Warehouse export
Scheduled Parquet/JSONL dumps to object storage for your lakehouse. The k-anonymized Stats API covers most BI needs today; raw export needs a policy gate so k-anonymity is not bypassed by a side door.
next
Roadmap
Shipped is shipped.
The rest is honest.
Most product roadmaps are wish lists wearing a calendar. Observer's is a build log: 53 of 53 planned capabilities landed in v0.1.0, and exactly two items remain on the backlog — both stated below, both stated for a reason.
The build log
How v0.1.0 got here.
| Wave | What landed | Status |
|---|---|---|
| Core | Privacy-first platform: cookie-less collector, daily-rotated HMAC identity, k-anonymity ≥ 5, ClickHouse schema with TTLs, dashboard, goals, custom events, engaged time | Shipped |
| Behavior | Session timelines with tab-split lanes, heatmaps (click / scroll / rage / dead), element ranking, frustration leaderboard, form drop-off, pre-flagged sessions | Shipped |
| Ops & workflow | Alert rules (6 × 4 ops, cooldowns), weekly digest, Slack + webhooks, deploy diff, share snapshots, Ask bar, anomaly cards | Shipped |
| Automation | Scoped API keys with site allowlists, public /api/v1 (10 read + 2 write), MCP server with 15 tools, programmatic site creation | Shipped |
| Qualitative depth | Session replay player (sandboxed rrweb, masked at source), multi-step funnels, CWV percentile depth p50–p95 | Shipped |
| Teams & trust | 2FA (TOTP RFC 6238), multi-user RBAC (owner / admin / analyst / viewer), saved segments, surveys (score / NPS / text) | Shipped |
| Migration | GA import — CSV auto-detect, preview, written to hourly rollups with 25-month retention | Shipped |
Coverage index: 100% — 53/53 capabilities, zero partial. Generated from a machine-readable feature registry; every entry is verified against the implementation on every release.
The remaining backlog
Two items. Both on purpose.
Path facts beyond 24 h
Cross-day journey reports need a longer session horizon — which would weaken the daily-rotation guarantee that makes the privacy posture defensible. We would rather lose the report than the guarantee.
under design
And one deliberate non-goal, forever: no cross-site identity stitching, no ad-platform integrations, no keystroke capture, no fingerprinting. Those are not roadmap items — they are the wedge that keeps the banner-free posture true.
Today's build is
the complete catalog.
Everything on the features page is in the repo, tested, and running — the roadmap lists it because you should check.