Parhum Khoshbakht

The privacy-first analytics plugin for WordPress — now with a full WooCommerce Revenue Report.
See exactly who visits your site, where they come from, what they do, and — on WooCommerce stores — how that converts into revenue. No cookies, no third-party trackers, no visitor data sent anywhere. All analytics and revenue data live in your own WordPress database.
Open source under GPLv2. Self-hosted in your own database — nothing ever leaves your server.
Install, activate, open Statnive — your dashboard fills up within minutes. No tracking code to paste, no account to create. If WooCommerce is active, existing orders are auto-imported in the background so the Revenue Report fills in within minutes.
<h4>Why Statnive?</h4>
<ul>
<li>No cookies. No fingerprinting. No third-party transfers. Designed to support GDPR, CCPA, and APPI compliance.</li>
<li>Honors GPC and DNT server-side, integrates with the WordPress Consent API.</li>
<li>Daily-rotating salted hashes — cross-day and cross-site tracking are mathematically impossible.</li>
<li>One plugin for analytics AND WooCommerce revenue — no separate add-on, no separate license, no clutter, no upsells.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li>WooCommerce Revenue Report — Net revenue, orders, AOV, conversion rate, refund rate (with period-over-period deltas) · revenue by channel (8 channels including AI Assistants) · top products · cart→checkout→purchase funnel with named drop-off rates. Built on WooCommerce 8.5+ Order Attribution; HPOS + Block Checkout compatible; read-only against WooCommerce.</li>
<li>Zero-touch backfill for existing stores — On a WooCommerce store with existing orders, Statnive auto-imports your history in the background via Action Scheduler the first time you open the Revenue Report. No CLI required (but <code>wp statnive wc-backfill</code> is also available).</li>
<li>Real-time — Active visitor count, active pages, live pageview feed.</li>
<li>Smart channel grouping — Direct, Organic Search, Social Media, Email, Referral, Paid Search, Paid Social, and a dedicated AI Assistants channel for ChatGPT, Claude, Gemini, Perplexity, Copilot, NotebookLM, Meta AI, Le Chat, Deepseek, You, iAsk, Jasper, and Writesonic.</li>
<li>Custom events + engagement — Link clicks (and tagged button clicks via <code>statnive-event-*</code> classes), form submissions, downloads, outbound links, time on page, scroll depth.</li>
<li>Bot vs human separation — Real visitors and automated traffic in distinct buckets.</li>
<li>Geography in tiers — Zero-config timezone country mapping; optional CDN headers; optional one-click DB-IP city download (free); optional MaxMind GeoLite2.</li>
<li>Configurable retention — 30 / 90 / 180 / 365 days, or Forever. Daily WP-Cron purge.</li>
<li>WordPress Privacy API — Personal-data export and erase registered automatically.</li>
<li>WP-CLI — <code>wp statnive cron run</code> for sites with <code>DISABLE_WP_CRON</code>; <code>wp statnive wc-backfill</code> for manual WooCommerce imports.</li>
</ul>
Source code at <a href="https://github.com/statnive/statnive" rel="nofollow ugc">github.com/statnive/statnive</a>. Learn more at <a href="https://statnive.com" rel="nofollow ugc">statnive.com</a>.
<h3>External Services</h3>
This plugin connects to two third-party services, both opt-in via explicit user action. No visitor data is ever sent to either service.
<h4>MaxMind GeoLite2 (optional)</h4>
Used to download the MaxMind GeoLite2-City database for high-accuracy visitor geolocation. Requires a free MaxMind account and a license key the user pastes into Settings → GeoIP. Accuracy: approximate city/region only — not for identifying individuals or households.
<ul>
<li>Source: MaxMind (https://www.maxmind.com), downloaded from https://download.maxmind.com/app/geoip_download</li>
<li>When: Weekly via WP-Cron, only after the user enables GeoIP and configures a license key</li>
<li>Data sent: License key + standard HTTP request headers. No visitor data is transmitted.</li>
<li>Data received: GeoLite2-City.mmdb file, stored in your <code>wp-content/uploads/statnive/</code> directory</li>
<li>Purpose: Approximate visitor geolocation (country / region / coarse city)</li>
<li>Sign up for a MaxMind account: https://www.maxmind.com/en/geolite2/signup</li>
<li>Get your license key: https://www.maxmind.com/en/accounts/current/license-key</li>
<li>MaxMind Privacy Policy: https://www.maxmind.com/en/privacy-policy</li>
<li>MaxMind Terms of Use: https://www.maxmind.com/en/terms-of-use</li>
<li>MaxMind GeoLite2 EULA: https://www.maxmind.com/en/geolite2/eula</li>
</ul>
This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.
<h4>DB-IP IP-to-City Lite (optional)</h4>
Used to download the free DB-IP IP-to-City Lite database. No account, no license key, no EULA. Accuracy: approximate city/region only — not for identifying individuals or households.
<ul>
<li>Source: DB-IP (https://db-ip.com), downloaded from https://download.db-ip.com/free/</li>
<li>When: One-shot user click “Enable city-level geography” on the Geography page, then monthly via WP-Cron for refresh</li>
<li>Data sent: Standard HTTP request headers only (no visitor data, no account, no key)</li>
<li>Data received: dbip-city-lite-YYYY-MM.mmdb.gz file, decompressed to your <code>wp-content/uploads/statnive/</code> directory</li>
<li>Purpose: Approximate visitor geolocation (city / region / country)</li>
<li>DB-IP Terms: https://db-ip.com/tos.php</li>
<li>DB-IP Privacy Policy: https://db-ip.com/privacy.php</li>
<li>License: CC-BY 4.0</li>
</ul>
GeoIP data © DB-IP under CC-BY 4.0.
No visitor data is ever sent to any external service. All analytics data remains in your WordPress database.
<h3>Privacy Policy</h3>
All analytics data stays in your WordPress database. Raw IPs are used only for the optional GeoIP lookup and are never persisted. Statnive registers with the WordPress Privacy API for personal-data export and erasure.

Statnive – Privacy-first Analytics + Revenue Reports for WooCommerce

Privacy-first WordPress analytics with WooCommerce revenue tracking — cookieless, self-hosted, real-time. GeoIP and AI-source attribution.

james333

VisitStats is a lightweight, privacy-first analytics plugin for WordPress. All your data stays in your own WordPress database — we never see it, no third party sees it.
Why VisitStats?
<ul>
<li>No cookies, no consent banner needed. Tracking is GDPR-friendly by default.</li>
<li>Self-hosted. All data lives in your WordPress database. No external service, no Automattic, no Google.</li>
<li>Lightweight. Frontend tracker is under 2KB. Loads asynchronously. Won’t slow your site.</li>
<li>Zero setup. Install, activate, done. No theme edits, no tag manager, no JS snippets.</li>
<li>Built for WordPress. Reports appear inside your WordPress dashboard — no separate app to log into.</li>
</ul>
Recommended for sites with up to ~10,000 daily pageviews (around 95% of WordPress sites). For very high-traffic sites, consider dedicated analytics services.
What you get (all free, all the time):
<ul>
<li>Real-time visitor count — see who’s on your site right now</li>
<li>Pageviews, unique visitors, sessions</li>
<li>Top pages</li>
<li>Top traffic sources (direct, search, social, AI, referral)</li>
<li>Top referrers — actual URLs sending you traffic</li>
<li>Device breakdown (desktop, mobile, tablet)</li>
<li>Browser & operating system detection</li>
<li>Configurable data retention from 1 day up to 1 year</li>
<li>Date range views: today, 7 days, 30 days, 90 days, 1 year</li>
<li>Engagement signals (scroll depth, time on page)</li>
<li>Cookieless visitor identification using daily-rotating salt + SHA-256 hashing</li>
<li>Bot filtering with built-in bot signature detection</li>
<li>Optional administrator / logged-in user exclusion</li>
<li>Honors Do Not Track browser signal</li>
<li>Automatic data pruning to keep your database lean</li>
<li>Rate-limited tracking endpoint protects against abuse</li>
<li>IP anonymization before hashing — actual IPs never stored</li>
</ul>
Privacy by design
VisitStats never:
<ul>
<li>Sets cookies</li>
<li>Stores IP addresses</li>
<li>Sends data to third parties</li>
<li>Fingerprints visitors</li>
<li>Tracks across days</li>
</ul>
Visitor identification uses a daily-rotating salt hashed with the (anonymized) IP and User Agent to count unique visits within a 24-hour window. The salt regenerates every 24 hours, making cross-day tracking impossible. This is the same approach used by Plausible Analytics and Fathom Analytics.
For developers
<ul>
<li>Clean REST API at <code>/wp-json/visitstats/v1/</code></li>
<li>Filter hooks for customizing behavior (rate limiting, bot detection, etc.)</li>
<li>PSR-style class organization</li>
<li>No external dependencies — pure WordPress core</li>
</ul>

VisitStats

Privacy-first site analytics for self-hosted sites. No cookies, no Google, no data leaves your server. Stats live in your own database.

Statnive – Privacy-first Analytics + Revenue Reports for WooCommerce vs VisitStats