Settings and encrypted keys are preserved. The tracked-domain list is filled with this site's domain the first time an administrator opens the admin after the update; non-production environments stop sending data. UTM parameters are now kept in URLs. For WooCommerce, consider switching purchase tracking to server mode. Clear page\/CDN caches after updating.<\/p>","1.1.1":"
WordPress 7.1 compatibility metadata update. Existing settings and API keys are preserved.<\/p>","1.1.0":"
Settings and encrypted keys are preserved. Review report access and consent options, then clear page\/CDN caches. The new consent gate is off by default to preserve current behavior. Public Umami share links are hidden from report viewers until explicitly enabled.<\/p>","1.0.1":"
Fixes first-save API key storage. Existing settings and encrypted keys are preserved.<\/p>","1.0.0":"
Existing settings and API keys are preserved. Clear caches after upgrading. Select Portuguese in the user's WordPress language settings to use the pt_PT interface.<\/p>"},"ratings":[],"assets_icons":{"icon-256x256.png":{"filename":"icon-256x256.png","revision":3728460,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-772x250.png":{"filename":"banner-772x250.png","revision":3728460,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.2.0"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[262246],"plugin_tags":[232,187460,434,214233,286],"plugin_category":[36,45],"plugin_contributors":[197709],"plugin_business_model":[],"class_list":["post-380631","plugin","type-plugin","status-publish","hentry","plugin_section-dashboard-widgets","plugin_tags-analytics","plugin_tags-core-web-vitals","plugin_tags-dashboard","plugin_tags-umami","plugin_tags-woocommerce","plugin_category-analytics","plugin_category-ecommerce","plugin_contributors-webdigpt","plugin_committers-webdigpt"],"banners":{"banner":"https:\/\/ps.w.org\/webdig-dev-analytics\/assets\/banner-772x250.png?rev=3728460","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/webdig-dev-analytics\/assets\/icon-256x256.png?rev=3728460","icon_2x":"https:\/\/ps.w.org\/webdig-dev-analytics\/assets\/icon-256x256.png?rev=3728460","generated":false},"screenshots":[],"raw_content":"\n
Connect WordPress to your own HTTPS Umami server. A dedicated reports page and dashboard widget display visits, visitor estimates, page views, average visit duration and bounce rate. Choose 24 hours, 7 days, 30 days or a custom range of up to 366 dates. Visitor, visit and page-view totals include comparisons with the preceding interval of equal duration.<\/p>\n\n
Browse pages, traffic sources, custom events, Core Web Vitals, WooCommerce revenue, browsers, languages, operating systems, devices and visitor countries. A configurable share URL opens the full Umami report in a new tab.<\/p>\n\n
Features:\n* Automatic page views and configurable link\/button\/contact\/download events, with the button or link label.\n* Optional scroll milestones and form submission attempts; successful Contact Form 7 submissions.\n* Official Umami real-user performance collection (LCP, INP, CLS, FCP and TTFB), shown in WordPress with good \/ needs improvement \/ poor ratings and the slowest pages.\n* WooCommerce product, cart, checkout and purchase events; HPOS compatibility.\n* Server-side purchase tracking: paid orders are sent when WooCommerce marks them as paid, including delayed Multibanco and bank-transfer payments, and are not affected by ad blockers.\n* Revenue, orders and average order value in the dashboard.\n* Campaign attribution: utm_* parameters and ad click IDs are kept; every other parameter, including order keys, is removed.\n* Staging protection: only the configured domains and production environments send data.\n* Automatic consent detection for the WP Consent API, Complianz, CookieYes and Cookiebot, plus a JavaScript API for other consent managers. Optional Do Not Track \/ Global Privacy Control support.\n* Custom tracker script name for servers that set TRACKER_SCRIPT_NAME, and an internal API URL for Umami on the same server or a private network.\n* Server-side report requests, encrypted API keys, capability and nonce checks.\n* Shared WebDig.DEV menu and installed-plugin hub, with independent operation.\n* Read-only report access by WordPress role or individual site user; settings stay administrator-only.\n* Saved-connection diagnostics, tracking exclusions and optional consent-gated tracker loading.\n* English source strings with bundled pt_PT, es_ES, fr_FR, de_DE and it_IT PHP and JavaScript translations.\n* No analytics data or credentials are sent to WebDig. Data goes to the Umami server you configure.<\/p>\n\n
Requirements: a self-hosted Umami server version 3.2 or later (the Performance and Revenue tabs were verified with Umami 3.4); HTTPS connectivity from visitor browsers to the public server URL. Dashboard access needs an API key or a valid Bearer token. Use a separate Umami account that can only access the relevant website.<\/p>\n\n
The plugin loads the official tracker from your configured server (by default \/script.js). The tracker sends page views, event data, browser\/device information and, when enabled, performance measurements to that server. It uses the visitor IP for Umami processing and geographic estimates. With server-side purchase tracking, WordPress sends paid-order events to the same server with the customer IP address and browser user agent stored by WooCommerce, so the purchase joins the visitor's Umami session. Refer to your Umami server's privacy policy and configuration. Umami documentation: https:\/\/docs.umami.is\/docs\/ . No central WebDig analytics service is required.<\/p>\n\n
Automatic tracking excludes form values, customer names, customer emails and addresses. Email and phone link events do not include the link text. Tracked URLs keep only the query parameters listed in the settings (campaign parameters by default); fragments and order keys are always removed. External referrers are reduced to their origin. User-supplied custom event data remains the site owner's responsibility. Add data-webdig-ignore to any element whose clicks should not be recorded.<\/p>\n\n
Purchase deduplication stores an order marker in the visitor's localStorage. By default the plugin does not wait for consent. Enable \"Wait for consent before loading the tracker\" to prevent tracker loading and analytics requests until consent is granted. The plugin does not include a consent banner. Its analytics settings do not determine your website's legal obligations.<\/p>\n\n
Browser mode (default): purchases are tracked when the order is paid and the customer returns to a valid order confirmation URL. The order key is verified and is not sent to Umami. Reloads are deduplicated in the same browser, but cross-device or cleared-storage duplicates remain possible.<\/p>\n\n
Server mode (recommended): at checkout the plugin records whether the order may be tracked, applying the consent, privacy-signal and role-exclusion settings. When WooCommerce marks the order as paid, the purchase is sent once from the server through Action Scheduler, with up to three attempts; a final failure is noted on the order. Orders created in the admin or through the REST API are not sent. When consent is required, the tracker mirrors consent in a first-party wda_consent cookie, or the WP Consent API is used, so the server can respect it.<\/p>\n\n
In both modes, refunds do not amend the original Umami event. Analytics revenue is not an accounting record.<\/p>\n\n
Legacy AJAX cart events and WooCommerce Blocks events are supported. Non-AJAX product form submissions are recorded as add_to_cart_attempt, not confirmed cart additions. Custom cart extensions can require their own integration.<\/p>\n\n
Portuguese (Portugal) documentation is included in readme-pt_PT.txt. \/ A documenta\u00e7\u00e3o em portugu\u00eas de Portugal est\u00e1 inclu\u00edda em readme-pt_PT.txt.<\/p>\n\n
Enable \"Wait for consent before loading the tracker\". In automatic mode the plugin follows the \"statistics\" category of the WP Consent API, Complianz and Cookiebot, and the \"analytics\" category of CookieYes. Any other consent manager can call window.WebDigAnalytics.setConsent(true) after analytics consent and window.WebDigAnalytics.setConsent(false) when it is withdrawn, after the plugin script has initialized. Before approval no Umami script is inserted, no events are queued and purchase localStorage markers are not accessed. Withdrawal stops subsequent sends; it cannot recall requests already sent. Granting consent again does not create an extra page view. Test your consent manager on the real site.<\/p>\n\n
Select roles to exclude or enter one path per line. \/private\/* excludes paths with that prefix; \/account\/ excludes that exact path. Rules use the request path, including any WordPress subdirectory. Clear page\/CDN caches after changing tracking, exclusions or consent settings. Existing cached HTML can otherwise retain previous settings; role exclusions require a cache that separates logged-in traffic correctly.<\/p>\n\n
Share links are hidden from non-administrators unless you explicitly enable them. A public share URL may permit access outside WordPress; removing report permissions does not revoke a URL someone already knows. Revoke or rotate it in Umami when needed.<\/p>\n\n
Save settings before using \"Test saved connection\". Authentication, missing endpoints, network failures and invalid JSON are reported separately, and the test warns when this environment does not send data. Custom dates use the WordPress timezone and include the final date, capped at the current time. Daily buckets are used for longer\/custom periods; boundary buckets can be partial. A failed comparison does not prevent current-period data from displaying. Reports are cached for two minutes; no reports are stored permanently in WordPress.<\/p>\n\n
Source tooling (not included in the distributed ZIP): composer install, then composer lint (WordPress Coding Standards) and composer test (PHPUnit). npm test runs the tracker tests in Chromium with Playwright; npm run format applies Prettier. python3 bin\/i18n.py regenerates the POT, PO, MO and JSON catalogs. bash bin\/build.sh creates the distribution ZIP.<\/p>\n\n\n
Plugin activation, tracking and widget visibility are separate. Activate the plugin on the Plugins page, then enable tracking in its settings to start collecting visits. Showing or hiding the dashboard widget does not start or stop tracking. Statistics are displayed in the WordPress administration area and Umami, not on public site pages. The API key is required for dashboard reports, but not for collecting visits.<\/p>\n\n
Settings remain when deactivating or updating the plugin. Uninstalling deletes this site's plugin settings, scheduled purchase sends and local report caches. It does not delete data on your Umami server. Multisite installs must be configured separately per site; network-wide provisioning is not included.<\/p>\n\n\n
Visitors are anonymous unique visitor estimates. Visits count browsing sessions. One visitor can generate multiple visits. Neither is an exact count of people.<\/p><\/dd>\n
Enable the performance option, then open the Performance tab in WebDig.DEV > Analytics. It shows the 75th percentile of each metric with Google's good \/ needs improvement \/ poor thresholds and the slowest pages by LCP. New data is collected from real visitor browsers; no historical measurements are generated.<\/p><\/dd>\n
Only hostnames in \"Tracked domains\" send data, and by default only production environments (WP_ENVIRONMENT_TYPE). A cloned database keeps the production domain list, so the clone stays silent. Add extra domains if the same site is served on several hostnames.<\/p><\/dd>\n
The plugin refuses private and loopback addresses for the public server URL. Set \"Internal API URL\" (for example http:\/\/127.0.0.1:3000 or http:\/\/umami:3000) for requests from WordPress; visitors keep using the public HTTPS URL. \"Test saved connection\" shows the technical error when a request fails.<\/p><\/dd>\n
Configure TRACKER_SCRIPT_NAME (and optionally COLLECT_API_ENDPOINT) on your Umami server, then enter the same script name in the settings. Server-side purchase tracking is never affected by ad blockers.<\/p><\/dd>\n
Delete the key first, then save a new one. Keys defined as WEBDIG_ANALYTICS_API_TOKEN in wp-config.php must be changed there. Changing WordPress salts invalidates keys stored encrypted in the database.<\/p><\/dd>\n
The admin interface follows the user's WordPress language. English is the source language. Portuguese (Portugal), Spanish (Spain), French, German and Italian are included. Regional locales do not automatically fall back to a different regional translation. The languages directory contains a POT template, PO\/MO translations and WordPress JavaScript JSON catalogs. Third-party data, custom event names and browser names are not translated by gettext.<\/p><\/dd>\n
Yes. Use Screen Options on the WordPress dashboard. Administrators always have access. Select report roles or additional site users in Analytics settings. These users can read reports but cannot change settings or test the saved connection. Customers and subscribers are not listed individually; grant access by role. Access is checked for pages and AJAX requests. Users can have the selected role on this site or be selected individually; removing a user from the site revokes access.<\/p><\/dd>\n
No. The plugin loads the configured Umami tracker. The reporting API key stays on the WordPress server.<\/p><\/dd>\n\n<\/dl>\n\n\n