PixelDigital Insights

Description

Understand how visitors use public pages on your WordPress site. Explore measured page views, clicks, scroll depth, active time and heatmaps in your administration area.

Created by PixelDigital.sk. Free GPL software: no subscription, upgrade or API account. No automatic advertising or author backlink is added to your public site.

• Overview with trends, device categories and broad referral categories.
• Click, sampled cursor and scroll heatmaps filtered by page, device and revision.
• Non-interactive preview of the current page with adjustable overlay intensity.
• Separate test visits without inflating production reports.
• Built-in opt-in consent or integration with an existing consent manager.
• Sampling, excluded page IDs and 7/30/90-day retention.
• Administrator-only reports with capability and nonce checks.

The current interface is Slovak. English installation and technical guides are included. The plugin works independently of the PixelDigital theme.

Privacy

No analytics request is sent before consent. DNT and Global Privacy Control disable collection. Logged-in users are excluded except explicit administrator test visits. No analytics leaves your site for PixelDigital.sk or another service.

Records contain coarse coordinates, structural paths, page IDs, viewport size, scroll, active time and a broad source category. No field values, passwords, keystrokes, page text, URL parameters, persistent visitor IDs or session videos are recorded. Views are not linked across pages. Forms, editable fields, dialogs, private/password-protected content and WooCommerce account/cart/checkout pages are excluded. Exclude whole pages for sensitive portals and mark custom private blocks with data-pdhm-private.

Raw IP addresses are not stored by the plugin. A salted hourly HMAC of the client address (IPv6 grouped by /64) is used only for rate limiting and expires after two hours, subject to scheduled cleanup. Hosting logs are separate. Built-in consent uses localStorage pdhm_consent_v1 for up to 180 days and offers withdrawal. In external mode your consent manager stores/restores the choice. Review the suggested privacy policy text and adapt it to your site; this plugin does not certify legal compliance.

Scope and limits

Views are not unique people. Heatmaps overlay today’s layout, not an archived screenshot. JavaScript-only content, menus and redesigns may reduce accuracy. Cursor movement is not eye tracking.

Storage is bounded at 20,000 views. Daily production admissions are ceil(20,000 / retention days), e.g. 667 with 30-day retention. Tests allow 100/day and share total capacity. Reports process the newest 5,000 matching views and 3,000 heatmap regions, displaying a notice when truncated. These are resource safeguards, not paid feature gates. Reduce sampling/retention to suit your host. Hourly WP-Cron deletes up to 500 expired records; low traffic can delay it.

Public endpoints can receive fabricated traffic. Signed tokens, validation and atomic limits reduce abuse but do not replace a host firewall or prove human visits. Attackers may consume quotas. Collection pauses at capacity or on storage failure.

Requires MySQL/MariaDB with InnoDB and table creation permissions; SQLite is not supported. Site and WordPress URLs must have the same origin. Activate individually on multisite sites; network activation is not supported. The plugin does not weaken CSP/frame security headers to enable its preview.

Full operation and integration details: docs/USER-GUIDE.md and docs/DEVELOPER.md in the plugin package.

Source code

The complete human-readable source is included in this plugin package. JavaScript and CSS are shipped unminified and are loaded directly from these files:

• assets/admin.js and assets/admin.css: administration dashboard and heatmap display.
• assets/tracker.js: consent-aware collection and public consent controls.
• assets/consent.css: public consent controls.

These are the original editable sources, not generated bundles. There are no third-party JavaScript/CSS libraries, compilation tools or required build steps. To develop the plugin, edit the included PHP, JavaScript and CSS files directly. See docs/DEVELOPER.md for the source layout and validation steps. All source files are covered by the included GPL-2.0-or-later license.