WebLab PWA Suite

WebLab PWA Suite turns any WordPress site into a Progressive Web App — installable, offline-capable, and mobile-optimized.

The plugin generates a valid Web App Manifest, registers a Workbox v7 Service Worker, and adds the platform-specific meta tags required for installation on Android, iOS, and desktop browsers.

Why a PWA?

A Progressive Web App provides a native-app-like experience directly from the browser:

• Installable — users can add your site to their home screen.
• Fast — assets are cached and served instantly on repeat visits.
• Offline-capable — the site remains usable without an internet connection.
• Engaging — push notifications bring users back.
• No app store — no publishing fees, no review delays.

Install UX (Free)

The plugin includes a complete, professionally-designed install experience with 42 free features that work out-of-the-box:

Smart Banner
* Mobile-only banner (never annoying on desktop)
* Value proposition with 3 configurable bullet points (icon + text)
* Safe-area padding for iPhone notch
* Dark mode support (prefers-color-scheme)
* WCAG 2.1 AA accessible (ARIA, keyboard, focus trap)

Triggers (configurable)
* Time on page (default: 30 seconds)
* Scroll depth (default: 50%)
* Returning visitor (2nd+ visit)
* Exit-intent (desktop, optional)
* Custom trigger via JS API

Dismiss & Persistence
* “Later” button (temporary dismiss)
* “Never” button with 24h-720h cooldown
* localStorage persistence
* Progressive cooldown

Per-Platform Instructions
* iOS Safari: Share → Add to Home Screen → Add
* Android Chrome: menu → Install app → Install
* Desktop: install icon in address bar
* Special message for in-app browsers (FB/IG/TikTok/WhatsApp)

Desktop QR Code
* Scan with phone to install
* Shortcode: [afpwa_qr size=”200″ caption=”Scan me!”]

A/B Testing for Install Messages
* Up to 3 message variants (Free Install UX feature)
* Integrates with the analytics dashboard
* Auto-tracked conversion per variant

Push Opt-in Secondary
* Shown after app install (not before)
* GDPR-friendly
* Customizable title, body, preview

Analytics Dashboard
* Widget in WordPress Dashboard
* Tracks: banner shown, dismissed, installs, CTR
* Per-platform breakdown (iOS/Android/Desktop)
* CSV export

Free Features

• Web App Manifest — dynamically generated, valid, and cached.
• Service Worker (Workbox v7) — with configurable cache strategies.
• Automatic icon generation — all PWA icon sizes (48px–512px) from a single upload (requires GD or Imagick).
• Legacy icons — favicon and Apple Touch Icons for older devices.
• Offline page — assign any WordPress page as the offline fallback.
• iOS support — Apple meta tags and auto-generated splash screens.
• Android support — Chrome address bar color, Trusted Web Activity hints.
• Dark mode — separate theme and background colors for dark schemes.
• Push notifications — via Firebase Cloud Messaging or OneSignal.
• Background sync — offline form submissions are queued and sent when the connection returns.
• AMP support — integrates with the official AMP plugin.
• WP Hide compatibility — works with WP Hide & Security Enhancer.
• Loading icons library — 4 built-in styles (spinner, dots, pulse, bars).
• Pull to refresh — native-style refresh gesture in standalone mode.
• Connectivity notice — customizable online/offline notifications.
• Scroll progress bar — visual reading progress indicator.
• Custom 404 page — configurable fallback for offline navigation errors.
• QR Code Install — desktop-to-mobile handoff via QR code (shortcode [afpwa_qr]).
• WooCommerce integration — product shortcuts and cache rules.

Premium Add-ons (optional)

Premium features are available through a separate license and an external add-on plugin. The free version is fully functional on its own.

• Offline Page Builder (drag-and-drop, 10+ templates)
• Google Analytics 4 integration
• AI-Powered Caching (predictive prefetch)
• Real-time analytics dashboard
• A/B testing
• PWA to APK (Trusted Web Activity)
• BuddyPress push notifications
• White-label branding
• Priority support

Premium licensing and updates are served from advancedpwa.weblab.md. See the External Services section for details.

Requirements

• WordPress 6.0 or higher
• PHP 8.0 or higher
• HTTPS — required for Service Workers (browsers enforce this)
• GD or Imagick — for automatic icon generation (optional; WordPress fallback used otherwise)

Third-party libraries

This plugin includes the following third-party library:

• Workbox by Google — Apache License 2.0. Source: https://github.com/GoogleChrome/workbox

Source code

The unminified source of the bundled Workbox runtime is available upon request or at the upstream repository above.

Development

The plugin is developed on GitHub. Contributions, bug reports, and translations are welcome.

External Services

This plugin connects to the following external services. No data is transmitted unless the corresponding feature and consent are explicitly enabled by the site administrator.

1. License Server — advancedpwa.weblab.md

Purpose: License validation, update delivery, and premium feature activation.

Data transmitted:
* License key (only the license key you entered)
* Site domain
* Anonymous install ID (32-character random string, generated locally on first activation)
* Plugin version
* Device fingerprint — a SHA-256 hash of the browser user agent, platform, language, and timezone

When: Only when the administrator explicitly enables “License Server” consent in Settings → Consent & Privacy. The free version does not connect.

Frequency: On license activation, then re-validated every 12 hours.

Optional: Yes — the free version works fully without this connection.

Terms of Service: https://advancedpwa.weblab.md/terms/
Privacy Policy: https://advancedpwa.weblab.md/privacy/

2. Firebase Cloud Messaging — fcm.googleapis.com

Purpose: Delivery of browser push notifications.

Data transmitted: Subscription endpoint and encryption keys provided by the browser’s Push API.

When: Only when (a) push notifications are enabled by the administrator, (b) “Push Notifications” consent is enabled in Settings, and (c) the visitor explicitly opts in via browser prompt.

Optional: Yes.

Privacy Policy: https://firebase.google.com/support/privacy

3. Google Analytics 4 — googletagmanager.com

Purpose: Site analytics (if enabled).

Data transmitted: Page views and events, as configured by your GA4 property.

When: Only when (a) GA4 is enabled in Premium settings, and (b) “Analytics” consent is enabled in Settings.

Optional: Yes — disabled by default.

Privacy Policy: https://policies.google.com/privacy

4. Plausible Analytics

Purpose: Privacy-friendly analytics without cookies.

Data transmitted: Page views.

When: Only when (a) Plausible is enabled in Analytics settings, and (b) “Analytics” consent is enabled in Settings.

Optional: Yes — disabled by default.

Privacy Policy: https://plausible.io/privacy

5. OneSignal — cdn.onesignal.com

Purpose: Alternative push notification provider.

Data transmitted: Push subscription data.

When: Only when (a) OneSignal is selected as the push provider, and (b) “Push Notifications” consent is enabled in Settings.

Optional: Yes — Firebase is the default.

Privacy Policy: https://onesignal.com/privacy_policy

6. ip-api.com (opt-in, disabled by default)

Purpose: Country lookup for optional geo-blocking.

Data transmitted: The client’s IP address.

When: Only when (a) “External GeoIP lookup” is enabled, and (b) “GeoIP” consent is enabled in Settings. Disabled by default.

Optional: Yes.

Terms of Service / Privacy Policy: https://ip-api.com/docs/legal

Note: This lookup can be configured to run on the license server (WPLMP) or on the client (AFPWA). If neither is enabled, no data is sent.

Privacy

Data stored on your site

The plugin stores the following data in your WordPress database:

• Analytics events — event name, URL, anonymous IP hash (SHA-256), timestamp. Retained for 90 days.
• Push subscriptions — endpoint, encryption keys, user agent, subscription date. Retained until unsubscribed.
• Install statistics — platform and date. Retained indefinitely.
• Offline form submissions (premium) — form data, IP address, user agent. Retained until manually deleted by the administrator.
• Real-time visits (premium) — URL, anonymous IP hash. Retained for 7 days.
• AI access log (premium) — URL and hit count. Retained for 30 days.

Data retention and deletion

• Analytics data is automatically purged after 90 days.
• Real-time data is automatically purged after 7 days.
• AI cache data is automatically purged after 30 days.
• Administrators can delete all plugin data from PWA Settings → Advanced → Data Management.
• Full data deletion on uninstall is available via an opt-in setting.

Cookies and tracking

• No cookies are set by the plugin.
• No third-party tracking is active by default.
• Push subscription data is stored in your database only.
• Analytics data is stored locally (not sent to any third party) unless you enable Plausible or GA4.

GDPR compliance

The plugin provides:

• Data minimization — only essential fields are stored.
• IP hashing — client IPs are stored as SHA-256 hashes.
• Retention limits — automatic purge schedules.
• Data export — available through the admin panel.
• Data deletion — available through the admin panel and on uninstall.

Premium license data

When premium features are enabled, the license server receives the license key, domain, and a device fingerprint. The fingerprint is a hash, not personally identifying information. It is used exclusively for license verification.

License

WebLab PWA Suite is free software released under the GPL v2 or later license.

This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

Credits

Developed by WebLab.md.

Bundled third-party library:
* Workbox v7 — Copyright 2018 Google LLC — Apache License 2.0.