project. The jump to unlimited retention is the meaningful upgrade — it's what lets you keep historical baselines. Pick this if you've outgrown 5,000 events, need long-term data, or your custom-event definitions have grown past two per project.

Pro — scaling SaaS and ecommerce. $39/mo covers 250,000 events, unlimited retention, and 50 custom events per project. This is for portfolios where event volume is genuinely large — high-traffic sites, or products instrumenting many distinct conversion and backend events.

How to estimate before you commit

  1. Count events per site. For web traffic, estimate monthly pageviews. For backend events, count how often each tracked process fires per month.
  2. Add them all up. Remember every site, worker, and funnel counts toward one shared limit.
  3. Check your custom-event needs. Count how many distinct named events you want per project — the Free tier caps this at 2, Indie Hackers at 10, Pro at 50.
  4. Decide on retention. If you need history beyond 30 days, Free is out.
  5. Start on Free and upgrade when you cross a threshold. The page shows an "Upgrade" path, so you can begin at $0 and move up as volume grows.

Common sticking points

  • Assuming per-site pricing. The most common miscalculation is budgeting per domain. It's one pooled bucket — fifty sites cost the same as one at equal total volume.
  • Forgetting backend events. Server-side and funnel events share the same limit as pageviews. Teams that only count browser traffic often underestimate.
  • Overlooking the custom-event cap. Event volume and custom-event count are separate limits. You can be well under your event ceiling and still hit the per-project custom-event cap.
  • Treating 30-day retention as enough. If your reporting needs year-over-year or even quarter-over-quarter comparisons, the Free tier's 30-day window will force an upgrade regardless of volume.

If you're unsure, start on Free, watch your actual event consumption for a month, and let the real number — not a guess — tell you whether Indie Hackers or Pro is the right fit.

Website Overview

Several search or sharing settings need attention. Together they may make snippets, preview images or preferred URLs less consistent across platforms. An active inbound-mail setup with incomplete authentication may leave the domain more open to impersonation. Provider hosting alone does not close that gap.

Domain and Registration

Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain has about 1 years of registration history; its current configuration provides more context than age alone. The registrar is NameCheap, Inc., a widely used domain service provider. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

The observed email authentication setup is incomplete: DMARC is missing. Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Zoho Mail email service. No CNAME was found; the observed records resolve directly to addresses. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Google Trust Services cloud or CDN ecosystem. The certificate's total validity is about 90 days, consistent with a short renewal cycle.

HTTP and Browser Security

The response lacks these common security headers: HSTS, CSP, Permissions-Policy, clickjacking protection. CORS permits any origin to read this response. This is common for public resources; sensitive responses need narrower handling. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers.

Technology Stack Analysis

The public page identifies Cloudflare without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

No homepage meta description was detected, leaving snippet selection more dependent on page text. No homepage canonical URL was detected. If duplicate URLs exist, consolidation may be less explicit. No Open Graph metadata was detected, so social previews may depend on platform inference. The title has 58 characters, within a common display range. The observed directives allow indexing and link following.

Hosting and Email

DNSCloudflare
HostingCloudflare
EmailZoho Mail
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) Location unknown Inferred 104.21.58.122

Registration details

RDAP / WHOIS

RegistrarNameCheap, Inc.
Registered2025-03-13
Expires2027-03-13
Domain statusclient transfer prohibited
Nameservershunts.ns.cloudflare.com、ximena.ns.cloudflare.com
DNSSECunsigned

DNS records

DNS

TypeNameValueTTLPriority
Astealth.qleapventures.com104.21.58.122300—
Astealth.qleapventures.com172.67.159.141300—
AAAAstealth.qleapventures.com2606:4700:3032::6815:3a7a300—
AAAAstealth.qleapventures.com2606:4700:3035::ac43:9f8d300—
MXqleapventures.commx.zoho.com60010
MXqleapventures.commx2.zoho.com60020
MXqleapventures.commx3.zoho.com60050
NSqleapventures.comhunts.ns.cloudflare.com86400—
NSqleapventures.comximena.ns.cloudflare.com86400—
TXTqleapventures.comgoogle-site-verification=Gkf-aQ0L-pk-3W2zhGVvucNPJfO4wUgB2K0JrTtOvzs600—
TXTqleapventures.comv=spf1 include:spf.efwd.registrar-servers.com include:zohomail.com ~all600—
TXTqleapventures.comzoho-verification=zb68358955.zmverify.zoho.com600—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectstealth.qleapventures.com
IssuerGoogle Trust Services
Valid until2026-12-25T06:45 · Remaining when checked: 71 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html; charset=utf-8
cache-controlpublic, max-age=0, must-revalidate
servercloudflare
x-content-type-optionsnosniff
referrer-policystrict-origin-when-cross-origin
access-control-allow-origin*

Identified technologies

Cloudflare

Pages, Search and Sharing

Meta descriptionNot detected
Canonical URLNot detected
LanguageEnglish (default)
Twitter CardNot detected

Unknown

All bots 1 allowed · 0 disallowed
  • Allow/

User reviews (0)

  • No reviews yet.