The complete catalog

Nine deep dives.
One refusal of trade-offs.

53 of 53 planned capabilities are implemented and covered by 95 automated tests plus a 6-spec browser privacy suite, run on every release. Each deep dive below is the whole story for one topic — what it shows, how it works, and what it deliberately refuses to collect.

The catalog

Pick a topic. Go deep.

Traffic analytics

Views, sources, countries, devices, realtime, engaged time (median), auto-tracked events — the GA4 core without the identity model, with honest exact/estimated badges.

Traffic deep dive
Session timelines

Every event on one shared time axis — with tab-split lanes for concurrent tabs. An anonymized device-day: behavior without identities.

Sessions deep dive
Session replay

Tier-2, consent-gated rrweb replay in a sandboxed player — inputs masked at source, values never leave the browser, 30-day retention.

Replay deep dive
Heatmaps

Click, scroll, rage and dead-click layers on a document-normalized 1%-grid — aggregate only, rendered over the live page or a snapshot.

Heatmaps deep dive
Frustration & forms

Every page scored (rage×3 + dead×1.5 + errors×2) ÷ views, ranked worst-first — plus per-field form drop-off with leak badges past 25%.

Frustration deep dive
Core Web Vitals RUM

LCP, INP, CLS, FCP, TTFB at p50–p95 via TDigests with CrUX thresholds, element attribution, anomaly cards and deploy diffs.

Web Vitals deep dive
Goals & funnels

Page, event, duration and scroll goals; server-to-server conversions your backend can vouch for; 2–8 step funnels with drop-off at every step.

Goals deep dive
Ask Observer

Plain questions, deterministic answers: 13 intents plus natural date ranges through a unit-tested grammar. Not an LLM — and that is the feature.

Ask deep dive
Automation

Alert rules (6 × 4 ops) evaluated every minute, weekly digest to Slack, expiring k-anonymized share snapshots, GA import, surveys, segments.

Automation deep dive

Privacy tiers in one glance

Every feature, server-enforced.

The tier is enforced by the collector — the snippet cannot upgrade itself. DNT, GPC and observer('optOut') silence the SDK unconditionally at every tier.

TierBrowser storageConsentIdentity model
T0 — Strict (default)Nothing — no write, no readNo bannerDaily-rotated HMAC
T1 — SessionsessionStorage only (tab-scoped)Documented legal basisPer-tab sid + HMAC
T2 — Consented+ localStorage visitor id (13 months, never extended)Explicit opt-inVisitor vid + HMAC
T3 — DisabledNothingKill-switchNone

The full privacy architecture

0

capabilities shipped — coverage index 100%

0

capabilities unique across the 15-competitor field

0

automated tests + browser privacy suite, run every release

Don't take our word.
See the demo.

Every claim on this page is backed by a shipped capability and an automated test — we walk your team through the evidence.