Apache’s Log4j is compromised and extremely vulnerable.
Log4j could easily allow hackers to take over your entire server.
Log4j is used to log (document) webserver and other application activity.

As of Log4j version 2.1.5 the vulnerability has been contained.
We strongly recommend to check your systems and update / patch Log4j to at least version 2.1.5.

For more information please see Apache’s security page.
For more readable information see the Kaspersky Blog.
Or have a look at this Wired page for some background.

If you need any help you can contact us at support.

Logaholic version 7.1.2 is now available. This update fixes a number of bugs:

• IP masking now working correctly for IPv6
• Fixed Mysql error 124 when loading data for the first time (some mysql servers only)
• Fixed case sensitive url transformations for internal referrers (windows servers only)
• Fixed bug in Page Analysis report when viewing urls with parameters.

Please visit the download page to get the latest version.

Logaholic version 7.1.1 is now available. This small update changes the way the IP masking feature works.

IP masking allows you to anonymize IP numbers, which is considered Personal Data by the EU’s GDPR. When enabled, Logaholic will no longer store or display the full IP addresses of visitors, the last octet of the user IP address will be set to zero.

It is now also possible to enable the IP masking feature on a per profile basis, rather than just system wide.

Please visit the download page to get the latest version.

On May 25, 2018, the European Unions General Data Protection Regulation (GDPR) will take effect. Logaholic has always been fully committed to data protection, ownership and transparency and is fully compliant with the new GDPR rules.

As a web analytics company that offers both hosted and self-hosted solutions, it’s important for Logaholic users and customers understand each others roles and responsibilities when it comes to data protection.

First of all there is the relationship between Logaholic and the users of the Logaholic software (our customers). Our interactions with you are covered by our updated Privacy Policy, Terms of use, and the new GDPR Data Processing Agreement.

Please take a moment to review these documents:

• Privacy Policy
• Terms of use
• Data Processing Agreement

However, unlike Google Analytics, we do not claim ownership of the data you collect about your visitors using Logaholic software. In most cases (i.e. self hosted installations) Logaholic has no knowledge of or access to any of that data. As a Logaholic user, you are a data controller and a data processor yourself and are responsible for your own GDPR compliance.

Luckily, the Logaholic software offers you all the tools you need to comply with GDPR when it comes to the data you’ve collected using Logaholic software.

The most important topics with respect to relevant software features are:

Personally Identifiable Data (PID)

The only Personally Identifiable Data (as defined by GDPR) that the Logaholic software collects and stores by default are IP numbers. However, it is possible to add more PID like email addresses and other data via cookies and urls and javascript methods.

You should take note of which data you are collecting and what parts of that data can be considered PID. GDPR requires you to disclose your collection of this data to your visitors in your privacy policy.

If IP numbers are the only PID you are collecting in Logaholic, there is an easy option in the software to encode that information.

Enabling IP masking in Logaholic will remove the last part of an IP number to make it anonymous. This is not a requirement for GDPR compliance, but if you don’t want to deal with potential data access or removal requests by visitors (or “data subjects”), using IP masking will turn your PID into anonymous data, provided no other PID is present.

Right of access

The GDPR gives people the right to see what data you have on them. Logaholic provides tools to locate the data for specific IP numbers, so you can comply with any of these requests.

Use the Most Active Visitors report to search for an IP number and drill down to the Click Trails report to display the activity for that IP number. Any other PID you might have can be found using the Log Inspector report.

Right to erasure

The GDPR gives people the ‘right to be forgotten’. Logaholic provides tools to delete and skip data from any IP numbers, so you can simply comply with any of these requests also.

Use the Most Active Visitors report to search for an IP number and drill down to Delete IP Number to remove the associated data. You can also add the IP number to the Data Filters settings in Edit Profile to prevent the Ip number from being processed in the future.

If you have any questions regarding GDPR, privacy or data protection in general, please feel free to contact us.

A page view can only tell you so much. Have you ever wondered how long a visitor stays on the page or how far they scrolled down? Maybe they didn’t even see your beautiful download button. So we want to see if visitors are engaging with your content.

By website engagement we mean the ability to hold the attention of a visitor or to get the visitor to participate in some sort of activity.

Scroll Depth

The first metric we can take a look at is scroll depth. Here is a screenshot from the logaholic report.

This report shows how far your visitors scroll down a page. Scroll depth represents the percentage of the page a visitor has seen. For example, if the average scroll depth is 50%, that means that on average your visitors scroll far enough to have seen half of the content of the page.

This report will show you that a lot of people don’t scroll at all and that those who do rarely make it all the way down.

Armed with this information take a look at the content on the page and make sure your most important elements are visible within the average scroll depth. It’s always a good idea to make sure that important call to actions appear above the fold, so even if the visitor doesn’t scroll he’ll still have seen the most essential elements of the page.

If you have a long page that requires a lot of scrolling, you can use the average scroll depth metric as an indicator of how long your copy is holding the attention of your visitor. You can experiment with how your content is presented to try to increase the average scroll depth.

Time on Page

Time on page is another important metric we can use to estimate visitor engagement. Let’s take a look at a screenshot:

This report shows how long visitors stayed on a certain page. It’s divided up into groups, because using one general average here wouldn’t be a very helpful representation of how long different user stay on your pages.

Combining this data with the results from the scroll depth report should give you a pretty good idea of which pages are doing a good or bad job in communicating your content to your visitors.

Page Analysis

The page analysis report is another report you can use to determine whether visitors on a page are continuing to another page on your website. If they are you can at least assume your content was interesting enough for them to want to find out more.

Page conversion

This will give you an idea of how effective a landing page is at converting visitors to one of your key performance indicators.

Website Engagement

All these reports are available with Logaholic Pro. Use these reports together to get a comprehensive view of the visitor’s engagement with your content.