umami, pirsch analytics both are open source so you can host yourselves or if you don't want to host you can use their services.If you don't want to break the law than "who" is not an option unless you explicitly take permission from the user. All you can have is anonymized data.

I’m using plausible.io for my customers in Europe. I wish there were more options available but GDPR is very limiting.

I am trying to build some good ones, check my profile here on HN.

We use Matomo