Trackless: analytika návštěvnosti bez cookies (Cookieless Analytics)
Trackless measures your site’s traffic (and, on WooCommerce stores, your real revenue and margin) entirely server-side. No own analytics cookies, no JavaScript snippet, and consent-banner needs depend on your site setup. You read the reports in your Trackless account dashboard. Trackless is part of
Trackless measures your site’s traffic (and, on WooCommerce stores, your real revenue and margin) entirely server-side. No own analytics cookies, no JavaScript snippet, and consent-banner needs depend on your site setup. You read the reports in your Trackless account dashboard.
Trackless is part of WooModuly.cz , a collection of WordPress and WooCommerce plugins. See https://woomoduly.cz/produkt/trackless/.
How visitors are counted (privacy by design):
- The visitor key is a daily-rotating HMAC-SHA256 hash of IP + User-Agent + day, keyed with a secret salt that exists only on your server. It cannot be reversed and changes every day.
- The raw IP address is never stored and never transmitted, only a keyed hash.
- Global Privacy Control (the Sec-GPC browser signal) is honoured: opted-out visitors are not tracked at all.
- No data is written to the visitor’s browser: no cookies, no localStorage, no fingerprinting scripts.
What it measures:
- Visits and sessions with source / medium / campaign and a GA4-style channel group
- Page views and events: product view, category view, search, add to cart, cart, checkout, 404
- Device, browser, OS, country and language (one row per visitor per day)
- With WooCommerce: orders, revenue, refunds, payment and shipping methods, first-order flag, order attribution (computed server-side from the cookieless visitor match), ordered items, including per-unit purchase cost for margin reporting if you store it ( _wc_cog_cost , _alg_wc_cog_cost , _cost or the trackless_wholesale_price filter)
Events are collected into a small queue table in your own database and flushed once a day via WP-Cron (or manually with the “Send now” button). The delivery is HMAC-SHA256 signed and idempotent, so retries are safe.
WP Super Cache in Simple mode also counts cached HTML pages on the server, without JavaScript. The temporary local queue contains keyed hashes, never the raw IP, and is imported by the same daily batch. Pages served without PHP (Expert mode, WP Rocket or LiteSpeed) are not counted; the settings page shows a warning.
