=== ConvertNow Analytics: Privacy Friendly Stats, Bot Filtering and AI Traffic ===
Contributors: prateekzare
Donate link: https://paypal.me/prateekzare16
Tags: analytics, statistics, ai traffic, bot detection, privacy
Requires at least: 6.2
Tested up to: 7.1
Requires PHP: 7.4
Stable tag: 1.7.0
License: GPLv2 or later
License URI: https://www.gnu.org/licenses/gpl-2.0.html

Free WordPress analytics that count real people, not bots. See your ChatGPT and AI traffic. Cookieless, GDPR friendly, no account needed.

== Description ==

**ConvertNow Analytics is free, privacy friendly WordPress analytics that counts real visitors only.** Bots, AI crawlers, SEO tools and fake browsers are filtered out and shown to you by name, so every number on your dashboard is a person.

Here's the problem. Most analytics tools count anything that loads a page, and a lot of what loads pages today is not human: uptime monitors, SEO scanners, screenshot services and a fast growing crowd of AI bots. Your stats can show several times the traffic you really have.

ConvertNow fixes that. A visit only counts when the page actually appears on a screen and someone moves, scrolls, taps or stays for a moment. Everything left out is kept and named under Filtered Traffic, so you can always check what was removed and why.

Want to see it first? Press **Live Preview** above for a full demo with 90 days of sample traffic.

= See your AI traffic: ChatGPT, Perplexity, Gemini, Claude and Copilot =

Find out which AI assistants send you real readers and which pages they recommend. Each assistant is its own channel, with its share over time and whether AI traffic is growing faster than the rest of your site. Next to that, see how often GPTBot, ClaudeBot, PerplexityBot and other AI crawlers read your content, and which pages they read most but never send anyone to.

= Bot traffic, filtered and explained =

A chart of people against machines, every refused request by name and hour, and the pages bots hit most. Crawlers, uptime monitors, headless browsers and traffic from cloud servers are refused before anything is stored, so they never pollute your numbers.

= Every WordPress stat you need, in one dashboard =

* Visitors, visits, pageviews, real bounce rate and time on page
* Top pages and posts, landing and exit pages, and how far people read
* Referrers, search engines, social networks and UTM campaigns
* A world map of your readers, plus languages, browsers and devices
* Goals, funnels, journeys, retention, segments and cohorts
* Traffic by author and content type for blogs and publishers
* WooCommerce and Easy Digital Downloads revenue by channel and page
* Outbound link, download, email and phone click tracking
* Broken link (404) and site search reports
* A traffic calendar, engagement charts and a chart builder
* Notes on the chart for launches, newsletters and redesigns
* Light and dark mode, and every screen works with a keyboard and screen reader

= AI insights that run on your own server =

Press one button and get a plain English brief of what changed: unusual days and their likely cause, sources that grew or dropped, pages that are rising or fading, pages people love but few find, and a 30 day forecast. Every finding is tested against your own traffic, so it only speaks up when something really happened. No chatbot and no outside service is involved.

= Built for agencies too =

Switch on Agency mode and the dashboard, shared link and emails carry your name, logo and colours. Pick one of seven palettes, each in light and dark, or build your own. Give clients a read only login that shows only the reports you choose, with a note from you and a Help link to your support. Set it up once, export it, and import it on every other client site. All free.

= A privacy friendly Google Analytics alternative =

No cookies, nothing stored on the visitor's device, and no raw IP addresses kept. Visitors are counted with a daily changing anonymous code, so nobody is followed from one day to the next. Your data stays in your own WordPress database and is never sent to anyone. Many sites run it without a cookie banner for analytics.

= Fast, light and works with your setup =

The tracker is about 1.5 KB and loads from your own site, so most ad blockers leave it alone. It works with page caching and CDNs, tells WP Rocket, LiteSpeed Cache, Perfmatters, SiteGround Optimizer, FlyingPress, Autoptimize, W3 Total Cache and Hummingbird not to delay it, and reads visitor countries from Cloudflare when your site sits behind it. Reports read from daily summaries, so a year of data loads as fast as a day.

= Stay in the loop without logging in =

* A summary email every day, week, two weeks or month, with what stood out and your key numbers
* Alerts by email, Slack or Discord when traffic drops, spikes or tracking stops
* A tracking health check that tests itself every hour and tells you if something is wrong
* A read only link to share your dashboard, plus CSV and JSON export
* Share cards: save an image of your AI traffic or your year in real people
* Today's visitors and bots refused, right in the admin bar

= No account. No upsell. Nothing locked. =

There is no paid version, no license key and no account to create. Every feature is free for every site.

**Links:** [Documentation](https://convertnow.tools/convertnow-analytics/) · [Support forum](https://wordpress.org/support/plugin/convertnow-analytics/) · [contact@convertnow.tools](mailto:contact@convertnow.tools)

== Installation ==

1. Go to **Plugins, Add New** and search for **ConvertNow Analytics**.
2. Click **Install Now**, then **Activate**.
3. Open **ConvertNow** in the admin menu.

That's it. No key, no account and no setup. Counting starts right away, and the map fills in on its own because country data is built in.

Your own visits are not counted while you are logged in as an administrator or editor, so the numbers start at zero until real readers arrive. Want to look around first? Switch on **Test mode** at the top of the Stats screen to fill every report with a sample coffee shop, then switch back to Live whenever you like. Your real visits keep counting the whole time.

== Frequently Asked Questions ==

= Is it a good Google Analytics alternative? =

For most WordPress sites, yes. It covers the reports people open Google Analytics for, like visitors, pages, referrers, campaigns, countries, devices, goals, funnels and shop revenue, right inside WordPress, with no cookies and no data sent anywhere. It does not build advertising audiences or track people across sites, on purpose.

= Is it GDPR friendly? Do I need a cookie banner? =

It sets no cookies, stores nothing on the visitor's device, never keeps raw IP addresses and keeps all data on your own server. That is why many sites use it without a consent banner for analytics. Rules differ by country and by what else your site runs, so check with your own legal advisor.

= Can it track traffic from ChatGPT and other AI assistants? =

Yes. Visits from ChatGPT, Perplexity, Gemini, Claude, Copilot, DeepSeek and other assistants get their own AI channel, with the pages each one sends people to. AI crawlers like GPTBot and ClaudeBot are kept separate and shown under Filtered Traffic, because a crawler is not a reader.

= What is the difference between an AI visitor and an AI crawler? =

An AI crawler is a bot that reads your pages to train or feed an AI. It is refused and listed by name. An AI visitor is a real person who read an answer in ChatGPT or another assistant and clicked through to your site. Only real people count as traffic.

= Will it slow down my site? =

No. The tracker is tiny, there is no outside script to load, and a visit is recorded before the rest of WordPress starts. Reports read from daily summaries, so the dashboard stays quick on large sites.

= Does it work with caching plugins, ad blockers and Cloudflare? =

Yes. Cached pages still report their visits, popular speed plugins are told to leave the tracker alone, and the tracker loads from your own site so most ad blockers do not stop it. Behind Cloudflare, visitor countries come straight from Cloudflare. Tracking health checks your live pages and tells you if anything is still in the way.

= Does it work with WooCommerce? =

Yes. WooCommerce and Easy Digital Downloads orders are linked to the visit that produced them, so you see revenue by channel, campaign, landing page and author. Totals follow your shop's own rules, so they match what WooCommerce reports.

= Why are my numbers lower than Jetpack, Google Analytics or my host's stats? =

Usually for good reasons:

1. **Bots are removed.** ConvertNow refuses crawlers, monitors and AI bots that other tools partly count.
2. **A visit needs a person.** A page has to appear on screen and see some sign of a real reader.
3. **Your team is not counted.** Logged in administrators and editors are skipped by default.
4. **It started counting when you installed it.** Earlier days are empty, not quiet.

Filtered Traffic shows exactly what was left out, so a lower number can be checked rather than taken on trust.

= Is the AI insights screen actually AI? =

It is machine learning, not a chatbot. Statistical models are fitted to your own traffic and every finding has to pass a test before it is shown. It all runs on your server and nothing is sent to an AI service.

= Can I use it on client sites? =

Yes. Agency mode puts your name, logo and colours on the dashboard, shared link and emails, and gives clients a read only login limited to the reports you pick. You can copy the same setup to every client site with export and import. It is free like everything else.

= Do I need an account or a license key? =

No. There is no account, no key, no activation and no paid tier. The few optional background requests the plugin makes are listed under External services below, each with its own switch.

= Can I count returning visitors? =

Yes, but it is off by default. Settings, Tracking, Visitor recognition lets you recognise the same reader for 30, 90 or 365 days. Turning it on changes how visitor data is handled, so update your privacy policy first.

= Can I get alerts in Slack? =

Yes. Add a webhook address under Settings, Alerts. Slack, Discord and most chat tools show the alerts as normal messages.

= Will filtering cloud servers drop my VPN readers? =

A few, possibly. Some VPNs exit from cloud servers that look the same as bots. Those visits are counted under Filtered Traffic, not lost, and there is a switch in Settings if you would rather count them. Safari readers using iCloud Private Relay are recognised and counted.

= Where is my data stored? =

In your own WordPress database, in tables starting with `cnwa_`. Uninstalling keeps your data by default, so a reinstall picks up where you left off. Switch on full removal in Settings to delete everything when you uninstall.

== Screenshots ==

1. Overview: visitors, visits, views, bounce rate and time on page, a traffic chart with notes, and the bots that were left out
2. AI Overview: which AI assistants send you readers, each one's share over time, and AI traffic against the rest of your site
3. Filtered at a Glance: every bot and machine that was refused, how many, and when they came
4. Crawler Analytics: how often GPTBot, ClaudeBot and other AI crawlers visit, and which parts of your site they read
5. AI insights: a plain English brief of what changed, what to do first, and tested findings with their charts
6. Geographic at a Glance: a world map of your readers with top countries and languages
7. Editorial at a Glance: traffic by author and your most read posts
8. Engagement: which pages hold attention, how long people stay and how far they read
9. Funnels: where people drop off on the way to an order or signup
10. Dark mode: Referrers at a Glance with channels, search engines and social networks
11. Share cards: save an image of your AI traffic or your year in real people
12. Agency mode: a client's dashboard with the agency's name, logo, colours and a note for the client

== External services ==

Tracking, reporting, goals, funnels, journeys, retention, segments, cohorts, insights, alerts, country lookups and exports all run on your own server against your own database. There is no activation call, no licence check and no key. Nothing about your visitors ever leaves your site under any setting. The plugin makes the background requests below, and each one can be switched off.

**Apple iCloud Private Relay exit list (on by default)**

Once a week the plugin downloads `https://mask-api.icloud.com/egress-ip-ranges.csv`, the list Apple publishes of the addresses Private Relay traffic leaves from. It is used only so that Safari readers using Private Relay are not refused as data centre traffic. The request sends nothing but your server's own address, the way any download does. Switch it off in Settings, Tracking, Data centre addresses. Apple's terms: [apple.com/legal/internet-services/terms/site.html](https://www.apple.com/legal/internet-services/terms/site.html). Apple's privacy policy: [apple.com/legal/privacy](https://www.apple.com/legal/privacy/).

**Site icons (on by default)**

Icons for the major search engines, social networks and AI assistants ship inside the plugin and need no request at all. For any other referring site, the plugin fetches its icon in the background from the site's own address (its home page and `/favicon.ico`, then the parent domain for a subdomain). When a site refuses requests from servers, the icon is fetched from DuckDuckGo's public icon service at `https://icons.duckduckgo.com/ip3/`, which is told the site's host name and nothing else. Fetched icons are stored under uploads and served from your own site; opening the dashboard requests nothing from anybody else. Switch fetching off in Settings, Display, Site icons (bundled icons still show), or keep it and stop only the DuckDuckGo fallback with the `cnwa_icon_fallback_service` filter. DuckDuckGo's terms: [duckduckgo.com/terms](https://duckduckgo.com/terms). DuckDuckGo's privacy policy: [duckduckgo.com/privacy](https://duckduckgo.com/privacy).

**Alert webhook (off by default)**

If you enter a webhook address under Settings, Alerts, each alert is posted to that address, and only to that address. The request carries the alert's title and sentence, your site's address and a link to the dashboard. Where it goes is the service you chose, under that service's own terms.

**Anonymous usage reporting (off by default)**

If, and only if, you switch this on, the plugin sends one report a month, and one after each plugin update, to convertnow.tools, the author's site, at `https://convertnow.tools/wp-json/cnwa-hub/v1/report`. It exists so the author can see which versions are in use and how the plugin is actually being used, and it is used for nothing else.

It is off on every install. You are asked once, on the plugin's own screen and only after the plugin has a week of your own data, with the exact payload from your site shown to you before you decide. Declining is remembered permanently. If you never answer, nothing is ever sent. You can switch it on or off at any time in Settings, Data retention, Anonymous usage report. Switching it off removes the scheduled event immediately and sends one last request to the same address, carrying only your site address, the install date and the plugin version, which asks convertnow.tools to delete every report your site sent. Nothing is sent after that.

This is the complete payload, and there is nothing else in it:

* Your site address and site name
* The date this plugin was first activated on your site
* Your total pageviews and total visitors for the last 30 days, as two numbers
* The ConvertNow, WordPress and PHP versions, and your site locale

It contains nothing about your visitors: no page paths, no referrers, no IP addresses, no visitor hashes, no user accounts, no email addresses, no post or page titles. The request is sent once every 30 days and once after each update, and a failure is silent.

Terms of service: [convertnow.tools/terms](https://convertnow.tools/terms/). Privacy policy: [convertnow.tools/privacy](https://convertnow.tools/privacy/).

**Requests to your own site**

The daily health check loads your own home page and posts a test beacon to your own collector, both at your own address. Nothing leaves your server.

The country lookup tables ship inside the plugin as plain text files and are read from disk. There is nothing to download and nothing to import.

== Other Notes ==

**Links**

* Plugin home page: [convertnow.tools/convertnow-analytics](https://convertnow.tools/convertnow-analytics/)
* Support by email: [contact@convertnow.tools](mailto:contact@convertnow.tools) or [prateekzare@gmail.com](mailto:prateekzare@gmail.com)
* Support forum: [wordpress.org/support/plugin/convertnow-analytics](https://wordpress.org/support/plugin/convertnow-analytics/)
* Leave a review: [wordpress.org/support/plugin/convertnow-analytics/reviews](https://wordpress.org/support/plugin/convertnow-analytics/reviews/)

**Bundled data**

IP Geolocation by [DB-IP](https://db-ip.com), used under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).

Data centre detection reads two plain text tables built from the [X4BNet datacenter lists](https://github.com/X4BNet/lists_vpn), MIT licensed, plus a short supplement of documented cloud supernets: `assets/data/dc-ipv4.csv` and `assets/data/dc-ipv6.csv`, in the same boundary format as the country tables. The build script is `tools/build-dc-tables.py` in the development sources.

Brand icons in `assets/icons/` come from [SVG Logos](https://github.com/gilbarbara/logos) and [Simple Icons](https://simpleicons.org) (CC0), [Lobe Icons](https://github.com/lobehub/lobe-icons) (MIT) and [Font Awesome Free](https://fontawesome.com) (CC BY 4.0). `assets/icons/CREDITS.txt` lists which is which. Every trademark belongs to its owner; the icons are used only to identify the site a visit came from.

Country lookups read two plain text tables built from the DB-IP IP to Country Lite database: `assets/data/geo-ipv4.csv` and `assets/data/geo-ipv6.csv`. Every line is one boundary, written as an uppercase hex address prefix and an ISO 3166-1 alpha-2 country code, so both files can be opened and read in any text editor. The world map outlines are plain JSON path data at `assets/data/world.json`. Nothing in the plugin is compiled, minified or obfuscated.

== Changelog ==

= 1.7.0 =

**New for agencies and site owners**

* Agency mode: your name, logo and colour palette on the dashboard, shared link and emails, optional full white label, read only client logins limited to chosen reports, a note for clients, a Help link, your own footer line, a reply to address for emails, and settings export and import.
* Colour palettes: seven palettes in light and dark, or a custom palette with live preview and contrast checks.
* Test mode: new sites can preview every report with 90 days of sample data while real visits keep counting.
* Share cards for your AI traffic and your year in real people.
* Admin bar counter for today's visitors and bots, and an optional verified human traffic badge.
* Every screen now uses the full width of the window.
* Accessibility: every chart is named and has a data table, focus is always visible, and both themes pass contrast checks.

**Counting and performance**

* The tracker loads from your own site, so most ad blockers no longer stop it.
* Works with WP Rocket, LiteSpeed Cache, Perfmatters, SiteGround Optimizer, FlyingPress, Autoptimize, W3 Total Cache and Hummingbird.
* Cloudflare countries and verified bots are read directly, and visitor addresses are trusted only from real proxies.
* A database size card with growth, retention estimates and a background Optimise button.
* Country and data centre lists refreshed, October 2026.

= 1.6.6 =

Counting fixes: same page links and the Back button are handled correctly, no pageview is dropped for arriving too soon, two tabs are one visit, each referrer site has one name, channels are stricter and comparisons are exact. AI insights catch source drops and steady AI growth. Adds a What's new window after updates.

= 1.6.5 =

AI insights rebuilt as tested models: unusual days with causes, change points, a backtested forecast, page trends and AI citation gaps.

= 1.6.4 =

Tracking health readable in dark mode, and five new charts on the Calendar screen.

= 1.6.3 =

Summary emails every day, week, two weeks or month, fuller documentation, and SQLite support for the Live Preview.

= 1.6.2 =

Fixes missing names in the Top countries list.

= 1.6.1 =

Customisable report screens, fairer channel credit for later pages, revenue that matches your shop, and new Explore, Engagement, Page Flow, AI and Calendar screens.

= 1.6.0 =

Rebuilds no longer delete older history. Adds a first run checklist, a customisable Stats screen and the llms.txt report.

= 1.5.0 and 1.5.1 =

Tracking health checks, alerts by email or webhook, site icons, iCloud Private Relay support and about a hundred bundled site icons.

= 1.4.0 and 1.4.1 =

Counts people only: cloud servers, headless browsers and pages nobody touched are refused. Filtered Traffic rebuilt.

= 1.3.0 to 1.3.2 =

Revenue reporting for WooCommerce and Easy Digital Downloads, correct counting behind caches and CDNs, and a pageview that has to prove a person was there.

= 1.0.0 to 1.2.3 =

First release with editorial reports, then AI Visibility, insights, an optional usage report and a series of accuracy fixes.

== Upgrade Notice ==

= 1.7.0 =
Agency mode with your branding, colour palettes in light and dark, client logins and settings you can copy between sites. Test mode for new sites. Tracker loads from your own site so fewer readers are blocked. Counts may rise. Settings are kept.

= 1.6.6 =
Fixes counting: same page links, Back button views, dropped pageviews, two tabs as one visit, one referrer name per site, stricter channels and accurate comparisons. Summaries rebuild in the background. Settings are kept.
