Zero-PII behavioral analytics pixel with WooCommerce order sync. No cookies, no consent banner required.

sammartin

zoe7633

q3ahmed

Microsoft Clarity

How do you make your website great? Clarity can help you quickly see what's working on your site and where people get stuck. And it's free.

Harvv

Zero PII. No cookies. No consent banner required.
Harvv Analytics ships a lightweight (under 10 KB gzipped) behavioral tracker that captures how visitors interact with your pages — dead clicks, rage clicks, scroll depth, hover intent, JavaScript errors, engagement time — and syncs WooCommerce orders to your Harvv dashboard. It never reads cookies, never transmits names, emails, phone numbers, or addresses, and never stores personal data in your WordPress database.
Because the plugin transmits no personal data, it does not require a cookie-consent banner under GDPR, CCPA, or PECR. Your visitors see no pop-ups; your checkout flows are not slowed; your compliance posture is simpler.
What this plugin does
<ul>
<li>Enqueues a vanilla-JS tracker (no jQuery, no external scripts) on your frontend.</li>
<li>Captures behavioral signals: scroll depth, click targets, dead/rage clicks, hover intent, page errors, engagement time.</li>
<li>Syncs WooCommerce orders on <code>woocommerce_payment_complete</code> (never blocks checkout).</li>
<li>Passes customer identity as a non-reversible hash derived from the site’s own salts — the raw email never leaves WordPress.</li>
<li>Works with WooCommerce HPOS (Custom Order Tables) out of the box.</li>
<li>Multisite-aware: one network API key, per-subsite Site IDs, per-subsite admin overrides.</li>
</ul>
What this plugin does NOT do
<ul>
<li>Does not set or read cookies.</li>
<li>Does not transmit email addresses, names, phone numbers, postal addresses, or IP addresses.</li>
<li>Does not load any JavaScript from external URLs — the tracker ships bundled with the plugin.</li>
<li>Does not create custom database tables on your WordPress site.</li>
<li>Does not record session replays or keystrokes.</li>
</ul>
Why you might want this
If you run a WooCommerce store and want to see the dead clicks, rage clicks, and broken checkout paths your visitors hit — without making them click through a GDPR banner — Harvv is designed for you. The behavioral signals are sent to your Harvv dashboard where they become a prioritized list of UX fixes with plain-English explanations.
<h3>External Services</h3>
This plugin relies on the Harvv analytics service (operated by Olivas Venture Capital LLC d/b/a Harvv) to store and analyze behavioral events. Data is transmitted to the following endpoint:
<ul>
<li>Endpoint: <code>https://harvv.com/v1/track</code> (overridable via the <code>HARVV_API_BASE</code> constant in <code>wp-config.php</code> for staging or self-hosted receivers)</li>
<li>When: Events are sent continuously while a visitor is on your site (batched every 5 seconds or on tab close, via <code>navigator.sendBeacon</code> when available). WooCommerce order events are sent once, on <code>woocommerce_payment_complete</code>.</li>
<li>What is sent (behavioral events): Session ID (random, in-memory, regenerated per browser tab — never a stable cookie), visitor ID (sessionStorage-scoped, cleared when the tab closes), event type, page path (no query string with sensitive params), referrer, viewport dimensions, CSS selectors of clicked/hovered elements (tag + id + first class name only, no text content), JavaScript error messages, engagement timestamps.</li>
<li>What is sent (WooCommerce events): Order ID, order status, order total, line-item product IDs and quantities, coupon codes, payment method name, shipping method name, non-reversible customer hash (derived via <code>wp_hash()</code> using your WordPress salts).</li>
<li>What is NOT sent: Names, email addresses, phone numbers, postal addresses, IP addresses, raw user IDs, cookies, session replays, keystroke data, form values.</li>
<li>Registration endpoint: <code>https://harvv.com/v1/sites/register</code> — called once per site (or subsite on Multisite) to obtain a Site ID. Transmits only the site URL, site name, WordPress version, PHP version, and plugin version.</li>
<li>Pixel script (canonical, 1.0.3+): <code>https://harvv.com/px/<your_site_key>/pixel.js</code> — enqueued on the frontend via <code>wp_enqueue_script</code>. This is the same canonical pixel served to every Harvv-installed site regardless of install channel (WP plugin, Laravel package, direct script-tag, Shopify integration). Loaded once per page, ~15.6 KB gzipped. The pixel itself transmits only the behavioral signals described above. Sites that need an offline-capable / self-hosted pixel can override the URL via <code>define( 'HARVV_PIXEL_URL', '...' );</code> in <code>wp-config.php</code>, or via the <code>harvv_pixel_url</code> filter.</li>
<li>Connect flow: <code>https://harvv.com/connect/wordpress</code> — opened in a new browser tab when an admin clicks “Connect to Harvv” in the plugin settings. Harvv’s hosted signup page handles authentication; it then POSTs the API key back to your site’s own REST endpoint (<code>/wp-json/harvv/v1/connect</code>) with a nonce you generated locally.</li>
<li>Stack-inventory endpoint: <code>https://harvv.com/v1/inventory</code> — called once at site registration and refreshed weekly by WP-Cron. Sends a site-context snapshot: installed plugin slugs + versions, the active theme slug + version, WordPress version, PHP version, MySQL/MariaDB version, server software string (e.g. “nginx/1.24.0”), site language code, timezone, permalink-structure boolean, WP_DEBUG boolean, memory limit, max execution time, object cache backend, WP-Cron disabled boolean, multisite blog count, total user count (number only — no usernames, no emails, no per-role breakdown), aggregate post and page counts, custom post type slugs + publish counts, and (when WooCommerce is active) WooCommerce version, store currency, base country, and product count. No visitor data, no usernames, no email addresses, no post content, no comments, no IP addresses, no PII of any kind. Powers plugin-attribution and platform-specific UX diagnosis on the Harvv dashboard. Admins can preview the exact payload at Settings → Harvv Analytics → Preview the exact diagnostic snapshot we would send. Disabled by clearing the Settings → Harvv Analytics → Preferences → Share stack info checkbox, by adding <code>define( 'HARVV_SHARE_INVENTORY', false );</code> to <code>wp-config.php</code>, or by returning <code>false</code> from the <code>harvv_share_inventory</code> filter.</li>
<li>Harvv terms of service: <a href="https://harvv.com/terms" rel="nofollow ugc">https://harvv.com/terms</a></li>
<li>Harvv privacy policy: <a href="https://harvv.com/privacy" rel="nofollow ugc">https://harvv.com/privacy</a></li>
</ul>
By activating this plugin and supplying an API key, you consent to the transmission of the data described above to Harvv. You can disconnect at any time from the plugin’s settings page; uninstalling removes all plugin options from your database.

Alternatives to Harvv Analytics

Top alternatives