Track WordPress form abandonment without a plugin

Your Contact Form 7 dashboard says 412 form views and 71 submissions this month. The other 341 visitors started typing, then vanished. You don't know which field they got stuck on, whether the phone validation rejected them, or whether the submit button silently failed on Safari.

WordPress won't tell you that. Neither will Google Analytics — it sees the page view and the thank-you redirect and nothing in between.

You can fix this in about 20 minutes without installing yet another plugin. The trick is to skip the plugin directory entirely and drop a small script in the theme header. That keeps your wp-content/plugins folder lean, avoids the typical "this plugin hasn't been updated in 8 months" warnings, and gives you a proper session capture layer with form draft recovery on top.

Why skip the plugin route

Most WordPress session replay plugins do one of three things you don't want:

• Inject the tracker through PHP filters, which adds a request to every page load even for logged-in admins.
• Store auth tokens in the WordPress database, which means a compromised wp_options table leaks your analytics credentials too.
• Require a Business-tier WordPress.com plan (true on .com hosts) before any third-party JavaScript runs at all.

A header snippet sidesteps all three. You paste four lines into header.php or use a code-snippet manager like WPCode, and the tracker behaves like any other tag — same load order, same async behavior, same caching.

For self-hosted WordPress.org installs this works on every host. For WordPress.com you'll need a paid plan that allows custom code, same as you would for any third-party tag.

Install CloseTrace on WordPress

Sign in, create a site, and copy its public key. You'll get a snippet that looks roughly like this:

<script async src="https://api.closetrace.com/t.js?k=ct_pk_YOUR_PUBLIC_KEY"></script>

Now pick one of these install paths.

Path A: WPCode (recommended for non-developers)

1. Install the WPCode plugin — the lightweight successor to "Insert Headers and Footers".
2. Code Snippets → Header & Footer → paste the snippet into the Header box.
3. Save. The tracker is live across the site immediately.

This is still technically a plugin, but it's a generic snippet manager — not a session-replay plugin that needs its own auth, dashboard, or update cycle.

Path B: Theme header (no plugin at all)

1. Appearance → Theme File Editor → header.php.
2. Paste the snippet immediately before </head>.
3. Save.

The catch: if your theme is updated by the author, your edit will be wiped. Use a child theme, or run this in WPCode.

Path C: functions.php hook

If you maintain a child theme, this is the cleanest option:

add_action('wp_head', function () {
  echo '<script async src="https://api.closetrace.com/t.js?k=ct_pk_YOUR_PUBLIC_KEY"></script>';
});

Turn on form draft capture

The default install records session replay, heatmap, form interactions, and eligible form drafts. There is no separate data-capture flag; the tracker reads the public key from the k=ct_pk_... query parameter and auto-detects ordinary forms.

The tracker listens for input and change events on every form on the page, debounces, and stores partial data against the visitor's session ID. If a visitor types an email, picks a service, and leaves before clicking submit, you can see the draft in lead recovery the next morning.

A few WordPress-specific notes:

• Contact Form 7 works out of the box. The plugin uses standard HTML inputs and gets picked up by field name (your-email, your-message, etc.). There's a deeper walkthrough in the Contact Form 7 abandonment guide if you want field-by-field detail.
• WPForms submits via AJAX, so make sure your thank-you redirect doesn't fire from a hidden iframe — otherwise the tracker can't tell abandon from success. Use the standard same-page confirmation.
• Gravity Forms can be tracked when its fields remain in the same page DOM. Test a real multi-step form because plugins that replace steps inside cross-origin iframes are not visible to a page-level tracker.

Replay applies the active workspace privacy policy before upload. Password, payment, authentication, SSN, date-of-birth, bank-account, and similarly named fields are permanently excluded from form drafts. Add data-private to any additional field or container that must never be captured. These controls reduce risk but do not replace the notice and consent analysis in the GDPR guide.

Verify the install in five minutes

Open your contact page in an incognito window. Type into the email field, half-write a message, then close the tab without submitting.

In your dashboard, go to Sessions → Filter → Has form draft = true. Your session should appear within 60 seconds. Click into it and you'll see the draft fields stored against the session, plus the replay timeline showing the exact moment you bailed.

If the session shows up but no draft is attached, first confirm the form uses ordinary named inputs and is not inside a cross-origin iframe. If a caching plugin is deferring or rewriting the tracker, add api.closetrace.com to its script-defer exclusion list and re-test.

The honest limitation

The snippet runs on frontend pages where the theme calls wp_head; WordPress admin uses a different hook. If you also want to exclude logged-in editors and admins from frontend recording, conditionally omit the script in PHP:

add_action('wp_head', function () {
  if (is_user_logged_in()) {
    return;
  }
  echo '<script async src="https://api.closetrace.com/t.js?k=ct_pk_YOUR_PUBLIC_KEY"></script>';
});

Next step

Once the snippet is live, use Lead Recovery as the daily queue. Filter by form, status, site, or date, and export the current result to CSV when needed. The Sessions screen does not expose a has_email = true expression; contactable status is determined in the recovery workflow.