GDPR and Analytics on WordPress: A Plain Guide
The GDPR is about personal data, not about the act of counting visits. Here is what that means for your WordPress traffic reports, and where the cookie banner rules sit.
Understand who really visits your WordPress site: real people versus bots, where they come from, and what they actually click.
Powered by DevDome AnalyticsThe GDPR is about personal data, not about the act of counting visits. Here is what that means for your WordPress traffic reports, and where the cookie banner rules sit.
You cannot stop every scraper, but you can make your site expensive to copy and easy to defend. Here is the order that actually works, starting with seeing them.
An empty Realtime report is rarely a Google problem. Here are the four causes that explain almost every case, in the order that takes the least time to check.
Cloudflare's free bot toggle is genuinely useful and genuinely limited. Here is an honest look at what it stops, what it never tells you, and where it leaves a gap.
Most bot advice starts with blocking, which is the step most likely to hurt you. Here is the order we use on our own sites: measure, harden, filter, and leave good crawlers alone.
On one small site we run, automated hits outnumbered humans by more than two hundred to one. Here is who is crawling, what it does to your stats, and what blocking really involves.
A large share of what your analytics calls visitors arrives from hosting providers rather than homes and phones. Here is what that traffic is, measured on real sites.
WordPress ships with no live visitor view, so the people reading your site right now are invisible by default. Here is how to watch them arrive, page by page.
Every click that leaves your site is invisible to WordPress by default. Here are three ways to record those clicks, and how much of the truth each one actually captures.
UTM tags are five short labels you add to a link so your analytics knows where a visitor came from. Here is how to use them without wrecking your own data.
Fake referrers pad your traffic and skew every report that uses it. Here is why they exist, how to recognize them, and why filtering beats blocking every time.
A high bounce rate is not always a problem, and sometimes it is not even real. Here is what the number measures, what inflates it, and when to leave it alone.
The banner is not about analytics. It is about what your site stores on a visitor's device. Change that and the analytics reason for a banner can disappear.
Cookieless analytics counts your traffic without writing anything to a visitor's browser. Here is how that works, what it cannot tell you, and what it buys you.
Jetpack Stats is a solid free view counter for a personal blog. DevDome answers the harder questions: how much of that traffic was human, and which clicks survived.
Matomo gives you every report and full data ownership, if you maintain it. DevDome gives you fewer numbers, no server to run, and a visible split between humans and bots.
Both are hosted, cookieless and banner-free by design. The split is Fathom's polished simplicity against DevDome's WordPress-native clicks and visible bot reporting.
Both are cookieless and skip the consent banner. The real differences are open source versus WordPress-native, and how each one handles bots and blocked clicks.
GA4 is free at any scale and plugs into Google Ads. DevDome is simpler, cookieless by default, and separates humans from bots. Here is where each one actually wins.
A growing share of visitors block the scripts your analytics rely on, so their clicks never register. Here is why, and how to count them anyway.
Telling a bot from a real reader comes down to a handful of signals. Here is what to look for and how to stop counting machines as your audience.
If your traffic looks great but conversions do not, the gap is usually bots. Here is what inflates the count and how to measure real people instead.
All six avoid the cookie banner. They differ in where tracking runs and how they handle bots. Here is the field compared, with our criteria and our reasoning shown.
Roughly half of all web traffic is automated, and a big slice is hostile. Here is what the data says and how much of it is hiding in your analytics.