Skip to content

History / Security

Revisions

  • Sync pages with 1.0.x: nineteen events, winget, bulk edit, seven languages Analytics: the event table listed nine events while the code sends nineteen. Add the missing ones (first_run, the add-account and update families, cli_command, settings_snapshot), the seven common fields, an example payload, the in-memory queue behaviour, the CLI's own reporting, and the monthly aggregate script behind the retention line. Privacy policy: drop the "1.0.0 ahead of stable 0.9.0" header, complete the processed-fields list, and record the server-side property validation. Settings: seven interface languages instead of two, the Privacy tab split into its three real blocks, Replay onboarding, and ban outlines surviving the colored-outline toggle. Security: the launch-time sweep that re-encrypts headerless legacy snapshots. Updates: winget install and upgrade, submitted automatically on release. Steam: the bulk-edit bar in full, including the card color action and the selection spanning folders. CS2 bridge: the POST /accounts contract, the 300-id cap, and the local-accounts only rule.

    @klNuno klNuno committed Aug 5, 2026
  • Rewrite the analytics pages for the PostHog backend The analytics backend moved from a self-hosted Cloudflare stack (D1 plus Analytics Engine, queried through an /admin/query endpoint) to PostHog EU Cloud. The Worker is now a proxy that stores nothing. The fields collected did not change, but the processors, the retention period and the way deletion works all did, so every page describing the old stack was wrong. Telemetry and Privacy-Policy are rewritten. Home, Security and Settings had individual claims to correct. Two substantive changes beyond the backend swap: Retention was Analytics Engine's fixed 90 days. It is 12 months now, and identifier-free monthly aggregates are kept beyond that. The first-launch screen no longer offers a full refusal, so the anonymous tier is opt-out rather than opt-in and consent is no longer its legal basis. The pages say that plainly rather than implying both tiers are consented to, and the policy now states legitimate interests with the switch as the right to object. The enhanced tier is unchanged: explicit consent, one click to withdraw. Deletion also behaves differently and is documented as it actually is: the profile goes immediately, the events are swept by a weekly batch job, so "deleted" means "irreversibly scheduled" for up to a week.

    @klNuno klNuno committed Aug 1, 2026
  • Sync pages: CS2 bridge contract, integrations, macOS/Linux support, install notes

    @klNuno klNuno committed Jul 16, 2026
  • docs: new platform pages, settings redesign, telemetry and per-OS notes

    @klNuno klNuno committed Jul 11, 2026
  • docs: trim wiki pages, remove em dashes and filler

    @klNuno klNuno committed Mar 23, 2026
  • docs: add wiki pages for all platforms, security, and settings

    @klNuno klNuno committed Mar 23, 2026