ClickGuardian — Click Fraud Protection

Description

ClickGuardian analyses visitor behaviour, device signals and form interactions to identify fraudulent clicks, bots, and fake leads hitting your paid campaigns.

This plugin injects the ClickGuardian tracking script into your site and gives you a clean WordPress admin UI to configure it — no theme editing, no header code pasting.

Features

• One-field setup — paste your proj_XXX Project ID and go.
• Master on/off switch for tracking.
• Lead / form signal detection with built-in integrations for Gravity Forms, WPForms, and Contact Form 7.
• Exclude logged-in admins and any other user roles from tracking.
• Exclude specific URL paths (with wildcards).
• Test Connection button verifies your Project ID is accepted by the ingest API.
• Regional ingest (EU / US / Global) for latency-sensitive sites.
• Cookieless by design — no consent banner required for fraud prevention (GDPR Art 6(1)(f)).

Requires a ClickGuardian account. You can sign up and create a project at https://app.clickguardian.ai.

External services

This plugin relies on two ClickGuardian services:

1. Tracker script delivery — https://cdn.clickguardian.ai/v1/track.js
   The tracker JavaScript is fetched from our CDN and runs in visitors’ browsers. It collects behavioural signals (mouse, keyboard, form interaction) and anonymous technical fingerprints to identify fraudulent clicks. Storage: sessionStorage only, no cookies.

2. Event ingest — https://ingest.clickguardian.ai/v1/ingest
   The tracker POSTs compact JSON payloads containing the signals above, a pseudonymous session ID, timestamp, page URL, and your Project ID.

Data is processed under GDPR Article 6(1)(f) legitimate interest (fraud prevention).

• Terms: https://clickguardian.ai/legal/terms
• Privacy: https://clickguardian.ai/legal/privacy

The plugin does not send any data to these services except when a site visitor loads a page, and during the Test Connection action in the plugin settings (which sends one synthetic pageview to validate the Project ID).

Source code and build tools

This plugin is open source (GPLv2+). The bundled file admin/build/index.js is generated from React sources shipped alongside it under admin/app/.

• Source: the human-readable React source for the admin UI is included in the plugin zip at admin/app/ (entry point admin/app/index.jsx).
• Build tool: @wordpress/scripts (webpack-based, GPL-compatible).
• Build command from the plugin directory: npm install && npx wp-scripts build --webpack-src-dir=admin/app --output-path=admin/build.

The bundle in admin/build/index.js contains no third-party libraries — it depends only on WordPress-provided script handles (wp-element, wp-components, wp-i18n), which WordPress core loads separately.