=== WP DoNotTrack ===
Contributors: futtta
Tags: privacy, donottrack, tracking, plugin, theme, security, performance
Requires at least: 3.2
Tested up to: 3.3
Stable tag: 0.5.2

WP DoNotTrack stops plugins and themes from adding external tracking code, protecting visitor privacy and providing performance and security benefits

== Description ==
WP DoNotTrack stops [plugins and themes from adding javascript-initiated 3rd party tracking code to your blog](http://blog.futtta.be/2011/02/17/why-your-wordpress-blog-needs-donottrack/) to protect both your visitor's privacy, your own security (in the admin-pages) and offering performance gains (limiting requests executed in the browser to render your pages).

This plugin can be useful if you want to:

* make your WordPress blog/ site honour visitors who request not to be tracked, even if the 3rd parties you include do not (conditional privacy)
* stop tracking by 3rd parties for all your visitors (absolute privacy)
* protect your blog from rogue plugins that dynamically add malicious external javascript to your wp-admin pages (security)
* limit the number of external servers that are called from your blog (performance)

WP DoNotTrack uses (a slightly modified) version of [jQuery AOP](http://code.google.com/p/jquery-aop/) to catch and inspect elements that are about to be added to the DOM and renders these harmless if the black- or whitelist say so. You can block 3rd party tracking for all you visitors, or just for those that have navigator.doNotTrack set to "1" (based on privacy/ donottrack settings as available in version 9 of both Firefox and Internet Explorer). Starting from version 0.5.0, WP DoNotTrack includes an admin-page to change these settings.

Feedback is welcome; see [info in the faq](http://wordpress.org/extend/plugins/wp-donottrack/faq/) for bug reports/ feature requests and feel free to [rate and/or report on compatibility on wordpress.org](http://wordpress.org/extend/plugins/wp-donottrack/).

== Installation ==

Just install form your Wordpress "Plugins|Add New" screen and all will be well. Manual installation is very straightforward as well:

1. Upload the zip-file and unzip it in the `/wp-content/plugins/` directory
2. Activate the plugin through the 'Plugins' menu in WordPress
3. Configure on the admin-page

== Frequently Asked Questions ==

= Should I run WP DoNotTrack in black- or whitelist mode? =
* Although whitelist is more robust and future-proof, it might break things in both frontend and wp-admin. If you don't want to test extensively and you're not sure to begin with, start out going blacklist first.

= How should I create my blacklist? =
* Check what requests the browser makes when not logged in (look at a couple of different pages) and add the hostname of URL's you deem unfit to the blacklist
* Disable any caching- or javascript-aggregating plugin while testing/ making changes
* Try an external service like [webpagetest.org](http://www.webpagetest.org/) to make sure you're seeing a real anonymous user's view

= How should I create a whitelist? =
* Whitelisting is somewhat more impacting, as it'll stop anything you don't explicitely allow. Be sure to study requests for both visitors and logged in users in wp-admin. In general you'd want to allow known hosts such as e.g. google-analytics.com. 
* Make sure to test extensively after enabling the whitelist and tweak until everything works to your satisfaction.
* Disable any caching- or javascript-aggregating plugin while testing/ making changes
* Try an external service like [webpagetest.org](http://www.webpagetest.org/) to make sure you're seeing a real anonymous user's view

= Can WP DoNotTrack stop all tracking? =
No, it currently only stops most javascript-initiated 3rd party code inclusion.There are several other types of tracking:

* some plugins have tracking that is not javascript-initiated. A newer version of WP Donottrack (0.6.0, probably) will include detection of black- or whitelisted hostnames in the HTML as well.
* some widgets (in the broad sense) only work with tracking enabled. But you could choose to do conditional tracking (for people who opted out) and stop the 2nd party code from being executed for those visitors.
* some trackers use Flash, which is simply out of reach of what WP DoNotTrack can do

= Any bugs/ issues should I know about? =
* When running [WP YouTube Lyte](http://wordpress.org/extend/plugins/wp-youtube-lyte/) and having the donottrack bonus feature enabled, things go somewhat wrong with this admin-page not loading correctly anymore. I'll probaly remove DoNotTrack from a future WP YouTube Lyte version, but if you run into this bug: disable javascript, go to WP YouTube Lyte settings page, disable donottrack there, submit and re-enable javascript.
* After installing or when making changes to the WP DoNotTrack configuration, you might have to clear the caches of caching plugins you might be using (e.g. WP Super Cache or W3 Total Cache). Consider it "best practice" to disable caching & javascript-aggregating plugins while testing new black- or whitelists
* ClourFlare seems to interfere with the way the plugin gets loaded and the way it functions. You can solve the problem by disabling "Rocket Loader" and/or "Auto Minify" alltogether.
* Not a bug, but still an known issue; as WP DoNotTrack is also active in the wp-admin-pages, it will -when in whitelist mode- impact plugins that (for whatever reason) pull in javascript from elsewhere in their option-pages. This very plugin for instance, depends on googleapis.com to render a rss-widget.

= I found a bug/ I would like a feature to be added! =
* Just tell me, I like the feedback and in general I'll reply within a couple of hours. Use the [Contact-page on my blog](http://blog.futtta.be/contact/), [leave a comment in a post about DoNotTrack](http://blog.futtta.be/tag/donottrack/) or [post about it on the wordpress.org plugin forum](http://wordpress.org/tags/wp-donottrack?forum_id=10#postform)

= How you can help =
* Explain people (in real life and/or on your blog, on Facebook, on Twitter ...) that you disabled 3rd party tracking on your blog.
* Tell me about bugs you think you've found and if you can't find any, [confirm it works with your version of WP on wordpress.org](http://wordpress.org/extend/plugins/wp-donottrack/)
* Ask me for a feature you would like to see added (cfr. contact info above)
* [Rate my plugin on wordpress.org](http://wordpress.org/extend/plugins/wp-donottrack/).

== Changelog ==

= 0.5.2 =
* add document.body insertBefore to the list of methods being watched
* add lockerz.com to default blacklist (the popular addtoany [now has lockerz tracking](http://blog.futtta.be/?p=7092))

= 0.5.1 =
* also look for iframe's being added to the DOM by javascript
* bugfix: make WP DoNotTrack behave when in https
* updated readme.txt ([FAQ: "Can WP DoNotTrack stop all tracking?"](http://wordpress.org/extend/plugins/wp-donottrack/faq/))

= 0.5.0 =
* choose between white- and blacklist (default)
* define the content of you white- or blacklist (default: quantserve.com & media6degrees.com)
* have WP DoNotTrack stop tracking only when browser sends DNT-flag or always (default)

= 0.1.0 =
* Initial version