Exclude visits

Count your visitors, not yourself.

Ignore your own browsers with one link, exclude IP addresses, paths, hostnames and countries in Settings, and switch on attack mode when a flood of fake traffic comes in.

14-day free trial · No card required · From $9/month

Your own visits.

Open your website once with #supr-ignore at the end of the address. That browser is ignored from then on (it's remembered in its local storage), and #supr-track undoes it.

  • Do it once per browser and device; Settings → Exclusions has the link for your website
  • ?supr_ignore=true on any page does the same, and ?supr_ignore=false undoes it
  • Localhost and .local hosts are never counted unless Track localhost is on in Settings or the script has supr-allow-localhost="true"

Exclusions.

In Settings → Exclusions, up to 50 of each:

IP addresses
An exact address, or a prefix ending in * or ., such as 192.168.1.*.
Paths
The whole path, with * matching anything, such as /admin/*. Case doesn't matter.
Hostnames
A host and its subdomains, such as staging.yourdomain.com.
Countries
New visits from the country are dropped, and its past visits are hidden from reports while it's on the list.

Excluded IP addresses, paths and hostnames are dropped as hits arrive, so past data stays as it was. Session recordings and heatmaps leave out the same IP addresses, paths and hostnames.

Attack mode.

In Settings → Security. Under a bot attack or a flood of fake traffic, turn it on and every hit is dropped until you turn it off. The tracker still gets a success answer, and live chat pauses.

By hand
On until you switch it off again.
Automatically
On by itself for an hour when the last hour's visits reach 4 times the usual hourly rate, and at least 30. Checked every 5 minutes.
You're told
With spike alerts on, the alert for that rush says attack mode is on.

Always left out.

Without any setting:

  • Bots and crawlers, recognised by their user agent; to see them separately, use crawler tracking
  • Automated browsers, such as headless Chrome, Cypress, Playwright and Selenium
  • Pages opened as files (file://)
  • Dropped hits aren't stored, so they don't count towards your plan's monthly events

How it works, in detail.

The docs page “Exclude visits” goes through it step by step.

How it works

Limits worth knowing

  • IP, path and hostname exclusions apply from when you add them; they don't remove past data
  • While attack mode is on, real visitors aren't counted either
  • The ignore link works per browser: a private window or another device is counted until you open the link there too
  • Up to 50 entries of each kind

Questions, answered.

How do I stop counting my own visits?

Open your website with #supr-ignore at the end of the address, once in each browser you use. Settings → Exclusions has the link. Or exclude your IP address there.

Can I exclude a range of IP addresses?

Yes. End the address with * or ., such as 192.168.1.*, and every address starting with it is left out.

Does excluding a country remove its past visits?

They're hidden from your reports while the country is on the list, and come back if you take it off. New visits from it aren't recorded meanwhile.

What is attack mode?

A switch in Settings → Security that drops every hit while it's on, for floods of fake traffic. It can also turn itself on for an hour when traffic jumps to 4 times its usual hourly rate.

Are bots counted as visitors?

No. Bots and crawlers are recognised by their user agent, and automated browsers by the browser itself, and their hits are dropped.

Do excluded visits count towards my plan?

No. Hits dropped by an exclusion or by attack mode aren't stored, so they don't count as events.

See it on your own website.

Every feature is on every plan, with a free trial and no card.

14-day free trial · No card requiredPricingHow it worksAll features