About this plugin
For site owners, agencies and organizations that want useful analytics without sending their visitors to someone else. LUMN counts visits inside your own WordPress site. There is no outside service and no data sent anywhere.
- No cookies. A per-tab session id lives in session storage and is gone when the tab closes.
- No stored IP addresses. Daily visitor counts use a one-way hash with a salt that is replaced every day and the old one deleted.
- Paths are cleaned before storage: query strings removed except campaign tags, emails and long numbers masked, and your own redaction rules applied.
- Do Not Track and Global Privacy Control are honored.
- Consent mode works with any consent plugin that supports the WP Consent API.
- Four privacy presets: Standard, Strict, EU, Minimal.
- A records page, generated from your settings, ready for your privacy policy.
- A dashboard you can arrange: drag panels, move them by keyboard or menu, resize, reset. Light and dark themes.
- A built-in consent notice, if you want to ask visitors first. Accept and decline look the same.
- Admin screens designed for WCAG 2.2 AA, and tested with automated checks and the keyboard in light and dark themes.
- Countries, if you turn them on. The country is worked out on your server and the IP address is never stored.
- Visits from AI assistants like ChatGPT, Claude, Perplexity and Gemini, in their own panel.
- A weekly summary email, if you turn it on.
- A warning when visits suddenly stop being counted, for example after a caching plugin starts delaying scripts.
- Import your history from WP Statistics, Burst Statistics, Independent Analytics or Koko Analytics, so your charts do not start at zero.
- A “Popular posts” block and [lumn_popular_posts] shortcode, from LUMN’s own counts. View counts stay hidden unless you turn them on.
LUMN is built for sites that care about GDPR and HIPAA: no cookies, no stored IP addresses, and no third party receiving your visitors’ data. No plugin makes a site compliant by itself, and nothing here is legal advice. Your privacy policy, your other plugins and how you run your site still matter.
studios
Free and Pro
LUMN (free) includes the dashboard (key numbers, pageviews by day, sources, top pages, content by type, author or category, devices, live view, events, countries and AI assistant visits), a weekly summary email, imports from other analytics plugins, a Popular posts block, a tracking health check, tag rules for clicks, scrolling, time on page and sections seen, the privacy presets and records page, chart notes, post stats in the editor, CSV downloads, one-click demo data and a built-in consent notice.
LUMN Analytics Pro adds LUMN cards on the WordPress Dashboard, journeys and funnels, campaigns, site speed, broken links, JavaScript errors and form analytics, location, WooCommerce revenue, survey capture, visitor labels, Site health (the site-quality scanner with saved scan records, and page accessibility checks with markers on the page, quick fixes, saved page copies and developer exports), PDF and Excel reports, designed emailed reports and alerts, states and regions with maps, site search, saved dashboard views, Google Search Console data (off until you connect your own account), an audit log and Google Analytics import.
Agency tools (client share links, a rollup of all your sites, white-label branding, branded client report emails and MainWP support) come with LUMN Analytics Pro on the Agency plan.
Moving from free to Pro keeps all your data. Turning on Pro turns the free plugin off.
com/lumn/
Privacy
LUMN stores, in your site’s database only: the page path (cleaned), the referring domain, UTM campaign tags, device type, major browser and OS version, a screen width range, page load time, a random per-tab session id and a daily visitor hash. It never stores IP addresses, cookies, page titles, full referrer URLs or form values. Nothing is sent to the plugin author or any third party.
Countries are off until you turn them on. com once a month and looks up each visit’s country on your server; only that download request reaches DB-IP, and the IP address is never stored. 0.
The weekly summary email is off until you turn it on. It goes only to the addresses you enter and holds totals only.
Third-party code
- htmx 4.0.0 (BSD Zero Clause License), for the admin screens.
- Onest font (SIL Open Font License 1.1), for the admin screens.