Koko Analytics – Privacy-Friendly WordPress Analytics
Koko Analytics is a privacy-friendly and lightweight Google Analytics alternative for WordPress sites. It is a plug and play solution to get GDPR compliant insights into your website visitors without requiring any third-party services. Why choose Koko Analytics? Important insights Koko Analytics provides you with simple and effective analytics. There are no complicated reports to dig through. All the important metrics are visible from a quick glance at your analytics dashboard, right inside your WordPress admin. Privacy-friendly analytics Koko Analytics is a privacy-friendly solution for WordPress. It can be used without any cookies, no personal data is processed or stored and nothing is shared with any third-party. That makes it suitable for GDPR, CCPA, and PECR-compliant website statistics. Lightweight website statistics Koko Analytics is lightweight. It adds less than 1 kilobyte of data to your pages and is fully compatible with all kinds of caching setups. WordPress is bypassed entirely for its collection endpoint, making the impact on your site’s performance as close to zero as possible. Open source analytics Koko Analytics is open source released under the GPL license, just like WordPress itself. The source code is publicly available. Everyone has the right to run, study, share or modify the source code. Features WordPress analytics dashboard – View your website statistics directly inside WordPress admin. Top posts and pages – See which content gets the most visits. Referrer statistics – Find out which websites send traffic to your site. Path-based tracking – Track statistics for any URL, including archives and search pages. Returning visitor detection – Reliably detect returning visitors without cookies. Exclusion rules – Exclude visits from selected WordPress user roles or IP addresses. Historical data imports – Import statistics from Jetpack Stats, Plausible Analytics, Burst Statistics, Statify, WP Statistics, Independent Analytics, or SlimStat Analytics. Automatic data cleanup – Remove historical data older than a chosen number of months or years. Popular posts output – Show your most visited posts or pages with a widget, Gutenberg block, or shortcode. Pageview counter – Show the total number of pageviews for a page with a shortcode or Gutenberg block. Koko Analytics Pro Koko Analytics Pro adds more reporting options for sites that need deeper analytics. Country statistics – See which countries your visitors come from. Technology reports – View browser, operating system, and device statistics. Email reports – Receive periodic analytics reports in your inbox. UTM Campaigns – Measure the performance of your marketing campaigns. Custom event tracking – Track outbound link clicks, contact form submissions, add-to-cart actions, and more. Traffic spike alerts – Get notified by email when traffic changes quickly. View the Koko Analytics live demo or see Koko Analytics Pro pricing.
VisitStats
VisitStats is a lightweight, privacy-first analytics plugin for WordPress. All your data stays in your own WordPress database — we never see it, no third party sees it. Why VisitStats? No cookies, no consent banner needed. Tracking is GDPR-friendly by default. Self-hosted. All data lives in your WordPress database. No external service, no Automattic, no Google. Lightweight. Frontend tracker is under 2KB. Loads asynchronously. Won’t slow your site. Zero setup. Install, activate, done. No theme edits, no tag manager, no JS snippets. Built for WordPress. Reports appear inside your WordPress dashboard — no separate app to log into. Recommended for sites with up to ~10,000 daily pageviews (around 95% of WordPress sites). For very high-traffic sites, consider dedicated analytics services. What you get (all free, all the time): Real-time visitor count — see who’s on your site right now Pageviews, unique visitors, sessions Top pages Top traffic sources (direct, search, social, AI, referral) Top referrers — actual URLs sending you traffic Device breakdown (desktop, mobile, tablet) Browser & operating system detection Configurable data retention from 1 day up to 1 year Date range views: today, 7 days, 30 days, 90 days, 1 year Engagement signals (scroll depth, time on page) Cookieless visitor identification using daily-rotating salt + SHA-256 hashing Bot filtering with built-in bot signature detection Optional administrator / logged-in user exclusion Honors Do Not Track browser signal Automatic data pruning to keep your database lean Rate-limited tracking endpoint protects against abuse IP anonymization before hashing — actual IPs never stored Privacy by design VisitStats never: Sets cookies Stores IP addresses Sends data to third parties Fingerprints visitors Tracks across days Visitor identification uses a daily-rotating salt hashed with the (anonymized) IP and User Agent to count unique visits within a 24-hour window. The salt regenerates every 24 hours, making cross-day tracking impossible. This is the same approach used by Plausible Analytics and Fathom Analytics. For developers Clean REST API at /wp-json/visitstats/v1/ Filter hooks for customizing behavior (rate limiting, bot detection, etc.) PSR-style class organization No external dependencies — pure WordPress core
