Where to open Visitors and Sessions
Open Settings → Security & Visitors. The page has Visitors, Sessions and Blocked access tabs. The Settings card is available in both development and production. Opening the page requires Settings View and Security & Visitors View; blocking or unblocking requires Security & Visitors Edit.
Use Visitors for trends and Sessions to inspect individual visits. These are visits to your business's customer booking app, not the public Omcean Booking marketing website.
Understand the Visitors charts
Select Last 7 days, Last 30 days or Last 90 days and use Refresh for the latest data. The four summary cards show Sessions, Signed-in customers, Anonymous visitors and Page views. The Sessions card counts visits started during the selected period, not unique people. Signed-in customers count distinct customer accounts; anonymous visitors are estimates based on browser/device identifiers and are not verified identities.
Visits over time and Popular visiting hours group session starts in the business timezone. Audience also includes admin sessions, while the customer summary excludes them. Platforms and Devices describe recorded visits. Most viewed pages groups similar customer routes and shows up to eight popular page groups.
Embedded iframe visits are currently excluded. An empty chart means no recorded visits for that period, not proof that nobody tried to open the business. The overview is not a live list of everyone online.
Find a session in the table
Open Sessions. Use Period (Today, 7 days, 30 days or 90 days), the Customer picker and Search. Search accepts name, email, IP address, device ID or location text. The Sessions tab period uses Last seen, so its row count can differ from the Sessions card on the Visitors tab, which counts session starts.
Rows include IP address, User, Platform, Device, Version, Status, View, Time, Events, Location, Started and Last seen. Device details can include operating system, browser and screen size. Version can show the app and native versions. Location information may be absent and does not establish a person's identity.
Read time, status and session details
Time shows visible time; when idle time exists, it also separates active and idle time. Active means a recent heartbeat within about 90 seconds, not proof of continuous interaction. Inactive means the heartbeat is older; ended sessions include explicitly ended visits and visits unseen for more than 30 minutes.
Click a session row to open its event details. This is an event breakdown, not a screen-recording player for business admins. A Blocked badge marks a recorded denied attempt; it does not prove that the restriction is still active now. Check Blocked access for current restriction status. Repeated blocked attempts can be combined into one row for the same device/IP, restriction and day, with zero measured time.
Block from a session
Open the row's three-dot menu. Block customer is available when a customer is identified; Block IP address is available when an IP is recorded. Choose the intended target, duration and a required reason in Notes, then save. This needs Security & Visitors Edit. Review and remove restrictions in Blocked access.
For an anonymous visitor you cannot select Block customer from that row. An IP can be shared by several customers, so check the target before using an IP block.
Permissions and missing access
Security & Visitors is a permission under Settings, not a separate role. Account Admin has Edit by default; Manager, Instructor and Salesperson do not have it by default. To grant access, open Settings → Roles and permissions → Manage roles, open the intended role, grant Settings View, then set Security & Visitors to View or Edit and save. View permits visitor charts, sessions, event details and restriction history. Edit is required to create or remove restrictions. Granting View does not authorize blocking, even if a block action is visible.
