ClearStat – Privacy-Friendly Local Analytics

Description

ClearStat shows what is working on your WordPress site without sending visitor analytics to an external analytics account. First-party activity is stored in purpose-built tables in your WordPress database and reported inside wp-admin.

There is no Google Analytics property to configure, no ClearStat account required for Free, and no ClearStat product telemetry.

WordPress analytics that answers useful questions

• Overview: see views, activity, conversions, trends, top content, traffic sources, and devices at a glance.
• Content analytics: find the posts, pages, and public content attracting useful activity.
• Traffic sources: understand direct, search, social, email, referral, and unknown traffic.
• Campaign tracking: compare validated UTM source, medium, campaign, term, and content dimensions.
• Activity and conversions: measure page views, outbound clicks, downloads, email clicks, phone clicks, site searches, 404 views, and supported form completions.
• Technology reports: compare device, browser, operating system, and screen-size groups.
• WordPress dashboard widget: check cached headline numbers without opening the full report.
• CSV exports: download bounded report tables with spreadsheet-formula protection.

Privacy-first by design

Choose the measurement mode that fits your site:

• Consent-aware continuity: counts identifier-free activity until your supported consent signal is affirmative, then uses a random first-party HttpOnly cookie for estimated visitors and 30-minute visits.
• Strict identifier-free totals: records eligible views and activity without cookies or persistent visitor identifiers. Visitor, visit, funnel, and attribution metrics remain unavailable instead of being presented as false zeros.
• Acknowledged custom legal basis: enables local continuity only after an administrator accepts responsibility for the site’s legal basis and notices.

ClearStat never stores raw IP addresses or full User-Agent strings in analytics tables and does not fingerprint visitors. Query strings are excluded from stored paths except for validated campaign dimensions. Administrators, known bots, Do Not Track requests, and sensitive paths are excluded by default.

ClearStat provides privacy-conscious defaults and controls, but no plugin can guarantee legal compliance for every site or jurisdiction. Site owners remain responsible for their configuration, notices, consent tooling, and legal basis.

Your data stays under your control

• Configure raw-event and aggregate retention.
• Inspect collection, aggregation, database, and privacy status in Data Health.
• Purge a date range or delete all analytics with explicit confirmation.
• Choose whether analytics tables are preserved or removed on uninstall.
• Keep multisite settings, data, jobs, identifiers, and permissions isolated per site.

Free collection, storage, reporting, exports, and privacy controls run on your WordPress site. Free does not contact a ClearStat licence or update service.

Read the ClearStat documentation · Get support · Review the privacy boundary

Privacy

Strict mode stores no visitor or visit identifier and does not use cookies, local storage, fingerprinting, raw IP addresses, or full User-Agent strings. Visitor- and visit-dependent metrics are unavailable in this mode.

Consent-aware mode can issue a random first-party HttpOnly cookie only after an affirmative supported consent signal. Tables store a rotating site-local HMAC, never the raw cookie value.

Free sends no analytics, configuration, or product telemetry to ClearStat or WPGeared. Query strings are excluded from stored page paths apart from validated campaign dimensions. Sensitive endpoints and parameters are suppressed or stripped.

Uninstall preserves analytics tables by default. The Data Management page provides an explicit delete-on-uninstall choice. Short-lived report caches and abuse counters may expire naturally after uninstall and contain no raw visitor identifiers.