AgentsPoppy
← All poppies

Catalogue › Analytics › TrafficPoppy

TrafficPoppy

Website analytics with no cookie banner — GDPR-compliant, in your own cloud.

5.0(3)5.0 out of 5 stars, from 3 ratings

FeaturedFree Lite versionPro upgrades in-appAnalyticsVersion 0.2.7Data stays in your cloudEveryone

Download AgentsPoppy to get TrafficPoppy

The AgentsPoppy app is free, and runs on macOS, Windows and Linux. TrafficPoppy installs from inside it — the app asks your permission, shows exactly what will be created in your cloud, and can remove all of it later.

Screenshots

Your statistics page, on your own address: views, visitors, new vs returning, and a live last-30-minutes ticker.
Conversions next to everything else — with how many different visitors converted, not just clicks.
Traffic flow — where visits come in (green), where they move on or leave (red). Counts only, never individual visitors.
Top pages, referrers and visitor countries — every list exports to CSV.
Setting one up is one question: does someone reach a page, or press a button? Each goal then proves it is working.

What you'd be asked to approve

Before TrafficPoppy can touch your AWS account, AgentsPoppy shows this exact grant and waits for your yes. This preview is computed from the poppy's reviewed package by the same assessor code the app runs — it is the approval screen, shown early.

At least one grant can change or delete resources beyond TrafficPoppy's own. The app flags this in red — read each line before approving.
  • cloudformationIts own

    Can create, change and delete only CLOUDFORMATION resources named arn:aws:cloudformation:*:*:stack/TrafficPoppy* — it cannot change or delete any CLOUDFORMATION resource with a different name.

    7 actionsCreateStack · UpdateStack · ContinueUpdateRollback · DeleteStack · DescribeStacks · DescribeStackEvents · DescribeStackResources
  • dynamodbIts own

    Can create, change and delete only DYNAMODB resources named arn:aws:dynamodb:*:*:table/TrafficPoppy* — it cannot change or delete any DYNAMODB resource with a different name.

    13 actionsCreateTable · DeleteTable · DescribeTable · UpdateTimeToLive · DescribeTimeToLive · TagResource · ListTagsOfResource · Query · Scan · GetItem · PutItem · UpdateItem · DeleteItem
  • lambdaIts own

    Can create, change and delete only LAMBDA resources named arn:aws:lambda:*:*:function:TrafficPoppy* — it cannot change or delete any LAMBDA resource with a different name.

    13 actionsCreateFunction · DeleteFunction · GetFunction · UpdateFunctionCode · UpdateFunctionConfiguration · CreateFunctionUrlConfig · DeleteFunctionUrlConfig · GetFunctionUrlConfig · AddPermission · RemovePermission · GetPolicy · TagResource · ListTags
  • iamIts own

    Can create, change and delete IAM identities and permissions named arn:aws:iam::*:role/TrafficPoppy* — this controls who can do what in your account.

    11 actionsCreateRole · DeleteRole · GetRole · PassRole · PutRolePolicy · DeleteRolePolicy · GetRolePolicy · PutRolePermissionsBoundary · DeleteRolePermissionsBoundary · TagRole · ListRoleTags
  • logsIts own

    Can create, change and delete only LOGS resources named arn:aws:logs:*:*:log-group:/aws/lambda/TrafficPoppy* — it cannot change or delete any LOGS resource with a different name.

    5 actionsCreateLogGroup · DeleteLogGroup · PutRetentionPolicy · TagResource · ListTagsForResource
  • s3Its own

    Can create, change and delete only S3 resources named arn:aws:s3:::trafficpoppy-deploy-* — it cannot change or delete any S3 resource with a different name.

    5 actionsCreateBucket · DeleteBucket · ListBucket · PutBucketTagging · GetBucketLocation
  • s3Its own

    Can create, change and delete only S3 resources named arn:aws:s3:::trafficpoppy-deploy-*/* — it cannot change or delete any S3 resource with a different name.

    3 actionsPutObject · GetObject · DeleteObject
  • acmIts own

    Can create, change and delete only ACM resources tagged as its own — it cannot change or delete any ACM resource with a different tag.

    5 actionsRequestCertificate · DescribeCertificate · DeleteCertificate · AddTagsToCertificate · ListTagsForCertificate
  • cloudfrontIts own

    Can create, change and delete only CLOUDFRONT resources tagged as its own — it cannot change or delete any CLOUDFRONT resource with a different tag.

    7 actionsCreateDistribution · CreateDistributionWithTags · GetDistribution · UpdateDistribution · DeleteDistribution · TagResource · ListTagsForResource
  • cognito-idpIts own

    Can create, change and delete only COGNITO-IDP resources tagged as its own — it cannot change or delete any COGNITO-IDP resource with a different tag.

    18 actionsCreateUserPool · DeleteUserPool · UpdateUserPool · DescribeUserPool · DeleteUserPoolClient · UpdateUserPoolClient · DescribeUserPoolClient · GetUserPoolMfaConfig · AdminCreateUser · AdminDeleteUser · AdminSetUserPassword · AdminAddUserToGroup · AdminRemoveUserFromGroup · AdminListGroupsForUser · DeleteGroup · ListUsers · TagResource · ListTagsForResource
  • cognito-idpBroad

    Can create new COGNITO-IDP resources in your account, but cannot change or delete anything that already exists.

    2 actionsCreateUserPoolClient · CreateGroup

Nothing can be approved from a web page. The real Approve lives in the AgentsPoppy app on your machine, where this grant meets your actual AWS account — and where you can reject it, or tear down everything it created, at any time.

Evaluating TrafficPoppy for a company? Its vendor security package is audit-ready documentation for your SOC 2 or vendor-risk process — generated from the same reviewed package, with a machine-readable copy for procurement tooling.

About TrafficPoppy

TrafficPoppy is website analytics without the surveillance, and GDPR-compliant by design: nothing is stored on or read from your visitors' devices and no personal data is kept, so there is no cookie banner to show. A 1 KB script sends page views to a collector in your own cloud account, which stores nothing but counts — IP addresses are never written down, and the key used to count unique visitors is destroyed every day. You get views, unique visitors, top pages, referrers, campaigns, devices and a live ticker in the app, and your visitors' data never reaches anyone but you. The optional Advanced Stats upgrade puts your statistics page on your own address so you can open and share it from any browser, recovers visitors that ad blockers hide, adds visitor countries, and tracks conversions — count visits to a thank-you page or presses of a download or buy button, and see how many different visitors converted.

What you get

Included, free

  • ✓GDPR-compliant, no cookie bannerNothing is stored on or read from a visitor's device, and no personal data is kept: unique visitors are counted with a key that is destroyed every day. There is nothing to ask consent for.
  • ✓Everything stays in your own cloudThe app builds a small collector and a table of counts in your own cloud account. Nobody sits in the data path, including us.
  • ✓The numbers that matterViews, unique visitors, new vs returning, top pages, referrers, campaigns, browsers, devices, a live last-30-minutes ticker, and CSV export.
  • ✓Costs you can seeA small site costs cents a month in your own account, and the app shows what it spends rather than hiding it behind a plan.

Paid features

  • ★Your statistics page, on your own addressAdvanced Stats puts the dashboard on stats.your-site.com — open it from any browser or phone, and invite your team or client to read it.
  • ★Conversion trackingCount what you actually wanted: visits to a thank-you page — retroactively, including the ones already recorded — or presses of a download, buy or contact button. See conversions, how many different visitors converted, and the rate.
  • ★Count the visitors ad blockers hideCollecting from your own subdomain is first-party, so blocklists stop suppressing it — and visitor countries come with it.

Pricing

Install TrafficPoppyNothing to pay to install it.Free
Advanced Stats15-day free trial, then it renews until you cancel.$10.68 / year

Prices are read live from the developer's own listing. Whatever this poppy costs, the cloud resources it creates are billed by AWS directly to you — AgentsPoppy never marks them up. Paid features are bought inside the app; the developer is the merchant of record.

Data & privacy

Nothing leaves your cloud. The developer declared that no data this poppy handles is ever sent outside the AWS account it runs in. You can verify that claim yourself — the source is public.

Developer & support

DeveloperOllyDigital
Websitehttps://trafficpoppy.agentspoppy.com
Source codehttps://github.com/leonct74/trafficpoppyPublic by requirement — you or your AI can audit exactly what it does before installing.
Supportsupport@agentspoppy.com
https://github.com/leonct74/trafficpoppy/issues
Age ratingEveryone
Runs onmacOS, Windows and LinuxNeeds AgentsPoppy 0.3.1 or newer.
Where it runsYour own AWS account.AgentsPoppy holds no copy of your data and cannot read it. Cloud usage is billed to you by AWS at their prices.

Support for the poppy itself comes from its developer. For the AgentsPoppy app, see Security or our terms.

Ready to run TrafficPoppy in your own cloud?

Download the free AgentsPoppy app for macOS, Windows or Linux, connect your AWS account once, and install TrafficPoppy from the catalogue inside it.

Download AgentsPoppy
← All poppies