PineCount – Analytics, Page Views, Live Visitors, AdSense

Description

PineCount records pageviews in your site’s own database and shows them in a clean dashboard inside wp-admin. Nothing is sent to a third-party analytics service.

It works with full-page caching: a small script reports each pageview from the browser, so cached pages are counted too.

What you get

• Pageviews, visitors, sessions and views per visit, by hour, day, week or month.
• Top pages, entry pages, referrers, traffic sources, devices and on-site searches.
• Comparison with the previous period.
• A dashboard widget and an admin bar counter for today’s numbers.
• Optional live visitors, using the Redis server your object cache already uses.
• Optional Google AdSense earnings, page views, RPM and CTR next to your traffic.
• A read-only REST API, protected by a key you generate, for pulling reports into other tools.
• Data retention from 30 days to 5 years, and excluded paths with wildcards.

Privacy

• No cookies and no persistent visitor ID. A visitor is identified only by a hash of their IP address and browser, mixed with a secret salt that changes every day, so nobody can be followed from one day to the next. The IP address itself is never stored.
• Sessions use the browser’s per-tab session storage, which is cleared when the tab closes.
• Logged-in users are not tracked unless you turn that on.
• You can honour the browser’s Do Not Track signal from the settings.
• All data stays in your WordPress database.

External services

This plugin connects to Google only if you choose to connect Google AdSense in its settings. Until you do, it makes no external requests.

Google OAuth (accounts.google.com, oauth2.googleapis.com) is used to authorise read-only access to your AdSense account.

• When you click “Connect with Google”, your browser goes to Google’s sign-in page with your OAuth client ID.
• After you approve, the plugin sends your OAuth client ID, client secret and the authorisation code to Google to get a refresh token. The token is stored encrypted in your database.
• Before each report request, the plugin sends the client ID, client secret and refresh token to get a short-lived access token.
• When you click “Disconnect”, the refresh token is sent to Google to be revoked.

Google AdSense Management API (adsense.googleapis.com) is used to read your earnings.

• While connected, the plugin requests today’s estimated earnings, page views and clicks for your site every 10 minutes, and the last 7 days once a day, so Google’s later corrections are picked up.
• It also lists your AdSense accounts and sites once when you connect, to find the site that matches this website.
• Only your access token and the account and site IDs are sent. No visitor data is ever sent to Google.

Google’s terms and privacy policy:

• Google Terms of Service: https://policies.google.com/terms
• Google APIs Terms of Service: https://developers.google.com/terms
• Google Privacy Policy: https://policies.google.com/privacy

Technical details