Descrizione

Anni is a marketing assistant for small businesses in Switzerland (anni-marketing.ch). This companion plugin lets Anni finish your Google setup automatically after you connect your WordPress site:

Outputs the Google Analytics 4 tag (gtag.js) in your site’s head — only if you (or Anni, with your permission) configure a measurement ID.
Outputs the Google Search Console site-verification meta tag — only if a verification token is configured.
Provides a small authenticated REST endpoint (anni/v1) so the Anni app can read plugin status and set the two values above. All endpoints require the manage_options capability (administrators). Requests are authenticated with WordPress Application Passwords.

The plugin itself does not track visitors, does not send data anywhere, and stores only two options (anni_ga4_id, anni_gsc_verification). The Google Analytics tag is only loaded if a measurement ID has been explicitly configured; in that case Google’s terms for Analytics apply.

External services

This plugin connects your site to the Anni marketing platform (https://anni-marketing.ch), operated by
digitale rakete GmbH (https://digitalerakete.ch), so that Anni can complete your Google setup for you.

What the plugin itself sends: nothing. The plugin does not initiate any outbound request. It only
receives authenticated REST requests from the Anni app and stores/prints two values on your site.

When your site is contacted: only after you connect your website inside your own Anni account and
create a WordPress Application Password for it. The Anni app then calls the endpoints below using
that password:

GET /wp-json/anni/v1/status — reads whether the plugin is active and which values are set
(requires the manage_options capability).
POST /wp-json/anni/v1/ga4 — stores your Google Analytics 4 measurement ID (requires manage_options).
POST /wp-json/anni/v1/gsc — stores your Google Search Console verification token (requires manage_options).

Data involved: your GA4 measurement ID and your Search Console verification token. No visitor data,
no personal data and no site content is transmitted by this plugin.

Google Analytics: if — and only if — a measurement ID is configured, the plugin prints Google’s
standard gtag.js snippet, which loads https://www.googletagmanager.com/gtag/js in visitors’ browsers.
This is Google’s service, used under your own Google Analytics property. Google’s terms and privacy
policy apply: https://policies.google.com/terms and https://policies.google.com/privacy

Anni platform terms and privacy policy: https://anni-marketing.ch/nutzungsbedingungen and
https://anni-marketing.ch/datenschutz

Installazione

Install and activate the plugin.
Connect your website in your Anni account (anni-marketing.ch) — Anni configures statistics and Search Console automatically.
Alternatively, set the options manually via WP-CLI or the REST endpoint.

FAQ

Does this plugin track my visitors?: No. It only prints the Google Analytics tag if you configure a measurement ID. Without configuration it outputs nothing.
Who can change the settings?: Only authenticated WordPress administrators (manage_options), typically via an Application Password issued by you. All anni/v1 endpoints require this — including reading the plugin status; page edits additionally require the right to edit that page (edit_post).
Does it work without an Anni account?: Yes — you can set the GA4 ID and the Search Console token yourself; the plugin is a minimal, dependency-free head-injector.
Why does this plugin re-enable Application Passwords?: Anni connects to your site exclusively through WordPress Application Passwords (the built-in
authorize-application.php flow — you approve the connection yourself, no password typing).
Some security plugins disable Application Passwords globally, which silently breaks that
connection. If you install this plugin, you explicitly want the Anni connection, so it makes
the feature available again — but only for Anni: authorization requests from any other
application keep whatever policy your security plugin enforces. WordPress’ own HTTPS
requirement for Application Passwords stays untouched.

Recensioni

Non ci sono recensioni per questo plugin.

Contributi e sviluppo

“Anni Marketing” è un software open source. Le persone che hanno contribuito allo sviluppo di questo plugin sono indicate di seguito.

annimarketing

Traduci “Anni Marketing” nella tua lingua.

Ti interessa lo sviluppo?

Esplora il codice segui il repository SVN, segui il log delle modifiche tramite RSS.

Changelog

1.4.0

New setting “Anni may adjust website technology” (Settings > Anni, on by default). When off, the plugin
outputs none of the items below and makes no further changes; undo stays available.
AI search access in robots.txt: AI search crawlers (OAI-SearchBot, ChatGPT-User, PerplexityBot,
Perplexity-User, Claude-SearchBot, Claude-User) are no longer blocked; training crawlers (GPTBot,
Google-Extended, ClaudeBot, CCBot) follow your setting. Works through the robots_txt filter; if a physical
robots.txt exists and is writable, the plugin updates that file and keeps the previous content for undo.
Business schema (Organization/LocalBusiness) on the front page. If Rank Math or Yoast already output an
organization, the plugin completes their node through their schema filters instead of adding a second one;
if the theme outputs one, the plugin adds nothing.
FAQPage schema for posts and pages with question headings (at least two), skipped when the page already has
FAQ schema (for example from an SEO plugin’s FAQ block).
/llms.txt with your pages and recent posts (not linked anywhere, only when the site is public).
Business details correction (name, address, phone) after your approval: exact text in page content
(block editor, classic, Elementor incl. header/footer templates), widgets and Customizer settings, plus an
optional output rule for text built into the theme (text only, never attributes or scripts).
Search engine visibility can be switched on after your approval.
Every change is recorded in the Anni history ({prefix}anni_changes) and can be undone, with a conflict check.

1.3.0

Page editing for Elementor (classic widgets, 10Web widgets, header/footer templates): Anni changes only
fields an element really has (checked against the widget’s own controls), validates values, cleans text
with wp_kses_post and saves through Elementor’s own document API. Every change is recorded in an own
table ({prefix}anni_changes) and can be undone, with a conflict check if the page changed meanwhile.
Style per device (typography, colours, spacing, borders, background, animation) from an allow-list of
style sections; global kit colours and fonts of the active kit (existing entries only).
Structure: duplicate, move, hide per device; deleting a section needs a one-time confirmation token.
Images: swap an image in a widget, compress an image under the same media ID with a private backup of
the original and a restore endpoint. Images are processed on your server; nothing is sent elsewhere.
SEO title/description/focus keyword for Rank Math and Yoast are exposed to the WordPress REST API for
users who can edit the post.
Optional load-time switches for images (fetchpriority for the largest image, lazy loading below the
fold, decoding=”async”), each one can be turned off again.
Hardening: write requests to anni/v1 are limited per user (120 per minute, image optimisation 20 per
minute, HTTP 429 above), requests larger than 2 MB are rejected (HTTP 413), invalid values are rejected
with a real HTTP error instead of being adjusted silently.
New endpoints require manage_options and, for a page, edit_post. Uninstalling removes the table and
the plugin’s options. The plugin still makes no outbound requests.

1.2.1

Elementor editing: Anni can now target a specific text field (icon boxes, image boxes, icon lists, call-to-action, testimonials, animated headlines, header/footer templates). Only existing text fields are written; the text is passed through wp_kses_post.
The “Zu Anni” link in the activation notice now points to the Anni environment this site is connected to (taken from the consent configuration), instead of always to app.anni-marketing.ch.

1.2.0

Consent banner built in: the plugin now shows a bottom notice (“Alle akzeptieren” / “Nur notwendige” /
“Einstellungen anpassen” with categories) before Google Analytics loads. Until now the plugin only set
Consent Mode to “denied” and never asked, so nothing was measured. Texts, colours, privacy link and
mode (basic = no Google contact before consent, advanced = cookieless pings) come from Anni via the new
REST endpoint anni/v1/consent; without it, built-in defaults with the site name and WordPress privacy
page apply. Choice stored as a first-party cookie for 182 days, footer link “Cookie-Einstellungen” to
change it. No data is sent to Anni except an anonymous accept/decline count when configured.

1.1.8

Elementor editing: new REST endpoints anni/v1/elementor/{id} (GET the widget tree, POST
surgical text edits by stable element id) via Elementor’s own Document::save() — correct CSS
regeneration, native revision for undo, per-page locking. Only active when Elementor is installed.

1.1.7

GA4 now respects visitor consent: Consent Mode v2 defaults to “denied” before the config call,
so no analytics or advertising storage is used until a consent tool on the site grants it. Sites
without a consent banner therefore no longer measure without consent (GDPR/Swiss DPA compliant).

1.1.6

Application Passwords availability is now restored surgically instead of globally:
authorization requests whose application name does not start with “Anni” keep the policy
enforced by your security plugin (both availability filters plus the
wp_authorize_application_password_request_errors hook, scoped the same way).
Added a dismissible admin notice after activation pointing back to Anni (no redirect).
Added a FAQ entry explaining why and how the plugin re-enables Application Passwords.

1.1.5

Restore Application Passwords availability via the wp_is_application_passwords_available
filter (latest priority) — some security plugins disable the feature globally, which breaks
the Anni connection entirely. WordPress’ HTTPS requirement stays untouched.

1.1.4

Author URI auf https://digitalerakete.ch umgestellt (die alte Adresse hatte kein
gueltiges Zertifikat und wurde vom Review geruegt).
Firmenname in readme.txt an das Impressum angeglichen: digitale rakete GmbH.

1.1.3

Tightened the /status REST endpoint to require manage_options (was edit_posts), matching the other two endpoints and this readme’s own description.

1.1.2

Added the required “External services” documentation.
Corrected the documented capabilities to match the code (status: edit_posts, writes: manage_options).

1.1.0

Search Console verification meta support (anni/v1/gsc).

1.0.0

Initial release: GA4 tag output + status endpoint.