You could use Piwik, it's Open Source and you can self-host it. http://piwik.org/

Shameless plug: my web-analytics-as-a-couchapp https://www.smileupps.com/store/apps/microanalytics

Also vulnerable, but at least there are so few users that no one would bother to fake its events.

piwik? https://piwik.org/