GDPR-Compliant Web Analytics for Associations: Matomo & Plausible under Virtualmin without Cookie Banners

Learn how to set up Matomo or Plausible under Virtualmin in a privacy-friendly way – without cookie banners and with IP anonymization. Step-by-step guide for association websites.

virtualmingdprweb analyticsmatomoplausible

Why associations need privacy-friendly web analytics

Association websites are often small, but they still must comply with the GDPR. Conventional analytics tools like Google Analytics set cookies and transfer personal data to the USA – that is not permitted without consent. The solution: privacy-friendly alternatives such as Matomo or Plausible, which do not require a cookie banner and anonymize the IP address. In this article, we show you how to set up such tools under Virtualmin – ideal for association websites hosted on web hosting or a virtual server.

Legal basis: GDPR and cookie banners

The GDPR requires informed consent for the use of cookies. If you use an analytics tool that does not set cookies and does not store personal data, the obligation to use a cookie banner no longer applies. Matomo and Plausible offer exactly that if you configure them correctly. Important: IP anonymization must be enabled, and no data may be transferred to third parties outside the EU. With a server in Germany (e.g., at DezHost), you are on the safe side.

Preparation: Virtualmin and system requirements

Before you start, make sure your server meets the following requirements:

  • Virtualmin is installed and ready to use.
  • A domain or subdomain for the analytics tool (e.g., analytics.yourassociation.com).
  • PHP 7.4 or higher (for Matomo) or Docker (for Plausible).
  • A MySQL database for Matomo.
  • SSL certificate (Let’s Encrypt) for secure connections.

For Plausible, you need a virtual server with at least 2 GB RAM because it is based on Docker. Matomo also runs on simple web hosting.

Install Matomo under Virtualmin and configure it in a GDPR-compliant way

1. Create a subdomain

In Virtualmin, create a new virtual domain (e.g., analytics.yourassociation.com) and enable SSL.

2. Create a database

Create a MySQL database for Matomo. Note the username and password.

3. Download and unzip Matomo

Download the latest Matomo version and unzip it into the web directory of the subdomain.

4. Complete the installation

Open the subdomain in your browser and follow the installation wizard. Enter the database details and create an admin account.

5. Configure GDPR settings

After installation, go to Administration > Privacy and apply the following settings:

  • IP anonymization: Enable “Anonymize IP addresses” (remove the last 2 bytes).
  • Disable cookies: Under “Cookies,” select “Disable cookies” – Matomo will then not use cookies.
  • Data deletion: Set automatic deletion of raw data after 90 days.
  • Opt-out: Offer an opt-out option for visitors.

With these settings, Matomo is GDPR-compliant and you do not need a cookie banner.

Install Plausible under Virtualmin and configure it in a GDPR-compliant way

1. Install Docker

Plausible runs in Docker containers. Install Docker on your virtual server.

2. Start the Plausible container

Use the official Docker Compose file from Plausible. Adjust the environment variables (domain, database, secret key).

3. Set up a reverse proxy

In Virtualmin, configure a reverse proxy that forwards the subdomain to the Plausible container.

4. GDPR settings

Plausible is privacy-friendly by design: it does not set cookies, anonymizes IP addresses, and does not store personal data. You only need to ensure that the data remains in the EU (server location).

Integrate the tracking code

Add the tracking code to the header of your association website. For Matomo, it is a JavaScript snippet; for Plausible, a simple script tag. Make sure the code is included on all pages.

Legal notes for associations

Add a section about web analytics to your privacy policy. Explain that no cookies are set, IP addresses are anonymized, and no data is shared with third parties. For Matomo, you can also mention the opt-out function. This way, you are legally protected.

Conclusion: privacy and user-friendliness combined

With Matomo or Plausible under Virtualmin, you operate GDPR-compliant web analytics that does not require a cookie banner. This saves your visitors from hassle and strengthens trust in your association. Take the opportunity and host your analytics on a virtual server or web hosting with DezHost – for maximum control and privacy.