Marsad Download Tracker

Marsad Download Tracker creates a tracked link for each downloadable file. It can deliver public or email-gated files, record download activity, and show privacy-aware reports in the WordPress dashboard.

Main features:

• Manage multiple downloadable files and choose files from the Media Library.

• Deliver files through protected, expiring links with version history.

• Optionally require an email address and job role before delivery.

• Record all, unique, and repeat downloads using a configurable time window.

• Inspect unique-download details, including product, location, device, source, and date.

• Filter dashboard reports by product, country, and date.

• Review countries, cities, devices, browsers, referrers, UTM values, and conversions.

• Manage collected leads, marketing-consent status, tags, notes, and deletion requests.

• Configure SMTP and send a test message to a chosen email address.

• Edit and preview the HTML download-email subject and body.

• Export download events and leads to CSV, and export a PDF summary.

• Download a full JSON backup before permanently erasing plugin data.

• Use WordPress personal-data export and erasure tools.

• Optionally connect confirmed marketing opt-ins to Brevo, Mailchimp, or a webhook.

• Optionally look up approximate country and city data. This is disabled by default.

txt in the plugin folder.

External Services

This plugin does not load executable code, JavaScript, CSS, fonts, or tracking pixels from third-party servers. The following optional server-to-server connections are used only when an administrator enables or configures them.

IPWhois / ipwho.is

Purpose: approximate country and city lookup for download analytics.

Data sent: the downloader’s IP address.

When sent: after a download request, only when Approximate location has been enabled by an administrator. This option is disabled by default.

is/

io/documentation

io/privacy

io/terms

Brevo

Purpose: add a confirmed marketing contact to administrator-selected Brevo lists.

Data sent: the confirmed email address, job role, optional custom role, and configured list IDs.

When sent: only after an administrator saves a Brevo API key and the visitor has explicitly opted in to marketing. If double opt-in is enabled, synchronization occurs only after confirmation.

com/

com/legal/privacypolicy/

com/legal/termsofuse/

Mailchimp

Purpose: add or update a confirmed marketing contact in an administrator-selected Mailchimp audience.

Data sent: the confirmed email address, job role, audience ID, and the administrator-configured server prefix.

When sent: only after an administrator saves Mailchimp credentials and the visitor has explicitly opted in to marketing. If double opt-in is enabled, synchronization occurs only after confirmation.

com/

com/legal/privacy/

com/legal/terms/

com/legal/api_use/

Administrator-configured webhook

Purpose: notify an endpoint chosen by the site administrator when a marketing lead is confirmed.

Data sent: event name, confirmed email address, job role, product ID, and event time.

When sent: only when an administrator saves a webhook URL and a visitor has explicitly confirmed marketing consent. The endpoint and its privacy terms are controlled by the site administrator.

Administrator-configured SMTP server

Purpose: send download, confirmation, test, and notification emails through the mail server selected by the site administrator.

Data sent: recipient address, email subject and body, and normal SMTP envelope information.

When sent: only when custom SMTP is enabled. The server and its privacy terms are controlled by the site administrator. When custom SMTP is disabled, WordPress uses its normal mail transport.

Privacy

Depending on configuration, this plugin may store email address, job role, marketing-consent status, IP address, requested product, date and time, device, browser, operating system, user agent, referrer, UTM values, and approximate country or city.

Administrators should:

• Update the site’s Privacy Policy using the suggested text added by this plugin under WordPress privacy settings.

• Enable approximate-location lookup only after reviewing the disclosure and IPWhois terms.

• Configure a suitable retention period.

• Send marketing only to people who explicitly opted in.

• Review the privacy terms for every configured SMTP, email-marketing, or webhook provider.

• Use WordPress personal-data export and erasure tools when responding to data requests.

Source Code

All PHP, JavaScript, and CSS used by the plugin is included in the distributed package in human-readable form. The plugin ships no minified or compiled assets and requires no build step. js.

Support

org for questions and reproducible bug reports. Include the WordPress version, PHP version, plugin version, and steps to reproduce. Do not post passwords, API keys, personal data, or private download links.