Chapter 01Login · Dashboard
Sign in and see what happened
The dashboard calls the API through its own /api, so the session cookies stay on the dashboard's domain and never reach the public sites. The second login step is an emailed code or an authenticator app. The dashboard shows first-party analytics for all three sites, with no third-party scripts.
- httpOnly, SameSite=Strict cookies
- Analytics without cookies or stored IPs