SiteStats

Collect

• A 1 KB script: no cookies, no local storage, no fingerprinting; the visitor id is a daily salted hash of the anonymised IP and user agent that cannot be reversed and changes every day
• Or import nginx / Apache logs (combined format, .gz too) in chunks; the same visitor and session logic applies
• Bots filtered, roles and IPs excluded, optional Do Not Track / Global Privacy Control
• Server-side helpers: sitestats_track(), sitestats_event(), do_action('sitestats_sale', …)

Read

• Dashboard: visitors, views, sessions, bounce rate, time per session, live visitors, a chart by hour / day / month, comparison with the previous period
• Pages: views, visitors, entries, exits, time on page, scroll depth, 404s and errors, authors, top posts
• Sources: direct / search / social / referral / campaign channels, referrers, UTM source, medium, campaign, term, content
• Audience: a countries map, devices, browsers, operating systems, screen sizes
• Goals: page, event, outbound click, form, download, scroll depth or purchase; conversion rates and values; funnels that count sessions step by step
• Events: custom events from sitestats("name", {props}, value) or data-st-event, automatic outbound / download / form events
• Commerce: WooCommerce orders attributed to the visitor's session and source; revenue, orders, average order, conversion per source, campaign, country and product
• Per-post stats in the editor sidebar, a Views column in the posts list, a dashboard widget

Share & alert

• Weekly email report (and a PushPress notification when installed), spike alerts by email, Slack or webhook
• A public, optionally password-protected stats page on its own URL
• CSV export of pageviews, events and sales; retention with daily totals kept beyond it

Private by design

• No IP addresses stored, no cookies, no third party; geolocation from a local database (one-click DB-IP Lite install or your own GeoLite2 file)
• Everything lives in this WordPress database, so data residency follows your hosting