SupportFromRichard

SFR Analytics is a self-hosted analytics plugin for WordPress. All visitor data is stored in your own database — nothing is sent to third-party services. No cookies, no external scripts, no tracking pixels.
Get a clear picture of your site’s traffic without compromising your visitors’ privacy.
Need a central multi-site dashboard? Use the free <a href="https://wordpress.org/plugins/sfr-analytics-hub/" rel="ugc">SFR Analytics Hub</a> plugin to aggregate analytics from multiple WordPress sites.
<h4>Dashboard at a Glance</h4>
<ul>
<li>Views, Visitors, Sessions — core metrics with period-over-period comparison</li>
<li>Bounce Rate & Pages per Session — engagement indicators</li>
<li>Traffic Over Time — interactive line chart with date range presets</li>
<li>Top Content — your most viewed posts and pages</li>
<li>Traffic Sources — where your visitors are coming from</li>
<li>Top Referring Sites — individual domains sending you traffic</li>
<li>Entry & Exit Pages — first and last pages in each visit</li>
<li>Device Types — desktop, mobile and tablet breakdown</li>
<li>Browsers & Operating Systems — which browsers and OS your visitors use</li>
<li>Geographic Distribution — visitor countries (only available if using a CDN like Cloudflare that provides country headers; all other tracking works without a CDN)</li>
<li>Campaign Performance — UTM campaign results with source/medium drill-down</li>
<li>Online Now — on-demand live visitor count with optional online-only auto-refresh in the dashboard</li>
</ul>
All dashboard sections are collapsible — show only what matters to you.
<h4>Campaign Manager & UTM Link Builder</h4>
Plan and track marketing campaigns without leaving WordPress:
<ul>
<li>Create campaigns with notes and track their performance over time</li>
<li>Build UTM links with a visual tool — pick a page, choose source/medium/campaign, and get a ready-to-use URL</li>
<li>Smart page picker — search across all your content types with post type and category filtering</li>
<li>Preset sources and mediums — common options (Facebook, Google, newsletter, etc.) with clear descriptions</li>
<li>Save generated links for quick reference and reuse</li>
<li>Custom sources and mediums — add your own and they’re saved for next time</li>
<li>Auto-lowercase campaign names to prevent data fragmentation</li>
</ul>
<h4>Smart Bot Detection</h4>
Not all traffic is human. SFR Analytics filters out noise automatically:
<ul>
<li>200+ known bot patterns — search engines, AI crawlers, SEO tools, monitoring bots, headless browsers, security scanners and more</li>
<li>JavaScript verification — a lightweight inline script confirms real browser execution, so bots that don’t run JavaScript are never counted</li>
<li>Missing header detection — flags requests without User-Agent or Accept-Language headers</li>
<li>Filterable patterns — add your own via the <code>sfran_bot_patterns</code> filter</li>
</ul>
The dashboard shows you exactly how much traffic was filtered: total requests vs verified human visits.
<h4>Privacy First</h4>
<ul>
<li>No cookies — visitor identification uses anonymous hashed fingerprints</li>
<li>No PII stored — IP addresses are hashed (SHA-256), never stored in plain text</li>
<li>Optional IP anonymisation — strip the last octet before hashing</li>
<li>Do Not Track support — respects the browser DNT header when enabled</li>
<li>Local storage only — your data never leaves your server</li>
<li>Configurable retention — automatically delete data after 30 to 3,650 days</li>
<li>GDPR-ready privacy text — copy-paste paragraph for your privacy policy</li>
</ul>
<h4>IP & Country Filtering</h4>
<ul>
<li>Exclude specific IP addresses or CIDR ranges (e.g. <code>192.168.1.0/24</code>)</li>
<li>One-click “Ignore My IP” button</li>
<li>Exclude entire countries by country code</li>
<li>Exclude logged-in users by role (administrators, editors, etc.)</li>
</ul>
<h4>REST API</h4>
A full set of authenticated REST API endpoints lets you access your analytics data programmatically:
<ul>
<li><code>/sfran/v1/summary</code> — overview stats with optional comparison</li>
<li><code>/sfran/v1/top-content</code> — most viewed content with pagination</li>
<li><code>/sfran/v1/traffic-sources</code> — referrer breakdown</li>
<li><code>/sfran/v1/time-series</code> — daily views/visitors/sessions</li>
<li><code>/sfran/v1/campaigns</code> — campaign performance</li>
<li><code>/sfran/v1/entry-pages</code> and <code>/sfran/v1/exit-pages</code></li>
<li><code>/sfran/v1/referrers</code> — top referring domains</li>
<li><code>/sfran/v1/devices</code>, <code>/sfran/v1/browsers</code>, <code>/sfran/v1/geographic</code></li>
<li><code>/sfran/v1/online-now</code> — current active visitor count for the last N minutes (default 5)</li>
</ul>
All endpoints require authentication (WordPress Application Passwords or other REST API auth) and the <code>manage_options</code> capability. Use these to build custom dashboards, export data, or integrate with other tools.
<h4>Performance</h4>
<ul>
<li>Batch processing — pageviews are buffered and written in batches, reducing database load</li>
<li>Indexed tables — optimised queries for fast dashboard rendering</li>
<li>Lightweight frontend — a single inline verification script, no external files loaded for visitors</li>
<li>No impact on page speed — tracking uses <code>navigator.sendBeacon</code> (non-blocking)</li>
</ul>
<h4>Works with SFR Analytics Hub</h4>
SFR Analytics collects data on each individual site.
For cross-site reporting, install the free <a href="https://wordpress.org/plugins/sfr-analytics-hub/" rel="ugc">SFR Analytics Hub</a> on your main site.
With SFR Analytics Hub, you can also view live online visitors across all connected sites from one central dashboard.
The WordPress.org Hub edition supports up to 3 connected sites.
Need more than 3 sites with the same workflow? See <a href="https://supportfromrichard.co.uk/sfr-analytics/" rel="nofollow ugc">SFR Analytics Hub Pro</a>.

SFR Analytics

Lightweight, privacy-focused WordPress analytics. Track pageviews, visitors, campaigns and more — all data stored locally in your own database.

jinaldesai

FlareStats brings your CloudFlare web analytics data directly into the WordPress admin. No third-party tracking services, no cookies — just privacy-preserving analytics from Cloudflare.
<h4>Features</h4>
<ul>
<li>Dashboard Widget — A compact summary widget on the WordPress Dashboard.</li>
<li>Full Analytics Screen — Dedicated admin page with a 7-day daily chart, top 5 pages, and top 3 countries.</li>
<li>Last 7 Days — Data always covers the rolling last 7 days.</li>
<li>Cloudflare GraphQL API — Connects to the Cloudflare GraphQL Analytics API using your API Token.</li>
<li>Lightweight & Dependency-Free — No external JavaScript frameworks; charts are CSS-based.</li>
<li>Caching — API responses cached via WordPress transients to minimise API calls.</li>
</ul>
<h4>Requirements</h4>
<ul>
<li>A <a href="https://cloudflare.com" rel="nofollow ugc">Cloudflare</a> account with Web Analytics enabled for your site.</li>
<li>A Cloudflare API Token with Account Analytics: Read permission.</li>
<li>Your Cloudflare Account ID.</li>
<li>Your FlareStats Site Tag (optional but recommended for multi-site accounts).</li>
</ul>
<h4>Configuration</h4>
<ol>
<li>In your Cloudflare dashboard go to My Profile → API Tokens and create a token with Account Analytics: Read permission scoped to your account.</li>
<li>Note your Account ID (visible in the Cloudflare dashboard right-hand sidebar).</li>
<li>Go to Analytics & Logs → Web Analytics, select your site, and copy the Site Tag from the site settings (optional).</li>
<li>In WordPress go to FlareStats → Settings and enter your credentials.</li>
</ol>
<h4>Privacy / Tracking Disclosure</h4>
FlareStats displays analytics data inside WordPress by requesting reports from Cloudflare Web Analytics.
What this plugin sends to external services
<ul>
<li>This plugin sends authenticated requests from your WordPress site to the Cloudflare GraphQL API (<code>api.cloudflare.com</code>) using your configured API token, account ID, and site tag (if provided).</li>
<li>Request parameters include reporting date ranges and query fields needed to fetch analytics metrics.</li>
</ul>
What this plugin receives
<ul>
<li>Aggregated analytics data such as pageviews, visits, top pages, top countries, browser/device, and referrer/source metrics.</li>
<li>This plugin displays those metrics in the WordPress admin dashboard and analytics screens.</li>
</ul>
What this plugin stores in WordPress
<ul>
<li>Plugin settings in <code>wp_options</code> (for example API token, account ID, site tag, cache duration).</li>
<li>Cached analytics responses in WordPress transients to reduce API calls.</li>
</ul>
Personal data handling
<ul>
<li>This plugin does not create its own visitor tracking cookies.</li>
<li>Visitor analytics collection is performed by Cloudflare Web Analytics on your site.</li>
<li>This plugin does not add separate per-visitor profile records in WordPress for analytics.</li>
</ul>
Data retention / access
<ul>
<li>Cached analytics data is temporary and expires according to the configured cache duration.</li>
<li>Plugin settings and analytics screens are only accessible to users with appropriate admin capabilities (for example <code>manage_options</code>).</li>
</ul>
Third-party policies
<ul>
<li>Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/</li>
<li>Cloudflare Terms: https://www.cloudflare.com/website-terms/</li>
</ul>
Site owners are responsible for ensuring their site’s public privacy policy accurately describes how Cloudflare Web Analytics is used.

FlareStats

Display CloudFlare Web Analytics data — pageviews, visitors, top pages and top countries — right in your WordPress admin.

SFR Analytics vs FlareStats