Privacy and personal data

See what visitor data click tracking stores and sends, set how much it keeps, and export or erase a person's click data.

Link Manager Pro keeps most of its visitor data in click records on your server, plus a tracking cookie in the visitor's browser. You decide how much it keeps. Preparing a GDPR or other privacy review of your link click tracking? This page collects the places where visitor data is stored or sent, and the settings that control them.

• While Click tracking is on, each counted click stores the visitor's IP address, browser details, referring page and a few more details. Anonymize IP addresses shortens the IP address. It's on by default on new sites.
• Keep click data for deletes old click records every day. By default nothing is deleted.
• The tracking cookie waits for consent while Respect visitor consent is on (the default) and Complianz, CookieYes or Cookiebot is active.
• WordPress's Export Personal Data and Erase Personal Data tools include Link Manager Pro clicks. Erasing anonymizes those clicks and keeps your totals.

This page says what the plugin does and what you can set. Which rules apply to your site, and what you have to ask visitors for, is a question for your privacy adviser.

What does Link Manager Pro store about visitors?

Link Manager Pro stores one click record for every counted click on a short link or its other addresses. Each redirect hit gets one too. Each record holds the time, the link, the visitor's IP address and their browser details (the user agent). It also holds the page they came from, the country if known, and the tracking cookie's random ID. It can hold the post the click came from and the routing rule that matched. It also keeps any utm_ values in the address, and the WordPress user ID of a logged-in visitor.

The full list, and which clicks are never recorded, is on How clicks are counted. A few more places hold visitor data:

Where	What it holds	When
Clicks on links to your own pages	Similar details, plus the address and text of the link that was clicked. No country	Only while Track clicks on internal links is on (internal click tracking)
The link_manager_pro_id cookie	A random ID that tells first clicks from repeat ones. It lasts 1 year	Set at a visit through a short link or redirect, only while Click tracking is on, and after consent where a supported consent plugin asks for it
A lmpro_pw_ cookie, followed by the link's number	A code that shows the right password was entered, so the visitor isn't asked again. It lasts 1 day	Only after someone enters the right password on a password-protected short link. It doesn't wait for consent
Visitor 404s in Link Health	The missing address, the page that linked to it and how often it was hit. No IP address, browser details or cookie	When a visitor hits a missing page that Track visitor 404s logs. Kept until cleared, unless Keep visitor 404s is set (Link Health)

A click on a short link is recorded on your server. No tracking script runs in the visitor's browser for it. Clicks on links to your own pages are the exception: a small script in the page sends them.

Settings that control visitor data

These settings decide what's stored about clicks and for how long. They're all under Link Manager › Settings, on the tab named in the table. Only administrators see Settings.

To	Setting	Tab	Default	What changes
Store shortened IP addresses	Anonymize IP addresses	Tracking	Off (On on new sites)	Clicks recorded from then on. More
Delete old click records	Keep click data for	Tracking	0 days (keep forever)	Older records go once a day. More
Make the cookie wait for consent	Respect visitor consent and Consent category	Integrations	On, Statistics	Applies while Complianz, CookieYes or Cookiebot is active. More
Stop recording clicks	Click tracking	Tracking	On	No new click records and no new cookie. Visitors are still redirected
Record clicks on links to your own pages	Track clicks on internal links	Tracking	Off	Adds those clicks to the click records
Remove all data when you delete the plugin	Delete all data when the plugin is deleted	Advanced	Off	Deleting the plugin then removes its data, click records included. More

Every setting and its options are explained on Tracking settings, Integrations settings and Advanced settings. Visitor 404s have their own two settings on the Link Intelligence tab (Link Intelligence settings).

Anonymize IP addresses in click tracking

Anonymize IP addresses shortens each visitor's IP address before it's stored. It uses WordPress's own anonymizer: an IPv4 address gets 0 as its last part (203.0.113.0), and an IPv6 address keeps only its network part, the first four groups.

• New sites start with it on, as long as the Tracking tab was never saved. A site that had Link Manager Pro before keeps its earlier value, unless its data was deleted along with the plugin. That value is off unless someone turned it on (Starting settings on a new site).
• It changes only clicks recorded from then on. Clicks already stored keep their full addresses, and no button shortens them afterwards. They go when Keep click data for deletes them. A logged-in visitor's clicks can also be cleared with an erase request.
• Clicks you import from another plugin, and clicks you restore from a backup, are shortened too while it's on.
• Country detection, Blocked IP addresses and the repeat-click limit read the full address before anything is stored. They work the same with it on.
• Unique clicks compare stored addresses. With it on, visitors on the same network with the same browser count as one.

While it's off and clicks are recorded, WordPress Site Health recommends turning it on, with a link to the Tracking tab. More on Tracking settings.

How long is click data kept?

Click data is kept until you set Keep click data for under Link Manager › Settings › Tracking. The default, 0 days, keeps every record. With a number of days set, a daily task deletes each click record older than that, with its IP address, browser details and utm_ values.

• It covers clicks on short links, redirect hits and clicks on links to your own pages.
• Each short link's All-time clicks and each redirect's Hits don't go down. They're counters and hold no visitor details.
• Deleted records can't be brought back.

The timing, the warning and the wp link-manager-pro purge-clicks command are on Tracking settings.

Cookie consent for link tracking

The tracking cookie waits for consent while Respect visitor consent is on (the default) and Complianz, CookieYes or Cookiebot is active. The cookie is set once the consent plugin reports that the visitor accepted the Consent category, Statistics by default. Without consent, no cookie is set, and an existing one is deleted at their next visit through a short link or redirect.

Consent covers the cookie only. While Click tracking is on, clicks are still recorded without consent, with the IP address and browser details. So pair consent with Anonymize IP addresses and a Keep click data for period if you want to store less.

• With none of the three consent plugins active, the cookie is set without waiting.
• The Cookie notice switch on the Affiliate disclosure tab, I handle cookie consent for my visitors, doesn't change any of this (Affiliate disclosure settings).
• Developers can decide consent with the link_manager_pro_cookie_consent filter.

How each consent plugin is read is on Integrations settings.

Export or erase a visitor's click data

WordPress's own privacy tools include Link Manager Pro's click records, listed as Link Manager Pro clicks. They find the clicks recorded while the person was logged in to the account with that email address. Erasing anonymizes those clicks instead of deleting them, so your click totals stay the same.

Export someone's click data

1. In WordPress, go to Tools › Export Personal Data.
2. Enter the person's username or email in Username or email address, then select Send Request. WordPress emails them a confirmation link, unless you untick the confirmation email.
3. Once the request is confirmed, hover the person's email in the request list and select Download personal data. To email them a link to the file instead, select Send export link under Next steps. That link expires after 3 days.

The download holds a Link clicks group with one item per click. Each item can show Date, Click type (Short link or Link inside a post), Short link, Link address and Link text. It goes on with Clicked on page, IP address, User agent, Referring page, Country, Cookie ID and any utm_ values. Short link holds the link's full address, built with the prefix your site uses for it today, so a link to an affiliate's domain shows your Affiliate link prefix when you set one. Empty fields are left out.

Erase someone's click data

1. In WordPress, go to Tools › Erase Personal Data.
2. Enter the person's username or email in Username or email address, then select Send Request. WordPress emails them a confirmation link, unless you untick the confirmation email.

WARNING

The next step runs every eraser on your site at once, not only Link Manager Pro's, for example WordPress's own for comments. Erasing can't be undone in WordPress. Restoring an older Link Manager Pro backup with Clicks, or any other database backup (for example your host's), brings the erased details back. A Link Manager Pro restore also replaces the clicks recorded since.

3. Once the request is confirmed, select Erase personal data under Next steps in its row.

Erasing clears five details on each of that account's clicks: the user ID, the cookie ID, the IP address, the user agent and the referring page's full address. It does the same to clicks made while logged out that carry one of the same cookie IDs, for example from the same browser. When it's done, WordPress shows Link Manager Pro's notes about logged-out clicks and backups.

What stays on each erased click includes its time, the link, the post, the country, the referring site's domain and any utm_ values. A click on a link to your own pages also keeps that link's address and text. Clicks, Unique clicks and All-time clicks don't change. Reports can no longer tell the device or browser of those clicks.

What the tools don't reach:

• Visitors without an account. Their clicks carry no name or email, so the tools can't find them.
• Clicks made while logged out, unless they share a cookie ID with the account's clicks. An export never includes those.
• Backup files, on your server or downloaded. Delete older backups after an erasure (Backup and restore).

When you delete a user account, its clicks are unlinked from it: the user ID is cleared and nothing else changes. On a multisite network, that happens only when the account itself is deleted. Deleting it from Network Admin unlinks its clicks on every site of the network that has the plugin's clicks table. Removing the account from one site keeps the link.

What's in the privacy policy guide?

Link Manager Pro adds a Link Manager Pro section to WordPress's privacy policy guide, under Settings › Privacy › Policy Guide. It has suggested text for your policy and notes for you. It's a starting point to review and adapt, not finished legal text.

The suggested text covers link clicks, cookies, how long click data is kept, export and erasure, and what webhooks and automation tools receive. It follows your settings: it says whether IP addresses are shortened, and how many days click records are kept. If you change Anonymize IP addresses or Keep click data for, update your policy too. WordPress can remind you with a notice on Settings › Privacy that the suggested privacy policy text has changed.

The notes cover backups, imported click history, how export and erase requests work, and the AI features. Copy suggested policy text to clipboard copies the suggested text and leaves the notes out.

What leaves your site?

Click records stay in your site's database unless you download them, in a backup or an export. The features below send data off your site once you set them up or use them. The table says how much of it is about visitors.

Where it goes	What's sent	Visitor data in it
Your AI provider	When an editor uses Analyze content or AI Link: the post text (first 8,000 characters, HTML removed), the selected text, and up to 50 matching short links that work for anyone, with their slug, destination and up to eight keywords	None. No click data, IP addresses or cookies (What does the AI provider receive?)
Your webhook endpoints and AutomatorWP	For each counted click, when a webhook or recipe uses the click event: the link's ID, slug and destination, its click total, the country code and the referring site's domain	No IP address, browser details, cookie ID or user ID (Webhooks and AutomatorWP)
The Email digest, to the addresses you set	Click totals for the period, and top lists of short links, posts, countries and affiliates	None per visitor (Notifications settings)
The GeoIP download	Your server downloads the country database from cdn.jsdelivr.net when you select Download database	None. Countries are then looked up on your own server
Plugin update checks, to solvixstudio.com	Details about your site, such as its address, WordPress and PHP versions, language, whether it's multisite and the plugin version	No visitor data (Update Link Manager Pro)
Backup files	Downloaded to your computer when you back up with Clicks ticked	All click records, with IP addresses as stored

A click's country comes from the local GeoIP database or from a CDN header you've allowed (Trust proxy headers, or a trusted proxy). No outside service is asked (where a click's country comes from).

Backups, imports and uninstall

Click data can also live in backup files, come in with an import, and stay on your site after you delete the plugin. Here's what happens in each case.

• Backups: a backup with Clicks ticked holds every click record, with IP addresses, cookie IDs, user agents and UTM details as stored. The copy kept on your server is usually deleted after one to two days, if WordPress's scheduled tasks run. Files you download are yours to keep safe and delete. Retention and erase requests don't reach backup files, on your server or downloaded (What's in a backup file?).
• Imports: clicks imported from Pretty Links, ThirstyAffiliates or BetterLinks keep the details that plugin stored, including its visitor IDs. Their IP addresses are shortened only while Anonymize IP addresses is on (Migrate to Link Manager Pro).
• Uninstall: deactivating keeps all data. Deleting the plugin removes its data, click records included, only while Delete all data when the plugin is deleted is on (Uninstall and delete data).

Get more out of it

• Store less and keep each link's total. Keep Anonymize IP addresses on and set Keep click data for to the period you actually look back on, such as 365 days. Countries, blocking and the repeat-click limit still work, and All-time clicks keeps each link's total. Report periods older than that empty out.
• Check an older site. If Link Manager Pro was installed before, Anonymize IP addresses may be off. WordPress Site Health under Tools › Site Health says so while full addresses are being stored.
• Write your policy from the guide. Open the Link Manager Pro section of the privacy policy guide after you set your tracking options. Its suggested text then matches what your site stores.
• After an erase request, clean up backups. Delete downloaded backup files that hold Clicks from before the request, or a later restore brings the erased details back.
• Test the consent wait yourself with an opt-in banner. In a private window, open your site and don't answer the banner. Follow a short link, then come back to any page of your site. In your browser's developer tools, look at your site's cookies (the Application or Storage panel): there's no link_manager_pro_id. Accept statistics in the banner, follow a short link again, come back, and the cookie is there. Complianz can count a visitor as consenting from its region settings, without the banner being answered.

If something goes wrong

• If an export has no Link clicks group, then no click is linked to that account. None was recorded while they were logged in, or those clicks were already erased or deleted. Clicks made while logged out aren't matched to an account.
• If stored clicks still show full IP addresses after you turned on Anonymize IP addresses, then those clicks were recorded before. Only new clicks are shortened. Set Keep click data for to remove older records over time.
• If an erasure says some click records could not be anonymized because of a database error, then run it again. Under Tools › Erase Personal Data, hover the person's email and select Force erase personal data. Erasing again is safe: clicks already anonymized stay as they are.
• If the tracking cookie is set before visitors consent, then check that Respect visitor consent is on under Link Manager › Settings › Integrations. Also check that your consent plugin is Complianz, CookieYes or Cookiebot. With another consent plugin, a developer needs the link_manager_pro_cookie_consent filter.

More fixes are on Troubleshooting.

Related

• How clicks are counted
• Tracking settings
• Integrations settings
• Back up and restore
• Troubleshooting