ClickPatrol Click Fraud Protection

Description

ClickPatrol Click Fraud Protection is the official WordPress plugin for ClickPatrol. After you paste your UID, it loads the ClickPatrol measurement script so paid traffic can be classified as legitimate or suspicious.

That classification is what ClickPatrol uses to spot click fraud, bots, and other invalid ad clicks. It is not limited to Google Ads. The same site tag feeds the networks you connect in the ClickPatrol dashboard, including Google Ads, Meta, Microsoft Ads, LinkedIn, TikTok, Pinterest and DV360. How protection is applied differs per network and is configured in the account, not inside this plugin.

The plugin does not change your page content. It does not load the script until an administrator saves a UID.

Use it when you want PPC click fraud classified on WordPress without editing theme files, including Google Ads click fraud, or when you need the same ClickPatrol tag you would otherwise add in Google Tag Manager.

What the loader sends

  • UID, current page query string, page URL, first-party visitor id, first-party session id
  • Optional: restore a Google Ads GCLID from a vd parameter (Safari/ITP)
  • Optional: extend the lifetime of existing first-party advertising cookies, per provider, all off by default

Account and pricing

A ClickPatrol account is required. Create one at dashboard.clickpatrol.com/register. Plans live on clickpatrol.com/pricing. A 7-day trial is available there. A card is required for verification only (a one-time €0.01 charge). You are not billed during the trial.

Highlights

  • Official WordPress loader for the ClickPatrol measurement script
  • Settings page explains how to create an account, find pricing, book a demo, and copy the UID
  • UID is saved in WordPress; no theme edit required
  • Works behind page caches because the query string is read in the browser
  • First-party cp_visitor_id (400 days) and cp_session_id (1 day)
  • Reloads on history changes so SPA-style page transitions still send a hit

External services

This plugin connects to ClickPatrol to classify advertising traffic on public pages. That classification is needed so the site owner’s ClickPatrol account can mark paid clicks as legitimate or suspicious.

It sends the ClickPatrol UID, current page URL, page query string (this can include advertising parameters such as gclid or UTM values), first-party visitor id, and first-party session id every time a public page loads after an administrator has saved a UID in Settings ClickPatrol. The ClickPatrol host also receives the visitor IP address, user agent and referrer as part of that request. Nothing is sent until a UID is saved. After history changes the same request is sent again.

The measurement script is loaded from https://trck-002.clckptrl.com/. That host is operated by ClickPatrol.

Optional settings, all off by default: if GCLID recovery is enabled, the plugin may write a _gcl_aw cookie from a vd URL parameter. If a cookie-extend group is enabled, the plugin may rewrite the max-age of cookies that already exist for that provider.

This service is provided by ClickPatrol: terms of use, privacy policy.

You should mention ClickPatrol in your own site privacy policy. A suggested paragraph is available under Tools Privacy after this plugin is active. That text is an example, not legal advice.

Screenshots

Installation

  1. Install and activate the plugin.
  2. Open Settings ClickPatrol.
  3. Create a ClickPatrol account if you do not have one: register.
  4. Copy Your Unique ID from the dashboard: Integration Google Tag Manager.
  5. Paste the UID, save, and open a public page. Add ?source=f to force a test classification.

FAQ

Do I need a ClickPatrol account?

Yes. This plugin only loads the measurement script. Classification, blocking, and reporting happen in your ClickPatrol account. Create an account at dashboard.clickpatrol.com/register. Plans: clickpatrol.com/pricing.

Where do I find my UID?

Sign in at dashboard.clickpatrol.com. Open Integration, then the Google Tag Manager tab, and copy Your Unique ID. The same ID is used for this plugin.

Which ad platforms does this cover?

The plugin classifies visits on your WordPress site. ClickPatrol can use that classification on the networks you connect in the dashboard, including Google Ads, Meta, Microsoft Ads, LinkedIn, TikTok, Pinterest and DV360. The plugin does not log in to those networks itself. How blocking or exclusion works differs per network and lives in the ClickPatrol account.

Can I use this for PPC click fraud, not only Google Ads?

Yes. PPC click fraud on Meta, Microsoft Ads and the other connected networks uses the same site classification. Google Ads click fraud is one of those cases, not the only one.

Does this replace Google Tag Manager?

It replaces the ClickPatrol GTM tag on WordPress. It does not replace your GTM container, GA4 tags, or audience wiring. If you already fire the official ClickPatrol GTM tag on this site, keep this plugin off.

Does the plugin change my website content?

No. It enqueues one local loader script. That loader then requests the ClickPatrol measurement script.

Is ClickPatrol a substitute for legal advice on GDPR or CCPA?

No. ClickPatrol publishes a privacy policy and terms of use. Your own compliance depends on your setup, consent tools, and counsel.

Reviews

There are no reviews for this plugin.

Contributors & Developers

“ClickPatrol Click Fraud Protection” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.2.7

  • Replace directory screenshots so the listing no longer serves the cropped first set.
  • Tested up to WordPress 7.1.

1.2.6

  • Document the ClickPatrol measurement host, the data sent, and the terms of use and privacy policy links.
  • Prefix PHP, JS and option names with clickpatrol_cfp so they stay unique.

1.2.5

  • Split Plugin URI (install docs) from Author URI (clickpatrol.com) so Plugin Check accepts the headers.

1.2.4

  • Tested up to WordPress 7.0 so the listing stays eligible in directory search.

1.2.3

  • Listing and settings copy now name Meta, Microsoft Ads, LinkedIn, TikTok, Pinterest and DV360. Google Ads is one connected network, not the only one.
  • Re-sanitize UID and flags on read, and lock both options to manage_options.

1.2.2

  • Readme: name the Google Ads click fraud and PPC click fraud queries once, in plain language.

1.2.1

  • Directory listing: display name, short description, and five existing tags aimed at click-fraud and Google Ads search.

1.2.0

  • Settings page: account signup, pricing, demo, dashboard, and UID location.
  • Optional GTM extras: GCLID recovery from vd, cookie lifetime extension per provider (all off).
  • Loader also fires after history changes and back-forward cache restores.

1.1.0

  • Enqueue a local loader file instead of an empty script handle.
  • Send u, visitor_id, and session_id so the request matches the official GTM tag.
  • Document the ClickPatrol host, data, terms, and privacy policy.
  • Add a suggested privacy-policy paragraph and uninstall cleanup.

1.0.2

  • Fixed text domain mismatch by aligning folder, header, and function calls to clickpatrol-tag.
  • Moved translators comment to the exact line above the placeholder string.

1.0.1

  • Coding standards: replaced heredoc, added translators comment, updated “Tested up to”.

1.0.0

  • Initial release.