[nedtwigg]

Counts visits to dormouse.sh with PostHog (US Cloud) in cookieless mode, so there's no consent banner.

• What is sent:

  • a pageview per path; the Hosted page's carries the ref from Hosted: aggregate daily launch counts, link refs, and an admin metrics page #1398's takeVisitRef()
  • hosted plan clicked
  • tutorial completed

  Autocapture, session replay, heatmaps, surveys, feature flags and identify are all off (person_profiles: "never").

• Storage: nothing is kept in cookies, localStorage, sessionStorage or IndexedDB. posthog-js's one unavoidable localStorage check at init writes a test value and removes it at once. The test pins that this is the only write, and Privacy says so.

• Where it runs:

  • only on the dormouse.sh hostname, so previews send nothing
  • never under Global Privacy Control or Do Not Track
  • posthog-js (slim, never loads a remote script) sits in its own lazy chunk that loads at the first event

• First-party proxy: requests go through dormouse.sh/ingest. A Pages advanced-mode _worker.js is limited to /ingest/* by _routes.json, and every other request is the static site, as before. It follows PostHog's Cloudflare guide: drops cookies and authorization, and forwards the visitor's IP as X-Forwarded-For so unique-visitor hashing works.

• Never in shipped code: outbound-lint gains an analytics SDK form that no class admits, with self-test cases. FAIL IF S280 (security-local.md) keeps analytics out of everything Dormouse ships.

• Privacy names PostHog as a processor and says what it receives, how it counts unique visitors, that it does no location lookup, and that GPC and DNT turn it off. The legal basis is legitimate interest.

• Specs: website-docs.md → new "Visit analytics" section, and pricing.md's ref rule now says the pageview carries the ref.

Before merge: in PostHog, go to Settings → Project → Web analytics and turn on Enable cookieless tracking. Without it, PostHog drops every event.

🤖 Generated with Claude Code

[cloudflare-workers-and-pages]

Deploying mouseterm with    Cloudflare Pages

Latest commit:	55340ac
Status:	✅  Deploy successful!
Preview URL:	https://318cba29.mouseterm.pages.dev
Branch Preview URL:	https://website-posthog.mouseterm.pages.dev

View logs

[dormouse-bot]

I found nothing to change in the diff. I'm holding the approval only because the description's Before merge step (PostHog → Settings → Project → Web analytics → Enable cookieless tracking) is a setting nobody outside the project can check. If that step is done, this is ready.

[nedtwigg]

The project owner confirmed that Enable cookieless tracking is on in the PostHog project (Settings → Project → Web analytics).

[dormouse-bot]

Thanks for confirming cookieless tracking is on. That was the only thing holding this, so it's ready.