Every feature, grouped by what it does

TrackPilot is six things in one product. Works on any site that can load a script — WordPress, Webflow, Shopify, Framer, static HTML or custom apps. Here's exactly what each pillar ships with today.

Two ways to install

Same dashboard, same features. Pick whichever fits the site.

Universal script tag

Paste one tracker snippet into the <head> of any site. Works on WordPress, Webflow, Shopify, Framer, Wix, Squarespace, static HTML and custom apps. Powers consent, tracking, forms, popups and AI personalization.

WordPress plugin

For WordPress sites, install our plugin and skip the snippet. It auto-syncs consent categories, script slots and forms from your dashboard, and bridges Contact Form 7 submissions into the lead pipeline.

Consent & tracking

Drop-in privacy and analytics that respect EU rules out of the box.

  • Geo-aware GDPR cookie banner with per-category opt-in
  • Google Consent Mode v2 wiring with denied-by-default signals
  • Script slots for Meta Pixel, Google Ads, GA4, GTM and custom HTML
  • First-party pageviews, sessions and click events with bot filtering
  • Per-site rate limits and durable abuse counters

Forms & leads

Native forms feed a lead pipeline that never loses attribution.

  • Drag-built forms with required-field and email validation server-side
  • Honeypot field and minimum-time-on-page to silently absorb bots
  • Lead dedupe by site + lowercased email with attribution merge across visits
  • Submissions list with pagination and CSV export (commas and quotes escaped)
  • Contact Form 7 bridge for WordPress sites that already use CF7

AI personalization

Headline, CTA and on-page copy rewritten per visitor — safely.

  • Popup copy adapted by channel, search engine, search query and campaign
  • On-page text swap via data-tp-personalize attributes
  • Cache TTL configurable per site (1–720 hours) with admin purge
  • Per-org monthly AI quota with usage logging
  • Master kill switch and instant fallback to default copy on any failure

Email automations

Templates and drip steps that send reliably and unsubscribe gracefully.

  • Visual template editor with safely-escaped variable interpolation
  • Multi-step drip automations with atomic claim and idempotency key
  • Resend dispatch with signed webhook handling (signature + replay window)
  • One-click unsubscribe via signed token, suppressed across all automations
  • Sends list with status filter and links to template and automation run

Dashboard & analytics

See what's working at a glance, per site.

  • Per-site cards: pageviews, sessions, clicks and leads (30 days)
  • 14-day pageviews/clicks sparkline
  • Traffic by channel, top search queries, search engines and campaigns
  • Recent leads table with channel/source attribution
  • Loading skeletons everywhere — no blank dashboards

Workspaces & roles

Built for agencies running many sites.

  • Organizations with owner / admin / member roles in a dedicated table
  • Per-site admin actions: cache purge, brand profile, install snippets
  • Super-admin tier for support / impersonation safeguards
  • Row-level security on every user-owned table
  • Service-role isolated to verified server-side handlers only

Plus the small things that matter

Brand scraper

We fetch your site (with SSRF guard) and extract logo, palette and tone for on-brand AI drafts.

Consent-aware scripts

Scripts only fire after the matching consent category opts in.

Click rules

Track any CSS selector — phone, email, button, custom — as a typed event.

Traffic filters

IP allow/deny and UTM rules keep dashboards clean of internal traffic.

Durable rate limits

Counters live in Postgres, not memory — fair across regions and replicas.

Structured server logs

Every public endpoint emits JSON logs you can grep, aggregate and alert on.