Google Analytics in Iran: what you risk and how to protect your data

Google Analytics in Iran is usable on some days and for some teams, but it is not something an Iranian business can rely on. Google publishes no GA4-specific statement about Iran, yet its own sanctions pages exclude Iran from Google Ads and from its publisher products, and Google Analytics was blocked for Iranian users in 2016. The practical risk is depending on a dashboard reached through a VPN, inside an account you do not control, with no second copy of your numbers. The fix is not to rip GA4 out; it is to back up your history and add an analytics tool you can always reach.

Sanctions exposure (in analytics) is the chance that a tool you depend on becomes unreachable, restricted or closed to you because its vendor must follow sanctions rules, such as those of the US Treasury’s Office of Foreign Assets Control (OFAC), that apply to your country.

Can you use Google Analytics in Iran?

You can install the GA4 tag on an Iranian website, and many Iranian sites have one. Whether you can depend on it is a different question, and Google’s own documents point toward no. Nothing on Google’s help pages promises GA4 service to businesses in Iran, and several pages say the opposite for neighbouring products.

Here is what the primary sources actually say:

Two cautions keep this honest. The 2016 and 2019 reports describe those years, and access has changed more than once since. And Google does not publish an Iran page for Google Analytics specifically, so nobody outside Google can tell you today’s exact rule. That gap is the reason to treat GA4 in Iran as a risk to manage, not a settled fact in either direction.

Why does Google restrict its products in Iran?

Google is a US company, so it has to follow US sanctions. Its publisher-policy page says so directly: Google “must comply with sanctions and export controls” maintained by OFAC and the US Commerce Department. Iran is on the list of countries those rules cover.

There is an exemption that often confuses people. OFAC’s General License D-2, issued on September 23, 2022, allows US companies to provide Iranians with services “incident to the exchange of communications over the Internet”, and it names examples: messaging, email, social networking, web browsing, video conferencing, web maps and similar tools. That is why Gmail or Google Maps may work while business tools do not. Web analytics is not on that list. In 2016, NIAC put the distinction plainly: services like Google Analytics were “not allowed in Iran because they are for commercial use.”

Whether a particular use falls inside or outside a license is a legal question, and this article is not legal advice. For running a marketing team, the useful conclusion is simpler: the exemption that keeps consumer Google services reachable was not written for the analytics stack your business runs on.

What exactly could go wrong if GA4 is your only analytics tool?

Five things, and only one of them is a dramatic ban. The others are quieter and more likely.

The last row is worth pausing on. Outside Iran, the strongest argument for GA4 is that it plugs straight into Google Ads. An Iranian shop selling to Iranian customers usually advertises on Instagram, Telegram channels, local ad networks and SMS instead. For that shop, GA4 is a free reporting tool with access risk attached, not the hub of an ad ecosystem.

How exposed is your site? A five-question self-check

Answer yes or no to each question. Every “yes” adds one point.

1. Is GA4 the only place your traffic and conversion numbers are recorded?
2. Does anyone on the team need a VPN to open the GA4 interface?
3. Is the Google account that owns the property registered to a person or business in Iran?
4. Have you never exported the GA4 reports your team uses most?
5. Do weekly budget or campaign decisions depend on numbers that only GA4 has?

A score of 0–1 means GA4 is one source among several and you are in good shape. A score of 2–3 means a single outage would slow you down for days; start the plan below this month. A score of 4–5 means your marketing decisions rest on one account you may lose without notice, and the backup steps below are urgent.

A worked example (hypothetical). Say an online store in Isfahan gets 60,000 sessions a month, spends 80 million toman a month on Instagram and Telegram ads, and checks GA4 every Saturday to move budget between channels. Only GA4 records conversions (1 point), the team opens it through a VPN (1 point), the property sits in the founder’s personal Google account (1 point), nobody has exported reports (1 point), and budget moves depend on it (1 point). That is 5 out of 5. If access disappeared for two weeks, the store would make about 2 × (80 ÷ 4.3) ≈ 37 million toman of ad decisions blind, since a month is about 4.3 weeks. That number is what the backup plan is protecting.

What is a low-risk plan for Iranian sites still on GA4?

Run a second analytics tool next to GA4, then decide later which one leads. Nothing in this plan breaks your current reports, and every step is reversible.

1. List the reports you really use. Usually it is five to ten: sessions by channel, conversions by campaign, top landing pages, revenue by product, and a funnel or two.
2. Export that history now. Download each of those reports over the widest date range you have, and repeat monthly while the plan runs. The Google Analytics alternative guide walks through what GA4 lets you export and what you cannot carry over.
3. Write down your definitions. Conversion events, channel rules and the date of every tagging change. These notes make an old GA4 number comparable with a new one.
4. Install a second tag next to GA4 on every page, including the thank-you page. Pick a tool your whole team can open without a VPN.
5. Use identical UTM tags in every ad so both tools receive the same campaign data. A shared naming convention matters more than the tool; the UTM parameters guide has one that holds up.
6. Compare weekly for four to six weeks. Look at ratios such as conversion rate by channel, not raw counts, which never match exactly between two tools.
7. Move decisions to the tool you can always reach. Keep GA4 as a secondary view if it is still useful.

If you are setting up tracking from scratch at the same time, the website tracking guide lists the events and conversions to define before the parallel run starts, so both tools measure the same things from day one.

What a healthy comparison looks like

Say in week three GA4 shows 9,200 sessions from Instagram and the second tool shows 9,800. The gap is 600 sessions, and 600 ÷ 9,200 ≈ 6.5%. Purchases from Instagram are 184 in GA4 and 196 in the second tool, so the conversion rate is 184 ÷ 9,200 = 2.0% in one and 196 ÷ 9,800 = 2.0% in the other. The volumes differ a little, as they always do between tools, but the ratio that drives budget decisions agrees. That is the signal you can switch your weekly reporting without losing comparability. If the conversion rates had split, say 2.0% against 3.0%, look first for a page where only one of the two tags is installed.

Self-hosted or hosted in Iran: which kind of alternative removes the risk?

Both remove the sanctions exposure of a US vendor. They differ in who does the work.

A self-hosted tool is the right choice if you have a strict rule that data must sit on your own servers and an engineer who will patch and scale them. If you do not, the hidden cost is the engineer’s time, and an outage becomes your problem at 2 a.m.

Where does AdPix fit for Iranian websites?

AdPix is a web analytics platform that replaces Google Analytics 4: realtime, acquisition, engagement, conversion and e-commerce reports, plus attribution, lift testing and marketing mix modelling, with no data sampling and a free plan. For an Iranian business, the reasons are concrete:

• It opens from inside Iran without a VPN, because it is hosted on infrastructure inside Iran, and your data stays in Iran.
• You can export your data at any time, so you never repeat the “all my history is in one account” problem.
• It runs alongside Google Analytics without interfering, which is exactly what the parallel run above needs. The lightweight tag installs by adding the AdPix code or importing a GTM container, in under five minutes.
• The Free plan costs nothing and needs no card: 100,000 events a month, 30 days of raw data and 13 months of aggregate data, and two users. That is enough for the four-to-six-week comparison on most small sites.
• Funnels, realtime and acquisition by UTM campaign are on every plan. Online sales and revenue reports, consent management, invalid-traffic detection, lift measurement and marketing mix modelling start on the Starter plan (499,000 toman a month). See the pricing page for the full limits and the AdPix features overview for how each feature works.

Start with the self-check score. If it came out at 2 or higher, export your top GA4 reports this week and put a second tag on the site before the next campaign goes live.

Measure your site with AdPix today

The free plan covers 100,000 events a month, no credit card. Setup takes under five minutes.

Start freeSee pricing