@neil @hook I've been moving to #UmamiJS (https://umami.is/), which *claims* to be outside of things like GDPR, although it *does* run a little JS client-side.
The venerable #awstats (https://awstats.sourceforge.io/) is still the go-to for server-side only, logs-based analytics (with the consequential limitations therein)