SupportFromRichard

<p>SFR Analytics is a self-hosted analytics plugin for WordPress. All visitor data is stored in your own database — nothing is sent to third-party services. No cookies, no external scripts, no tracking pixels.</p>
<p>Get a clear picture of your site’s traffic without compromising your visitors’ privacy.</p>
<p>Need a central multi-site dashboard? Use the free <a href="https://wordpress.org/plugins/sfr-analytics-hub/" rel="ugc">SFR Analytics Hub</a> plugin to aggregate analytics from multiple WordPress sites.</p>
<h4>Dashboard at a Glance</h4>
<ul>
<li><strong>Views, Visitors, Sessions</strong> — core metrics with period-over-period comparison</li>
<li><strong>Bounce Rate & Pages per Session</strong> — engagement indicators</li>
<li><strong>Traffic Over Time</strong> — interactive line chart with date range presets</li>
<li><strong>Top Content</strong> — your most viewed posts and pages</li>
<li><strong>Traffic Sources</strong> — where your visitors are coming from</li>
<li><strong>Top Referring Sites</strong> — individual domains sending you traffic</li>
<li><strong>Entry & Exit Pages</strong> — first and last pages in each visit</li>
<li><strong>Device Types</strong> — desktop, mobile and tablet breakdown</li>
<li><strong>Browsers & Operating Systems</strong> — which browsers and OS your visitors use</li>
<li><strong>Geographic Distribution</strong> — visitor countries (only available if using a CDN like Cloudflare that provides country headers; all other tracking works without a CDN)</li>
<li><strong>Campaign Performance</strong> — UTM campaign results with source/medium drill-down</li>
<li><strong>Online Now</strong> — on-demand live visitor count with optional online-only auto-refresh in the dashboard</li>
</ul>
<p>All dashboard sections are collapsible — show only what matters to you.</p>
<h4>Campaign Manager & UTM Link Builder</h4>
<p>Plan and track marketing campaigns without leaving WordPress:</p>
<ul>
<li><strong>Create campaigns</strong> with notes and track their performance over time</li>
<li><strong>Build UTM links</strong> with a visual tool — pick a page, choose source/medium/campaign, and get a ready-to-use URL</li>
<li><strong>Smart page picker</strong> — search across all your content types with post type and category filtering</li>
<li><strong>Preset sources and mediums</strong> — common options (Facebook, Google, newsletter, etc.) with clear descriptions</li>
<li><strong>Save generated links</strong> for quick reference and reuse</li>
<li><strong>Custom sources and mediums</strong> — add your own and they’re saved for next time</li>
<li><strong>Auto-lowercase</strong> campaign names to prevent data fragmentation</li>
</ul>
<h4>Smart Bot Detection</h4>
<p>Not all traffic is human. SFR Analytics filters out noise automatically:</p>
<ul>
<li><strong>200+ known bot patterns</strong> — search engines, AI crawlers, SEO tools, monitoring bots, headless browsers, security scanners and more</li>
<li><strong>JavaScript verification</strong> — a lightweight inline script confirms real browser execution, so bots that don’t run JavaScript are never counted</li>
<li><strong>Missing header detection</strong> — flags requests without User-Agent or Accept-Language headers</li>
<li><strong>Filterable patterns</strong> — add your own via the <code>sfran_bot_patterns</code> filter</li>
</ul>
<p>The dashboard shows you exactly how much traffic was filtered: total requests vs verified human visits.</p>
<h4>Privacy First</h4>
<ul>
<li><strong>No cookies</strong> — visitor identification uses anonymous hashed fingerprints</li>
<li><strong>No PII stored</strong> — IP addresses are hashed (SHA-256), never stored in plain text</li>
<li><strong>Optional IP anonymisation</strong> — strip the last octet before hashing</li>
<li><strong>Do Not Track support</strong> — respects the browser DNT header when enabled</li>
<li><strong>Local storage only</strong> — your data never leaves your server</li>
<li><strong>Configurable retention</strong> — automatically delete data after 30 to 3,650 days</li>
<li><strong>GDPR-ready privacy text</strong> — copy-paste paragraph for your privacy policy</li>
</ul>
<h4>IP & Country Filtering</h4>
<ul>
<li>Exclude specific IP addresses or CIDR ranges (e.g. <code>192.168.1.0/24</code>)</li>
<li>One-click “Ignore My IP” button</li>
<li>Exclude entire countries by country code</li>
<li>Exclude logged-in users by role (administrators, editors, etc.)</li>
</ul>
<h4>REST API</h4>
<p>A full set of authenticated REST API endpoints lets you access your analytics data programmatically:</p>
<ul>
<li><code>/sfran/v1/summary</code> — overview stats with optional comparison</li>
<li><code>/sfran/v1/top-content</code> — most viewed content with pagination</li>
<li><code>/sfran/v1/traffic-sources</code> — referrer breakdown</li>
<li><code>/sfran/v1/time-series</code> — daily views/visitors/sessions</li>
<li><code>/sfran/v1/campaigns</code> — campaign performance</li>
<li><code>/sfran/v1/entry-pages</code> and <code>/sfran/v1/exit-pages</code></li>
<li><code>/sfran/v1/referrers</code> — top referring domains</li>
<li><code>/sfran/v1/devices</code>, <code>/sfran/v1/browsers</code>, <code>/sfran/v1/geographic</code></li>
<li><code>/sfran/v1/online-now</code> — current active visitor count for the last N minutes (default 5)</li>
</ul>
<p>All endpoints require authentication (WordPress Application Passwords or other REST API auth) and the <code>manage_options</code> capability. Use these to build custom dashboards, export data, or integrate with other tools.</p>
<h4>Performance</h4>
<ul>
<li><strong>Batch processing</strong> — pageviews are buffered and written in batches, reducing database load</li>
<li><strong>Indexed tables</strong> — optimised queries for fast dashboard rendering</li>
<li><strong>Lightweight frontend</strong> — a single inline verification script, no external files loaded for visitors</li>
<li><strong>No impact on page speed</strong> — tracking uses <code>navigator.sendBeacon</code> (non-blocking)</li>
</ul>
<h4>Works with SFR Analytics Hub</h4>
<p>SFR Analytics collects data on each individual site.</p>
<p>For cross-site reporting, install the free <a href="https://wordpress.org/plugins/sfr-analytics-hub/" rel="ugc">SFR Analytics Hub</a> on your main site.</p>
<p>With SFR Analytics Hub, you can also view <strong>live online visitors across all connected sites</strong> from one central dashboard.</p>
<p>The WordPress.org Hub edition supports up to 3 connected sites.</p>
<p>Need more than 3 sites with the same workflow? See <a href="https://supportfromrichard.co.uk/sfr-analytics/" rel="nofollow ugc">SFR Analytics Hub Pro</a>.</p>


SFR Analytics

Lightweight, privacy-focused WordPress analytics. Track pageviews, visitors, campaigns and more — all data stored locally in your own database.

erravi

<p>Quantely Activity is a lightweight, privacy-conscious plugin that records visitor activity (pageviews and interactions).</p>
<p>It helps site owners understand what is happening on their website for monitoring, diagnostics, performance checks, and analytics validation. It also makes this data available to downstream analytics tools.</p>
<p>Quantely Activity runs fully on-site, uses no external services, stores data only briefly, supports cookie-free operation, does not depend on JavaScript, and does not store plain IP addresses.</p>
<h3>Key features</h3>
<h4>Robust traffic monitoring</h4>
<p>Quantely Activity captures activity reliably under imperfect conditions.</p>
<ul>
<li>Server-side pageview capture (always-on baseline)</li>
<li>Optional browser signals (clicks, forms, engagement)</li>
<li>Server-side event capture from plugins, including WooCommerce</li>
<li>Server and browser alignment via <code>pv_id</code></li>
<li>Receive-order recording with preserved origin metadata</li>
<li>Lightweight deduplication of duplicate signals</li>
</ul>
<h4>Traffic context</h4>
<p>Each hit is enriched with context for interpretation and downstream use.</p>
<ul>
<li>UTM parameters (<code>utm_source</code>, <code>utm_medium</code>, etc.)</li>
<li>Click IDs (e.g. <code>gclid</code>, <code>fbclid</code>)</li>
<li>Channel classification (email, paid, social, ai, search, referral, direct, internal)</li>
<li>Visitor continuity via cookies and derived identifiers</li>
</ul>
<h4>Engagement signals</h4>
<p>Engagement is captured efficiently using milestone-based signals.</p>
<ul>
<li>One maximum engagement value per pageview</li>
<li>Fibonacci-based milestones (<code>2–89 seconds</code>)</li>
<li>No continuous timers or heavy scripts</li>
</ul>
<h4>Internal traffic filtering</h4>
<p>Internal or irrelevant traffic can be excluded without losing visibility.</p>
<ul>
<li>Role-based exclusions (e.g. admins)</li>
<li>IP-based exclusions</li>
<li>Path-based exclusions</li>
<li>Hits remain visible but are marked (<code>is_excluded</code>)</li>
</ul>
<h4>Bot filtering</h4>
<p>Automated traffic is detected and classified at capture time.</p>
<ul>
<li><code>is_nonhuman</code>, <code>bot_label</code>, <code>bot_reason</code></li>
<li>Detection based on patterns, endpoints, and behavior</li>
<li>Reclassification possible as patterns emerge</li>
</ul>
<h3>Privacy</h3>
<p>Designed to minimize data exposure and keep control local.</p>
<ul>
<li>No plain IP storage</li>
<li>Short retention window</li>
<li>GPC / DNT support</li>
<li>No external tracking services</li>
<li>Data stored fully on-site</li>
</ul>
<h3>Integrations</h3>
<p>Captured data is structured so other tools can use it.</p>
<ul>
<li>Activity data can feed downstream analytics tools</li>
<li>Events remain connected to their original page context</li>
<li>Compatible with analytics and processing workflows</li>
</ul>
<p>Quantely Activity exposes a small developer API for integrations and downstream processing.</p>
<ul>
<li><code>qmon_hit_before_insert</code> — Filter a normalized hit array before it is stored.</li>
<li><code>qmon_hit_recorded</code> — Action fired after a hit has been stored. This is the main integration point for forwarding or persisting captured records.</li>
<li><code>qmon_event_normalize</code> — Filter a normalized event payload before it is finalized.</li>
<li><code>qmon_event_db_dedupe_window_sec</code> — Filter the database deduplication window for events.</li>
<li><code>qmon_bot_verdict</code> — Filter the bot-classification verdict before it is finalized.</li>
</ul>


Quantely Activity

See what is really happening on your WordPress website.

SFR Analytics vs Quantely Activity