Your product is live, but sign-ups alone cannot tell you whether users get value from it. This guide shows how to choose a small set of defined measures, record them cleanly, read them without overstating them, and act on them.
Product analytics answers questions about what users do: where they start, whether they reach value, where recorded completion falls, and whether they come back. Its answers are only as good as the questions, the definitions, and the events recorded.
Start before any tool is chosen: write down the actions that suggest a user has received value, and the steps leading to them. Products often have several important workflows; begin with the most important.
Start with the GOV.UK Service Manual approach: begin with the service's purpose and the needs it meets, derive a small number of benefits, and only then decide what to measure. The Manual warns against relying on digital analytics alone, and recommends combining measures with user research: numbers show where recorded completion falls, but not why.
Work through these questions first:
Keep the answers to one page. Disagreement about the core action is settled through research and discussion, not via a dashboard.
The familiar split — 'web analytics' for page views, 'product analytics' for the rest — does not hold. Google Analytics 4 is event-based, and Google's guidance uses funnel exploration to follow a form step by step, including drop-off between steps. Product analytics platforms offer their own event models and retention views; the same signed-in workflow can often be recorded in either.
What differs is the question and instrumentation: events recorded, how users and accounts are identified, and whether analysis follows individual journeys or aggregate patterns. Choose tools by analysis needs, usability, privacy, integration effort and cost.
This is a suggested starting set, not one that suits every product. For each rate, state the counting unit (user, or account in business-to-business software), the eligible denominator, the window, and the qualifying action. Report counts beside rates; distrust small or incomplete cohorts.
These measures describe product use; AI output quality is separate (see our guide to measuring AI performance after launch). Add measures only for real questions; one without an immediate decision may be context, not a priority.
Many teams choose one headline number — often called a north star metric — capturing the core value delivered. Used well, it aligns the team; used carelessly, it trains them to optimise for the number instead of the customer. A recommended way to test a candidate:
Let it change as the product matures, explaining why and running old and new side by side; treat it as a focus for discussion, not proof.
Poorly defined tracking produces confident arguments from unreliable data, so agree a tracking plan before release. Mixpanel's documentation recommends object-verb snake_case naming, such as project_created — one convention, not a universal rule: respect prescribed platform names and parameters, and be consistent.
A workable plan for one feature covers:
Keep the plan where it will be maintained — inside the feature specification is one approach; a maintained register can serve equally. Before release, quality-check in a test environment:
For an existing product, record pre-change values: before-and-after comparison aids judgement, but alone does not establish causation. At a first launch, a comparable real-user baseline may not exist — say so. Staging and team activity is not customer evidence.
Numbers mislead without context. Averages hide mix changes: if casual users leave, average session length can rise while the product shrinks. Cumulative totals can conceal recent deterioration inside a still-rising total, although a slowing growth rate or plateau can still be informative. One good week proves little without a baseline and a trend.
Three habits help: segment before acting on an average (new versus returning users; device or plan where behaviour plausibly differs); read cohorts, not just totals; and pair numbers with another source — support requests, observation, a short conversation — before acting on one measure alone.
A hypothetical illustration, with no real company implied: after a redesign, a scheduling tool's headline number rises, cohort retention is flat, and rescheduling support requests grow. That establishes neither that more users reached a frustrating step nor that the redesign caused anything; who signs up, seasonality, pricing, or tracking could each contribute. It justifies investigation, not a conclusion.
UK PECR (Privacy and Electronic Communications Regulations) applies where analytics stores or accesses information on devices; UK GDPR also applies where personal data is processed. The ICO's guidance on the PECR rules states the starting position: tell users about the technologies used, and obtain prior consent to the UK GDPR standard unless an exception applies; consent means a clear affirmative action — not continued browsing or pre-ticked boxes.
The ICO's guidance on the exceptions sets out a narrow statistical-purposes exception: the sole purpose must be collecting statistics about how the service is used, to improve it. Give users clear, comprehensive information and a simple, free means of objecting; unlike consent, required beforehand for non-exempt analytics, the exception works through information plus no objection. Outputs must be aggregate and non-identifying, and individual-level information must not be kept beyond aggregation.
The exception therefore limits much of the analytics above: it concerns how a service is used, not who uses it, and does not cover individual tracking, histories, profiling or cross-service tracking; aggregate dashboards do not exempt them. For non-exempt device storage or access, obtain prior consent; a cohort report alone does not determine exemption. UK GDPR duties still apply where personal data is processed, and pseudonymous identifiers are not automatically anonymous. This article is general information, not legal advice.
Recommendations: collect only what a named decision needs; keep personal details out of event properties without a governed reason; make refusal easy. Duties differ by jurisdiction.
A short, regular review is recommended, not a formula: it keeps measures tied to decisions, but guarantees none. It sits within the routine in our guide to software maintenance after launch. Keep it short:
If your product is live, start here; if you are still scoping a first version, our guide to scoping a first version covers that stage:
It depends on the question and the instrumentation, not on the tool's label. Google Analytics 4 records events and offers funnel exploration, so it can follow a signed-in workflow with the right events in place; a dedicated platform may offer deeper user-level analysis. Many teams manage with the tool they have.
Fewer than feels comfortable: the events describing the core journey and the starting measures — a handful, not dozens, each answering a real question. Adding events is easy; restoring trust in a polluted set is slow.
Check both kinds of explanation: instrumentation (trigger, definition, duplicates, test traffic — a common cause is firing on page load, not completion) and behaviour (new user mix, seasonality, a change elsewhere). If a definition changed in a rebuild, mark the break.
Principal sources, read on 3 November 2026 (Asia/Karachi). The ICO exceptions page was retrieved as indexed text from a 29 October 2026 crawl, not a fresh live read:
GOV.UK Service Manual — How to set performance metrics for your service (official guidance, 2017).
GOV.UK Service Manual — Measuring the success of your service (official guidance, 2018).
Google Analytics Help — Recommended events (official documentation).
Google Analytics Help — How to report on your lead generation form (official documentation on funnel exploration).
Mixpanel Docs — Events (official documentation; updated 27 October 2026).
Vestd — North Star metrics that don't mislead (company blog, 2025).
ICO — What are the PECR rules? (official guidance).
ICO — What are the exceptions? (official guidance; indexed text, crawl dated 29 October 2026).
Supplementary commentary only: law-firm summaries by Hunton Andrews Kurth and Osborne Clarke, retained for context, not as core legal evidence.
Start here if your numbers do not yet show where users reach value. iCodeLTD's SaaS development service covers architecture, account management, backend development, testing, and ongoing iteration for subscription products. The project cost calculator gives an indicative cost and timeline range from scope and complexity; the contact page is the route to discuss a live product.
SaaS Development
Something Is Wrong With Your SaaS. What Do You Do First? A Founder's Guide to Security Incident Response
A security incident in your SaaS product is a founder decision before it is a technical task. Learn the first-hour actions, severity triage, notification clocks, customer communication and safe recovery.
Read moreSaaS Development
How Should Your Customers Sign In? A Founder's Guide to Login and Account Choices for SaaS and Web Apps
Passwords, second factors, passkeys, single sign-on, sessions and recovery: the login decisions founders should settle before the build, and what each choice costs.
Read moreAI Solutions
Is Your Business Data Ready for AI? A Founder's Guide to Preparing Data Before an AI Project
Before you choose an AI tool or start a build, check whether your data can be found, understood, trusted, and lawfully used for the decision in hand.
Read moreReady to review scope for AI, SaaS, web, mobile, or automation work?