Sync pages with 1.0.x: nineteen events, winget, bulk edit, seven languages
Analytics: the event table listed nine events while the code sends nineteen.
Add the missing ones (first_run, the add-account and update families,
cli_command, settings_snapshot), the seven common fields, an example payload,
the in-memory queue behaviour, the CLI's own reporting, and the monthly
aggregate script behind the retention line.
Privacy policy: drop the "1.0.0 ahead of stable 0.9.0" header, complete the
processed-fields list, and record the server-side property validation.
Settings: seven interface languages instead of two, the Privacy tab split into
its three real blocks, Replay onboarding, and ban outlines surviving the
colored-outline toggle.
Security: the launch-time sweep that re-encrypts headerless legacy snapshots.
Updates: winget install and upgrade, submitted automatically on release.
Steam: the bulk-edit bar in full, including the card color action and the
selection spanning folders.
CS2 bridge: the POST /accounts contract, the 300-id cap, and the local-accounts
only rule.
Rewrite the analytics pages for the PostHog backend
The analytics backend moved from a self-hosted Cloudflare stack (D1 plus
Analytics Engine, queried through an /admin/query endpoint) to PostHog EU
Cloud. The Worker is now a proxy that stores nothing. The fields collected did
not change, but the processors, the retention period and the way deletion
works all did, so every page describing the old stack was wrong.
Telemetry and Privacy-Policy are rewritten. Home, Security and Settings had
individual claims to correct.
Two substantive changes beyond the backend swap:
Retention was Analytics Engine's fixed 90 days. It is 12 months now, and
identifier-free monthly aggregates are kept beyond that.
The first-launch screen no longer offers a full refusal, so the anonymous tier
is opt-out rather than opt-in and consent is no longer its legal basis. The
pages say that plainly rather than implying both tiers are consented to, and
the policy now states legitimate interests with the switch as the right to
object. The enhanced tier is unchanged: explicit consent, one click to
withdraw.
Deletion also behaves differently and is documented as it actually is: the
profile goes immediately, the events are swept by a weekly batch job, so
"deleted" means "irreversibly scheduled" for up to a week.
Sync pages: CS2 bridge contract, integrations, macOS/Linux support, install notes
docs: new platform pages, settings redesign, telemetry and per-OS notes