When Track Sessions is enabled, OIntel hooks into WP's session system to log:
Active Sessions
Records user ID, session token, IP address, user agent, and last activity timestamp. Active sessions (last 30 minutes) are shown on the Sessions tab.
Login Events
- Successful logins: user ID, username, IP, timestamp
- Failed login attempts: attempted username, IP, timestamp
Admin Activity
Every admin action (page views, form submissions) is logged with user ID, action key, object, IP, and timestamp.
Data Retention
Old sessions are auto-pruged after 7 days. Manual purge is available via the Purge Old Sessions button.
Privacy note: IP addresses are stored in your own database. Ensure your privacy policy reflects this if you operate in GDPR jurisdictions.