SiteStats | Cookie-free Analytics for WordPress

SiteStats | Cookie-free, Privacy-first Analytics for WordPress

SiteStats answers the questions you ask Google Analytics for, without the cookie banner. A 1 KB first-party script (or an import of your server logs) counts visitors with a daily hash that nobody can reverse, and the plugin turns it into pages, sources, campaigns, a countries map, devices, goals, funnels and revenue per source. Everything stays in your own database.

Key Features

• A 1 KB script with no cookies, no local storage and no fingerprinting; the visitor id is a daily salted hash that cannot be reversed
• Or import nginx / Apache logs (combined format, .gz too) in chunks, with the same visitor and session logic
• Dashboard: visitors, views, sessions, bounce rate, time per session, live visitors, chart by hour / day / month, comparison with the previous period
• Pages: views, visitors, entries, exits, time on page, scroll depth, 404s and errors, authors, top posts
• Sources: direct / search / social / referral / campaign channels, referrers, UTM source, medium, campaign, term, content
• Audience: a countries map, devices, browsers, operating systems, screen sizes; geolocation from a local database (one-click DB-IP Lite install or your GeoLite2 file)
• Goals: page, event, outbound click, form, download, scroll depth or purchase; conversion rates and values; funnels that count sessions step by step
• Events from sitestats("name", {props}, value) or data-st-event, plus automatic outbound / download / form events
• Commerce: WooCommerce orders (or any shop through one action) attributed to the visitor session and its source; revenue, orders, conversion per source, campaign, country, product
• Per-post stats in the editor sidebar, a Views column in the posts list, a dashboard widget
• Weekly email report (and a PushPress notification), spike alerts by email, Slack or webhook, a public stats page with optional password
• CSV export of pageviews, events and sales; retention with daily totals kept beyond it

How Privacy Works

1. The IP is anonymised (last octet dropped) and hashed with a random salt that changes every day, together with the user agent
2. The hash identifies a visitor for one day; the salt is thrown away, so nothing links days or identifies a person
3. No cookies, no local storage, no third party: the script talks only to your site
4. Geolocation runs against a local database; nothing is sent anywhere

Shortcodes & Hooks

• sitestats("signup", {plan: "pro"}, 29) and data-st-event="cta" for events
• do_action("sitestats_sale", …) for any shop; WooCommerce is automatic
• Public stats page at ?sitestats=public

Installation

1. Download the zip from your Library
2. In wp-admin go to Plugins › Add New › Upload Plugin, choose the zip and activate it
3. A new menu entry appears in the admin sidebar; open it
4. Open the site in a private window: the first pageview appears on the dashboard (administrators are not tracked by default)
5. SiteStats › Settings › Geolocation: install the free database for countries

Requirements

• WordPress 6.0 or newer (tested up to 7.0)
• PHP 8.0 or newer
• For countries: a GeoLite2 / DB-IP .mmdb file (one-click install of the free DB-IP City Lite)
• For revenue: WooCommerce, CodeSell, or one action call from your shop

What You Get

• SiteStats 1.0.0 for WordPress (sitestats-1.0.0.zip)
• Full, readable PHP and JavaScript source, no obfuscation
• Updates for the term of your licence

Works With

Part of the Alpha WordPress line, built with one admin kit: CodeSell, SecureShield, PushPress, MailFlow, AlphaLogin, FolderPress.

The screenshots show the plugin on our demo site with sample data.