Visitor Analytics

If you have reached this page you are worried about your customer's data, as I am. Many analytics enterprises sell data to third party enterprises and your customers (and you) can't do so much to avoid it.

Securitycheck Pro Analytics have been created to give you powerful info about your visitors focusing in privacy.

Once you access to your managed websites you have the option to enable analytics on it:

After this you will start to receive info about your visitors.

How does it works and which info is sent?

When analytics is enabled, a cookie named SCPAnalytics is placed into customer's browser:

This cookie has a 16 character code generated using the same code that Joomla uses to generate tokens. This cookie value is used to identify returning visitors and is valid during one month since the first visit. It has the "Strict" value into the SameSite attribute, which means that the cookie will not be sent along with requests initiated by third party websites. The browser sends the cookie only for same-site requests (that is, requests originating from the same site that set the cookie).

If Do Not Track Feature is enabled in the browser, no data will be sent to Control Center.

If DNT is disabled, current url and referrer are sent to Control Center on every visitor's interaction with your site. If visitor remains in the same page an "update" event is sent to Control Center every 5 seconds. This event updates the last time visitor accessed the page and it's used to calculate the "Average Stay Time". If visitor clicks into the page a "click" event is sent to Control Center. This event is used to calculate the "Engangement Time".

In adittion to the current url and referrer, the following info is sent to Control Center:

• website code The identifier of this website in Control Center. As we have many websites managed in Control Center we need to know from which one we are receiving data.
• country code, country, city This geolocation info can be retrieved by two functions: using MaxMind GeoLite2-City Database or geolocation-db.com. The first one is the preferred way as it's frequently updated and respects the privacy taking into consideration, among others, Do Not Sell requests.
• operating system, device, browser name and browser version Information about the elements used to access to the website.
• date and time
• cookie and session values To be able to distingish between new and returning visitors and new sessions everytime a returning visitor visit the page again.
• current url sent has been generated in a way where sensitive info as emails or any id are removed before sending it to Control Center.

A date-range filter lets you pick the period to report on. Enable/Disable toggles analytics for the site, and once there's data, Export Data and Delete Data let you download or wipe everything collected.

Back to Control Center, all the info have been ordered into five tabs:

Overview: In this tab you will see a day wise report for the latest 30 days. New visitors, returning visitors, Total Unique Visitors, Total Page View, Average Stay Time, Average Visit and Bouce Rate.

Traffic source: Here you have a graph with the top 5 referrers, total traffic grouped by type (direct, search engine, social network and referal) and traffic coming from search engines and social networks in a more detailed way.

Technology: Here you have a list of most and least browsers, operating system and devices used, grouped by new and returning visitors.

Pages: The most and least visited page, each with its total view count.

Geographical:

If the MaxMind GeoLite2-City database doesn't exist or is outdated, you'll get a warning. Download the GeoLite2-City.mmdb file from MaxMind's website and upload it — since December 2019 a free account is required to access it. Once uploaded, every managed site with analytics enabled uses it securely.

Once set up, this tab shows visitor info by country and city: