Static HTML

For hand-written pages and for sites built by a static site generator. Tested by the example site examples/static-html, which runs in the browser test matrix.

Where the tag goes

Paste the tag from the console into the <head> of every page. In the example, the build replaces the comment  with the tag (it does so only so that tests can use their own site id); on your site the tag itself stands there:

<!-- paste the tag from the console in place of the next line, on every page -->
<!-- tracker -->

With the example values from the quickstart, the line becomes:

<script defer src="https://in.analytics.example/v/1.1.0/sdk.js" integrity="sha384-lxlitLtIMAeT/K3ieev+MeMGxZe7oceuWLOy8GZAjK7TMKS2Uh9UPmfGLBczUPsq" crossorigin="anonymous" data-website-id="3f6a0c2e-9b1d-4e7a-8c5f-1d2e3f4a5b6c"></script>

A static site generator usually has one head template or base layout that every page uses. Put the tag there, outside any helper that escapes HTML, and check one generated page to see that it came out unchanged. Pages without the tag are not counted. Each full page load is one pageview. A jump to an anchor on the same page (#details) is not a pageview.

Counting clicks

Any element with a data-umami-event attribute sends an event of that name when it is clicked; each data-umami-event-<key> attribute adds one data entry:

<button type="button" id="signup" data-umami-event="signup-click" data-umami-event-plan="free">
  Sign up
</button>

From your own script, call umami.track(). Keep page code in a file of its own if your site has a content security policy:

// umami.track() from page code; the tracker may be blocked, so check first
document.getElementById("manual").addEventListener("click", () => {
  window.umami?.track("manual-call", { source: "static-html" });
});

custom-events.md lists the limits for names and data.

What the browser tests check

In Chromium, Firefox and WebKit: one pageview per full load, no pageview for an anchor jump, the page title and a same-site referrer as a path, both kinds of custom event, no request at all with Global Privacy Control, the tracker refused when its file was tampered with, and every page served with the content security policy from content-security-policy.md (tests/e2e/specs).

Start here

Web analytics

API analytics

Help

Where the tag goes

Counting clicks

What the browser tests check