Changelog

Stripe billing, plan quotas, and the AI chat assistant were cut entirely. A self-hosted tool shouldn't meter you, and an analytics product that sends your data to a third-party LLM contradicts the privacy promise.

Rebuilt authentication: bcrypt password login, verification by magic link or 6-digit code, and password reset. Works with any SMTP provider, and prints links to the logs when SMTP isn't configured so a fresh install is usable immediately.

A persistent left sidebar replaces the old tab row, so navigation no longer shifts between sections. Added a design system with full light and dark themes, and a self-hosted Inter font with tabular figures so numbers line up.

Alpine.js, Chart.js, Font Awesome and the webfont are all served from your own instance instead of public CDNs, and the Content-Security-Policy was tightened to match. Your dashboard no longer phones home to anyone.

The app now connects as a least-privilege role instead of the database owner, with migrations run separately on startup. Added a configurable retention policy that purges old raw events, plus index tuning for the common dashboard queries.

Three rounds of fixes from a full audit of the codebase, including access-control and output-escaping issues, foreign-key delete rules that previously made sites undeletable, refund idempotency, and scheduler locking so background jobs are safe with multiple workers.

Backend and web images are built and published on every green build, with a gated deploy that takes a database dump first and rolls back automatically if the health check fails.

Pageviews, unique visitors, views per visitor and live visitor counts. Traffic sources, top pages, entry and exit pages, countries, browsers and devices, all without cookies.

Track custom events as conversion goals, build multi-step funnels to find where visitors drop off, and record purchases and refunds with per-product revenue reporting.

Invite team members as owners, admins or viewers. Share a dashboard publicly with a secret link, optionally password-protected. Opt in to weekly or monthly email summaries.

Visitors are counted with a rotating daily hash built from a truncated IP, the site domain and your instance's own secret, never a cookie, and never a stable cross-day identifier. See how it works.