umami, pirsch analytics both are open source so you can host yourselves or if you don't want to host you can use their services.If you don't want to break the law than "who" is not an option unless you explicitly take permission from the user. All you can have is anonymized data.