Hive Mail skips visitors whose browser asks not to be tracked, and keeps your own visits and private pages out of the statistics. The cards below appear once visitor tracking is on. You need the permission Manage settings.
Do Not Track and Global Privacy Control #
Both are signals a browser or extension sends to say "do not track me". In Settings > Tracking & Privacy, card What is recorded, the switch Respect "Do Not Track" and Global Privacy Control is on by default.
- The check runs twice: the script stays silent in the browser, and the server refuses requests with
DNT: 1orSec-GPC: 1. - Those visitors are not recorded and see no Hive Mail banner; all
HiveMail.*calls on the page are ignored.HiveMail.forget()still erases a browser that turned a signal on after being tracked.
Turn the switch off only if you accept tracking people whose browser asks not to be tracked.
Who and what is left out #
Card Who and what is left out: "Visits that are never recorded, whatever the tracking mode."
| Setting | What it does | Default |
|---|---|---|
| Do not track logged-in people with these roles | Tick the roles; the script is not even put on the page for them | Administrator |
| Do not track these addresses | One per line from your home page, for example /my-account. End with * for everything starting with it. Not case sensitive, trailing slash ignored; up to 50 lines |
/wp-admin* and /wp-login.php |
| Do not track order confirmation and receipt pages | WooCommerce order-received and view-order pages; Easy Digital Downloads purchase confirmation and history pages | On |
| Do not track account, password and sign-up pages | /wp-login.php, /wp-signup.php, /wp-activate.php, /my-account*, /lost-password*, /reset-password*, /password-reset*, WooCommerce My account and pay-for-order, Easy Digital Downloads history, success and login pages |
On |

Also exclude membership and profile pages yourself: their addresses can hold a name or order number. Click Save changes after any edit; it applies to new visits.
Never tracked, whatever you set: the WordPress admin, feeds, robots.txt, trackbacks, embeds, previews, and robots, crawlers, link checkers and preview tools.
To remove a page already recorded, open it under Intelligence > Pages, use Forget this page, then add its address to Do not track these addresses (Live, Pages and Traffic Sources).
Tip: Test in a private window, logged out. Administrators are excluded by default, and some privacy browsers send Do Not Track by default.
Whether you must honour these signals depends on where you and your visitors are; keeping the switch on is the cautious choice.
Next: Settings: Tracking & Privacy, The consent banner.
This is information, not legal advice.