Parhum Khoshbakht

<p><strong>The privacy-first analytics plugin for WordPress — now with a full WooCommerce Revenue Report.</strong></p>
<p>See exactly who visits your site, where they come from, what they do, and — on WooCommerce stores — how that converts into revenue. No cookies, no third-party trackers, no visitor data sent anywhere. All analytics and revenue data live in your own WordPress database.</p>
<p>Open source under GPLv2. Self-hosted in your own database — nothing ever leaves your server.</p>
<p>Install, activate, open Statnive — your dashboard fills up within minutes. No tracking code to paste, no account to create. If WooCommerce is active, existing orders are auto-imported in the background so the Revenue Report fills in within minutes.</p>
<h4>Why Statnive?</h4>
<ul>
<li><strong>No cookies. No fingerprinting. No third-party transfers.</strong> Designed to support GDPR, CCPA, and APPI compliance.</li>
<li><strong>Honors GPC and DNT</strong> server-side, integrates with the WordPress Consent API.</li>
<li><strong>Daily-rotating salted hashes</strong> — cross-day and cross-site tracking are mathematically impossible.</li>
<li><strong>One plugin for analytics AND WooCommerce revenue</strong> — no separate add-on, no separate license, no clutter, no upsells.</li>
</ul>
<h4>Key Features</h4>
<ul>
<li><strong>WooCommerce Revenue Report</strong> — Net revenue, orders, AOV, conversion rate, refund rate (with period-over-period deltas) · revenue by channel (8 channels including AI Assistants) · top products · cart<span aria-hidden="true" class="wp-exclude-emoji">→</span>checkout<span aria-hidden="true" class="wp-exclude-emoji">→</span>purchase funnel with named drop-off rates. Built on WooCommerce 8.5+ Order Attribution; HPOS + Block Checkout compatible; read-only against WooCommerce.</li>
<li><strong>Zero-touch backfill for existing stores</strong> — On a WooCommerce store with existing orders, Statnive auto-imports your history in the background via Action Scheduler the first time you open the Revenue Report. No CLI required (but <code>wp statnive wc-backfill</code> is also available).</li>
<li><strong>Real-time</strong> — Active visitor count, active pages, live pageview feed.</li>
<li><strong>Smart channel grouping</strong> — Direct, Organic Search, Social Media, Email, Referral, Paid Search, Paid Social, and a dedicated <strong>AI Assistants</strong> channel for ChatGPT, Claude, Gemini, Perplexity, Copilot, NotebookLM, Meta AI, Le Chat, Deepseek, You, iAsk, Jasper, and Writesonic.</li>
<li><strong>Custom events + engagement</strong> — Link clicks (and tagged button clicks via <code>statnive-event-*</code> classes), form submissions, downloads, outbound links, time on page, scroll depth.</li>
<li><strong>Bot vs human separation</strong> — Real visitors and automated traffic in distinct buckets.</li>
<li><strong>Geography in tiers</strong> — Zero-config timezone country mapping; optional CDN headers; optional one-click DB-IP city download (free); optional MaxMind GeoLite2.</li>
<li><strong>Configurable retention</strong> — 30 / 90 / 180 / 365 days, or Forever. Daily WP-Cron purge.</li>
<li><strong>WordPress Privacy API</strong> — Personal-data export and erase registered automatically.</li>
<li><strong>WP-CLI</strong> — <code>wp statnive cron run</code> for sites with <code>DISABLE_WP_CRON</code>; <code>wp statnive wc-backfill</code> for manual WooCommerce imports.</li>
</ul>
<p>Source code at <a href="https://github.com/statnive/statnive" rel="nofollow ugc">github.com/statnive/statnive</a>. Learn more at <a href="https://statnive.com" rel="nofollow ugc">statnive.com</a>.</p>
<h3>External Services</h3>
<p>This plugin connects to two third-party services, both <strong>opt-in via explicit user action</strong>. No visitor data is ever sent to either service.</p>
<h4>MaxMind GeoLite2 (optional)</h4>
<p>Used to download the MaxMind GeoLite2-City database for high-accuracy visitor geolocation. Requires a free MaxMind account and a license key the user pastes into Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> GeoIP. Accuracy: approximate city/region only — not for identifying individuals or households.</p>
<ul>
<li>Source: MaxMind (https://www.maxmind.com), downloaded from https://download.maxmind.com/app/geoip_download</li>
<li>When: Weekly via WP-Cron, only after the user enables GeoIP and configures a license key</li>
<li>Data sent: License key + standard HTTP request headers. No visitor data is transmitted.</li>
<li>Data received: GeoLite2-City.mmdb file, stored in your <code>wp-content/uploads/statnive/</code> directory</li>
<li>Purpose: Approximate visitor geolocation (country / region / coarse city)</li>
<li>Sign up for a MaxMind account: https://www.maxmind.com/en/geolite2/signup</li>
<li>Get your license key: https://www.maxmind.com/en/accounts/current/license-key</li>
<li>MaxMind Privacy Policy: https://www.maxmind.com/en/privacy-policy</li>
<li>MaxMind Terms of Use: https://www.maxmind.com/en/terms-of-use</li>
<li>MaxMind GeoLite2 EULA: https://www.maxmind.com/en/geolite2/eula</li>
</ul>
<p>This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.</p>
<h4>DB-IP IP-to-City Lite (optional)</h4>
<p>Used to download the free DB-IP IP-to-City Lite database. No account, no license key, no EULA. Accuracy: approximate city/region only — not for identifying individuals or households.</p>
<ul>
<li>Source: DB-IP (https://db-ip.com), downloaded from https://download.db-ip.com/free/</li>
<li>When: One-shot user click “Enable city-level geography” on the Geography page, then monthly via WP-Cron for refresh</li>
<li>Data sent: Standard HTTP request headers only (no visitor data, no account, no key)</li>
<li>Data received: dbip-city-lite-YYYY-MM.mmdb.gz file, decompressed to your <code>wp-content/uploads/statnive/</code> directory</li>
<li>Purpose: Approximate visitor geolocation (city / region / country)</li>
<li>DB-IP Terms: https://db-ip.com/tos.php</li>
<li>DB-IP Privacy Policy: https://db-ip.com/privacy.php</li>
<li>License: CC-BY 4.0</li>
</ul>
<p>GeoIP data © DB-IP under CC-BY 4.0.</p>
<p>No visitor data is ever sent to any external service. All analytics data remains in your WordPress database.</p>
<h3>Privacy Policy</h3>
<p>All analytics data stays in your WordPress database. Raw IPs are used only for the optional GeoIP lookup and are never persisted. Statnive registers with the WordPress Privacy API for personal-data export and erasure.</p>


Statnive – Privacy-first Analytics + Revenue Reports for WooCommerce

Privacy-first WordPress analytics with WooCommerce revenue tracking — cookieless, self-hosted, real-time. GeoIP and AI-source attribution.

anthonyzen

zenmarkup

<p>Self-hosted website analytics for WordPress. All data is stored in your WordPress database and never sent to third-party services. The tracker is cookieless and loads no external resources, making the plugin GDPR, CCPA, and PECR friendly by default — no consent banner required.</p>
<p>Once activated, the plugin starts collecting anonymous visitor data and displays a full analytics dashboard inside WP Admin.</p>
<h4>Features</h4>
<ul>
<li>Real-time visitor counter</li>
<li>Pageviews, unique visitors, bounce rate, and average session duration</li>
<li>Interactive SVG world map with zoom, pan, and country/city drill-down</li>
<li>UTM campaign tracking with automatic URL cleanup</li>
<li>Event tracking — outbound links, file downloads, mailto and tel clicks, 404 pages</li>
<li>Custom events via data attributes or JavaScript API</li>
<li>Smart insights — exit pages, dead pages, user journeys</li>
<li>24-hour peak activity chart</li>
<li>New vs returning visitor breakdown</li>
<li>Device, browser, and operating system detection (server-side)</li>
<li>Weekly or monthly email reports</li>
<li>CSV export on every dashboard tab</li>
<li>Date range selector with custom ranges</li>
<li>Role-based dashboard access control</li>
<li>Configurable data retention (7–365 days)</li>
<li>IP exclusion list and admin traffic filtering</li>
<li>Bot traffic analysis</li>
</ul>
<h4>Privacy by design</h4>
<ul>
<li>No cookies, no localStorage, no sessionStorage</li>
<li>IP addresses are never stored — only an irreversible SHA-256 hash is used internally</li>
<li>Geolocation is resolved locally on your server (optional) — only country and city names are stored</li>
<li>No personal identifiers — no names, emails, or login state tracked</li>
<li>GDPR, CCPA, and PECR friendly by default</li>
</ul>
<h4>Zero external resources</h4>
<p>The admin dashboard loads no fonts from third-party CDNs, no remote scripts, and no external stylesheets. Every byte is served from your own server, so the admin’s IP address is never leaked to third parties while viewing analytics.</p>
<h4>Compatibility</h4>
<p>The tracking script is async, non-blocking, and under 5KB. It works with common caching and optimization plugins by using <code>admin-ajax.php</code> for data collection, which bypasses page caching.</p>
<h4>Who is it for?</h4>
<ul>
<li>Site owners who want analytics without a consent banner</li>
<li>GDPR-regulated businesses that need compliant analytics out of the box</li>
<li>Agencies managing multiple WordPress sites</li>
<li>Developers who prefer self-hosted, zero-dependency tooling</li>
</ul>
<p>Built by <a href="https://zenmarkup.com" rel="nofollow ugc">ZenMarkup</a> — WordPress support and development.</p>
<h3>External services</h3>
<p>This plugin connects to a single third-party service under the conditions described below. The connection can be fully disabled by toggling “Geolocation” off in Analytics <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> General. Visitor data is never sent to any third party.</p>
<h4>jsDelivr CDN (cdn.jsdelivr.net)</h4>
<p>When the geolocation feature is enabled, the plugin downloads a static IP geolocation database file from jsDelivr CDN about once per month. The database is hosted as a public npm package (dbip-city-lite) and contains no user-specific data — it is the same file served to every site that requests it.</p>
<p>What is sent: a standard HTTPS GET request from your server. No visitor data, site identifiers, or telemetry are included.<br />
What is received: a gzipped database file, approximately 19 MB (dbip-city-lite.mmdb.gz).<br />
When: shortly after the geolocation feature is first enabled, then approximately once per month via WP-Cron, and whenever an admin clicks the “Update database now” button on the Settings page.<br />
Where it is stored: wp-content/uploads/zenmarkup-pa/dbip-city-lite.mmdb (after extraction).</p>
<ul>
<li>Source URL: https://cdn.jsdelivr.net/npm/dbip-city-lite/dbip-city-lite.mmdb.gz</li>
<li>Service provider: jsDelivr — https://www.jsdelivr.com/ — Privacy policy: https://www.jsdelivr.com/terms/privacy-policy</li>
<li>Database provider: DB-IP — https://db-ip.com/ — License: CC-BY 4.0 (https://creativecommons.org/licenses/by/4.0/)</li>
</ul>
<h4>No per-visitor external requests</h4>
<p>After the database has been downloaded, ALL geolocation lookups happen locally on your own server using the bundled MaxMind GeoIP2 PHP reader. Visitor IP addresses are NEVER transmitted to any external service.</p>
<p>To stop all external requests entirely, set “Geolocation” to OFF in Analytics <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> General. The plugin continues to work without country and city data.</p>
<h3>Development</h3>
<p>The plugin ships with both minified production bundles and their unminified sources, so every byte of JavaScript and CSS can be reviewed, studied, and modified without any external tooling. No remote repository or compilation step is required to inspect the code.</p>
<p>Shipped sources:</p>
<ul>
<li>admin/assets/js/src/ — ES module sources that esbuild bundles into admin/assets/js/dashboard.min.js (the single file loaded on the admin dashboard). A source map is also shipped as dashboard.min.js.map.</li>
<li>admin/assets/css/dashboard.css — unminified source for admin/assets/css/dashboard.min.css.</li>
<li>public/tracker.js — unminified source for public/tracker.min.js (the frontend beacon, <5KB).</li>
</ul>
<p>Rebuilding the minified bundles (optional):</p>
<ol>
<li>Install Node.js 18 or newer.</li>
<li>From the plugin directory run: npm install</li>
<li>Then run: npm run build</li>
</ol>
<p>The build script uses esbuild (a pure Node dependency declared in package.json) — no remote downloads at runtime, no other build tooling, no framework.</p>
<h3>Third Party Notices</h3>
<p>This plugin includes the following third-party assets.</p>
<h4>SVG World Map</h4>
<ul>
<li>File: admin/assets/svg/world-map.min.svg</li>
<li>Source: Simplemaps.com (https://simplemaps.com/resources/svg-maps), via sirLisko/world-map-country-shapes on GitHub (https://github.com/sirLisko/world-map-country-shapes)</li>
<li>License: MIT</li>
<li>Copyright: 2015 Pareto Software, LLC DBA Simplemaps.com</li>
</ul>
<p>MIT License text:</p>
<p>The MIT License (MIT)</p>
<p>Copyright (c) 2015 Pareto Software, LLC DBA Simplemaps.com</p>
<p>Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the “Software”), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:</p>
<p>The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.</p>
<p>THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.</p>
<h4>DB-IP City Lite</h4>
<ul>
<li>File: downloaded into wp-content/uploads/zenmarkup-pa/dbip-city-lite.mmdb at runtime (not bundled in the plugin .zip)</li>
<li>Source: https://db-ip.com/db/lite.php (distributed via the dbip-city-lite npm package on jsDelivr CDN)</li>
<li>License: Creative Commons Attribution 4.0 International (CC-BY 4.0) — https://creativecommons.org/licenses/by/4.0/</li>
<li>Attribution: IP Geolocation by DB-IP — https://db-ip.com</li>
</ul>
<h4>GeoIP2 PHP API</h4>
<ul>
<li>Files: includes/vendor-scoped/GeoIp2/</li>
<li>Source: https://github.com/maxmind/GeoIP2-php</li>
<li>License: Apache License 2.0 — https://www.apache.org/licenses/LICENSE-2.0</li>
<li>Copyright: 2013-2024 MaxMind, Inc.</li>
<li>Bundled with a prefixed namespace (ZMPA\Vendor\GeoIp2) so it cannot collide with other plugins shipping the same library.</li>
</ul>
<h4>MaxMind DB Reader</h4>
<ul>
<li>Files: includes/vendor-scoped/MaxMind/</li>
<li>Source: https://github.com/maxmind/MaxMind-DB-Reader-php</li>
<li>License: Apache License 2.0 — https://www.apache.org/licenses/LICENSE-2.0</li>
<li>Copyright: 2014-2024 MaxMind, Inc.</li>
<li>Bundled with a prefixed namespace (ZMPA\Vendor\MaxMind) so it cannot collide with other plugins shipping the same library.</li>
</ul>


ZenMarkup Privacy Analytics

Cookie-free, self-hosted analytics for WordPress. GDPR-ready by default, no consent banner, no external services.

Statnive – Privacy-first Analytics + Revenue Reports for WooCommerce vs ZenMarkup Privacy Analytics