{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-09", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "woopra", "name": "Woopra", "vendor": "Woopra, Inc.", "vendorUrl": "https://www.woopra.com", "kind": "http-api", "category": "product-analytics", "summary": "Woopra is a hosted customer journey and product analytics service from Woopra, Inc., an Appier affiliate. Its HTTP tracking API records events and visitor properties, and its REST API returns saved reports, profiles and raw session logs.", "url": "https://www.anchorterminal.com/tools/woopra", "markdownUrl": "https://www.anchorterminal.com/tools/woopra.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/woopra.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/woopra.json", "repo": "https://github.com/Woopra/js-client-tracker", "license": "Proprietary service under Woopra's terms of service. The browser tracker and the SDKs on GitHub are MIT, and the Node package is ISC", "transports": [ "http" ], "remoteUrl": "https://www.woopra.com/rest/3.10", "packages": [ { "registry": "npm", "name": "woopra" }, { "registry": "npm", "name": "@woopra/browser-tracker" } ], "auth": "mixed", "authNotes": "Self-serve. REST calls use HTTP Basic with an App ID and Secret Key that each user generates on the Access Keys tab of the members area. Tracking calls need only the project name unless the owner enables Secure Tracking, which adds a generated ID and secret sent by HTTP Basic. No OAuth, scopes or partner approval were found in the docs.", "pricing": "paid", "pricingNotes": "Pro starts at $999 a month for 5 million events, with a 30-day trial that an agent's owner can start without a contract. Overage fees apply past the event quota, at rates the pricing page does not state. Enterprise is quoted. Whether the trial signup asks for a card was not established (https://www.woopra.com/pricing, checked 2026-10-09).", "priceSummary": "$999 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs or on the pricing page (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 415, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.woopra.com", "llmsTxt": "https://docs.woopra.com/llms.txt", "capabilities": [ "analytics.query", "analytics.events", "analytics.funnels" ], "tags": [ "hosted", "closed-source", "llms-txt", "basic-auth", "no-oauth", "free-trial", "status-page", "rate-limits", "export", "sales-led" ], "lastRelease": "2026-03-16", "graded": true, "anchor": { "graded": true, "score": 44.4, "grade": "E", "agentReady": false, "rank": 779, "ranked": true, "rankOf": 842, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 45, "maintenance": 9, "payments": 30, "reliability": 80, "schema": 45, "security": 22, "transparency": 61 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 80, "points": 16, "reason": "Graded on the REST and HTTP tracking APIs with the hosted lines. Statuspage site at status.woopra.com with three components (20). Its history lists no incidents for August, September or October 2026, the three months shown (30). Limits published with numbers, 300 calls a minute, 600 an hour and 3,000 a day per project (15). A 429 status is documented and tracking calls answer 202 when queued, but no Retry-After, backoff guidance or idempotency key was found (5). No SLA found. The terms promise commercially reasonable efforts (0). The API is version 3.10 with no beta label (10). Total 80." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 45, "points": 7.31, "reason": "Each REST reference page embeds an OpenAPI 3.1 fragment in its Markdown copy. No single spec file was found, most operations define no responses, and the tracking endpoints are documented as tables (12). llms.txt and a .md copy of each page, though llms.txt lists four of fourteen REST operations (10). Descriptions are one line. The `/profiles` page repeats the `/trends` text, three profile operations have none, and one page still holds template placeholder text (6). Query parameters carry types and required flags. There are no enums, and profile edits take a JSON string in `data` (6). One curl example for REST and several tracking examples. Tracking response codes are explained, while REST errors are a 400 with an empty object (6). The version sits in the path and 3.10 is the only one supported. No changelog found (5). Total 45." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 45, "points": 7.31, "reason": "Report responses can be capped with `limit`, but a report can only be run from a `report_id` saved in the web app, so an agent can't shape a query through the API (12). `limit`, `offset`, a `snapshot` ID for consistent paging and timeframe overrides on reports, and position headers on log export (14). Tracking codes 401, 402 and 403 each name a cause. REST error bodies are not documented (8). No idempotency key or dedupe field was found, and tracking is by GET. Imports return a batch ID to poll (3). Report calls need two parameters. Official SDKs exist in several languages, but the server ones date from 2017 (8). Total 45." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 22, "points": 3.85, "reason": "REST calls use per-user access keys sent by HTTP Basic, with no scopes or rotation guidance found. Tracking calls need only the project name by default, with an optional Secure Tracking secret. Docs examples still show `http://` tracking URLs (15 of 30). The pricing page states group and individual permission controls, but no read-only key or confirmation on `/profile/delete` was found (5). The API returns event and profile text that any caller who knows the project name can write, and no guidance on untrusted content was found (0). No audit log found in the docs (0). No security page, bug bounty or certification was found on the pages read, and security.txt timed out. The privacy policy states Data Privacy Framework certification (2). Total 22." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 (0). Pro is public at a starting price of $999 a month for 5 million events. Overage rates and Enterprise prices are not published (10). 30-day trial of Pro. The terms say a customer may add a card during the trial, which suggests none is needed to start, but we did not see the signup form (20). A person signs up in a browser and generates keys in the members area (0). Total 30." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 9, "points": 0.79, "reason": "The newest dated change found is a commit to the browser tracker on 16 March 2026, and the REST intro page was last edited on 13 March 2026, both more than 180 days before the check (0). No releases or dated changelog entries in the last 90 days (0). No API changelog. Support is by email and in-app, and response times were not checked (3). The browser tracker's last tag is v5.3.0 from 2021, iOS and Android were last committed to in November 2024, and the Node, Python, Java and Rails SDKs in 2017 (4). The Node README carries a Travis CI badge and no current CI was found (2). Total 9." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 61, "points": 5.34, "note": "editorial 45, provenance 77", "reason": "Closed service with dated terms that cover the subscription, and MIT SDKs (15). The terms say the customer owns tracking data, and the pricing page states 24 months of retention. The privacy policy excludes end-user data, the DPA is sent only on request, and the GDPR page still cites Privacy Shield while the privacy policy cites the Data Privacy Framework (14). No deprecation policy or dated notices found (0). Nine sub-processors named in the terms with addresses and countries, eight in the USA and Hetzner in Germany. Where customer data is stored is not stated (16). Total 45." } ], "assessment": { "date": "2026-10-09", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Report responses can be capped with `limit`, but a report can only be run from a `report_id` saved in the web app, so an agent can't shape a query through the API (12). `limit`, `offset`, a `snapshot` ID for consistent paging and timeframe overrides on reports, and position headers on log export (14). Tracking codes 401, 402 and 403 each name a cause. REST error bodies are not documented (8). No idempotency key or dedupe field was found, and tracking is by GET. Imports return a batch ID to poll (3). Report calls need two parameters. Official SDKs exist in several languages, but the server ones date from 2017 (8). Total 45.", "maintenance": "The newest dated change found is a commit to the browser tracker on 16 March 2026, and the REST intro page was last edited on 13 March 2026, both more than 180 days before the check (0). No releases or dated changelog entries in the last 90 days (0). No API changelog. Support is by email and in-app, and response times were not checked (3). The browser tracker's last tag is v5.3.0 from 2021, iOS and Android were last committed to in November 2024, and the Node, Python, Java and Rails SDKs in 2017 (4). The Node README carries a Travis CI badge and no current CI was found (2). Total 9.", "payments": "No x402, MPP or L402 (0). Pro is public at a starting price of $999 a month for 5 million events. Overage rates and Enterprise prices are not published (10). 30-day trial of Pro. The terms say a customer may add a card during the trial, which suggests none is needed to start, but we did not see the signup form (20). A person signs up in a browser and generates keys in the members area (0). Total 30.", "reliability": "Graded on the REST and HTTP tracking APIs with the hosted lines. Statuspage site at status.woopra.com with three components (20). Its history lists no incidents for August, September or October 2026, the three months shown (30). Limits published with numbers, 300 calls a minute, 600 an hour and 3,000 a day per project (15). A 429 status is documented and tracking calls answer 202 when queued, but no Retry-After, backoff guidance or idempotency key was found (5). No SLA found. The terms promise commercially reasonable efforts (0). The API is version 3.10 with no beta label (10). Total 80.", "schema": "Each REST reference page embeds an OpenAPI 3.1 fragment in its Markdown copy. No single spec file was found, most operations define no responses, and the tracking endpoints are documented as tables (12). llms.txt and a .md copy of each page, though llms.txt lists four of fourteen REST operations (10). Descriptions are one line. The `/profiles` page repeats the `/trends` text, three profile operations have none, and one page still holds template placeholder text (6). Query parameters carry types and required flags. There are no enums, and profile edits take a JSON string in `data` (6). One curl example for REST and several tracking examples. Tracking response codes are explained, while REST errors are a 400 with an empty object (6). The version sits in the path and 3.10 is the only one supported. No changelog found (5). Total 45.", "security": "REST calls use per-user access keys sent by HTTP Basic, with no scopes or rotation guidance found. Tracking calls need only the project name by default, with an optional Secure Tracking secret. Docs examples still show `http://` tracking URLs (15 of 30). The pricing page states group and individual permission controls, but no read-only key or confirmation on `/profile/delete` was found (5). The API returns event and profile text that any caller who knows the project name can write, and no guidance on untrusted content was found (0). No audit log found in the docs (0). No security page, bug bounty or certification was found on the pages read, and security.txt timed out. The privacy policy states Data Privacy Framework certification (2). Total 22.", "transparency": "Closed service with dated terms that cover the subscription, and MIT SDKs (15). The terms say the customer owns tracking data, and the pricing page states 24 months of retention. The privacy policy excludes end-user data, the DPA is sent only on request, and the GDPR page still cites Privacy Shield while the privacy policy cites the Data Privacy Framework (14). No deprecation policy or dated notices found (0). Nine sub-processors named in the terms with addresses and countries, eight in the USA and Hetzner in Germany. Where customer data is stored is not stated (16). Total 45." }, "sources": [ { "what": "docs index (llms.txt)", "url": "https://docs.woopra.com/llms.txt", "seen": "2026-10-09" }, { "what": "REST API intro, authentication, rate limits and versioning", "url": "https://docs.woopra.com/reference/intro-http-apis.md", "seen": "2026-10-09" }, { "what": "HTTP tracking API intro and response codes", "url": "https://docs.woopra.com/reference/intro-http-tracking.md", "seen": "2026-10-09" }, { "what": "/track/ce reference", "url": "https://docs.woopra.com/reference/track-ce.md", "seen": "2026-10-09" }, { "what": "/trends reference and OpenAPI fragment", "url": "https://docs.woopra.com/reference/endpoint-analytics.md", "seen": "2026-10-09" }, { "what": "/journeys reference", "url": "https://docs.woopra.com/reference/endpoint-funnels.md", "seen": "2026-10-09" }, { "what": "profile delete reference", "url": "https://docs.woopra.com/reference/profile-delete.md", "seen": "2026-10-09" }, { "what": "export API and delete lines", "url": "https://docs.woopra.com/reference/the-export-api.md", "seen": "2026-10-09" }, { "what": "/logs/export reference", "url": "https://docs.woopra.com/reference/export-logs.md", "seen": "2026-10-09" }, { "what": "/logs/import reference", "url": "https://docs.woopra.com/reference/logs.md", "seen": "2026-10-09" }, { "what": "Secure Tracking", "url": "https://docs.woopra.com/docs/secure-tracking.md", "seen": "2026-10-09" }, { "what": "tracking SDKs intro", "url": "https://docs.woopra.com/reference/getting-started-with-tracking-sdks.md", "seen": "2026-10-09" }, { "what": "pricing", "url": "https://www.woopra.com/pricing", "seen": "2026-10-09" }, { "what": "terms of service", "url": "https://www.woopra.com/tos", "seen": "2026-10-09" }, { "what": "privacy policy", "url": "https://www.woopra.com/privacy", "seen": "2026-10-09" }, { "what": "GDPR page", "url": "https://www.woopra.com/gdpr", "seen": "2026-10-09" }, { "what": "status page", "url": "https://status.woopra.com/", "seen": "2026-10-09" }, { "what": "status history", "url": "https://status.woopra.com/history", "seen": "2026-10-09" }, { "what": "browser tracker repository", "url": "https://github.com/Woopra/js-client-tracker", "seen": "2026-10-09" }, { "what": "Node SDK repository", "url": "https://github.com/woopra/node-woopra", "seen": "2026-10-09" }, { "what": "npm woopra", "url": "https://registry.npmjs.org/woopra/latest", "seen": "2026-10-09" }, { "what": "npm weekly downloads", "url": "https://api.npmjs.org/downloads/point/last-week/woopra", "seen": "2026-10-09" }, { "what": "RDAP for woopra.com", "url": "https://rdap.verisign.com/com/v1/domain/woopra.com", "seen": "2026-10-09" } ], "openQuestions": [ "The terms of service list any robot, spider, scraper or other automated means to access the Site among unauthorised activities, and define the Site to include the Services. robots.txt on www.woopra.com allows the pages we read. We found the clause after reading the home, pricing, terms, privacy, GDPR and about pages, and sent no further request to www.woopra.com afterwards.", "unchecked: security.txt. https://www.woopra.com/.well-known/security.txt timed out twice with no bytes received.", "unchecked: whether the 30-day trial signup asks for a card. The signup form at app.woopra.com was not opened.", "unchecked: the members area and web app, including how access keys are revoked, whether a key carries its user's permissions, and any audit log.", "unchecked: GitHub stars, open issues and PyPI downloads for the SDKs.", "The status page address was not linked from the pages we read. status.woopra.com was tried directly and answered.", "No API changelog, deprecation policy, SLA, public DPA, security page or certification was found on the pages read.", "Overage rates per event are not on the pricing page.", "`lastRelease` is the date of the newest commit to the browser tracker, not a tagged release. The newest tag is v5.3.0 of 15 September 2021." ] }, "negative": 0, "verdict": "Woopra's REST API returns saved Trends, Journeys, Retention and Attribution reports, profiles and raw session logs, with published limits of 300 calls a minute and 3,000 a day per project. A report must first be built in the web app, the tracking endpoints accept events without a secret by default, and no changelog or SLA was found.", "bestFor": "An agent that reads a company's existing Woopra reports, looks up or edits customer profiles, or exports raw sessions on a schedule.", "strengths": [ "Rate limits are published per project at 300 calls a minute, 600 an hour and 3,000 a day, and limited calls return 429", "Report endpoints take `limit`, `offset`, a `snapshot` ID for consistent paging past 1,000 records, and `timeframe_from` and `timeframe_to` overrides", "status.woopra.com (Statuspage) lists no incidents for August, September or October 2026 across Data Processing, Data Collection and the front-end application", "`/logs/export` returns raw sessions as line-separated JSON, and `/logs/import` loads them in bulk and returns a batch ID to poll", "The terms of service (10 December 2025) name nine sub-processors with addresses and countries, and say the customer owns the tracking data" ], "weaknesses": [ "Report endpoints run a report saved in the web app by `report_id`. No endpoint to define a query, funnel or segment was found in the reference", "`/track/ce` and `/track/identify` accept data with only the project name unless the owner turns on Secure Tracking", "No API changelog, deprecation policy or SLA was found. The terms promise commercially reasonable efforts on availability", "Server SDKs are old. The Node, Python, Java and Rails repositories were last committed to in 2017, and npm `woopra` is 1.0.2", "The terms of service forbid using any robot, spider, scraper or other automated means to access the Site, a term defined to include the Services", "Most REST operations document no response schema, and the `/profiles` page repeats the `/trends` description" ], "agentNotes": [ "Ask the owner to build and save each report in the web app first, then pass the last path segment of its URL as `report_id`", "Authenticate REST calls with HTTP Basic, using the App ID and Secret Key from the Access Keys tab, against `https://www.woopra.com/rest/3.10/`", "Stay under 300 calls a minute, 600 an hour and 3,000 a day per project. A 429 carries no documented retry interval, so back off on your own schedule", "Reuse the `snapshot` ID from the first response when paging with `offset`, or pages past 1,000 records may not agree", "Send `cookie` or a `cv_` identifier such as `cv_email` on every track call. Without one the event lands on a random profile that can't be identified later", "When reading `/logs/export`, delete the profile named in each `type: \"delete\"` line. The following lines log its data again under `new_id`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 44.4 } ], "editorialScores": { "ergonomics": 45, "maintenance": 9, "payments": 30, "reliability": 80, "schema": 45, "security": 22, "transparency": 45 }, "provenanceScore": 77 }, "connect": { "http": "curl \\\n--user \u003cApp Id\u003e:\u003cSecret Key\u003e \\\n\"https://www.woopra.com/rest/3.10/trends?project=mybusiness.com\u0026start_day=2017-4-12\u0026end_day=2017-5-19\u0026report_id=83mYcoe6jX\"" }, "letme": { "capability": "https://letme.dev/analytics.query", "tool": "https://letme.dev/woopra" }, "notable": [ "The REST API answers at https://www.woopra.com/rest/3.10 with HTTP Basic authentication, and 3.10 is the only supported version (https://docs.woopra.com/reference/intro-http-apis.md)", "Fourteen REST operations are documented. Six run saved reports (`/trends`, `/journeys`, `/retention`, `/attribution`, `/activity`, `/profiles`), five read, edit or delete a profile, and three export or import raw logs (https://docs.woopra.com/reference)", "The limit is global per project at 300 calls a minute, 600 an hour and 3,000 a day, described as subject to change (https://docs.woopra.com/reference/intro-http-apis.md)", "Tracking is by GET to `/track/ce` and `/track/identify` with `ce_`, `cv_` and `cs_` prefixed parameters, and answers 200, 202 (queued), 401, 402 (over quota) or 403 (https://docs.woopra.com/reference/intro-http-tracking.md)", "Secure Tracking is an optional setting that rejects tracking calls without a generated ID and secret sent by HTTP Basic (https://docs.woopra.com/docs/secure-tracking.md)", "Pro starts at $999 a month for 5 million events with a 30-day trial, 24 months of retention and 50 seats. Enterprise is quoted (https://www.woopra.com/pricing)", "The terms of service, last updated 10 December 2025, contract with Woopra, Inc. and affiliates including Appier, and list among unauthorised activities any robot, spider, scraper or other automated means to access the Site (https://www.woopra.com/tos)", "docs.woopra.com/llms.txt lists four of the fourteen REST operations and none of the HTTP tracking pages. Each reference page has a Markdown copy with an OpenAPI 3.1 fragment (https://docs.woopra.com/llms.txt)" ], "area": "business", "details": [ { "label": "Surface graded", "value": "The REST API at https://www.woopra.com/rest/3.10 and the HTTP tracking API at https://www.woopra.com/track. No MCP server was found in the docs" }, { "label": "Report endpoints", "value": "GET `/trends`, `/journeys`, `/retention`, `/attribution`, `/activity` and `/profiles`, each taking `project` and the `report_id` of a report saved in the web app" }, { "label": "Profile endpoints", "value": "GET `/profile` and `/profile/actions` by `key` and `value` (pid, email, id or cookie), POST `/profile/edit` and `/profile/actions/edit`, DELETE `/profile/delete`" }, { "label": "Raw data", "value": "GET `/logs/export` by day in Pacific time with `pos` and the `X-Woopra-NextFile` and `X-Woopra-NextPos` response headers. PUT `/logs/import` takes line-separated JSON and returns a batch ID, and GET `/logs/import` reports its status" }, { "label": "Tracking", "value": "GET `/track/ce` and `/track/identify` with `project`, `event`, `cookie` and `cv_`, `ce_` and `cs_` prefixed properties. Responses are 200, 202, 401, 402, 403 or 5XX" }, { "label": "Credentials", "value": "REST calls use HTTP Basic with a per-user App ID and Secret Key from the Access Keys tab. Tracking needs no secret unless Secure Tracking is on. No OAuth or scopes found" }, { "label": "Rate limits", "value": "300 calls a minute, 600 an hour and 3,000 a day per project on the REST API, with 429 on excess. No limit on tracking calls was found" }, { "label": "Paging", "value": "`limit`, `offset` and a `snapshot` ID on report endpoints, with `timeframe_from` and `timeframe_to` in the project's time zone" }, { "label": "Docs for agents", "value": "https://docs.woopra.com/llms.txt and a .md copy of each page, with an OpenAPI 3.1 fragment on each REST reference page. No single spec file found" }, { "label": "SDKs", "value": "Browser tracker `@woopra/browser-tracker` (tag v5.3.0 of 15 September 2021, last commit 16 March 2026), iOS 1.2.1 and Android 1.1.0 (last commits November 2024), PHP (2023), Node, Python, Java and Rails (2017), all MIT or ISC" }, { "label": "Plans", "value": "Pro from $999 a month for 5 million events, 24 months of retention, 50 seats and a 30-day trial. Enterprise by quote with warehouse sync, SSO and data governance. Overage fees apply past the event quota" }, { "label": "Status", "value": "status.woopra.com on Atlassian Statuspage with three components (Data Processing, Data Collection, Front-end Application)" }, { "label": "Sub-processors", "value": "Amazon Web Services, Atlassian, Cloudflare, Customer.io, Fastly, GitHub, Google Cloud and Intercom in the USA and Hetzner in Germany, per the terms of service" }, { "label": "Legal", "value": "Woopra, Inc., San Francisco, with Appier named as affiliate. EU representative Appier Netherlands B.V. California law, or Singapore law for contracts signed with Appier Pte. Ltd." } ], "unitPrices": [ { "item": "Pro, 5 million events a month", "unit": "month", "usd": 999, "note": "starting price, overage fees apply" } ], "provenance": { "legalEntity": "Woopra, Inc.", "domain": "woopra.com", "domainRegistered": "2007-02-23", "endpointOnVendorDomain": true, "terms": "https://www.woopra.com/tos", "privacy": "https://www.woopra.com/privacy", "statusPage": "https://status.woopra.com", "changelog": "", "securityTxt": "unknown", "checked": "2026-10-09", "notes": [ "The terms of service (last updated 10 December 2025) are a contract with Woopra, Inc., its subsidiaries and affiliated companies including Appier, and cover the website and the subscription services in one document. They give 600 California St, Fl 11, San Francisco, CA 94108 as the legal address.", "The privacy policy (last updated 1 August 2025) covers customers and site visitors and says it does not apply to end-user data that Woopra processes for customers. It names Appier Netherlands B.V. as EU representative. No public DPA was found, and the GDPR page says a copy is sent on request.", "The REST and tracking endpoints answer under https://www.woopra.com/rest and https://www.woopra.com/track, on the vendor's own domain. robots.txt on that host disallows both paths, and we sent no request to either.", "www.woopra.com/.well-known/security.txt timed out twice with no bytes received, so its presence is unknown.", "status.woopra.com is an Atlassian Statuspage site. Its address was not linked from the pages we read and was tried directly.", "No changelog for the API was found. docs.woopra.com/changelog returns 404, and the browser tracker's CHANGELOG.md stops at v5.3.0 of 15 September 2021.", "RDAP for woopra.com gives a registration date of 2007-02-23 and Spaceship, Inc. as registrar." ], "score": 77, "checks": [ { "check": "Legal entity named", "value": "Woopra, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "woopra.com, registered 2007-02-23 (19 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "www.woopra.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 6 of the 7 things a reader expects, and has 1 clause that costs points", "points": 7.1, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 8 of the 8 things a reader expects", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "status.woopra.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "security.txt", "value": "could not be fetched", "points": 0, "max": 10, "state": "no" } ], "policies": [ { "kind": "terms", "url": "https://www.woopra.com/tos", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-12-10", "words": 11445, "points": 7.1, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "The Terms of Service was last updated on December 10, 2025.", "says": "Last updated 2025-12-10" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "If you sign with Woopra, the Services Agreement shall be governed by laws of California and shall be governed by and interpreted in accordance with the laws of the State of California, without regard to the choice or conflicts of law provisions, will govern these Terms.", "says": "The law of California" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THESE TERMS, IN NO EVENT WILL COMPANY’S LIABILITY EXCEED THE GREATER OF FIFTY DOLLARS (USD $50) OR THE AMOUNTS PAID BY YOU TO COMPANY HEREUNDER IN THE 12 MONTH PERIOD IMMEDIATELY PRIOR TO THE EVENT FIRST GIVING RISE TO THE CLAIM, EVEN IN THE EVENT OF A FAILURE OF THE ESSENTI…", "says": "Capped at the greater of USD $50 and the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "Upon any termination, expiration or cancellation of these Terms, all rights and licenses granted by these Terms will cease and terminate, you will no longer be entitled to use any of the Services, Site or Materials, and you shall pay all amounts owing hereunder." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": true, "quote": "Company can change, update, or add or remove provisions of these Terms, at any time by having you agree to a new version of these Terms or by posting the updated Terms on this Site and by providing you notice.", "says": "Says it gives notice of a change" }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Except as expressly authorized in the foregoing license, you have no other rights in the Site or any Materials and you may not modify, edit, copy, reproduce, create derivative works of, reverse engineer, alter, enhance or in any way exploit any of the Site or Materials in any manner." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "Use any robot, spider, scraper or other automated means to access the Site.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "Company also reserves the right to terminate these Terms at any time; with or without cause, for any reason or no reason." }, { "key": "terms.arbitration", "label": "Requires arbitration or waives class actions", "found": true, "quote": "(2)THESE TERMS CONTAIN A DISPUTE RESOLUTION AND ARBITRATION AGREEMENT, INCLUDING CLASS ACTION WAIVER, THAT AFFECTS YOUR RIGHTS UNDER THIS AGREEMENT AND WITH RESPECT TO CLAIMS OR DISPUTES YOU MAY HAVE WITH COMPANY." } ], "notes": [ { "date": "2026-10-08", "text": "Woopra may name the customer in a customer list and in advertising, marketing, promotional and investor materials.", "quote": "Company may include and use your name on a list of customers and may refer to you as a user of the Services in its advertising, marketing, promotional and investor materials." }, { "date": "2026-10-08", "text": "A customer allowed to terminate for convenience must pay the fees that would have been due for the rest of the current term.", "quote": "you shall pay Company an amount equal to the fees that would have been due over the remainder of the then-current term had these Terms remained in effect" }, { "date": "2026-10-08", "text": "The customer owns the Tracking Data, and Woopra purges it on the next deletion cycle after the account is deleted.", "quote": "When you delete your account, we will purge the Tracking Data on the next data deletion/cleanup cycle." } ] }, { "kind": "privacy", "url": "https://www.woopra.com/privacy", "state": "read", "readAt": "2026-10-08", "statedDate": "2025-08-01", "words": 3943, "points": 10, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated on Aug 1, 2025.", "says": "Last updated 2025-08-01" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "We collect information about users of our Site and Mobile Apps and clients who contract with us to use our Platform (our “Customers” or “you”)." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "We may retain your information for as long as your account is active, or as needed to provide you services, comply with our legal obligations, resolve disputes, and enforce our agreements.", "says": "For as long as needed, with no period named" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We have no control over how any third party uses or discloses the personal data it collects about you." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "If you are in the United States, you may opt out of many third-party ad networks by going to the Digital Advertising Alliance (“DAA”) Consumer Choice page for information about opting out of interest-based advertising and your choices regarding use of your information by DAA companies." }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Woopra acknowledges that you have the right to access your personal data." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "We encourage individuals from the EU member countries, UK and Switzerland who have questions or complaints about how we process their personal data under either Data Privacy Framework to first contact us directly at privacy@woopra.com.", "says": "privacy@woopra.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Data Privacy Framework, the UK Extension to the EU-U.S.", "says": "Relies on the Data Privacy Framework" } ], "notes": [ { "date": "2026-10-08", "text": "The policy covers Woopra's customers and site visitors, and does not apply to data about customers' end users, which Woopra handles as a processor.", "quote": "This Policy does not apply to the data we process about the end users of our Customers’ services (“End Users”)." } ] } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/woopra.json", "live": { "slug": "woopra", "probe": { "target": "https://www.woopra.com/rest/3.10", "method": "get", "lastAt": "2026-10-09T10:14:32.830353194Z", "lastOk": false, "lastStatus": 500, "lastMs": 36, "lastNote": "server error", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 28, "samples30d": 28, "days": [ { "date": "2026-10-09", "probes": 28, "ok": 0 } ], "outages": [ { "start": "2026-10-09T07:40:43.906309049Z", "end": "0001-01-01T00:00:00Z", "note": "HTTP 500 server error" } ] }, "vendorStatus": { "page": "https://status.woopra.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-09T10:11:25.422527339Z" }, "updatedAt": "2026-10-09T10:14:32.830353194Z" } } }