外掛標籤
開發者團隊
原文外掛簡介
Zero PII. No cookies. No consent banner required.
Harvv Analytics ships a lightweight (under 10 KB gzipped) behavioral tracker that captures how visitors interact with your pages — dead clicks, rage clicks, scroll depth, hover intent, JavaScript errors, engagement time — and syncs WooCommerce orders to your Harvv dashboard. It never reads cookies, never transmits names, emails, phone numbers, or addresses, and never stores personal data in your WordPress database.
Because the plugin transmits no personal data, it does not require a cookie-consent banner under GDPR, CCPA, or PECR. Your visitors see no pop-ups; your checkout flows are not slowed; your compliance posture is simpler.
What this plugin does
Enqueues a vanilla-JS tracker (no jQuery, no external scripts) on your frontend.
Captures behavioral signals: scroll depth, click targets, dead/rage clicks, hover intent, page errors, engagement time.
Syncs WooCommerce orders on woocommerce_payment_complete (never blocks checkout).
Passes customer identity as a non-reversible hash derived from the site’s own salts — the raw email never leaves WordPress.
Works with WooCommerce HPOS (Custom Order Tables) out of the box.
Multisite-aware: one network API key, per-subsite Site IDs, per-subsite admin overrides.
What this plugin does NOT do
Does not set or read cookies.
Does not transmit email addresses, names, phone numbers, postal addresses, or IP addresses.
Does not load any JavaScript from external URLs — the tracker ships bundled with the plugin.
Does not create custom database tables on your WordPress site.
Does not record session replays or keystrokes.
Why you might want this
If you run a WooCommerce store and want to see the dead clicks, rage clicks, and broken checkout paths your visitors hit — without making them click through a GDPR banner — Harvv is designed for you. The behavioral signals are sent to your Harvv dashboard where they become a prioritized list of UX fixes with plain-English explanations.
External Services
This plugin relies on the Harvv analytics service (operated by Olivas Venture Capital LLC d/b/a Harvv) to store and analyze behavioral events. Data is transmitted to the following endpoint:
Endpoint: https://harvv.com/v1/track (overridable via the HARVV_API_BASE constant in wp-config.php for staging or self-hosted receivers)
When: Events are sent continuously while a visitor is on your site (batched every 5 seconds or on tab close, via navigator.sendBeacon when available). WooCommerce order events are sent once, on woocommerce_payment_complete.
What is sent (behavioral events): Session ID (random, in-memory, regenerated per browser tab — never a stable cookie), visitor ID (sessionStorage-scoped, cleared when the tab closes), event type, page path (no query string with sensitive params), referrer, viewport dimensions, CSS selectors of clicked/hovered elements (tag + id + first class name only, no text content), JavaScript error messages, engagement timestamps.
What is sent (WooCommerce events): Order ID, order status, order total, line-item product IDs and quantities, coupon codes, payment method name, shipping method name, non-reversible customer hash (derived via wp_hash() using your WordPress salts).
What is NOT sent: Names, email addresses, phone numbers, postal addresses, IP addresses, raw user IDs, cookies, session replays, keystroke data, form values.
Registration endpoint: https://harvv.com/v1/sites/register — called once per site (or subsite on Multisite) to obtain a Site ID. Transmits only the site URL, site name, WordPress version, PHP version, and plugin version.
Pixel script (canonical, 1.0.3+): https://harvv.com/px/
Connect flow: https://harvv.com/connect/wordpress — opened in a new browser tab when an admin clicks “Connect to Harvv” in the plugin settings. Harvv’s hosted signup page handles authentication; it then POSTs the API key back to your site’s own REST endpoint (/wp-json/harvv/v1/connect) with a nonce you generated locally.
Stack-inventory endpoint: https://harvv.com/v1/inventory — called once at site registration and refreshed weekly by WP-Cron. Sends a site-context snapshot: installed plugin slugs + versions, the active theme slug + version, WordPress version, PHP version, MySQL/MariaDB version, server software string (e.g. “nginx/1.24.0”), site language code, timezone, permalink-structure boolean, WP_DEBUG boolean, memory limit, max execution time, object cache backend, WP-Cron disabled boolean, multisite blog count, total user count (number only — no usernames, no emails, no per-role breakdown), aggregate post and page counts, custom post type slugs + publish counts, and (when WooCommerce is active) WooCommerce version, store currency, base country, and product count. No visitor data, no usernames, no email addresses, no post content, no comments, no IP addresses, no PII of any kind. Powers plugin-attribution and platform-specific UX diagnosis on the Harvv dashboard. Admins can preview the exact payload at Settings → Harvv Analytics → Preview the exact diagnostic snapshot we would send. Disabled by clearing the Settings → Harvv Analytics → Preferences → Share stack info checkbox, by adding define( 'HARVV_SHARE_INVENTORY', false ); to wp-config.php, or by returning false from the harvv_share_inventory filter.
Harvv terms of service: https://harvv.com/terms
Harvv privacy policy: https://harvv.com/privacy
By activating this plugin and supplying an API key, you consent to the transmission of the data described above to Harvv. You can disconnect at any time from the plugin’s settings page; uninstalling removes all plugin options from your database.
