Session replay, with the text masked before it leaves the browser
v0.6 · 2026-08-08
+Session replay: watch what a visitor did, with every piece of text replaced by bullets in their browser, before anything is sent. The real text never reaches us, so it cannot be leaked or handed over.
+Input values are never recorded, in any configuration. Password, email and payment fields are not captured at all.
+Structure-only mode records layout and interactions with no text whatsoever, for teams whose legal position rules out the rest.
+Watching a recording needs a permission that no role grants automatically, not even Owner, and every view is written to your audit log with the name of whoever watched.
+A kill switch that stops recording in browsers already open, without waiting for a reload.
+A server-side backstop refuses any recording still containing something shaped like an email address, an IBAN, a card number or a Nordic identity number.
+Recordings expire on your schedule, 30 days by default, and the job verifies the files are actually gone rather than assuming.
Accounts, single sign-on and server-side tracking
v0.5 · 2026-08-07
+Passkeys, authenticator-app two-factor, SSO and SCIM provisioning.
+Server-side event tracking with API keys, so signups and purchases are counted even when an ad blocker removes the browser call.
+Revenue reporting, per currency and never converted or added together, because an exchange rate we picked is one you would have to defend.
+A Customers screen for identified users, which states what share of your sessions are anonymous beside every number rather than letting you assume.
+CSV export of every report and of raw events, with the row count shown before you download.
+A project switcher, and editable project settings including retention, collection mode and exclusions.
+An audit log of privacy-relevant actions, readable in the product.
Dashboards, alerts and billing
v0.4 · 2026-08-06
+Dashboards where a tile is a saved query rather than a saved number, so a board can never drift from the reports beside it.
+Anomaly alerts that account for the day of the week, so a normally quiet Sunday does not wake you up.
+Every alert names the thing that moved most, because a number on its own is a notification rather than something to act on.
+Usage metering that excludes bot traffic, with the meter visible in the app from day one.
+Fixed: ordinary readings were occasionally flagged as anomalies when traffic was low.
Funnels, retention and segments
v0.3 · 2026-08-05
+Funnels with drop-off in people as well as percentages, and conversion always measured from the first step.
+Retention cohorts that leave periods which have not happened yet blank, rather than showing them as zero.
+A one-line filter syntax that works in the app, in the URL and in the API, so a filtered view is a link you can paste.
+Fixed: time-to-convert counted people who converted after the funnel window closed, so two numbers on the same screen disagreed.
+Fixed: a filter containing != inside a value quietly became a different filter.
Ingestion, privacy and the event debugger
v0.2 · 2026-08-04
+Event ingestion with daily-rotating visitor hashing, so a visitor cannot be followed from one day to the next.
+A live debugger showing what the pipeline decided about every event, including why one was refused.
+Tracking-plan validation: a violation is flagged and the event still stored, never silently dropped.
+Retention and subject erasure, both producing a receipt with verified row counts.
+Fixed: visitor IP addresses appeared in server logs, which contradicted the central privacy promise.
+Fixed: traffic could be over-reported after an internal retry.
Not shipped, and honestly so
Session replay, experiments and revenue analytics are designed and not built. They appear on the pricing page as roadmap, not as features you can use today.
Payment is not wired. Plans, quotas and gating are real and enforced; the checkout is not.
Email delivery is not wired. Alerts are evaluated and logged, and webhooks are sent. The app says so where it matters rather than failing quietly.