Lightweight visitor statistics for WordPress: options without the bloat

Most small sites need to know three things: how many people visit, which pages they read, and where they came from. You do not need a full marketing analytics suite for that.
Why "lightweight" matters
Heavy analytics scripts add page weight and third-party requests, and they often set cookies that, in the European Union and the UK, require consent before they are placed. A consent banner that most visitors dismiss also leaves gaps in the data. Lighter tools aim to measure the essentials with little or no personal data, which can simplify compliance. In France, for instance, the CNIL allows some audience-measurement tools to be used without consent if they are strictly configured; its page on audience-measurement tools sets out the conditions. Rules differ between countries, so check those that apply to you.
The main approaches
1. A statistics plugin that stores data in WordPress
Plugins such as Koko Analytics, Independent Analytics and WP Statistics record visits in your own database and show reports in the dashboard. Nothing is sent to a third party. Some are designed to work without cookies. Things to check:
- Database growth: busy sites accumulate many rows; prefer plugins that aggregate data daily.
- Caching: with full-page caching, PHP does not run on every visit, so counting must happen through a small JavaScript request. Most of these plugins do this, but verify it works with your cache.
- Bots: good plugins exclude known crawlers; numbers will never match another tool exactly.
2. Self-hosted Matomo
Matomo (formerly Piwik) is open-source analytics that you can run on your own server, either as a separate installation or through the "Matomo Analytics" plugin, which runs it inside WordPress. It offers far more than visit counts (goals, campaigns, e-commerce, heatmaps as paid add-ons) while keeping the data on your server. Matomo can be configured to work without cookies. The trade-off is weight: on shared hosting, the in-WordPress version can be demanding for busy sites, and a separate installation needs maintenance.
3. Hosted privacy-focused services
Services such as Plausible, Fathom and Simple Analytics run the infrastructure for you and add a small script to your pages. They are designed to avoid cookies and personal data, and publish their data-processing details. They are paid after any trial; Plausible's code is also available to self-host. WordPress plugins exist for each, or you can paste the script tag into your theme.
4. Jetpack Stats
Jetpack Stats, from Automattic, shows views, referrers and popular posts in the dashboard with data processed on WordPress.com servers. It is quick to enable on a site already using Jetpack. Its free tier is limited to non-commercial sites; commercial sites need a paid plan.
5. Server logs
Your web server already records every request. Hosts often provide log-based reports in their control panel, and tools like GoAccess turn raw access logs into readable dashboards. Logs need no script and see visitors who block JavaScript, but they also see every bot, so figures are inflated unless filtered carefully. If your site sits behind a CDN, the CDN's own analytics may be more complete than the origin server's logs.
Comparison
| Approach | Where data lives | Setup | Best for |
|---|---|---|---|
| Stats plugin | Your WordPress database | Minutes | Small sites wanting basics in the dashboard |
| Matomo | Your server | Moderate | Detailed analytics with data ownership |
| Hosted privacy service | Provider | Minutes | Simple reports without server load |
| Jetpack Stats | WordPress.com | Minutes | Sites already using Jetpack |
| Server or CDN logs | Host or CDN | Varies | A script-free cross-check |
Don't forget Search Console
None of these tools sees what happens before a click. Google Search Console and Bing Webmaster Tools show which search queries display your pages, how often they are clicked, and indexing problems. They require no script on your site, only verification of ownership. Together with a light statistics tool, they cover what most small sites need.
Reading the numbers sensibly
- Different tools count differently (unique visitors, sessions, page views) and handle bots and ad-blockers differently. Compare trends within one tool, not totals across tools.
- Exclude your own visits; most plugins skip logged-in administrators by default.
- Look at referrers and top pages more than at daily totals: they tell you what to write next.
- Keep only the data you need, for as long as you need it, and say what you collect in your privacy notice.
Choosing
For a blog or a small business site, a cookie-free statistics plugin or a hosted privacy-focused service, plus Search Console, is usually enough. Choose Matomo when you need campaign tracking or e-commerce analytics but want to keep data under your control. Whatever you pick, install one tool and use it consistently; three overlapping trackers mean more weight and more confusion, not more insight.
Logins & site adminLogin lockouts and maintenance mode
Two kinds of lock-out for WordPress: limiting failed login attempts against brute-force attacks, and closing the site to visitors during maintenance without hurting SEO.
Logins & site adminCustom login URLs
Moving the WordPress login page to a custom address, redirecting users after login, and passwordless login links: how each works, and the security trade-offs.
Email & newslettersSending a newsletter
How to run an email newsletter from a WordPress site today: in-site plugins versus email services, double opt-in, unsubscribe rules, and sender authentication.