Changelog

What shipped.

Feature history. The first weeks were many small deploys — those are folded. Git still has the steps. Paid used to be one plan called Self-serve. That is Starter and Growth from 1.44.

1. 1.79 · 26 Aug 2026

   • MCP tools declare read-only annotations (title, readOnlyHint) for Claude and ChatGPT directory review. Official Registry listing was already active.

2. 1.78 · 26 Aug 2026

   • WordPress plugin zip is a proper plugin folder: paste the public ID in Settings if it was not baked in, WordPress.org readme, uninstall, subdirectory installs.

3. 1.77 · 26 Aug 2026

   • Homepage sample: Compare is off until you turn it on. The chart shows dates on X and visitor counts on Y.

4. 1.76 · 26 Aug 2026

   • Homepage leads with the consent gap: decline the banner and cookie reports go dark — campaigns look like a miss, ROAS is a sample. We still do not print ROAS or replace ads tags.

5. 1.75 · 26 Aug 2026

   • The homepage sample is the live chart, not a picture — click tiles, hover days, compare. A button under it opens the full demo.

6. 1.74 · 26 Aug 2026

   • The homepage sample is 30 days. Campaign: launch and Hacker News sit a month apart on the curve, as they do in the seed.

7. 1.73 · 26 Aug 2026

   • The homepage sample carries the notes on the curve — Go live, a campaign, Hacker News — same stamps as the live demo.

8. 1.72 · 26 Aug 2026

   • The homepage sample is the same six tiles, combo chart, and dashed previous window as the live demo — still a light SVG, not the dashboard bundle.

9. 1.71 · 26 Aug 2026

   • Compare overlays the previous window as a dashed line on the chart. Tiles already showed the change. The demo opens with it on.

10. 1.70 · 26 Aug 2026

    • Claude and Cursor sign in with OAuth 2.1 on this host instead of pasting a token. Two or more sites open on an all-sites board — each tile is that domain, not a combined graph. The hosted MCP is in the Official Registry so PulseMCP can pick it up.

11. 1.69 · 26 Aug 2026

    • Schema, footer, and the GDPR page use Frankfurt + Ireland. The live API blurb no longer says hash.

12. 1.68 · 26 Aug 2026

    • Pricing waits two seconds, then points at yearly: pay nine months, keep twelve. It does not flip the toggle for you.

13. 1.67 · 26 Aug 2026

    • The public demo chart opens with bounce rate and visit duration on the diagram, and labelled notes on the days they belong to — Go live, a campaign, Hacker News.

14. 1.66 · 26 Aug 2026

    • The 60/min ingest cap hashes the IP in the function, not only in Postgres, and a database blip no longer 204s every beacon. Shopify’s app proxy only counts Shopify-signed requests.

15. 1.65 · 26 Aug 2026

    • Privacy names xAI (owner-click Grok) and Ireland Postgres. Vs meta that quotes a price now carries the 18 August 2026 list date. Pirsch’s row is Read API + MCP, not “collect + dashboard”.

16. 1.64 · 26 Aug 2026

    • Home, pricing, and vs pages spell the /europe split: Frankfurt functions, Ireland Postgres. Titles come from one list. The script POSTs; it does not send a timestamp or fall back to GET.

17. 1.63 · 26 Aug 2026

    • Growth funnels are a horizontal strip: visitors, drop from the last step, and share of step 1 on each cell. Several funnels stack. Remove asks Keep or Remove — pageviews stay.

18. 1.62 · 26 Aug 2026

    • Period briefing is three short notes (the pattern, the mix, what to open next), not a dump of the tiles. A saved one opens with the dashboard. Writing shows a clock so it does not look stuck.

19. 1.61 · 26 Aug 2026

    • The 404 is a full page: the path you asked for, a zero-visitor card, and links to pages that exist.

20. 1.60 · 26 Aug 2026

    • The product origin no longer loads grok.com chrome. Login, signup, and /app stay on this host.

21. 1.59 · 26 Aug 2026

    • Sign in and Start free in the header paint with the page. Unknown URLs get a 404 with a way out. Login and reset keep their own titles and stay out of the index. /cf.js is cached for five minutes, like the hosted snippet.

22. 1.58 · 26 Aug 2026

    • Chart notes stay owner text or first-seen UTM. Unused leftover tables are gone.

23. 1.57 · 26 Aug 2026

    • Chart notes are yours, or the first day a UTM campaign shows up. Day-over-day traffic % stamps are gone — the tiles already show volume.

24. 1.56 · 26 Aug 2026

    • Grok on the dashboard is capped per account so the shared key cannot be burned: 6 reads a day on Hobby, 12 on Starter, 20 on Growth, four an hour. Cached briefings are free. Set up this site still picks from your pages when the cap is hit.

25. 1.55 · 26 Aug 2026

    • Dashboard chart: Auto, Line, or Bars. Auto uses columns for hours and short ranges, a line for longer trends, and volume-as-bars plus rates-as-lines when bounce or duration is overlaid.

26. 1.54 · 26 Aug 2026

    • Set up this site: suggest a same-day checkout funnel, landing-speed pages, and goals from events that already fire. Confirmed by the owner. Pages from traffic and the homepage menu — nothing invented. Grok names the plan when XAI_API_KEY is on.

27. 1.53 · 26 Aug 2026

    • Period briefing talks to xAI (Grok 4.6) when XAI_API_KEY is set. Refresh writes a new paragraph. Dashboard numbers only — no hashes. Admin shows the gate.

28. 1.52 · 26 Aug 2026

    • Account has its own MCP card next to the Read API — numbered steps, Cursor/Claude JSON, Claude Code command, same token. Blog tutorial: ask Claude about pageviews without handing the agent a visitor hash.

29. 1.51 · 26 Aug 2026

    • MCP at /mcp: same hashed bearer as the read API. JSON-RPC tools for sites, overview, pages, sources, live, Growth funnels. No visitor hashes. Paste the token in the client header.

30. 1.50 · 26 Aug 2026

    • Blog tutorial: the read API as JSON — mint a token, call /sites, then overview, pages, sources, live, Growth funnels. No visitor hashes.

31. 1.49 · 26 Aug 2026

    • Read API on Starter and Growth: hashed bearer, the dashboard as JSON (sites, overview, pages, sources, live; Growth funnels). Mint and revoke on Account. No visitor hashes.

32. 1.48 · 26 Aug 2026

    • Continue with Google on login and signup when GOOGLE_CLIENT_ID and SECRET are set. Our Cloud client, not the Grok broker. Email and password stay. Google never sees pageviews.

33. 1.47 · 26 Aug 2026

    • Live visitors: last page in the last five minutes, grouped by path, high on the dashboard. The pill jumps there. No heartbeat — a tab left open is not a visitor.

34. 1.46 · 25 Aug 2026

    • Growth funnels: linear steps (path or cfa event), same UTC day, drop-off on the dashboard. No extra script. Hobby and Starter keep a single goal.

35. 1.45 · 25 Aug 2026

    • Blog tutorials: first-party /cf.js, count a signup (events not billed), dual-run next to GA4, share a dashboard, where the rows live. Notes from the first weeks stay below.

36. 1.44 · 25 Aug 2026

    • Hobby, Starter, and Growth. Hobby is 3 sites, 90 days, owner plus one viewer, a badge. Starter from €4 (5 sites, 3 viewers). Growth from €8 (10 sites, 10 viewers).
    • Volume is a hard wall on the dashboard. Hits stay. Events are not billed. Existing paid accounts stay Growth at their current Stripe amount.
    • 1% of each paid charge goes to Stripe Climate. Not a neutrality badge. Hobby has no invoice, so no 1%.
    • Owner admin: every account, every site, plan filters, pageviews. Only the house inbox. New-account mail after they confirm the address.
    • A busy site is not dropped. 60 beacons/min is still the hashed-IP flood cap.

37. 1.43 · 24 Aug 2026

    • Live Stripe: invoices with VAT, yearly (nine months billed, three free). Plan shows this month against last month. Over the billed volume: one mail, a notice, set the next invoice — no dropped pageviews.
    • First-party is Path or Subdomain, not both. Apex serves /cf.js without a 301 that blockers follow.
    • Team invite mail. Signup confirms the email. Thank-you paths for signup and paid so those can be goals.
    • Turnstile on email login when both Cloudflare keys are set. Optional 2FA in account settings — off until you turn it on.

38. 1.41 · 23 Aug 2026

    • Operator on DPA, terms, privacy, and footer: Prestons Creek Capital, KvK 42139404, VAT NL005528479B09. Public DPA for visitor pageviews. Street address off the site.

39. 1.38 · 23 Aug 2026

    • Dashboard tiles: unique visitors, visits, pageviews, views per visit, bounce, duration. Click to overlay. Duration is last minus first pageview in a 30-minute visit; one-page visits are 0 seconds.
    • Locations: countries, regions, cities from the edge headers. No IP, no coordinates.
    • Custom date range. Filter bar: is / is not / contains. Landing-page speed on the dashboard (HTML time and bounce on the first page). Not LCP in the tracker.

40. 1.36 · 23 Aug 2026

    • Campaign tags in the script and on the server: source, medium, campaign, content, term. The rest is dropped. Still under 1 KB gzip.

41. 1.35 · 23 Aug 2026

    • Tagline: No cookies, just insights. Made and hosted in the EU.

42. 1.31 · 23 Aug 2026

    • The product name is Cookie Free Analytics on the site, mail, and cards. Domain and cf.js stay.

43. 1.29 · 23 Aug 2026

    • Ingest quota in Postgres every isolate shares. Over a hashed IP: 204, no row. Raw IP is not stored.

44. 1.26 · 23 Aug 2026

    • Account: download your data, then delete. Sites and pageviews go with it.
    • Mail: welcome, site added, first pageview, password changed, payment failed. Paper card, no tracking pixel.

45. 1.23 · 23 Aug 2026

    • Functions in Frankfurt. Pageviews in Ireland Postgres. Both EU.

46. 1.19 · 23 Aug 2026

    • Harbour UI on the dashboard. Filter bar, notes on the chart.

47. 1.12 · 19 Aug 2026

    • First-party CNAME (`c.`) and team viewers. Public share and embed.

48. 1.11 · 19 Aug 2026

    • Opt-in clicks as a second file. Default script stays under 1 KB. Chart traffic-% notes shipped here; gone in 1.58.

49. 1.8 · 19 Aug 2026

    • Beacon is POST JSON. SPA counts. Query strings allowlisted. HMAC visitors with a pepper and a daily salt we delete.

50. 1.5 · 18 Aug 2026

    • Compare and topic pages. WordPress plugin, Shopify snippet, first-party path wizard.

Before this rewrite

Cookie Free Analytics started as CookieFreeAnalytics (Next.js, 17–22 Aug 2026): 1 KB script, HMAC same-day visitors, Harbour design. That git history still exists; the product continues here.