fastcurve-visitor-tracker
Privacy-minimal visitor and page-view stats using hashed visitor keys only.
Description
EmDash plugin: anonymous visitor and page-view tracking with admin dashboards.
Audit summary
Security risk answers “can this plugin harm my site?” — it drives the publish decision. Privacy disclosure answers “what visitor or admin data does this plugin handle?” — it’s informational so you can make your own GDPR call before installing.
- mediumprivacyVisitor data stored in KV
- mediumprivacyPage view data stored in KV
- mediumnetworkPotential for excessive KV reads
Embed in README
Paste any of these snippets into your plugin’s README so readers see live installs, trust tier, audit verdict, version, EmDash compatibility, and lifecycle.
Per-badge markdown snippets
installsversiontrust-tieraudit-verdictcompatlifecycleVersion history
Rejected and revoked versions remain visible so the history is honest. Expand any row with findings to see why. See our review policy.
1.0.2FlaggedWarning3.3 KB9 Aug 202611 downloads
Scanner findings (3)
Visitor data stored in KV
The plugin stores visitor data, including visitor keys, first seen, last seen, and visit count, in the 'visitors' KV namespace. This data is used to display visitor statistics in the admin UI.
Page view data stored in KV
The plugin stores page view data, including timestamps, visitor keys, and paths, in the 'hits' KV namespace. This data is used to display page view statistics in the admin UI.
Potential for excessive KV reads
The plugin performs KV queries with pagination, which could lead to excessive reads if not managed properly. The queries are limited to 10 items per page, but repeated actions could result in high read volumes.
1.0.1RejectedPending3.2 KB8 Aug 20260 downloads
1.0.0FlaggedWarning3.2 KB8 Aug 202614 downloads
Scanner findings (3)
Visitor IP and User-Agent Data Collection
The plugin collects and stores visitor IP addresses and User-Agent strings in the 'visitors' and 'hits' KV namespaces. This data is used to track unique visitors and page views.
Potential Unnecessary Data Storage
The plugin stores visitor data including IP addresses and User-Agent strings, which might be more than necessary for tracking visitor statistics.
Use of Global Fetch
The code uses global fetch instead of ctx.http.fetch, which is an intent signal to bypass the SDK.