Release Notes

v1.1.1 August 24, 2026

Fixed: tracking on cached pages no longer stops after 12–24h — the collect endpoint dropped the expiring nonce for a strict per-event schema, a payload cap, and a cross-origin check.
Fixed: session duration now sums each page's actual visible time, and exit reporting is idempotent, so duplicate or late beacons never double-count. A late exit no longer creates an empty session.
Fixed: all Pro event types now store their fields, and all eight tracking toggles are enforced in both the tracker and the endpoint.
Privacy: no raw IP address or User-Agent is stored — the User-Agent is parsed transiently for device/browser/OS, then discarded.
New: each record stores whether it was collected in Standard or Storage-less mode, visible in the dashboard and exports. Under storage-less, visitor counts and new-vs-returning are shown as estimates.
New: a bot / bulk-submission filter (Off / Standard / Strong) discards automated bulk traffic before it is stored; payload, event-count and per-IP safety limits stay on at every setting.
Changed: data export streams directly with no temporary files — a date range within the last 30 days, or a whole calendar month for older data.
Fixed: license deactivation keeps your key if the licensing server is unreachable, so a network hiccup can't strand an active license.
Security: hardened Pro update delivery (instance-bound POST). Tested up to WordPress 7.1.

New: Tracking Mode setting — Standard / Auto / Storage-less. Storage-less tracking keeps nothing on the visitor's device: pseudonymous IDs are derived server-side from a daily-rotating salt, so visitors cannot be linked across days.
New: Auto mode applies storage-less tracking to EU visitors automatically (detected by browser timezone) and standard tracking to everyone else. New installs default to Auto.
New (Free): basic click and form-submit events, so click/form conversion goals work in the free plugin. Advanced event tracking remains Pro.
Fixed: form-type conversion goals matched every form submission; they now match the configured form ID.
Fixed: events arriving before a pageview no longer create orphaned data.
Security: forwarding headers are only honored from verified Cloudflare edges; stricter payload validation.

New (Pro): update notifications in the WordPress dashboard — Pro now updates with one click, license-verified.

Fixed: click-type conversion goals were never recorded; they now match the clicked element's text, link, ID, and class.
Changed: each conversion goal is counted at most once per session.
New: Sessions by Hour of Day chart on the dashboard; hourly data in AI analysis.
Changed: AI model IDs updated to current versions.

New: Light mode toggle in AI Analysis — cuts token usage by sending a compact data summary.

Initial release: first-party tracking, analytics dashboard, AI analysis with 9 providers, conversion goals, CSV/JSON export, English/Japanese admin.

Get the latest version from WordPress.org (Free) or via the one-click update in your WordPress dashboard (Pro).