SupportFromRichard

<p>SFR Analytics is a self-hosted analytics plugin for WordPress. All visitor data is stored in your own database — nothing is sent to third-party services. No cookies, no external scripts, no tracking pixels.</p>
<p>Get a clear picture of your site’s traffic without compromising your visitors’ privacy.</p>
<p>Need a central multi-site dashboard? Use the free <a href="https://wordpress.org/plugins/sfr-analytics-hub/" rel="ugc">SFR Analytics Hub</a> plugin to aggregate analytics from multiple WordPress sites.</p>
<h4>Dashboard at a Glance</h4>
<ul>
<li><strong>Views, Visitors, Sessions</strong> — core metrics with period-over-period comparison</li>
<li><strong>Bounce Rate & Pages per Session</strong> — engagement indicators</li>
<li><strong>Traffic Over Time</strong> — interactive line chart with date range presets</li>
<li><strong>Top Content</strong> — your most viewed posts and pages</li>
<li><strong>Traffic Sources</strong> — where your visitors are coming from</li>
<li><strong>Top Referring Sites</strong> — individual domains sending you traffic</li>
<li><strong>Entry & Exit Pages</strong> — first and last pages in each visit</li>
<li><strong>Device Types</strong> — desktop, mobile and tablet breakdown</li>
<li><strong>Browsers & Operating Systems</strong> — which browsers and OS your visitors use</li>
<li><strong>Geographic Distribution</strong> — visitor countries (only available if using a CDN like Cloudflare that provides country headers; all other tracking works without a CDN)</li>
<li><strong>Campaign Performance</strong> — UTM campaign results with source/medium drill-down</li>
<li><strong>Online Now</strong> — on-demand live visitor count with optional online-only auto-refresh in the dashboard</li>
</ul>
<p>All dashboard sections are collapsible — show only what matters to you.</p>
<h4>Campaign Manager & UTM Link Builder</h4>
<p>Plan and track marketing campaigns without leaving WordPress:</p>
<ul>
<li><strong>Create campaigns</strong> with notes and track their performance over time</li>
<li><strong>Build UTM links</strong> with a visual tool — pick a page, choose source/medium/campaign, and get a ready-to-use URL</li>
<li><strong>Smart page picker</strong> — search across all your content types with post type and category filtering</li>
<li><strong>Preset sources and mediums</strong> — common options (Facebook, Google, newsletter, etc.) with clear descriptions</li>
<li><strong>Save generated links</strong> for quick reference and reuse</li>
<li><strong>Custom sources and mediums</strong> — add your own and they’re saved for next time</li>
<li><strong>Auto-lowercase</strong> campaign names to prevent data fragmentation</li>
</ul>
<h4>Smart Bot Detection</h4>
<p>Not all traffic is human. SFR Analytics filters out noise automatically:</p>
<ul>
<li><strong>200+ known bot patterns</strong> — search engines, AI crawlers, SEO tools, monitoring bots, headless browsers, security scanners and more</li>
<li><strong>JavaScript verification</strong> — a lightweight inline script confirms real browser execution, so bots that don’t run JavaScript are never counted</li>
<li><strong>Missing header detection</strong> — flags requests without User-Agent or Accept-Language headers</li>
<li><strong>Filterable patterns</strong> — add your own via the <code>sfran_bot_patterns</code> filter</li>
</ul>
<p>The dashboard shows you exactly how much traffic was filtered: total requests vs verified human visits.</p>
<h4>Privacy First</h4>
<ul>
<li><strong>No cookies</strong> — visitor identification uses anonymous hashed fingerprints</li>
<li><strong>No PII stored</strong> — IP addresses are hashed (SHA-256), never stored in plain text</li>
<li><strong>Optional IP anonymisation</strong> — strip the last octet before hashing</li>
<li><strong>Do Not Track support</strong> — respects the browser DNT header when enabled</li>
<li><strong>Local storage only</strong> — your data never leaves your server</li>
<li><strong>Configurable retention</strong> — automatically delete data after 30 to 3,650 days</li>
<li><strong>GDPR-ready privacy text</strong> — copy-paste paragraph for your privacy policy</li>
</ul>
<h4>IP & Country Filtering</h4>
<ul>
<li>Exclude specific IP addresses or CIDR ranges (e.g. <code>192.168.1.0/24</code>)</li>
<li>One-click “Ignore My IP” button</li>
<li>Exclude entire countries by country code</li>
<li>Exclude logged-in users by role (administrators, editors, etc.)</li>
</ul>
<h4>REST API</h4>
<p>A full set of authenticated REST API endpoints lets you access your analytics data programmatically:</p>
<ul>
<li><code>/sfran/v1/summary</code> — overview stats with optional comparison</li>
<li><code>/sfran/v1/top-content</code> — most viewed content with pagination</li>
<li><code>/sfran/v1/traffic-sources</code> — referrer breakdown</li>
<li><code>/sfran/v1/time-series</code> — daily views/visitors/sessions</li>
<li><code>/sfran/v1/campaigns</code> — campaign performance</li>
<li><code>/sfran/v1/entry-pages</code> and <code>/sfran/v1/exit-pages</code></li>
<li><code>/sfran/v1/referrers</code> — top referring domains</li>
<li><code>/sfran/v1/devices</code>, <code>/sfran/v1/browsers</code>, <code>/sfran/v1/geographic</code></li>
<li><code>/sfran/v1/online-now</code> — current active visitor count for the last N minutes (default 5)</li>
</ul>
<p>All endpoints require authentication (WordPress Application Passwords or other REST API auth) and the <code>manage_options</code> capability. Use these to build custom dashboards, export data, or integrate with other tools.</p>
<h4>Performance</h4>
<ul>
<li><strong>Batch processing</strong> — pageviews are buffered and written in batches, reducing database load</li>
<li><strong>Indexed tables</strong> — optimised queries for fast dashboard rendering</li>
<li><strong>Lightweight frontend</strong> — a single inline verification script, no external files loaded for visitors</li>
<li><strong>No impact on page speed</strong> — tracking uses <code>navigator.sendBeacon</code> (non-blocking)</li>
</ul>
<h4>Works with SFR Analytics Hub</h4>
<p>SFR Analytics collects data on each individual site.</p>
<p>For cross-site reporting, install the free <a href="https://wordpress.org/plugins/sfr-analytics-hub/" rel="ugc">SFR Analytics Hub</a> on your main site.</p>
<p>With SFR Analytics Hub, you can also view <strong>live online visitors across all connected sites</strong> from one central dashboard.</p>
<p>The WordPress.org Hub edition supports up to 3 connected sites.</p>
<p>Need more than 3 sites with the same workflow? See <a href="https://supportfromrichard.co.uk/sfr-analytics/" rel="nofollow ugc">SFR Analytics Hub Pro</a>.</p>


SFR Analytics

Lightweight, privacy-focused WordPress analytics. Track pageviews, visitors, campaigns and more — all data stored locally in your own database.

Scoby Analytics

<p>Scoby Analytics is a privacy-focused analytics plugin for WordPress. It is designed to provide website operators with actionable usage statistics <strong>without using cookies, device fingerprinting, or cross-site identifiers</strong>.</p>
<p>The WordPress integration is a <strong>lightweight, client-side integration</strong> that prioritizes visitor privacy. Scoby’s goal is to enable analytics in a way that can typically be operated under <strong>legitimate interest</strong> (Art. 6(1)(f) GDPR) and <strong>without consent banners</strong>, provided it is used as intended and configured appropriately. Scoby does not provide legal advice; always assess your specific setup with your DPO/legal counsel. We’re happy to answer their questions at <a href="mailto:hello@scoby.io" rel="nofollow ugc">hello@scoby.io</a></p>
<h3>Privacy approach (GDPR / ePrivacy)</h3>
<p>Scoby is designed around the following principles:</p>
<ul>
<li><strong>No cookies / no storage on the user device</strong> (relevant for ePrivacy / TDDDG)</li>
<li><strong>No device fingerprinting</strong></li>
<li><strong>No user profiles or cross-site tracking</strong></li>
<li><strong>Anonymization before transmission</strong> and <strong>aggregated storage</strong> (no individual-level analytics)</li>
</ul>
<p>This means Scoby is not trying to “optimize consent rates”. Instead, it aims to reduce or avoid regulated processing operations in the first place by keeping analytics <strong>non-identifying</strong> and <strong>aggregate</strong>.</p>
<h3>What Scoby measures</h3>
<p>Scoby provides aggregated statistics such as:</p>
<ul>
<li>Page views and visits</li>
<li>Entry/exit pages and content performance</li>
<li>Engagement metrics (e.g., time-spent distributions/percentiles)</li>
<li>Conversion events (depending on your setup)</li>
<li>Referrers and traffic sources (without persistent identifiers)</li>
</ul>
<h3>What Scoby does not do</h3>
<ul>
<li>No cookies</li>
<li>No device fingerprinting</li>
<li>No cross-site tracking</li>
<li>No user/device profiles</li>
</ul>
<h3>Reporting & exports</h3>
<ul>
<li>WordPress dashboard reporting</li>
<li>Export to <code>.xlsx</code></li>
<li>Integrations with BI tools (e.g., Looker Studio, PowerBI, Tableau)</li>
</ul>
<h3>Third Party Services</h3>
<p>Scoby Analytics uses Scoby-operated servers for analytics processing.</p>
<h3>Service Used</h3>
<p><strong>Service:</strong> Scoby Analytics Servers<br />
<strong>Purpose:</strong> Capture, process, and store website usage statistics in an anonymized and aggregated form to provide analytics reporting.</p>
<h3>Data Handling and Privacy</h3>
<p>– <strong>Anonymization prior to transmission:</strong> Page views and associated metrics are anonymized before being transmitted to Scoby Analytics servers.<br />
– <strong>Aggregation:</strong> Stored data is aggregated and not intended to relate to identifiable individuals.<br />
– <strong>No personal identifiers:</strong> Scoby is designed to avoid collecting or storing identifiers such as cookies, fingerprinting signals, or IP addresses.</p>
<h3>Transparency and further information</h3>
<p>– Service information: https://www.scoby.io/<br />
– Terms of Use: https://www.scoby.io/terms<br />
– Privacy Policy: https://www.scoby.io/privacy</p>


Privacy-focused analytics for WordPress — designed to minimize data protection risk under EU GDPR and ePrivacy.

SFR Analytics vs Scoby Analytics