First-party, privacy-conscious. Visitors are a daily-rotating salted hash — never a raw IP, cookie ID, or fingerprint. Nothing is sent to a third party.
The tracking endpoint is live and verified (POST /api/analytics/track returns 201), but no page has called it yet. I will not show invented numbers. Once the public pages include the tracking snippet, this dashboard fills with real traffic.