Easy Server Side Tracking

Easy Server Side Tracking adds server-side tracking to WordPress and WooCommerce. Events are sent from the browser to a managed ingestion endpoint hosted on Cloudflare (collect.easyserversidetracking.com), which normalizes, deduplicates, and forwards them to Google Analytics 4 using the Measurement Protocol. Because requests go to a first-party-style endpoint rather than directly to Google, common content blockers no longer drop your analytics traffic.

The plugin auto-provisions a free-tier account on activation — no license key is required to start using it, and the free tier is fully functional indefinitely. Optionally, you can buy a license on the management service to raise this site’s server-side limits (higher monthly event volume and longer dashboard retention). Those limits are applied and enforced entirely on the service; the plugin itself never locks, disables, or restricts any built-in feature.

Features

• WooCommerce ecommerce tracking out of the box (purchase, add_to_cart, view_item, begin_checkout, etc.)
• Click, scroll, engagement and form-submission events
• Per-event bot filtering, consent state, and GA4 forwarding handled by the managed worker
• Admin Connection panel with site_id, plan name, and re-provision button
• Free tier: 10,000 events/month at the time of writing. All limits are set and enforced by the management service, never by the plugin.

How it works (data flow)

1. The plugin enqueues a small JavaScript tracker on every page.
2. The tracker collects event details (event name, page URL, referrer, consent state, anonymized client/session IDs) in the visitor’s browser.
3. Events are posted to https://collect.easyserversidetracking.com/ over HTTPS with a short-lived HMAC token.
4. The managed worker validates the request, optionally proxies the event to GA4’s Measurement Protocol (google-analytics.com/g/collect or /mp/collect), and stores a copy for the dashboard.
5. Your monthly usage, plan, and limits live on dashboard.easyserversidetracking.com, where you log in to view them and upgrade. The plugin does not track event counts or limits locally.

External services

This plugin connects to the following external services. Each is necessary for the functionality described and is only contacted as documented below.

collect.easyserversidetracking.com (managed ingestion worker)

• Provider: Easy Server Side Tracking (operated by Jacht.Digital Marketing).
• What it does: Receives event posts from the in-browser tracker, normalizes and deduplicates them, applies bot filtering and consent rules, then forwards to Google Analytics 4 and stores a copy for the dashboard.
• What is sent: Each event payload — event name, page URL, page title, referrer, anonymized client/session IDs, consent state, event-specific parameters, and the visitor IP (used for geo-resolution and rate limiting; not stored long-term).
• When: Every time a tracked event fires in the visitor’s browser.
• Required: Yes — the plugin’s core function is to send events here.
• Terms of service: https://dashboard.easyserversidetracking.com/terms
• Privacy policy: https://dashboard.easyserversidetracking.com/privacy-policy/

dashboard.easyserversidetracking.com (management & provisioning server)

• Provider: Easy Server Side Tracking (operated by Jacht.Digital Marketing).
• What it does: Provisions a site ID and signing secret for this site so the ingestion worker will accept its events. Your plan, usage, and limits are managed here when you log in to the dashboard.
• What is sent: Site URL and admin email (during provisioning / re-provisioning only), and the site ID.
• When: On activation and when you click Connect or Re-provision.
• Required: Yes — the plugin auto-provisions a free account here on activation.
• Terms of service: https://dashboard.easyserversidetracking.com/terms
• Privacy policy: https://dashboard.easyserversidetracking.com/privacy-policy/

Google Analytics 4 (Measurement Protocol)

• Provider: Google LLC.
• What it does: Receives analytics events forwarded by the managed worker (or, when configured locally, sent by the WordPress site directly).
• What is sent: GA4 Measurement Protocol payloads — event name, parameters, client_id, optional user_id, optional consent flags. Sent to https://www.google-analytics.com/g/collect or https://www.google-analytics.com/mp/collect.
• When: Every event the worker forwards (or every event your WP site forwards in direct-mode).
• Required: Yes if you want events to appear in GA4. The plugin does not function as an analytics tool without GA4 (or another Measurement Protocol target).
• Terms of service: https://marketingplatform.google.com/about/analytics/terms/us/
• Privacy policy: https://policies.google.com/privacy

googletagmanager.com (gtag.js, hybrid mode only)

• Provider: Google LLC.
• What it does: Serves the gtag.js library to the visitor’s browser for client-side GA4 measurement.
• What is sent: Standard gtag.js telemetry while the script is loaded (page views, automatic events). Only sent when hybrid tracking is enabled in the plugin Settings.
• When: On every pageload, when hybrid tracking is enabled. Disabled by default.
• Required: No. Disable hybrid mode to prevent any contact with this service.
• Terms of service: https://marketingplatform.google.com/about/analytics/terms/us/
• Privacy policy: https://policies.google.com/privacy

Privacy

This plugin does not collect or store personal data on the WordPress site itself. All event data is sent to the external services listed above and stored there subject to those services’ privacy policies.

The plugin stores the following non-personal data in WordPress options for its own operation:

• esst_site_id — the site identifier returned by the management server.
• esst_signing_secret — the HMAC signing secret for the managed ingestion endpoint (encrypted at rest).
• esst_collect_url, esst_plan_summary — operational state from the management server (collect endpoint URL and the plan name shown in the admin).

No cookies are set by the plugin itself; the in-browser tracker uses a first-party cookie named _ga (the standard GA4 client identifier) when present.