No Cookie Analytics – By Arfa

No Cookie Analytics – By Arfa tracks visits server-side without setting cookies in visitors’
browsers. Data stays in your WordPress database with an admin dashboard, reports, and optional
CSV export.

Privacy

This plugin stores analytics records in your WordPress database (wp_ncaba_hits), including:

• Page URL/path
• Referrer host
• Browser/OS/device type
• Anonymized IP hash
• Session key
• Country code
• Whether the request resulted in a 404 (not found)
• UTM campaign parameters (utm_source, utm_medium, utm_campaign), when present in the visited URL
• Timestamp

No raw IP address is stored in the plugin database.

Country detection behavior:

1. Uses server-provided geolocation headers when available (for example Cloudflare or GeoIP
   headers).
2. Optional external IP geolocation lookup can be enabled by admin consent in plugin settings.

When external geolocation is enabled, visitor IP is sent to:

• Service: ipapi.co (primary) and ipwho.is (fallback)
• Purpose: country lookup only

Site owners must disclose this in their privacy policy before enabling external lookup.

External services

This plugin can optionally use the third-party services ipapi.co and ipwho.is for country lookup. The lookup
is disabled by default and only runs after a site administrator explicitly enables the
“Allow External Geo Lookup” option in plugin settings.

• Services: ipapi.co (https://ipapi.co/) and ipwho.is (https://ipwho.is/) as fallback
• What is sent: the visitor’s IP address (only when the option is enabled and no server-provided
  geo headers are available).
• When: at most once per visitor IP per week on success; failed lookups are retried after one hour.
• Why: to determine the visitor’s country code for the analytics dashboard.
• ipapi.co Terms of Service: https://ipapi.co/terms/
• ipapi.co Privacy Policy: https://ipapi.co/privacy/
• ipwho.is Terms: https://ipwhois.io/terms
• ipwho.is Privacy: https://ipwhois.io/privacy

If the option is left disabled, the plugin never contacts ipapi.co or ipwho.is.

Features

• Server-side tracking
• GDPR-aware design (configure to your legal requirements)
• No frontend cookies
• Admin dashboard and home screen widget
• Pages, Referrers, Users, 404, and Campaigns (UTM) reports
• Per-post analytics meta box in the editor sidebar
• CSV export and settings import/export
• Local bundled frontend assets (no CDN required)