docs: trigger worker rebuild

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.claude/CLAUDE.md

@@ -0,0 +1,170 @@
+# CLAUDE.md
+
+NEVER CALL FORMAT! WE'LL FORMAT IN THE FUTURE WHEN WE HAVE MERGED ALL BIG PRS!
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Project Overview
+
+Openpanel is an open-source web/product analytics platform (Mixpanel alternative). It's a **pnpm monorepo** with apps, packages, tooling, and SDKs.
+
+## Common Commands
+
+```bash
+# Development
+pnpm dev                    # Run all services (api, worker, dashboard) in parallel
+pnpm dev:public             # Run public/docs site only
+pnpm dock:up / dock:down    # Start/stop Docker (PostgreSQL, Redis, ClickHouse)
+
+# Code quality
+pnpm check                  # Lint check (Biome via Ultracite)
+pnpm fix                    # Auto-fix lint/format issues
+pnpm typecheck              # Typecheck all packages
+
+# Testing
+pnpm test                   # Run all tests (vitest)
+pnpm vitest run <path>      # Run a single test file
+# Workspace: packages/* and apps/* (excluding apps/start)
+
+# Database
+pnpm codegen                # Generate Prisma types + geo data
+pnpm migrate                # Run Prisma migrations (dev)
+pnpm migrate:deploy         # Deploy migrations (production - never run this)
+
+# Docker utilities
+pnpm dock:ch                # ClickHouse CLI
+pnpm dock:redis             # Redis CLI
+```
+
+## Architecture
+
+### Apps
+
+| App | Stack | Port | Purpose |
+|-----|-------|------|---------|
+| `apps/api` | Fastify + tRPC | 3333 | REST/RPC API server |
+| `apps/start` | TanStack Start (Vite + React 19) | 3000 | Dashboard SPA |
+| `apps/public` | Next.js 16 + Fumadocs | - | Marketing/docs site |
+| `apps/worker` | Express + BullMQ | 9999 | Background job processor |
+
+### Key Packages
+
+| Package | Purpose |
+|---------|---------|
+| `packages/db` | Prisma ORM (PostgreSQL) + ClickHouse client |
+| `packages/trpc` | tRPC router definitions, context, middleware |
+| `packages/auth` | Authentication (Arctic OAuth, Oslo sessions, argon2) |
+| `packages/queue` | BullMQ + GroupMQ job queue definitions |
+| `packages/redis` | Redis client + LRU caching |
+| `packages/validation` | Zod schemas shared across apps |
+| `packages/common` | Shared utilities (date-fns, ua-parser, nanoid) |
+| `packages/email` | React Email templates via Resend |
+| `packages/sdks/*` | Client SDKs (web, react, next, express, react-native, etc.) |
+
+### Data Flow
+
+1. **Event ingestion**: Client SDKs → `apps/api` (track routes) → Redis queue
+2. **Processing**: `apps/worker` picks up jobs from BullMQ, batches events into ClickHouse
+3. **Dashboard queries**: `apps/start` → tRPC → `apps/api` → ClickHouse (analytics) / PostgreSQL (config)
+4. **Real-time**: WebSocket via Fastify, pub/sub via Redis
+
+### Three-Database Strategy
+
+- **PostgreSQL**: Relational data (users, orgs, projects, dashboards). Managed by Prisma.
+- **ClickHouse**: Analytics event storage (OLAP). High-volume reads/writes.
+- **Redis**: Caching, job queues (BullMQ), rate limiting, pub/sub.
+
+### Dashboard (apps/start)
+
+Uses TanStack Router with file-based routing (`src/routes/`). State management via Redux Toolkit. UI built on Radix primitives + Tailwind v4. Charts via Recharts. Modals in `src/modals/`.
+
+### API (apps/api)
+
+Fastify server with tRPC integration. Route files in `src/routes/`. Hooks for IP extraction, request logging, timestamps. Built with `tsdown`.
+---
+
+## Core Principles
+
+Write code that is **accessible, performant, type-safe, and maintainable**. Focus on clarity and explicit intent over brevity.
+
+### Type Safety & Explicitness
+
+- Use explicit types for function parameters and return values when they enhance clarity
+- Prefer `unknown` over `any` when the type is genuinely unknown
+- Use const assertions (`as const`) for immutable values and literal types
+- Leverage TypeScript's type narrowing instead of type assertions
+- Use meaningful variable names instead of magic numbers - extract constants with descriptive names
+
+### Modern JavaScript/TypeScript
+
+- Use arrow functions for callbacks and short functions
+- Prefer `for...of` loops over `.forEach()` and indexed `for` loops
+- Use optional chaining (`?.`) and nullish coalescing (`??`) for safer property access
+- Prefer template literals over string concatenation
+- Use destructuring for object and array assignments
+- Use `const` by default, `let` only when reassignment is needed, never `var`
+
+### Async & Promises
+
+- Always `await` promises in async functions - don't forget to use the return value
+- Use `async/await` syntax instead of promise chains for better readability
+- Handle errors appropriately in async code with try-catch blocks
+- Don't use async functions as Promise executors
+
+### React & JSX
+
+- Use function components over class components
+- Call hooks at the top level only, never conditionally
+- Specify all dependencies in hook dependency arrays correctly
+- Use the `key` prop for elements in iterables (prefer unique IDs over array indices)
+- Nest children between opening and closing tags instead of passing as props
+- Don't define components inside other components
+- Use semantic HTML and ARIA attributes for accessibility:
+  - Provide meaningful alt text for images
+  - Use proper heading hierarchy
+  - Add labels for form inputs
+  - Include keyboard event handlers alongside mouse events
+  - Use semantic elements (`<button>`, `<nav>`, etc.) instead of divs with roles
+
+### Error Handling & Debugging
+
+- Remove `console.log`, `debugger`, and `alert` statements from production code
+- Throw `Error` objects with descriptive messages, not strings or other values
+- Use `try-catch` blocks meaningfully - don't catch errors just to rethrow them
+- Prefer early returns over nested conditionals for error cases
+
+### Code Organization
+
+- Keep functions focused and under reasonable cognitive complexity limits
+- Extract complex conditions into well-named boolean variables
+- Use early returns to reduce nesting
+- Prefer simple conditionals over nested ternary operators
+- Group related code together and separate concerns
+
+### Security
+
+- Add `rel="noopener"` when using `target="_blank"` on links
+- Avoid `dangerouslySetInnerHTML` unless absolutely necessary
+- Don't use `eval()` or assign directly to `document.cookie`
+- Validate and sanitize user input
+
+### Performance
+
+- Avoid spread syntax in accumulators within loops
+- Use top-level regex literals instead of creating them in loops
+- Prefer specific imports over namespace imports
+- Avoid barrel files (index files that re-export everything)
+- Use proper image components (e.g., Next.js `<Image>`) over `<img>` tags
+
+### Framework-Specific Guidance
+
+**Next.js:**
+- Use Next.js `<Image>` component for images
+- Use `next/head` or App Router metadata API for head elements
+- Use Server Components for async data fetching instead of async Client Components
+
+**React 19+:**
+- Use ref as a prop instead of `React.forwardRef`
+
+**Solid/Svelte/Vue/Qwik:**
+- Use `class` and `for` attributes (not `className` or `htmlFor`)

.gitea/workflows/docker-build-api.yml

@@ -0,0 +1,55 @@
+name: Build and Push API
+
+on:
+  push:
+    branches: ["*"]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+env:
+  REGISTRY: git.zias.be
+  OWNER: zias
+
+jobs:
+  build-api:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ env.OWNER }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-api
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=sha,prefix=sha-,format=short
+            type=semver,pattern={{version}}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: apps/api/Dockerfile
+          target: runner
+          platforms: linux/amd64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          provenance: false
+          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-api:buildcache
+          cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}/openpanel-api:buildcache,mode=max,image-manifest=true,oci-mediatypes=true', env.REGISTRY, env.OWNER) || '' }}
+          build-args: |-
+            DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres

.gitea/workflows/docker-build-dashboard.yml

@@ -0,0 +1,53 @@
+name: Build and Push Dashboard
+
+on:
+  push:
+    branches: ["*"]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+env:
+  REGISTRY: git.zias.be
+  OWNER: zias
+
+jobs:
+  build-dashboard:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ env.OWNER }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-dashboard
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=sha,prefix=sha-,format=short
+            type=semver,pattern={{version}}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: apps/start/Dockerfile
+          target: runner
+          platforms: linux/amd64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          provenance: false
+          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-dashboard:buildcache
+          cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}/openpanel-dashboard:buildcache,mode=max,image-manifest=true,oci-mediatypes=true', env.REGISTRY, env.OWNER) || '' }}

.gitea/workflows/docker-build-worker.yml

@@ -0,0 +1,55 @@
+name: Build and Push Worker
+
+on:
+  push:
+    branches: ["*"]
+    tags: ["v*"]
+  pull_request:
+    branches: [main]
+
+env:
+  REGISTRY: git.zias.be
+  OWNER: zias
+
+jobs:
+  build-worker:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to registry
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ env.OWNER }}
+          password: ${{ secrets.REGISTRY_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-worker
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=sha,prefix=sha-,format=short
+            type=semver,pattern={{version}}
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: apps/worker/Dockerfile
+          target: runner
+          platforms: linux/amd64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          provenance: false
+          cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ env.OWNER }}/openpanel-worker:buildcache
+          cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}/openpanel-worker:buildcache,mode=max,image-manifest=true,oci-mediatypes=true', env.REGISTRY, env.OWNER) || '' }}
+          build-args: |-
+            DATABASE_URL=postgresql://postgres:postgres@localhost:5432/postgres

.github/workflows/docker-build.yml

@@ -3,54 +3,37 @@ name: Docker Build and Push
 on:
   workflow_dispatch:
   push:
-    # branches: [ "main" ]
-    paths:
-      - "apps/api/**"
-      - "apps/worker/**"
+    paths-ignore:
+      # README and docs
+      - "**/README*"
+      - "**/readme*"
+      - "**/*.md"
+      - "**/docs/**"
+      - "**/CHANGELOG*"
+      - "**/LICENSE*"
+      # Test files
+      - "**/*.test.*"
+      - "**/*.spec.*"
+      - "**/__tests__/**"
+      - "**/tests/**"
+      # SDKs (published separately)
+      - "packages/sdks/**"
+      # Public app (docs/marketing, not part of Docker deploy)
       - "apps/public/**"
-      - "packages/**"
-      - "!packages/sdks/**"
-      - "**Dockerfile"
-      - ".github/workflows/**"
+      # Dev / tooling
+      - "**/.vscode/**"
+      - "**/.cursor/**"
+      - "**/.env.example"
+      - "**/.env.*.example"
+      - "**/.gitignore"
+      - "**/.eslintignore"
+      - "**/.prettierignore"
 
 env:
   repo_owner: "openpanel-dev"
 
 jobs:
-  changes:
-    runs-on: ubuntu-latest
-    outputs:
-      api: ${{ steps.filter.outputs.api }}
-      worker: ${{ steps.filter.outputs.worker }}
-      public: ${{ steps.filter.outputs.public }}
-      dashboard: ${{ steps.filter.outputs.dashboard }}
-    steps:
-      - uses: actions/checkout@v4
-      - uses: dorny/paths-filter@v2
-        id: filter
-        with:
-          base: "main"
-          filters: |
-            api:
-              - 'apps/api/**'
-              - 'packages/**'
-              - '.github/workflows/**'
-            worker:
-              - 'apps/worker/**'
-              - 'packages/**'
-              - '.github/workflows/**'
-            public:
-              - 'apps/public/**'
-              - 'packages/**'
-              - '.github/workflows/**'
-            dashboard:
-              - 'apps/start/**'
-              - 'packages/**'
-              - '.github/workflows/**'
-
   lint-and-test:
-    needs: changes
-    if: ${{ needs.changes.outputs.api == 'true' || needs.changes.outputs.worker == 'true' || needs.changes.outputs.public == 'true' || needs.changes.outputs.dashboard == 'true' }}
     runs-on: ubuntu-latest
     services:
       redis:
@@ -105,8 +88,7 @@ jobs:
     permissions:
       packages: write
       contents: write
-    needs: [changes, lint-and-test]
-    if: ${{ needs.changes.outputs.api == 'true' }}
+    needs: lint-and-test
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -166,8 +148,7 @@ jobs:
     permissions:
       packages: write
       contents: write
-    needs: [changes, lint-and-test]
-    if: ${{ needs.changes.outputs.worker == 'true' }}
+    needs: lint-and-test
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
@@ -227,8 +208,7 @@ jobs:
     permissions:
       packages: write
       contents: write
-    needs: [changes, lint-and-test]
-    if: ${{ needs.changes.outputs.dashboard == 'true' }}
+    needs: lint-and-test
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository

.gitignore

@@ -1,6 +1,7 @@
 .secrets
 packages/db/src/generated/prisma
 packages/db/code-migrations/*.sql
+**/.open-next
 
 # Based on https://raw.githubusercontent.com/github/gitignore/main/Node.gitignore
 packages/sdk/profileId.txt

.zed/settings.json

@@ -0,0 +1,50 @@
+{
+  "formatter": "language_server",
+  "format_on_save": "on",
+  "lsp": {
+    "typescript-language-server": {
+      "settings": {
+        "typescript": {
+          "preferences": {
+            "includePackageJsonAutoImports": "on"
+          }
+        }
+      }
+    }
+  },
+  "languages": {
+    "JavaScript": {
+      "formatter": {
+        "language_server": {
+          "name": "biome"
+        }
+      },
+      "code_actions_on_format": {
+        "source.fixAll.biome": true,
+        "source.organizeImports.biome": true
+      }
+    },
+    "TypeScript": {
+      "formatter": {
+        "language_server": {
+          "name": "biome"
+        }
+      },
+      "code_actions_on_format": {
+        "source.fixAll.biome": true,
+        "source.organizeImports.biome": true
+      }
+    },
+    "TSX": {
+      "formatter": {
+        "language_server": {
+          "name": "biome"
+        }
+      },
+      "code_actions_on_format": {
+        "source.fixAll.biome": true,
+        "source.organizeImports.biome": true
+      }
+    }
+  }
+}

README.md

@@ -28,6 +28,7 @@ Openpanel is an open-source web and product analytics platform that combines the
 ## ✨ Features
 
 - **🔍 Advanced Analytics**: Funnels, cohorts, user profiles, and session history
+- **🎬 Session Replay**: Record and replay user sessions with privacy controls built in
 - **📊 Real-time Dashboards**: Live data updates and interactive charts
 - **🎯 A/B Testing**: Built-in variant testing with detailed breakdowns
 - **🔔 Smart Notifications**: Event and funnel-based alerts
@@ -48,6 +49,7 @@ Openpanel is an open-source web and product analytics platform that combines the
 | 🔁 Real-time dashboards                | ✅         | ✅        | ❌        | ✅         |
 | 🔍 Funnels & cohort analysis           | ✅         | ✅        | ✅*       | ✅***         |
 | 👤 User profiles & session history     | ✅         | ✅        | ❌        | ❌         |
+| 🎬 Session replay                      | ✅         | ✅****    | ❌        | ❌         |
 | 📈 Custom dashboards & charts          | ✅         | ✅        | ✅        | ❌         |
 | 💬 Event & funnel notifications        | ✅         | ✅        | ❌        | ❌         |
 | 🌍 GDPR-compliant tracking             | ✅         | ✅        | ❌**      | ✅         |
@@ -56,9 +58,10 @@ Openpanel is an open-source web and product analytics platform that combines the
 | 🚀 Built for developers                | ✅         | ✅        | ❌        | ✅         |
 | 🔧 A/B testing & variant breakdowns    | ✅         | ✅        | ❌        | ❌         |
 
-> ✅* GA4 has a free tier but often requires BigQuery (paid) for raw data access.  
-> ❌** GA4 has faced GDPR bans in several EU countries due to data transfers to US-based servers.  
+> ✅* GA4 has a free tier but often requires BigQuery (paid) for raw data access.
+> ❌** GA4 has faced GDPR bans in several EU countries due to data transfers to US-based servers.
 > ✅*** Plausible has simple goals
+> ✅**** Mixpanel session replay is limited to 5k sessions/month on free and 20k on paid. OpenPanel has no limit.
 
 ## Stack
 
@@ -98,6 +101,10 @@ You can find the how to [here](https://openpanel.dev/docs/self-hosting/self-host
 ### Start
 
 ```bash
+pnpm install
+cp .env.example .env
+echo "API_URL=http://localhost:3333" > apps/start/.env
+
 pnpm dock:up
 pnpm codegen
 pnpm migrate:deploy # once to setup the db
@@ -110,4 +117,5 @@ You can now access the following:
 - API: https://api.localhost:3333
 - Bullboard (queue): http://localhost:9999
 - `pnpm dock:ch` to access clickhouse terminal
-- `pnpm dock:redis` to access redis terminal
+- `pnpm dock:redis` to access redis terminal
+---

admin/src/cli.ts

@@ -24,7 +24,7 @@ async function main() {
   const CLICKHOUSE_URL = process.env.CLICKHOUSE_URL;
   const REDIS_URL = process.env.REDIS_URL;
 
-  if (!DATABASE_URL || !CLICKHOUSE_URL || !REDIS_URL) {
+  if (!(DATABASE_URL && CLICKHOUSE_URL && REDIS_URL)) {
     console.error('Environment variables are not set');
     process.exit(1);
   }

admin/src/commands/clear-cache.ts

@@ -40,7 +40,7 @@ export async function clearCache() {
     displayText: `${org.name} ${chalk.gray(`(${org.id})`)}`,
   }));
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: OrgSearchItem) => `${item.name} ${item.id}`,
     });
@@ -94,7 +94,7 @@ export async function clearCache() {
     console.log(chalk.yellow('\n📊 Projects:\n'));
     for (const project of organization.projects) {
       console.log(
-        `  - ${project.name} ${chalk.gray(`(${project.id})`)} - ${chalk.cyan(`${project.eventsCount.toLocaleString()} events`)}`,
+        `  - ${project.name} ${chalk.gray(`(${project.id})`)} - ${chalk.cyan(`${project.eventsCount.toLocaleString()} events`)}`
       );
     }
   }
@@ -119,9 +119,11 @@ export async function clearCache() {
   for (const project of organization.projects) {
     // Clear project access cache for each member
     for (const member of organization.members) {
-      if (!member.user?.id) continue;
+      if (!member.user?.id) {
+        continue;
+      }
       console.log(
-        `Clearing cache for project: ${project.name} and member: ${member.user?.email}`,
+        `Clearing cache for project: ${project.name} and member: ${member.user?.email}`
       );
       await getProjectAccess.clear({
         userId: member.user?.id,
@@ -141,8 +143,8 @@ export async function clearCache() {
   console.log(chalk.gray(`Organization ID: ${organization.id}`));
   console.log(
     chalk.gray(
-      `Project IDs: ${organization.projects.map((p) => p.id).join(', ')}`,
-    ),
+      `Project IDs: ${organization.projects.map((p) => p.id).join(', ')}`
+    )
   );
 
   // Example of what you might do:

admin/src/commands/delete-organization.ts

@@ -21,8 +21,8 @@ export async function deleteOrganization() {
   console.log(chalk.red('\n🗑️  Delete Organization\n'));
   console.log(
     chalk.yellow(
-      '⚠️  WARNING: This will permanently delete the organization and all its data!\n',
-    ),
+      '⚠️  WARNING: This will permanently delete the organization and all its data!\n'
+    )
   );
   console.log('Loading organizations...\n');
 
@@ -51,7 +51,7 @@ export async function deleteOrganization() {
     displayText: `${org.name} ${chalk.gray(`(${org.id})`)} ${chalk.cyan(`- ${org.projects.length} projects, ${org.members.length} members`)}`,
   }));
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: OrgSearchItem) => `${item.name} ${item.id}`,
     });
@@ -107,7 +107,7 @@ export async function deleteOrganization() {
     console.log(chalk.red('\n  Projects that will be deleted:'));
     for (const project of organization.projects) {
       console.log(
-        `    - ${project.name} ${chalk.gray(`(${project.eventsCount.toLocaleString()} events, ${project.clients.length} clients)`)}`,
+        `    - ${project.name} ${chalk.gray(`(${project.eventsCount.toLocaleString()} events, ${project.clients.length} clients)`)}`
       );
     }
   }
@@ -122,8 +122,8 @@ export async function deleteOrganization() {
 
   console.log(
     chalk.red(
-      '\n⚠️  This will delete ALL projects, clients, events, and data associated with this organization!',
-    ),
+      '\n⚠️  This will delete ALL projects, clients, events, and data associated with this organization!'
+    )
   );
 
   // First confirmation
@@ -132,7 +132,7 @@ export async function deleteOrganization() {
       type: 'confirm',
       name: 'confirmFirst',
       message: chalk.red(
-        `Are you ABSOLUTELY SURE you want to delete "${organization.name}"?`,
+        `Are you ABSOLUTELY SURE you want to delete "${organization.name}"?`
       ),
       default: false,
     },
@@ -154,7 +154,7 @@ export async function deleteOrganization() {
 
   if (confirmName !== organization.name) {
     console.log(
-      chalk.red('\n❌ Organization name does not match. Deletion cancelled.'),
+      chalk.red('\n❌ Organization name does not match. Deletion cancelled.')
     );
     return;
   }
@@ -165,7 +165,7 @@ export async function deleteOrganization() {
       type: 'confirm',
       name: 'confirmFinal',
       message: chalk.red(
-        'FINAL WARNING: This action CANNOT be undone. Delete now?',
+        'FINAL WARNING: This action CANNOT be undone. Delete now?'
       ),
       default: false,
     },
@@ -185,8 +185,8 @@ export async function deleteOrganization() {
     if (projectIds.length > 0) {
       console.log(
         chalk.yellow(
-          `Deleting data from ClickHouse for ${projectIds.length} projects...`,
-        ),
+          `Deleting data from ClickHouse for ${projectIds.length} projects...`
+        )
       );
       await deleteFromClickhouse(projectIds);
       console.log(chalk.green('✓ ClickHouse data deletion initiated'));
@@ -200,13 +200,13 @@ export async function deleteOrganization() {
     console.log(chalk.green('\n✅ Organization deleted successfully!'));
     console.log(
       chalk.gray(
-        `Deleted: ${organization.name} with ${organization.projects.length} projects and ${organization.members.length} members`,
-      ),
+        `Deleted: ${organization.name} with ${organization.projects.length} projects and ${organization.members.length} members`
+      )
     );
     console.log(
       chalk.gray(
-        '\nNote: ClickHouse deletions are processed asynchronously and may take a few moments to complete.',
-      ),
+        '\nNote: ClickHouse deletions are processed asynchronously and may take a few moments to complete.'
+      )
     );
   } catch (error) {
     console.error(chalk.red('\n❌ Error deleting organization:'), error);

admin/src/commands/delete-user.ts

@@ -19,8 +19,8 @@ export async function deleteUser() {
   console.log(chalk.red('\n🗑️  Delete User\n'));
   console.log(
     chalk.yellow(
-      '⚠️  WARNING: This will permanently delete the user and remove them from all organizations!\n',
-    ),
+      '⚠️  WARNING: This will permanently delete the user and remove them from all organizations!\n'
+    )
   );
   console.log('Loading users...\n');
 
@@ -59,7 +59,7 @@ export async function deleteUser() {
     };
   });
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: UserSearchItem) =>
         `${item.email} ${item.firstName || ''} ${item.lastName || ''}`,
@@ -107,46 +107,46 @@ export async function deleteUser() {
   console.log(`  ${chalk.bold('User:')} ${user.email}`);
   if (user.firstName || user.lastName) {
     console.log(
-      `  ${chalk.gray('Name:')} ${user.firstName || ''} ${user.lastName || ''}`,
+      `  ${chalk.gray('Name:')} ${user.firstName || ''} ${user.lastName || ''}`
     );
   }
   console.log(`  ${chalk.gray('ID:')} ${user.id}`);
   console.log(
-    `  ${chalk.gray('Member of:')} ${user.membership.length} organizations`,
+    `  ${chalk.gray('Member of:')} ${user.membership.length} organizations`
   );
   console.log(`  ${chalk.gray('Auth accounts:')} ${user.accounts.length}`);
 
   if (user.createdOrganizations.length > 0) {
     console.log(
       chalk.red(
-        `\n  ⚠️  This user CREATED ${user.createdOrganizations.length} organization(s):`,
-      ),
+        `\n  ⚠️  This user CREATED ${user.createdOrganizations.length} organization(s):`
+      )
     );
     for (const org of user.createdOrganizations) {
       console.log(`    - ${org.name} ${chalk.gray(`(${org.id})`)}`);
     }
     console.log(
       chalk.yellow(
-        '    Note: These organizations will NOT be deleted, only the user reference.',
-      ),
+        '    Note: These organizations will NOT be deleted, only the user reference.'
+      )
     );
   }
 
   if (user.membership.length > 0) {
     console.log(
-      chalk.red('\n  Organizations where user will be removed from:'),
+      chalk.red('\n  Organizations where user will be removed from:')
     );
     for (const member of user.membership) {
       console.log(
-        `    - ${member.organization.name} ${chalk.gray(`(${member.role})`)}`,
+        `    - ${member.organization.name} ${chalk.gray(`(${member.role})`)}`
       );
     }
   }
 
   console.log(
     chalk.red(
-      '\n⚠️  This will delete the user account, all sessions, and remove them from all organizations!',
-    ),
+      '\n⚠️  This will delete the user account, all sessions, and remove them from all organizations!'
+    )
   );
 
   // First confirmation
@@ -155,7 +155,7 @@ export async function deleteUser() {
       type: 'confirm',
       name: 'confirmFirst',
       message: chalk.red(
-        `Are you ABSOLUTELY SURE you want to delete user "${user.email}"?`,
+        `Are you ABSOLUTELY SURE you want to delete user "${user.email}"?`
       ),
       default: false,
     },
@@ -186,7 +186,7 @@ export async function deleteUser() {
       type: 'confirm',
       name: 'confirmFinal',
       message: chalk.red(
-        'FINAL WARNING: This action CANNOT be undone. Delete now?',
+        'FINAL WARNING: This action CANNOT be undone. Delete now?'
       ),
       default: false,
     },
@@ -210,8 +210,8 @@ export async function deleteUser() {
     console.log(chalk.green('\n✅ User deleted successfully!'));
     console.log(
       chalk.gray(
-        `Deleted: ${user.email} (removed from ${user.membership.length} organizations)`,
-      ),
+        `Deleted: ${user.email} (removed from ${user.membership.length} organizations)`
+      )
     );
   } catch (error) {
     console.error(chalk.red('\n❌ Error deleting user:'), error);

admin/src/commands/lookup-client.ts

@@ -47,7 +47,7 @@ export async function lookupByClient() {
     displayText: `${client.organization.name} → ${client.project?.name || '[No Project]'} → ${client.name} ${chalk.gray(`(${client.id})`)}`,
   }));
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: ClientSearchItem) =>
         `${item.organizationName} ${item.projectName || ''} ${item.name} ${item.id}`,
@@ -101,4 +101,3 @@ export async function lookupByClient() {
     highlightClientId: selectedClient.id,
   });
 }
-

admin/src/commands/lookup-email.ts

@@ -52,7 +52,7 @@ export async function lookupByEmail() {
     };
   });
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: EmailSearchItem) =>
         `${item.email} ${item.organizationName}`,
@@ -103,10 +103,9 @@ export async function lookupByEmail() {
 
   console.log(
     chalk.yellow(
-      `\nShowing organization for: ${selectedMember.email} (${selectedMember.role})\n`,
-    ),
+      `\nShowing organization for: ${selectedMember.email} (${selectedMember.role})\n`
+    )
   );
 
   displayOrganizationDetails(organization);
 }
-

admin/src/commands/lookup-org.ts

@@ -35,7 +35,7 @@ export async function lookupByOrg() {
     displayText: `${org.name} ${chalk.gray(`(${org.id})`)}`,
   }));
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: OrgSearchItem) => `${item.name} ${item.id}`,
     });
@@ -85,4 +85,3 @@ export async function lookupByOrg() {
 
   displayOrganizationDetails(organization);
 }
-

admin/src/commands/lookup-project.ts

@@ -42,7 +42,7 @@ export async function lookupByProject() {
     displayText: `${project.organization.name} → ${project.name} ${chalk.gray(`(${project.id})`)}`,
   }));
 
-  const searchFunction = async (_answers: unknown, input = '') => {
+  const searchFunction = (_answers: unknown, input = '') => {
     const fuzzyResult = fuzzy.filter(input, searchItems, {
       extract: (item: ProjectSearchItem) =>
         `${item.organizationName} ${item.name} ${item.id}`,
@@ -95,4 +95,3 @@ export async function lookupByProject() {
     highlightProjectId: selectedProject.id,
   });
 }
-

admin/src/utils/display.ts

@@ -23,7 +23,7 @@ interface DisplayOptions {
 
 export function displayOrganizationDetails(
   organization: OrganizationWithDetails,
-  options: DisplayOptions = {},
+  options: DisplayOptions = {}
 ) {
   console.log(`\n${'='.repeat(80)}`);
   console.log(chalk.bold.yellow(`\n📊 ORGANIZATION: ${organization.name}`));
@@ -34,18 +34,18 @@ export function displayOrganizationDetails(
   console.log(`  ${chalk.gray('ID:')} ${organization.id}`);
   console.log(`  ${chalk.gray('Name:')} ${organization.name}`);
   console.log(
-    `  ${chalk.gray('Created:')} ${organization.createdAt.toISOString()}`,
+    `  ${chalk.gray('Created:')} ${organization.createdAt.toISOString()}`
   );
   console.log(`  ${chalk.gray('Timezone:')} ${organization.timezone || 'UTC'}`);
 
   // Subscription info
   if (organization.subscriptionStatus) {
     console.log(
-      `  ${chalk.gray('Subscription Status:')} ${getSubscriptionStatusColor(organization.subscriptionStatus)}`,
+      `  ${chalk.gray('Subscription Status:')} ${getSubscriptionStatusColor(organization.subscriptionStatus)}`
     );
     if (organization.subscriptionPriceId) {
       console.log(
-        `  ${chalk.gray('Price ID:')} ${organization.subscriptionPriceId}`,
+        `  ${chalk.gray('Price ID:')} ${organization.subscriptionPriceId}`
       );
     }
     if (organization.subscriptionPeriodEventsLimit) {
@@ -61,24 +61,24 @@ export function displayOrganizationDetails(
             ? chalk.yellow
             : chalk.green;
       console.log(
-        `  ${chalk.gray('Event Usage:')} ${color(usage)} (${percentage.toFixed(1)}%)`,
+        `  ${chalk.gray('Event Usage:')} ${color(usage)} (${percentage.toFixed(1)}%)`
       );
     }
     if (organization.subscriptionStartsAt) {
       console.log(
-        `  ${chalk.gray('Starts:')} ${organization.subscriptionStartsAt.toISOString()}`,
+        `  ${chalk.gray('Starts:')} ${organization.subscriptionStartsAt.toISOString()}`
       );
     }
     if (organization.subscriptionEndsAt) {
       console.log(
-        `  ${chalk.gray('Ends:')} ${organization.subscriptionEndsAt.toISOString()}`,
+        `  ${chalk.gray('Ends:')} ${organization.subscriptionEndsAt.toISOString()}`
       );
     }
   }
 
   if (organization.deleteAt) {
     console.log(
-      `  ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${organization.deleteAt.toISOString()}`,
+      `  ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${organization.deleteAt.toISOString()}`
     );
   }
 
@@ -90,7 +90,7 @@ export function displayOrganizationDetails(
     for (const member of organization.members) {
       const roleBadge = getRoleBadge(member.role);
       console.log(
-        `  ${roleBadge} ${member.user?.email || member.email || 'Unknown'} ${chalk.gray(`(${member.role})`)}`,
+        `  ${roleBadge} ${member.user?.email || member.email || 'Unknown'} ${chalk.gray(`(${member.role})`)}`
       );
     }
   }
@@ -108,7 +108,7 @@ export function displayOrganizationDetails(
       console.log(`\n${projectPrefix}${chalk.bold.green(project.name)}`);
       console.log(`    ${chalk.gray('ID:')} ${project.id}`);
       console.log(
-        `    ${chalk.gray('Events Count:')} ${project.eventsCount.toLocaleString()}`,
+        `    ${chalk.gray('Events Count:')} ${project.eventsCount.toLocaleString()}`
       );
 
       if (project.domain) {
@@ -120,15 +120,15 @@ export function displayOrganizationDetails(
       }
 
       console.log(
-        `    ${chalk.gray('Cross Domain:')} ${project.crossDomain ? chalk.green('✓') : chalk.red('✗')}`,
+        `    ${chalk.gray('Cross Domain:')} ${project.crossDomain ? chalk.green('✓') : chalk.red('✗')}`
       );
       console.log(
-        `    ${chalk.gray('Created:')} ${project.createdAt.toISOString()}`,
+        `    ${chalk.gray('Created:')} ${project.createdAt.toISOString()}`
       );
 
       if (project.deleteAt) {
         console.log(
-          `    ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${project.deleteAt.toISOString()}`,
+          `    ${chalk.red.bold('⚠️  Scheduled for deletion:')} ${project.deleteAt.toISOString()}`
         );
       }
 
@@ -146,10 +146,10 @@ export function displayOrganizationDetails(
           console.log(`        ${chalk.gray('ID:')} ${client.id}`);
           console.log(`        ${chalk.gray('Type:')} ${client.type}`);
           console.log(
-            `        ${chalk.gray('Has Secret:')} ${client.secret ? chalk.green('✓') : chalk.red('✗')}`,
+            `        ${chalk.gray('Has Secret:')} ${client.secret ? chalk.green('✓') : chalk.red('✗')}`
           );
           console.log(
-            `        ${chalk.gray('Ignore CORS/Secret:')} ${client.ignoreCorsAndSecret ? chalk.yellow('✓') : chalk.gray('✗')}`,
+            `        ${chalk.gray('Ignore CORS/Secret:')} ${client.ignoreCorsAndSecret ? chalk.yellow('✓') : chalk.gray('✗')}`
           );
         }
       } else {
@@ -159,7 +159,7 @@ export function displayOrganizationDetails(
   }
 
   // Clients without projects (organization-level clients)
-  const orgLevelClients = organization.projects.length > 0 ? [] : []; // We need to query these separately
+  const _orgLevelClients = organization.projects.length > 0 ? [] : []; // We need to query these separately
 
   console.log(`\n${'='.repeat(80)}\n`);
 }

admin/tsconfig.json

@@ -5,8 +5,8 @@
     "rootDir": "src",
     "target": "ES2022",
     "lib": ["ES2022"],
-    "types": ["node"]
+    "types": ["node"],
+    "strictNullChecks": true
   },
   "include": ["src"]
 }
-

apps/api/Dockerfile

@@ -5,7 +5,7 @@ FROM node:${NODE_VERSION}-slim AS base
 # FIX: Bad workaround (https://github.com/nodejs/corepack/issues/612)
 ENV COREPACK_INTEGRITY_KEYS=0
 
-RUN corepack enable && apt-get update && \
+RUN rm -f /usr/local/bin/pnpm /usr/local/bin/pnpx && npm install -g pnpm@10.6.2 && apt-get update && \
     apt-get install -y --no-install-recommends \
     ca-certificates \
     openssl \
@@ -38,11 +38,10 @@ COPY packages/redis/package.json packages/redis/
 COPY packages/logger/package.json packages/logger/
 COPY packages/common/package.json packages/common/
 COPY packages/payments/package.json packages/payments/
-COPY packages/sdks/sdk/package.json packages/sdks/sdk/
 COPY packages/constants/package.json packages/constants/
 COPY packages/validation/package.json packages/validation/
 COPY packages/integrations/package.json packages/integrations/
-COPY packages/sdks/sdk/package.json packages/sdks/sdk/
+COPY packages/js-runtime/package.json packages/js-runtime/
 COPY patches ./patches
 
 # BUILD
@@ -107,10 +106,10 @@ COPY --from=build /app/packages/redis ./packages/redis
 COPY --from=build /app/packages/logger ./packages/logger
 COPY --from=build /app/packages/common ./packages/common
 COPY --from=build /app/packages/payments ./packages/payments
-COPY --from=build /app/packages/sdks/sdk ./packages/sdks/sdk
 COPY --from=build /app/packages/constants ./packages/constants
 COPY --from=build /app/packages/validation ./packages/validation
 COPY --from=build /app/packages/integrations ./packages/integrations
+COPY --from=build /app/packages/js-runtime ./packages/js-runtime
 COPY --from=build /app/tooling/typescript ./tooling/typescript
 RUN pnpm db:codegen
 

apps/api/package.json

@@ -8,6 +8,7 @@
     "start": "dotenv -e ../../.env node dist/index.js",
     "build": "rm -rf dist && tsdown",
     "gen:bots": "jiti scripts/get-bots.ts && biome format --write src/bots/bots.ts",
+    "test:manage": "jiti scripts/test-manage-api.ts",
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
@@ -29,7 +30,6 @@
     "@openpanel/logger": "workspace:*",
     "@openpanel/payments": "workspace:*",
     "@openpanel/queue": "workspace:*",
-    "groupmq": "catalog:",
     "@openpanel/redis": "workspace:*",
     "@openpanel/trpc": "workspace:*",
     "@openpanel/validation": "workspace:*",
@@ -39,6 +39,7 @@
     "fastify": "^5.6.1",
     "fastify-metrics": "^12.1.0",
     "fastify-raw-body": "^5.0.0",
+    "groupmq": "catalog:",
     "jsonwebtoken": "^9.0.2",
     "ramda": "^0.29.1",
     "sharp": "^0.33.5",
@@ -46,13 +47,12 @@
     "sqlstring": "^2.3.3",
     "superjson": "^1.13.3",
     "svix": "^1.24.0",
-    "url-metadata": "^4.1.1",
+    "url-metadata": "^5.4.1",
     "uuid": "^9.0.1",
     "zod": "catalog:"
   },
   "devDependencies": {
     "@faker-js/faker": "^9.0.1",
-    "@openpanel/sdk": "workspace:*",
     "@openpanel/tsconfig": "workspace:*",
     "@types/js-yaml": "^4.0.9",
     "@types/jsonwebtoken": "^9.0.9",
@@ -65,4 +65,4 @@
     "tsdown": "0.14.2",
     "typescript": "catalog:"
   }
-}
+}

apps/api/scripts/get-bots.ts

@@ -1,14 +1,14 @@
 import fs from 'node:fs';
-import path from 'node:path';
-import { dirname } from 'node:path';
+import path, { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
+
 import yaml from 'js-yaml';
 
 // Regex special characters that indicate we need actual regex
-const regexSpecialChars = /[|^$.*+?(){}\[\]\\]/;
+const regexSpecialChars = /[|^$.*+?(){}[\]\\]/;
 
 function transformBots(bots: any[]): any[] {
   return bots.map((bot) => {
@@ -28,7 +28,7 @@ async function main() {
   // Get document, or throw exception on error
   try {
     const data = await fetch(
-      'https://raw.githubusercontent.com/matomo-org/device-detector/master/regexes/bots.yml',
+      'https://raw.githubusercontent.com/matomo-org/device-detector/master/regexes/bots.yml'
     ).then((res) => res.text());
 
     const parsedData = yaml.load(data) as any[];
@@ -45,11 +45,11 @@ async function main() {
         'export default bots;',
         '',
       ].join('\n'),
-      'utf-8',
+      'utf-8'
     );
 
     console.log(
-      `✅ Generated bots.ts with ${transformedBots.length} bot entries`,
+      `✅ Generated bots.ts with ${transformedBots.length} bot entries`
     );
     const regexCount = transformedBots.filter((b) => 'regex' in b).length;
     const includesCount = transformedBots.filter((b) => 'includes' in b).length;

apps/api/scripts/mock.ts

@@ -133,7 +133,7 @@ function generateEvents(): Event[] {
           clientId,
           profile: profiles[i % PROFILE_COUNT]!,
           eventsCount: Math.floor(Math.random() * 10),
-        }),
+        })
       );
     }
   });
@@ -150,7 +150,7 @@ let lastTriggeredIndex = 0;
 async function triggerEvents(generatedEvents: any[]) {
   const EVENTS_PER_SECOND = Number.parseInt(
     process.env.EVENTS_PER_SECOND || '100',
-    10,
+    10
   );
   const INTERVAL_MS = 1000 / EVENTS_PER_SECOND;
 
@@ -164,7 +164,7 @@ async function triggerEvents(generatedEvents: any[]) {
     await trackit(event);
     console.log(`Event ${lastTriggeredIndex + 1} sent successfully`);
     console.log(
-      `sending ${event.track.payload?.properties?.__path} from user ${event.headers['user-agent']}`,
+      `sending ${event.track.payload?.properties?.__path} from user ${event.headers['user-agent']}`
     );
   } catch (error) {
     console.error(`Failed to send event ${lastTriggeredIndex + 1}:`, error);
@@ -174,7 +174,7 @@ async function triggerEvents(generatedEvents: any[]) {
   const remainingEvents = generatedEvents.length - lastTriggeredIndex;
 
   console.log(
-    `Triggered ${lastTriggeredIndex} events. Remaining: ${remainingEvents}`,
+    `Triggered ${lastTriggeredIndex} events. Remaining: ${remainingEvents}`
   );
 
   if (remainingEvents > 0) {
@@ -215,7 +215,7 @@ async function createMock(file: string) {
   fs.writeFileSync(
     file,
     JSON.stringify(insertFakeEvents(scrambleEvents(generateEvents())), null, 2),
-    'utf-8',
+    'utf-8'
   );
 }
 
@@ -438,7 +438,7 @@ async function simultaneousRequests() {
       if (group.parallel && group.tracks.length > 1) {
         // Parallel execution for same-flagged tracks
         console.log(
-          `Firing ${group.tracks.length} parallel requests with flag '${group.parallel}'`,
+          `Firing ${group.tracks.length} parallel requests with flag '${group.parallel}'`
         );
         const promises = group.tracks.map(async (track) => {
           const { name, parallel, ...properties } = track;

apps/api/scripts/test-manage-api.ts

@@ -0,0 +1,354 @@
+/**
+ * One-off script to test all /manage/ API endpoints
+ *
+ * Usage:
+ *   pnpm test:manage
+ *   or
+ *   pnpm jiti scripts/test-manage-api.ts
+ *
+ * Set API_URL environment variable to test against a different server:
+ *   API_URL=http://localhost:3000 pnpm test:manage
+ */
+
+const CLIENT_ID = process.env.CLIENT_ID!;
+const CLIENT_SECRET = process.env.CLIENT_SECRET!;
+const API_BASE_URL = process.env.API_URL || 'http://localhost:3333';
+
+if (!(CLIENT_ID && CLIENT_SECRET)) {
+  console.error('CLIENT_ID and CLIENT_SECRET must be set');
+  process.exit(1);
+}
+
+interface TestResult {
+  name: string;
+  method: string;
+  url: string;
+  status: number;
+  success: boolean;
+  error?: string;
+  data?: any;
+}
+
+const results: TestResult[] = [];
+
+async function makeRequest(
+  method: string,
+  path: string,
+  body?: any
+): Promise<TestResult> {
+  const url = `${API_BASE_URL}${path}`;
+  const headers: Record<string, string> = {
+    'openpanel-client-id': CLIENT_ID,
+    'openpanel-client-secret': CLIENT_SECRET,
+  };
+
+  // Only set Content-Type if there's a body
+  if (body) {
+    headers['Content-Type'] = 'application/json';
+  }
+
+  try {
+    const response = await fetch(url, {
+      method,
+      headers,
+      body: body ? JSON.stringify(body) : undefined,
+    });
+
+    const data = await response.json().catch(() => ({}));
+
+    return {
+      name: `${method} ${path}`,
+      method,
+      url,
+      status: response.status,
+      success: response.ok,
+      error: response.ok ? undefined : data.message || 'Request failed',
+      data: response.ok ? data : undefined,
+    };
+  } catch (error) {
+    return {
+      name: `${method} ${path}`,
+      method,
+      url,
+      status: 0,
+      success: false,
+      error: error instanceof Error ? error.message : 'Unknown error',
+    };
+  }
+}
+
+async function testProjects() {
+  console.log('\n📁 Testing Projects endpoints...\n');
+
+  // Create project
+  const createResult = await makeRequest('POST', '/manage/projects', {
+    name: `Test Project ${Date.now()}`,
+    domain: 'https://example.com',
+    cors: ['https://example.com', 'https://www.example.com'],
+    crossDomain: false,
+    types: ['website'],
+  });
+  results.push(createResult);
+  console.log(
+    `✓ POST /manage/projects: ${createResult.success ? '✅' : '❌'} ${createResult.status}`
+  );
+  if (createResult.error) {
+    console.log(`  Error: ${createResult.error}`);
+  }
+
+  const projectId = createResult.data?.data?.id;
+  const clientId = createResult.data?.data?.client?.id;
+  const clientSecret = createResult.data?.data?.client?.secret;
+
+  if (projectId) {
+    console.log(`  Created project: ${projectId}`);
+    if (clientId) {
+      console.log(`  Created client: ${clientId}`);
+    }
+    if (clientSecret) {
+      console.log(`  Client secret: ${clientSecret}`);
+    }
+  }
+
+  // List projects
+  const listResult = await makeRequest('GET', '/manage/projects');
+  results.push(listResult);
+  console.log(
+    `✓ GET /manage/projects: ${listResult.success ? '✅' : '❌'} ${listResult.status}`
+  );
+  if (listResult.data?.data?.length) {
+    console.log(`  Found ${listResult.data.data.length} projects`);
+  }
+
+  if (projectId) {
+    // Get project
+    const getResult = await makeRequest('GET', `/manage/projects/${projectId}`);
+    results.push(getResult);
+    console.log(
+      `✓ GET /manage/projects/:id: ${getResult.success ? '✅' : '❌'} ${getResult.status}`
+    );
+
+    // Update project
+    const updateResult = await makeRequest(
+      'PATCH',
+      `/manage/projects/${projectId}`,
+      {
+        name: 'Updated Test Project',
+        crossDomain: true,
+      }
+    );
+    results.push(updateResult);
+    console.log(
+      `✓ PATCH /manage/projects/:id: ${updateResult.success ? '✅' : '❌'} ${updateResult.status}`
+    );
+
+    // Delete project (soft delete)
+    const deleteResult = await makeRequest(
+      'DELETE',
+      `/manage/projects/${projectId}`
+    );
+    results.push(deleteResult);
+    console.log(
+      `✓ DELETE /manage/projects/:id: ${deleteResult.success ? '✅' : '❌'} ${deleteResult.status}`
+    );
+  }
+
+  return { projectId, clientId };
+}
+
+async function testClients(projectId?: string) {
+  console.log('\n🔑 Testing Clients endpoints...\n');
+
+  // Create client
+  const createResult = await makeRequest('POST', '/manage/clients', {
+    name: `Test Client ${Date.now()}`,
+    projectId: projectId || undefined,
+    type: 'read',
+  });
+  results.push(createResult);
+  console.log(
+    `✓ POST /manage/clients: ${createResult.success ? '✅' : '❌'} ${createResult.status}`
+  );
+  if (createResult.error) {
+    console.log(`  Error: ${createResult.error}`);
+  }
+
+  const clientId = createResult.data?.data?.id;
+  const clientSecret = createResult.data?.data?.secret;
+
+  if (clientId) {
+    console.log(`  Created client: ${clientId}`);
+    if (clientSecret) {
+      console.log(`  Client secret: ${clientSecret}`);
+    }
+  }
+
+  // List clients
+  const listResult = await makeRequest(
+    'GET',
+    projectId ? `/manage/clients?projectId=${projectId}` : '/manage/clients'
+  );
+  results.push(listResult);
+  console.log(
+    `✓ GET /manage/clients: ${listResult.success ? '✅' : '❌'} ${listResult.status}`
+  );
+  if (listResult.data?.data?.length) {
+    console.log(`  Found ${listResult.data.data.length} clients`);
+  }
+
+  if (clientId) {
+    // Get client
+    const getResult = await makeRequest('GET', `/manage/clients/${clientId}`);
+    results.push(getResult);
+    console.log(
+      `✓ GET /manage/clients/:id: ${getResult.success ? '✅' : '❌'} ${getResult.status}`
+    );
+
+    // Update client
+    const updateResult = await makeRequest(
+      'PATCH',
+      `/manage/clients/${clientId}`,
+      {
+        name: 'Updated Test Client',
+      }
+    );
+    results.push(updateResult);
+    console.log(
+      `✓ PATCH /manage/clients/:id: ${updateResult.success ? '✅' : '❌'} ${updateResult.status}`
+    );
+
+    // Delete client
+    const deleteResult = await makeRequest(
+      'DELETE',
+      `/manage/clients/${clientId}`
+    );
+    results.push(deleteResult);
+    console.log(
+      `✓ DELETE /manage/clients/:id: ${deleteResult.success ? '✅' : '❌'} ${deleteResult.status}`
+    );
+  }
+}
+
+async function testReferences(projectId?: string) {
+  console.log('\n📚 Testing References endpoints...\n');
+
+  if (!projectId) {
+    console.log('  ⚠️  Skipping references tests - no project ID available');
+    return;
+  }
+
+  // Create reference
+  const createResult = await makeRequest('POST', '/manage/references', {
+    projectId,
+    title: `Test Reference ${Date.now()}`,
+    description: 'This is a test reference',
+    datetime: new Date().toISOString(),
+  });
+  results.push(createResult);
+  console.log(
+    `✓ POST /manage/references: ${createResult.success ? '✅' : '❌'} ${createResult.status}`
+  );
+  if (createResult.error) {
+    console.log(`  Error: ${createResult.error}`);
+  }
+
+  const referenceId = createResult.data?.data?.id;
+
+  if (referenceId) {
+    console.log(`  Created reference: ${referenceId}`);
+  }
+
+  // List references
+  const listResult = await makeRequest(
+    'GET',
+    `/manage/references?projectId=${projectId}`
+  );
+  results.push(listResult);
+  console.log(
+    `✓ GET /manage/references: ${listResult.success ? '✅' : '❌'} ${listResult.status}`
+  );
+  if (listResult.data?.data?.length) {
+    console.log(`  Found ${listResult.data.data.length} references`);
+  }
+
+  if (referenceId) {
+    // Get reference
+    const getResult = await makeRequest(
+      'GET',
+      `/manage/references/${referenceId}`
+    );
+    results.push(getResult);
+    console.log(
+      `✓ GET /manage/references/:id: ${getResult.success ? '✅' : '❌'} ${getResult.status}`
+    );
+
+    // Update reference
+    const updateResult = await makeRequest(
+      'PATCH',
+      `/manage/references/${referenceId}`,
+      {
+        title: 'Updated Test Reference',
+        description: 'Updated description',
+        datetime: new Date().toISOString(),
+      }
+    );
+    results.push(updateResult);
+    console.log(
+      `✓ PATCH /manage/references/:id: ${updateResult.success ? '✅' : '❌'} ${updateResult.status}`
+    );
+
+    // Delete reference
+    const deleteResult = await makeRequest(
+      'DELETE',
+      `/manage/references/${referenceId}`
+    );
+    results.push(deleteResult);
+    console.log(
+      `✓ DELETE /manage/references/:id: ${deleteResult.success ? '✅' : '❌'} ${deleteResult.status}`
+    );
+  }
+}
+
+async function main() {
+  console.log('🚀 Testing Manage API Endpoints\n');
+  console.log(`API Base URL: ${API_BASE_URL}`);
+  console.log(`Client ID: ${CLIENT_ID}\n`);
+
+  try {
+    // Test projects first (creates a project we can use for other tests)
+    const { projectId } = await testProjects();
+
+    // Test clients
+    await testClients(projectId);
+
+    // Test references (requires a project)
+    await testReferences(projectId);
+
+    // Summary
+    console.log(`\n${'='.repeat(60)}`);
+    console.log('📊 Test Summary\n');
+    const successful = results.filter((r) => r.success).length;
+    const failed = results.filter((r) => !r.success).length;
+
+    console.log(`Total tests: ${results.length}`);
+    console.log(`✅ Successful: ${successful}`);
+    console.log(`❌ Failed: ${failed}\n`);
+
+    if (failed > 0) {
+      console.log('Failed tests:');
+      results
+        .filter((r) => !r.success)
+        .forEach((r) => {
+          console.log(`  ❌ ${r.name} (${r.status})`);
+          if (r.error) {
+            console.log(`     Error: ${r.error}`);
+          }
+        });
+    }
+  } catch (error) {
+    console.error('Fatal error:', error);
+    process.exit(1);
+  }
+}
+
+main().catch(console.error);

apps/api/scripts/test.ts

@@ -1,11 +1,10 @@
-import { type IClickhouseEvent, ch, createEvent } from '@openpanel/db';
-import { formatClickhouseDate } from '@openpanel/db';
+import { ch, formatClickhouseDate, type IClickhouseEvent } from '@openpanel/db';
 import { v4 as uuid } from 'uuid';
 
 async function main() {
   const startDate = new Date('2025-01-01T00:00:00Z');
   const endDate = new Date();
-  const eventsPerDay = 25000;
+  const eventsPerDay = 25_000;
   const variance = 3000;
 
   // Event names to randomly choose from
@@ -36,7 +35,7 @@ async function main() {
         device_id: `device_${Math.floor(Math.random() * 1000)}`,
         profile_id: `profile_${Math.floor(Math.random() * 1000)}`,
         project_id: 'testing',
-        session_id: `session_${Math.floor(Math.random() * 10000)}`,
+        session_id: `session_${Math.floor(Math.random() * 10_000)}`,
         properties: {
           hash: 'test-hash',
           'query.utm_source': 'test',
@@ -63,6 +62,7 @@ async function main() {
         imported_at: null,
         sdk_name: 'test-script',
         sdk_version: '1.0.0',
+        groups: [],
       });
     }
 
@@ -74,7 +74,7 @@ async function main() {
 
     // Log progress
     console.log(
-      `Created ${dailyEvents} events for ${currentDate.toISOString().split('T')[0]}`,
+      `Created ${dailyEvents} events for ${currentDate.toISOString().split('T')[0]}`
     );
   }
 }

apps/api/src/bots/index.ts

@@ -1,4 +1,4 @@
-import { cacheable, cacheableLru } from '@openpanel/redis';
+import { cacheable } from '@openpanel/redis';
 import bots from './bots';
 
 // Pre-compile regex patterns at module load time
@@ -15,7 +15,7 @@ const compiledBots = bots.map((bot) => {
 const regexBots = compiledBots.filter((bot) => 'compiledRegex' in bot);
 const includesBots = compiledBots.filter((bot) => 'includes' in bot);
 
-export const isBot = cacheableLru(
+export const isBot = cacheable(
   'is-bot',
   (ua: string) => {
     // Check simple string patterns first (fast)
@@ -40,8 +40,5 @@ export const isBot = cacheableLru(
 
     return null;
   },
-  {
-    maxSize: 1000,
-    ttl: 60 * 5,
-  },
+  60 * 5
 );

apps/api/src/controllers/ai.controller.ts

@@ -1,3 +1,7 @@
+import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
+import { getProjectAccess } from '@openpanel/trpc/src/access';
+import { appendResponseMessages, type Message, streamText } from 'ai';
+import type { FastifyReply, FastifyRequest } from 'fastify';
 import { getChatModel, getChatSystemPrompt } from '@/utils/ai';
 import {
   getAllEventNames,
@@ -8,10 +12,6 @@ import {
   getReport,
 } from '@/utils/ai-tools';
 import { HttpError } from '@/utils/errors';
-import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
-import { getProjectAccess } from '@openpanel/trpc/src/access';
-import { type Message, appendResponseMessages, streamText } from 'ai';
-import type { FastifyReply, FastifyRequest } from 'fastify';
 
 export async function chat(
   request: FastifyRequest<{
@@ -22,7 +22,7 @@ export async function chat(
       messages: Message[];
     };
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const { session } = request.session;
   const { messages } = request.body;
@@ -117,7 +117,7 @@ export async function chat(
           },
         });
       },
-      onError: async (error) => {
+      onError: (error) => {
         request.log.error('chat error', { error });
       },
     });

apps/api/src/controllers/error.html

@@ -1,18 +1,20 @@
 <!DOCTYPE html>
 <html lang="en">
-
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>Error - OpenPanel</title>
-  <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap" rel="stylesheet">
-  <style>
+  <head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+    <title>Error - OpenPanel</title>
+    <link
+      href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600&display=swap"
+      rel="stylesheet"
+    >
+    <style>
     * {
       box-sizing: border-box;
     }
 
     body {
-      font-family: 'Inter', sans-serif;
+      font-family: "Inter", sans-serif;
       display: flex;
       justify-content: center;
       align-items: center;
@@ -47,16 +49,21 @@
       font-size: 1rem;
       line-height: 1.5;
     }
-  </style>
-</head>
+    </style>
+  </head>
 
-<body>
-  <div class="error-container">
-    <img src="https://openpanel.dev/logo.svg" alt="OpenPanel Logo" class="logo">
-    <h1>Oops! Something went wrong</h1>
-    <p>We encountered an error while processing your request. Please try again later or contact support if the problem
-      persists.</p>
-  </div>
-</body>
-
-</html>
+  <body>
+    <div class="error-container">
+      <img
+        src="https://openpanel.dev/logo.svg"
+        alt="OpenPanel Logo"
+        class="logo"
+      >
+      <h1>Oops! Something went wrong</h1>
+      <p>
+        We encountered an error while processing your request. Please try again
+        later or contact support if the problem persists.
+      </p>
+    </div>
+  </body>
+</html>

apps/api/src/controllers/event.controller.ts

@@ -1,26 +1,25 @@
-import type { FastifyReply, FastifyRequest } from 'fastify';
-
-import { generateDeviceId, parseUserAgent } from '@openpanel/common/server';
-import { getSalts } from '@openpanel/db';
-import { getEventsGroupQueueShard } from '@openpanel/queue';
-import type { PostEventPayload } from '@openpanel/sdk';
-
 import { generateId, slug } from '@openpanel/common';
+import { parseUserAgent } from '@openpanel/common/server';
+import { getSalts } from '@openpanel/db';
 import { getGeoLocation } from '@openpanel/geo';
+import { getEventsGroupQueueShard } from '@openpanel/queue';
+import type { DeprecatedPostEventPayload } from '@openpanel/validation';
+import type { FastifyReply, FastifyRequest } from 'fastify';
 import { getStringHeaders, getTimestamp } from './track.controller';
+import { getDeviceId } from '@/utils/ids';
 
 export async function postEvent(
   request: FastifyRequest<{
-    Body: PostEventPayload;
+    Body: DeprecatedPostEventPayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const { timestamp, isTimestampFromThePast } = getTimestamp(
     request.timestamp,
-    request.body,
+    request.body
   );
   const ip = request.clientIp;
-  const ua = request.headers['user-agent'];
+  const ua = request.headers['user-agent'] ?? 'unknown/1.0';
   const projectId = request.client?.projectId;
   const headers = getStringHeaders(request.headers);
 
@@ -30,34 +29,22 @@ export async function postEvent(
   }
 
   const [salts, geo] = await Promise.all([getSalts(), getGeoLocation(ip)]);
-  const currentDeviceId = ua
-    ? generateDeviceId({
-        salt: salts.current,
-        origin: projectId,
-        ip,
-        ua,
-      })
-    : '';
-  const previousDeviceId = ua
-    ? generateDeviceId({
-        salt: salts.previous,
-        origin: projectId,
-        ip,
-        ua,
-      })
-    : '';
+  const { deviceId, sessionId } = await getDeviceId({
+    projectId,
+    ip,
+    ua,
+    salts,
+  });
 
   const uaInfo = parseUserAgent(ua, request.body?.properties);
   const groupId = uaInfo.isServer
-    ? request.body?.profileId
-      ? `${projectId}:${request.body?.profileId}`
-      : `${projectId}:${generateId()}`
-    : currentDeviceId;
+    ? `${projectId}:${request.body?.profileId ?? generateId()}`
+    : deviceId;
   const jobId = [
     slug(request.body.name),
     timestamp,
     projectId,
-    currentDeviceId,
+    deviceId,
     groupId,
   ]
     .filter(Boolean)
@@ -74,8 +61,8 @@ export async function postEvent(
       },
       uaInfo,
       geo,
-      currentDeviceId,
-      previousDeviceId,
+      deviceId,
+      sessionId: sessionId ?? '',
     },
     groupId,
     jobId,

apps/api/src/controllers/export.controller.ts

@@ -1,20 +1,18 @@
-import { parseQueryString } from '@/utils/parse-zod-query-string';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { z } from 'zod';
-
-import { HttpError } from '@/utils/errors';
 import { DateTime } from '@openpanel/common';
 import type { GetEventListOptions } from '@openpanel/db';
 import {
+  ChartEngine,
   ClientType,
   db,
   getEventList,
-  getEventsCountCached,
+  getEventsCount,
   getSettingsForProject,
 } from '@openpanel/db';
-import { ChartEngine } from '@openpanel/db';
-import { zChartEvent, zChartInputBase } from '@openpanel/validation';
-import { omit } from 'ramda';
+import { zChartEvent, zReport } from '@openpanel/validation';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import { HttpError } from '@/utils/errors';
+import { parseQueryString } from '@/utils/parse-zod-query-string';
 
 async function getProjectId(
   request: FastifyRequest<{
@@ -22,8 +20,7 @@ async function getProjectId(
       project_id?: string;
       projectId?: string;
     };
-  }>,
-  reply: FastifyReply,
+  }>
 ) {
   let projectId = request.query.projectId || request.query.project_id;
 
@@ -74,10 +71,22 @@ const eventsScheme = z.object({
   page: z.coerce.number().optional().default(1),
   limit: z.coerce.number().optional().default(50),
   includes: z
-    .preprocess(
-      (arg) => (typeof arg === 'string' ? [arg] : arg),
-      z.array(z.string()),
-    )
+    .preprocess((arg) => {
+      if (arg == null) {
+        return undefined;
+      }
+      if (Array.isArray(arg)) {
+        return arg;
+      }
+      if (typeof arg === 'string') {
+        const parts = arg
+          .split(',')
+          .map((s) => s.trim())
+          .filter(Boolean);
+        return parts;
+      }
+      return arg;
+    }, z.array(z.string()))
     .optional(),
 });
 
@@ -85,7 +94,7 @@ export async function events(
   request: FastifyRequest<{
     Querystring: z.infer<typeof eventsScheme>;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const query = eventsScheme.safeParse(request.query);
 
@@ -97,7 +106,7 @@ export async function events(
     });
   }
 
-  const projectId = await getProjectId(request, reply);
+  const projectId = await getProjectId(request);
   const limit = query.data.limit;
   const page = Math.max(query.data.page, 1);
   const take = Math.max(Math.min(limit, 1000), 1);
@@ -118,20 +127,20 @@ export async function events(
       meta: false,
       ...query.data.includes?.reduce(
         (acc, key) => ({ ...acc, [key]: true }),
-        {},
+        {}
       ),
     },
   };
 
   const [data, totalCount] = await Promise.all([
     getEventList(options),
-    getEventsCountCached(omit(['cursor', 'take'], options)),
+    getEventsCount(options),
   ]);
 
   reply.send({
     meta: {
       count: data.length,
-      totalCount: totalCount,
+      totalCount,
       pages: Math.ceil(totalCount / options.take),
       current: cursor + 1,
     },
@@ -139,7 +148,7 @@ export async function events(
   });
 }
 
-const chartSchemeFull = zChartInputBase
+const chartSchemeFull = zReport
   .pick({
     breakdowns: true,
     interval: true,
@@ -158,7 +167,7 @@ const chartSchemeFull = zChartInputBase
           filters: zChartEvent.shape.filters.optional(),
           segment: zChartEvent.shape.segment.optional(),
           property: zChartEvent.shape.property.optional(),
-        }),
+        })
       )
       .optional(),
     // Backward compatibility - events will be migrated to series via preprocessing
@@ -169,7 +178,7 @@ const chartSchemeFull = zChartInputBase
           filters: zChartEvent.shape.filters.optional(),
           segment: zChartEvent.shape.segment.optional(),
           property: zChartEvent.shape.property.optional(),
-        }),
+        })
       )
       .optional(),
   });
@@ -178,7 +187,7 @@ export async function charts(
   request: FastifyRequest<{
     Querystring: Record<string, string>;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const query = chartSchemeFull.safeParse(parseQueryString(request.query));
 
@@ -190,7 +199,7 @@ export async function charts(
     });
   }
 
-  const projectId = await getProjectId(request, reply);
+  const projectId = await getProjectId(request);
   const { timezone } = await getSettingsForProject(projectId);
   const { events, series, ...rest } = query.data;
 

apps/api/src/controllers/gsc-oauth-callback.controller.ts

@@ -0,0 +1,167 @@
+import { googleGsc } from '@openpanel/auth';
+import { db, encrypt } from '@openpanel/db';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import { LogError } from '@/utils/errors';
+
+const OAUTH_SENSITIVE_KEYS = ['code', 'state'];
+
+function sanitizeOAuthQuery(
+  query: Record<string, unknown> | null | undefined
+): Record<string, string> {
+  if (!query || typeof query !== 'object') {
+    return {};
+  }
+  return Object.fromEntries(
+    Object.entries(query).map(([k, v]) => [
+      k,
+      OAUTH_SENSITIVE_KEYS.includes(k) ? '<redacted>' : String(v),
+    ])
+  );
+}
+
+export async function gscGoogleCallback(
+  req: FastifyRequest,
+  reply: FastifyReply
+) {
+  try {
+    const schema = z.object({
+      code: z.string(),
+      state: z.string(),
+    });
+
+    const query = schema.safeParse(req.query);
+    if (!query.success) {
+      throw new LogError(
+        'Invalid GSC callback query params',
+        sanitizeOAuthQuery(req.query as Record<string, unknown>)
+      );
+    }
+
+    const { code, state } = query.data;
+
+    const rawStoredState = req.cookies.gsc_oauth_state ?? null;
+    const rawCodeVerifier = req.cookies.gsc_code_verifier ?? null;
+    const rawProjectId = req.cookies.gsc_project_id ?? null;
+
+    const storedStateResult =
+      rawStoredState !== null ? req.unsignCookie(rawStoredState) : null;
+    const codeVerifierResult =
+      rawCodeVerifier !== null ? req.unsignCookie(rawCodeVerifier) : null;
+    const projectIdResult =
+      rawProjectId !== null ? req.unsignCookie(rawProjectId) : null;
+
+    if (
+      !(
+        storedStateResult?.value &&
+        codeVerifierResult?.value &&
+        projectIdResult?.value
+      )
+    ) {
+      throw new LogError('Missing GSC OAuth cookies', {
+        storedState: !storedStateResult?.value,
+        codeVerifier: !codeVerifierResult?.value,
+        projectId: !projectIdResult?.value,
+      });
+    }
+
+    if (
+      !(
+        storedStateResult?.valid &&
+        codeVerifierResult?.valid &&
+        projectIdResult?.valid
+      )
+    ) {
+      throw new LogError('Invalid GSC OAuth cookies', {
+        storedState: !storedStateResult?.value,
+        codeVerifier: !codeVerifierResult?.value,
+        projectId: !projectIdResult?.value,
+      });
+    }
+
+    const stateStr = storedStateResult?.value;
+    const codeVerifierStr = codeVerifierResult?.value;
+    const projectIdStr = projectIdResult?.value;
+
+    if (state !== stateStr) {
+      throw new LogError('GSC OAuth state mismatch', {
+        hasState: true,
+        hasStoredState: true,
+        stateMismatch: true,
+      });
+    }
+
+    const tokens = await googleGsc.validateAuthorizationCode(
+      code,
+      codeVerifierStr
+    );
+
+    const accessToken = tokens.accessToken();
+    const refreshToken = tokens.hasRefreshToken()
+      ? tokens.refreshToken()
+      : null;
+    const accessTokenExpiresAt = tokens.accessTokenExpiresAt();
+
+    if (!refreshToken) {
+      throw new LogError('No refresh token returned from Google GSC OAuth');
+    }
+
+    const project = await db.project.findUnique({
+      where: { id: projectIdStr },
+      select: { id: true, organizationId: true },
+    });
+
+    if (!project) {
+      throw new LogError('Project not found for GSC connection', {
+        projectId: projectIdStr,
+      });
+    }
+
+    await db.gscConnection.upsert({
+      where: { projectId: projectIdStr },
+      create: {
+        projectId: projectIdStr,
+        accessToken: encrypt(accessToken),
+        refreshToken: encrypt(refreshToken),
+        accessTokenExpiresAt,
+        siteUrl: '',
+      },
+      update: {
+        accessToken: encrypt(accessToken),
+        refreshToken: encrypt(refreshToken),
+        accessTokenExpiresAt,
+        lastSyncStatus: null,
+        lastSyncError: null,
+      },
+    });
+
+    reply.clearCookie('gsc_oauth_state');
+    reply.clearCookie('gsc_code_verifier');
+    reply.clearCookie('gsc_project_id');
+
+    const dashboardUrl =
+      process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!;
+    const redirectUrl = `${dashboardUrl}/${project.organizationId}/${projectIdStr}/settings/gsc`;
+    return reply.redirect(redirectUrl);
+  } catch (error) {
+    req.log.error(error);
+    reply.clearCookie('gsc_oauth_state');
+    reply.clearCookie('gsc_code_verifier');
+    reply.clearCookie('gsc_project_id');
+    return redirectWithError(reply, error);
+  }
+}
+
+function redirectWithError(reply: FastifyReply, error: LogError | unknown) {
+  const url = new URL(
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
+  );
+  url.pathname = '/login';
+  if (error instanceof LogError) {
+    url.searchParams.set('error', error.message);
+  } else {
+    url.searchParams.set('error', 'Failed to connect Google Search Console');
+  }
+  url.searchParams.set('correlationId', reply.request.id);
+  return reply.redirect(url.toString());
+}

apps/api/src/controllers/healthcheck.controller.ts

@@ -1,12 +1,12 @@
-import { isShuttingDown } from '@/utils/graceful-shutdown';
 import { chQuery, db } from '@openpanel/db';
 import { getRedisCache } from '@openpanel/redis';
 import type { FastifyReply, FastifyRequest } from 'fastify';
+import { isShuttingDown } from '@/utils/graceful-shutdown';
 
 // For docker compose healthcheck
 export async function healthcheck(
   request: FastifyRequest,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   try {
     const redisRes = await getRedisCache().ping();
@@ -21,6 +21,7 @@ export async function healthcheck(
       ch: chRes && chRes.length > 0,
     });
   } catch (error) {
+    request.log.warn('healthcheck failed', { error });
     return reply.status(503).send({
       ready: false,
       reason: 'dependencies not ready',
@@ -41,18 +42,22 @@ export async function readiness(request: FastifyRequest, reply: FastifyReply) {
 
   // Perform lightweight dependency checks for readiness
   const redisRes = await getRedisCache().ping();
-  const dbRes = await db.project.findFirst();
+  const dbRes = await db.$executeRaw`SELECT 1`;
   const chRes = await chQuery('SELECT 1');
 
-  const isReady = redisRes && dbRes && chRes;
+  const isReady = redisRes;
 
   if (!isReady) {
-    return reply.status(503).send({
-      ready: false,
-      reason: 'dependencies not ready',
+    const res = {
       redis: redisRes === 'PONG',
       db: !!dbRes,
       ch: chRes && chRes.length > 0,
+    };
+    request.log.warn('dependencies not ready', res);
+    return reply.status(503).send({
+      ready: false,
+      reason: 'dependencies not ready',
+      ...res,
     });
   }
 

apps/api/src/controllers/import.controller.ts

@@ -1,14 +1,13 @@
-import type { FastifyReply, FastifyRequest } from 'fastify';
-
 import { toDots } from '@openpanel/common';
 import type { IClickhouseEvent } from '@openpanel/db';
-import { TABLE_NAMES, ch, formatClickhouseDate } from '@openpanel/db';
+import { ch, formatClickhouseDate, TABLE_NAMES } from '@openpanel/db';
+import type { FastifyReply, FastifyRequest } from 'fastify';
 
 export async function importEvents(
   request: FastifyRequest<{
     Body: IClickhouseEvent[];
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const projectId = request.client?.projectId;
   if (!projectId) {

apps/api/src/controllers/insights.controller.ts

@@ -1,4 +1,3 @@
-import { parseQueryString } from '@/utils/parse-zod-query-string';
 import { getDefaultIntervalByDates } from '@openpanel/constants';
 import {
   eventBuffer,
@@ -9,6 +8,7 @@ import {
 import { zChartEventFilter, zRange } from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { z } from 'zod';
+import { parseQueryString } from '@/utils/parse-zod-query-string';
 
 const zGetMetricsQuery = z.object({
   startDate: z.string().nullish(),
@@ -22,7 +22,7 @@ export async function getMetrics(
     Params: { projectId: string };
     Querystring: z.infer<typeof zGetMetricsQuery>;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const { timezone } = await getSettingsForProject(request.params.projectId);
   const parsed = zGetMetricsQuery.safeParse(parseQueryString(request.query));
@@ -41,11 +41,11 @@ export async function getMetrics(
     await overviewService.getMetrics({
       projectId: request.params.projectId,
       filters: parsed.data.filters,
-      startDate: startDate,
-      endDate: endDate,
+      startDate,
+      endDate,
       interval: getDefaultIntervalByDates(startDate, endDate) ?? 'day',
       timezone,
-    }),
+    })
   );
 }
 
@@ -54,7 +54,7 @@ export async function getLiveVisitors(
   request: FastifyRequest<{
     Params: { projectId: string };
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   reply.send({
     visitors: await eventBuffer.getActiveVisitorCount(request.params.projectId),
@@ -76,7 +76,7 @@ export async function getPages(
     Params: { projectId: string };
     Querystring: z.infer<typeof zGetTopPagesQuery>;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const { timezone } = await getSettingsForProject(request.params.projectId);
   const { startDate, endDate } = getChartStartEndDate(request.query, timezone);
@@ -93,11 +93,9 @@ export async function getPages(
   return overviewService.getTopPages({
     projectId: request.params.projectId,
     filters: parsed.data.filters,
-    startDate: startDate,
-    endDate: endDate,
+    startDate,
+    endDate,
     timezone,
-    cursor: parsed.data.cursor,
-    limit: Math.min(parsed.data.limit, 50),
   });
 }
 
@@ -134,19 +132,19 @@ const zGetOverviewGenericQuery = z.object({
 });
 
 export function getOverviewGeneric(
-  column: z.infer<typeof zGetOverviewGenericQuery>['column'],
+  column: z.infer<typeof zGetOverviewGenericQuery>['column']
 ) {
   return async (
     request: FastifyRequest<{
       Params: { projectId: string; key: string };
       Querystring: z.infer<typeof zGetOverviewGenericQuery>;
     }>,
-    reply: FastifyReply,
+    reply: FastifyReply
   ) => {
     const { timezone } = await getSettingsForProject(request.params.projectId);
     const { startDate, endDate } = getChartStartEndDate(
       request.query,
-      timezone,
+      timezone
     );
     const parsed = zGetOverviewGenericQuery.safeParse({
       ...parseQueryString(request.query),
@@ -167,12 +165,10 @@ export function getOverviewGeneric(
         column,
         projectId: request.params.projectId,
         filters: parsed.data.filters,
-        startDate: startDate,
-        endDate: endDate,
+        startDate,
+        endDate,
         timezone,
-        cursor: parsed.data.cursor,
-        limit: Math.min(parsed.data.limit, 50),
-      }),
+      })
     );
   };
 }

apps/api/src/controllers/live.controller.ts

@@ -1,23 +1,10 @@
-import type { FastifyRequest } from 'fastify';
-import superjson from 'superjson';
-
 import type { WebSocket } from '@fastify/websocket';
-import {
-  eventBuffer,
-  getProfileById,
-  transformMinimalEvent,
-} from '@openpanel/db';
+import { eventBuffer } from '@openpanel/db';
 import { setSuperJson } from '@openpanel/json';
-import {
-  psubscribeToPublishedEvent,
-  subscribeToPublishedEvent,
-} from '@openpanel/redis';
+import { subscribeToPublishedEvent } from '@openpanel/redis';
 import { getProjectAccess } from '@openpanel/trpc';
 import { getOrganizationAccess } from '@openpanel/trpc/src/access';
-
-export function getLiveEventInfo(key: string) {
-  return key.split(':').slice(2) as [string, string];
-}
+import type { FastifyRequest } from 'fastify';
 
 export function wsVisitors(
   socket: WebSocket,
@@ -25,32 +12,32 @@ export function wsVisitors(
     Params: {
       projectId: string;
     };
-  }>,
+  }>
 ) {
   const { params } = req;
-  const unsubscribe = subscribeToPublishedEvent('events', 'saved', (event) => {
-    if (event?.projectId === params.projectId) {
-      eventBuffer.getActiveVisitorCount(params.projectId).then((count) => {
+  const sendCount = () => {
+    eventBuffer
+      .getActiveVisitorCount(params.projectId)
+      .then((count) => {
         socket.send(String(count));
+      })
+      .catch(() => {
+        socket.send('0');
       });
-    }
-  });
+  };
 
-  const punsubscribe = psubscribeToPublishedEvent(
-    '__keyevent@0__:expired',
-    (key) => {
-      const [projectId] = getLiveEventInfo(key);
-      if (projectId && projectId === params.projectId) {
-        eventBuffer.getActiveVisitorCount(params.projectId).then((count) => {
-          socket.send(String(count));
-        });
+  const unsubscribe = subscribeToPublishedEvent(
+    'events',
+    'batch',
+    ({ projectId }) => {
+      if (projectId === params.projectId) {
+        sendCount();
       }
-    },
+    }
   );
 
   socket.on('close', () => {
     unsubscribe();
-    punsubscribe();
   });
 }
 
@@ -62,18 +49,10 @@ export async function wsProjectEvents(
     };
     Querystring: {
       token?: string;
-      type?: 'saved' | 'received';
     };
-  }>,
+  }>
 ) {
-  const { params, query } = req;
-  const type = query.type || 'saved';
-
-  if (!['saved', 'received'].includes(type)) {
-    socket.send('Invalid type');
-    socket.close();
-    return;
-  }
+  const { params } = req;
 
   const userId = req.session?.userId;
   if (!userId) {
@@ -87,24 +66,20 @@ export async function wsProjectEvents(
     projectId: params.projectId,
   });
 
+  if (!access) {
+    socket.send('No access');
+    socket.close();
+    return;
+  }
+
   const unsubscribe = subscribeToPublishedEvent(
     'events',
-    type,
-    async (event) => {
-      if (event.projectId === params.projectId) {
-        const profile = await getProfileById(event.profileId, event.projectId);
-        socket.send(
-          superjson.stringify(
-            access
-              ? {
-                  ...event,
-                  profile,
-                }
-              : transformMinimalEvent(event),
-          ),
-        );
+    'batch',
+    ({ projectId, count }) => {
+      if (projectId === params.projectId) {
+        socket.send(setSuperJson({ count }));
       }
-    },
+    }
   );
 
   socket.on('close', () => unsubscribe());
@@ -116,7 +91,7 @@ export async function wsProjectNotifications(
     Params: {
       projectId: string;
     };
-  }>,
+  }>
 ) {
   const { params } = req;
   const userId = req.session?.userId;
@@ -143,9 +118,9 @@ export async function wsProjectNotifications(
     'created',
     (notification) => {
       if (notification.projectId === params.projectId) {
-        socket.send(superjson.stringify(notification));
+        socket.send(setSuperJson(notification));
       }
-    },
+    }
   );
 
   socket.on('close', () => unsubscribe());
@@ -157,7 +132,7 @@ export async function wsOrganizationEvents(
     Params: {
       organizationId: string;
     };
-  }>,
+  }>
 ) {
   const { params } = req;
   const userId = req.session?.userId;
@@ -184,7 +159,7 @@ export async function wsOrganizationEvents(
     'subscription_updated',
     (message) => {
       socket.send(setSuperJson(message));
-    },
+    }
   );
 
   socket.on('close', () => unsubscribe());

apps/api/src/controllers/logs.controller.ts

@@ -0,0 +1,68 @@
+import { parseUserAgent } from '@openpanel/common/server';
+import { getSalts } from '@openpanel/db';
+import { getGeoLocation } from '@openpanel/geo';
+import { type LogsQueuePayload, logsQueue } from '@openpanel/queue';
+import { type ILogBatchPayload, zLogBatchPayload } from '@openpanel/validation';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { getDeviceId } from '@/utils/ids';
+import { getStringHeaders } from './track.controller';
+
+export async function handler(
+  request: FastifyRequest<{ Body: ILogBatchPayload }>,
+  reply: FastifyReply,
+) {
+  const projectId = request.client?.projectId;
+  if (!projectId) {
+    return reply.status(400).send({ status: 400, error: 'Missing projectId' });
+  }
+
+  const validationResult = zLogBatchPayload.safeParse(request.body);
+  if (!validationResult.success) {
+    return reply.status(400).send({
+      status: 400,
+      error: 'Bad Request',
+      message: 'Validation failed',
+      errors: validationResult.error.errors,
+    });
+  }
+
+  const { logs } = validationResult.data;
+
+  const ip = request.clientIp;
+  const ua = request.headers['user-agent'] ?? 'unknown/1.0';
+  const headers = getStringHeaders(request.headers);
+  const receivedAt = new Date().toISOString();
+
+  const [geo, salts] = await Promise.all([getGeoLocation(ip), getSalts()]);
+  const { deviceId, sessionId } = await getDeviceId({ projectId, ip, ua, salts });
+  const uaInfo = parseUserAgent(ua, undefined);
+
+  const jobs: LogsQueuePayload[] = logs.map((log) => ({
+    type: 'incomingLog' as const,
+    payload: {
+      projectId,
+      log: {
+        ...log,
+        timestamp: log.timestamp ?? receivedAt,
+      },
+      uaInfo,
+      geo: {
+        country: geo.country,
+        city: geo.city,
+        region: geo.region,
+      },
+      headers,
+      deviceId,
+      sessionId,
+    },
+  }));
+
+  await logsQueue.addBulk(
+    jobs.map((job) => ({
+      name: 'incomingLog',
+      data: job,
+    })),
+  );
+
+  return reply.status(200).send({ ok: true, count: logs.length });
+}

apps/api/src/controllers/manage.controller.ts

@@ -0,0 +1,643 @@
+import crypto from 'node:crypto';
+import { stripTrailingSlash } from '@openpanel/common';
+import { hashPassword } from '@openpanel/common/server';
+import {
+  db,
+  getClientByIdCached,
+  getId,
+  getProjectByIdCached,
+} from '@openpanel/db';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { z } from 'zod';
+import { HttpError } from '@/utils/errors';
+
+// Validation schemas
+const zCreateProject = z.object({
+  name: z.string().min(1),
+  domain: z.string().url().or(z.literal('')).or(z.null()).optional(),
+  cors: z.array(z.string()).default([]),
+  crossDomain: z.boolean().optional().default(false),
+  types: z
+    .array(z.enum(['website', 'app', 'backend']))
+    .optional()
+    .default([]),
+});
+
+const zUpdateProject = z.object({
+  name: z.string().min(1).optional(),
+  domain: z.string().url().or(z.literal('')).or(z.null()).optional(),
+  cors: z.array(z.string()).optional(),
+  crossDomain: z.boolean().optional(),
+  allowUnsafeRevenueTracking: z.boolean().optional(),
+});
+
+const zCreateClient = z.object({
+  name: z.string().min(1),
+  projectId: z.string().optional(),
+  type: z.enum(['read', 'write', 'root']).optional().default('write'),
+});
+
+const zUpdateClient = z.object({
+  name: z.string().min(1).optional(),
+});
+
+const zCreateReference = z.object({
+  projectId: z.string(),
+  title: z.string().min(1),
+  description: z.string().optional(),
+  datetime: z.string(),
+});
+
+const zUpdateReference = z.object({
+  title: z.string().min(1).optional(),
+  description: z.string().optional(),
+  datetime: z.string().optional(),
+});
+
+// Projects CRUD
+export async function listProjects(
+  request: FastifyRequest,
+  reply: FastifyReply
+) {
+  const projects = await db.project.findMany({
+    where: {
+      organizationId: request.client!.organizationId,
+      deleteAt: null,
+    },
+    orderBy: {
+      createdAt: 'desc',
+    },
+  });
+
+  reply.send({ data: projects });
+}
+
+export async function getProject(
+  request: FastifyRequest<{ Params: { id: string } }>,
+  reply: FastifyReply
+) {
+  const project = await db.project.findFirst({
+    where: {
+      id: request.params.id,
+      organizationId: request.client!.organizationId,
+    },
+  });
+
+  if (!project) {
+    throw new HttpError('Project not found', { status: 404 });
+  }
+
+  reply.send({ data: project });
+}
+
+export async function createProject(
+  request: FastifyRequest<{ Body: z.infer<typeof zCreateProject> }>,
+  reply: FastifyReply
+) {
+  const parsed = zCreateProject.safeParse(request.body);
+
+  if (parsed.success === false) {
+    return reply.status(400).send({
+      error: 'Bad Request',
+      message: 'Invalid request body',
+      details: parsed.error.errors,
+    });
+  }
+
+  const { name, domain, cors, crossDomain, types } = parsed.data;
+
+  // Generate a default client secret
+  const secret = `sec_${crypto.randomBytes(10).toString('hex')}`;
+  const clientData = {
+    organizationId: request.client!.organizationId,
+    name: 'First client',
+    type: 'write' as const,
+    secret: await hashPassword(secret),
+  };
+
+  const project = await db.project.create({
+    data: {
+      id: await getId('project', name),
+      organizationId: request.client!.organizationId,
+      name,
+      domain: domain ? stripTrailingSlash(domain) : null,
+      cors: cors.map((c) => stripTrailingSlash(c)),
+      crossDomain: crossDomain ?? false,
+      allowUnsafeRevenueTracking: false,
+      filters: [],
+      types,
+      clients: {
+        create: clientData,
+      },
+    },
+    include: {
+      clients: {
+        select: {
+          id: true,
+        },
+      },
+    },
+  });
+
+  await Promise.all([
+    getProjectByIdCached.clear(project.id),
+    ...project.clients.map((client) => getClientByIdCached.clear(client.id)),
+  ]);
+
+  reply.send({
+    data: {
+      ...project,
+      client: project.clients[0]
+        ? {
+            id: project.clients[0].id,
+            secret,
+          }
+        : null,
+    },
+  });
+}
+
+export async function updateProject(
+  request: FastifyRequest<{
+    Params: { id: string };
+    Body: z.infer<typeof zUpdateProject>;
+  }>,
+  reply: FastifyReply
+) {
+  const parsed = zUpdateProject.safeParse(request.body);
+
+  if (parsed.success === false) {
+    return reply.status(400).send({
+      error: 'Bad Request',
+      message: 'Invalid request body',
+      details: parsed.error.errors,
+    });
+  }
+
+  // Verify project exists and belongs to organization
+  const existing = await db.project.findFirst({
+    where: {
+      id: request.params.id,
+      organizationId: request.client!.organizationId,
+    },
+    include: {
+      clients: {
+        select: {
+          id: true,
+        },
+      },
+    },
+  });
+
+  if (!existing) {
+    throw new HttpError('Project not found', { status: 404 });
+  }
+
+  const updateData: any = {};
+  if (parsed.data.name !== undefined) {
+    updateData.name = parsed.data.name;
+  }
+  if (parsed.data.domain !== undefined) {
+    updateData.domain = parsed.data.domain
+      ? stripTrailingSlash(parsed.data.domain)
+      : null;
+  }
+  if (parsed.data.cors !== undefined) {
+    updateData.cors = parsed.data.cors.map((c) => stripTrailingSlash(c));
+  }
+  if (parsed.data.crossDomain !== undefined) {
+    updateData.crossDomain = parsed.data.crossDomain;
+  }
+  if (parsed.data.allowUnsafeRevenueTracking !== undefined) {
+    updateData.allowUnsafeRevenueTracking =
+      parsed.data.allowUnsafeRevenueTracking;
+  }
+
+  const project = await db.project.update({
+    where: {
+      id: request.params.id,
+    },
+    data: updateData,
+  });
+
+  await Promise.all([
+    getProjectByIdCached.clear(project.id),
+    ...existing.clients.map((client) => getClientByIdCached.clear(client.id)),
+  ]);
+
+  reply.send({ data: project });
+}
+
+export async function deleteProject(
+  request: FastifyRequest<{ Params: { id: string } }>,
+  reply: FastifyReply
+) {
+  const project = await db.project.findFirst({
+    where: {
+      id: request.params.id,
+      organizationId: request.client!.organizationId,
+    },
+  });
+
+  if (!project) {
+    throw new HttpError('Project not found', { status: 404 });
+  }
+
+  await db.project.update({
+    where: {
+      id: request.params.id,
+    },
+    data: {
+      deleteAt: new Date(Date.now() + 24 * 60 * 60 * 1000),
+    },
+  });
+
+  await getProjectByIdCached.clear(request.params.id);
+
+  reply.send({ success: true });
+}
+
+// Clients CRUD
+export async function listClients(
+  request: FastifyRequest<{ Querystring: { projectId?: string } }>,
+  reply: FastifyReply
+) {
+  const where: any = {
+    organizationId: request.client!.organizationId,
+  };
+
+  if (request.query.projectId) {
+    // Verify project belongs to organization
+    const project = await db.project.findFirst({
+      where: {
+        id: request.query.projectId,
+        organizationId: request.client!.organizationId,
+      },
+    });
+
+    if (!project) {
+      throw new HttpError('Project not found', { status: 404 });
+    }
+
+    where.projectId = request.query.projectId;
+  }
+
+  const clients = await db.client.findMany({
+    where,
+    orderBy: {
+      createdAt: 'desc',
+    },
+  });
+
+  reply.send({ data: clients });
+}
+
+export async function getClient(
+  request: FastifyRequest<{ Params: { id: string } }>,
+  reply: FastifyReply
+) {
+  const client = await db.client.findFirst({
+    where: {
+      id: request.params.id,
+      organizationId: request.client!.organizationId,
+    },
+  });
+
+  if (!client) {
+    throw new HttpError('Client not found', { status: 404 });
+  }
+
+  reply.send({ data: client });
+}
+
+export async function createClient(
+  request: FastifyRequest<{ Body: z.infer<typeof zCreateClient> }>,
+  reply: FastifyReply
+) {
+  const parsed = zCreateClient.safeParse(request.body);
+
+  if (parsed.success === false) {
+    return reply.status(400).send({
+      error: 'Bad Request',
+      message: 'Invalid request body',
+      details: parsed.error.errors,
+    });
+  }
+
+  const { name, projectId, type } = parsed.data;
+
+  // If projectId is provided, verify it belongs to organization
+  if (projectId) {
+    const project = await db.project.findFirst({
+      where: {
+        id: projectId,
+        organizationId: request.client!.organizationId,
+      },
+    });
+
+    if (!project) {
+      throw new HttpError('Project not found', { status: 404 });
+    }
+  }
+
+  // Generate secret
+  const secret = `sec_${crypto.randomBytes(10).toString('hex')}`;
+
+  const client = await db.client.create({
+    data: {
+      organizationId: request.client!.organizationId,
+      projectId: projectId || null,
+      name,
+      type: type || 'write',
+      secret: await hashPassword(secret),
+    },
+  });
+
+  await getClientByIdCached.clear(client.id);
+
+  reply.send({
+    data: {
+      ...client,
+      secret, // Return plain secret only once
+    },
+  });
+}
+
+export async function updateClient(
+  request: FastifyRequest<{
+    Params: { id: string };
+    Body: z.infer<typeof zUpdateClient>;
+  }>,
+  reply: FastifyReply
+) {
+  const parsed = zUpdateClient.safeParse(request.body);
+
+  if (parsed.success === false) {
+    return reply.status(400).send({
+      error: 'Bad Request',
+      message: 'Invalid request body',
+      details: parsed.error.errors,
+    });
+  }
+
+  // Verify client exists and belongs to organization
+  const existing = await db.client.findFirst({
+    where: {
+      id: request.params.id,
+      organizationId: request.client!.organizationId,
+    },
+  });
+
+  if (!existing) {
+    throw new HttpError('Client not found', { status: 404 });
+  }
+
+  const updateData: any = {};
+  if (parsed.data.name !== undefined) {
+    updateData.name = parsed.data.name;
+  }
+
+  const client = await db.client.update({
+    where: {
+      id: request.params.id,
+    },
+    data: updateData,
+  });
+
+  await getClientByIdCached.clear(client.id);
+
+  reply.send({ data: client });
+}
+
+export async function deleteClient(
+  request: FastifyRequest<{ Params: { id: string } }>,
+  reply: FastifyReply
+) {
+  const client = await db.client.findFirst({
+    where: {
+      id: request.params.id,
+      organizationId: request.client!.organizationId,
+    },
+  });
+
+  if (!client) {
+    throw new HttpError('Client not found', { status: 404 });
+  }
+
+  await db.client.delete({
+    where: {
+      id: request.params.id,
+    },
+  });
+
+  await getClientByIdCached.clear(request.params.id);
+
+  reply.send({ success: true });
+}
+
+// References CRUD
+export async function listReferences(
+  request: FastifyRequest<{ Querystring: { projectId?: string } }>,
+  reply: FastifyReply
+) {
+  const where: any = {};
+
+  if (request.query.projectId) {
+    // Verify project belongs to organization
+    const project = await db.project.findFirst({
+      where: {
+        id: request.query.projectId,
+        organizationId: request.client!.organizationId,
+      },
+    });
+
+    if (!project) {
+      throw new HttpError('Project not found', { status: 404 });
+    }
+
+    where.projectId = request.query.projectId;
+  } else {
+    // If no projectId, get all projects in org and filter references
+    const projects = await db.project.findMany({
+      where: {
+        organizationId: request.client!.organizationId,
+      },
+      select: { id: true },
+    });
+
+    where.projectId = {
+      in: projects.map((p) => p.id),
+    };
+  }
+
+  const references = await db.reference.findMany({
+    where,
+    orderBy: {
+      createdAt: 'desc',
+    },
+  });
+
+  reply.send({ data: references });
+}
+
+export async function getReference(
+  request: FastifyRequest<{ Params: { id: string } }>,
+  reply: FastifyReply
+) {
+  const reference = await db.reference.findUnique({
+    where: {
+      id: request.params.id,
+    },
+    include: {
+      project: {
+        select: {
+          organizationId: true,
+        },
+      },
+    },
+  });
+
+  if (!reference) {
+    throw new HttpError('Reference not found', { status: 404 });
+  }
+
+  if (reference.project.organizationId !== request.client!.organizationId) {
+    throw new HttpError('Reference not found', { status: 404 });
+  }
+
+  reply.send({ data: reference });
+}
+
+export async function createReference(
+  request: FastifyRequest<{ Body: z.infer<typeof zCreateReference> }>,
+  reply: FastifyReply
+) {
+  const parsed = zCreateReference.safeParse(request.body);
+
+  if (parsed.success === false) {
+    return reply.status(400).send({
+      error: 'Bad Request',
+      message: 'Invalid request body',
+      details: parsed.error.errors,
+    });
+  }
+
+  const { projectId, title, description, datetime } = parsed.data;
+
+  // Verify project belongs to organization
+  const project = await db.project.findFirst({
+    where: {
+      id: projectId,
+      organizationId: request.client!.organizationId,
+    },
+  });
+
+  if (!project) {
+    throw new HttpError('Project not found', { status: 404 });
+  }
+
+  const reference = await db.reference.create({
+    data: {
+      projectId,
+      title,
+      description: description || null,
+      date: new Date(datetime),
+    },
+  });
+
+  reply.send({ data: reference });
+}
+
+export async function updateReference(
+  request: FastifyRequest<{
+    Params: { id: string };
+    Body: z.infer<typeof zUpdateReference>;
+  }>,
+  reply: FastifyReply
+) {
+  const parsed = zUpdateReference.safeParse(request.body);
+
+  if (parsed.success === false) {
+    return reply.status(400).send({
+      error: 'Bad Request',
+      message: 'Invalid request body',
+      details: parsed.error.errors,
+    });
+  }
+
+  // Verify reference exists and belongs to organization
+  const existing = await db.reference.findUnique({
+    where: {
+      id: request.params.id,
+    },
+    include: {
+      project: {
+        select: {
+          organizationId: true,
+        },
+      },
+    },
+  });
+
+  if (!existing) {
+    throw new HttpError('Reference not found', { status: 404 });
+  }
+
+  if (existing.project.organizationId !== request.client!.organizationId) {
+    throw new HttpError('Reference not found', { status: 404 });
+  }
+
+  const updateData: any = {};
+  if (parsed.data.title !== undefined) {
+    updateData.title = parsed.data.title;
+  }
+  if (parsed.data.description !== undefined) {
+    updateData.description = parsed.data.description ?? null;
+  }
+  if (parsed.data.datetime !== undefined) {
+    updateData.date = new Date(parsed.data.datetime);
+  }
+
+  const reference = await db.reference.update({
+    where: {
+      id: request.params.id,
+    },
+    data: updateData,
+  });
+
+  reply.send({ data: reference });
+}
+
+export async function deleteReference(
+  request: FastifyRequest<{ Params: { id: string } }>,
+  reply: FastifyReply
+) {
+  const reference = await db.reference.findUnique({
+    where: {
+      id: request.params.id,
+    },
+    include: {
+      project: {
+        select: {
+          organizationId: true,
+        },
+      },
+    },
+  });
+
+  if (!reference) {
+    throw new HttpError('Reference not found', { status: 404 });
+  }
+
+  if (reference.project.organizationId !== request.client!.organizationId) {
+    throw new HttpError('Reference not found', { status: 404 });
+  }
+
+  await db.reference.delete({
+    where: {
+      id: request.params.id,
+    },
+  });
+
+  reply.send({ success: true });
+}

apps/api/src/controllers/misc.controller.ts

@@ -1,16 +1,15 @@
 import crypto from 'node:crypto';
-import { logger } from '@/utils/logger';
-import { parseUrlMeta } from '@/utils/parseUrlMeta';
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import sharp from 'sharp';
-
 import {
   DEFAULT_IP_HEADER_ORDER,
   getClientIpFromHeaders,
 } from '@openpanel/common/server/get-client-ip';
-import { TABLE_NAMES, ch, chQuery, formatClickhouseDate } from '@openpanel/db';
+import { ch, chQuery, formatClickhouseDate, TABLE_NAMES } from '@openpanel/db';
 import { type GeoLocation, getGeoLocation } from '@openpanel/geo';
 import { getCache, getRedisCache } from '@openpanel/redis';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import sharp from 'sharp';
+import { logger } from '@/utils/logger';
+import { parseUrlMeta } from '@/utils/parseUrlMeta';
 
 interface GetFaviconParams {
   url: string;
@@ -29,7 +28,9 @@ function createCacheKey(url: string, prefix = 'favicon'): string {
 
 function validateUrl(raw?: string): URL | null {
   try {
-    if (!raw) throw new Error('Missing ?url');
+    if (!raw) {
+      throw new Error('Missing ?url');
+    }
     const url = new URL(raw);
     if (url.protocol !== 'http:' && url.protocol !== 'https:') {
       throw new Error('Only http/https URLs are allowed');
@@ -42,7 +43,7 @@ function validateUrl(raw?: string): URL | null {
 
 // Binary cache functions (more efficient than base64)
 async function getFromCacheBinary(
-  key: string,
+  key: string
 ): Promise<{ buffer: Buffer; contentType: string } | null> {
   const redis = getRedisCache();
   const [bufferBase64, contentType] = await Promise.all([
@@ -50,14 +51,16 @@ async function getFromCacheBinary(
     redis.get(`${key}:ctype`),
   ]);
 
-  if (!bufferBase64 || !contentType) return null;
+  if (!(bufferBase64 && contentType)) {
+    return null;
+  }
   return { buffer: Buffer.from(bufferBase64, 'base64'), contentType };
 }
 
 async function setToCacheBinary(
   key: string,
   buffer: Buffer,
-  contentType: string,
+  contentType: string
 ): Promise<void> {
   const redis = getRedisCache();
   await Promise.all([
@@ -68,10 +71,10 @@ async function setToCacheBinary(
 
 // Fetch image with timeout and size limits
 async function fetchImage(
-  url: URL,
+  url: URL
 ): Promise<{ buffer: Buffer; contentType: string; status: number }> {
   const controller = new AbortController();
-  const timeout = setTimeout(() => controller.abort(), 10000); // 10s timeout
+  const timeout = setTimeout(() => controller.abort(), 1000); // 10s timeout
 
   try {
     const response = await fetch(url.toString(), {
@@ -118,7 +121,11 @@ async function fetchImage(
 
 // Check if URL is an ICO file
 function isIcoFile(url: string, contentType?: string): boolean {
-  return url.toLowerCase().endsWith('.ico') || contentType === 'image/x-icon';
+  return (
+    url.toLowerCase().endsWith('.ico') ||
+    contentType === 'image/x-icon' ||
+    contentType === 'image/vnd.microsoft.icon'
+  );
 }
 function isSvgFile(url: string, contentType?: string): boolean {
   return url.toLowerCase().endsWith('.svg') || contentType === 'image/svg+xml';
@@ -128,7 +135,7 @@ function isSvgFile(url: string, contentType?: string): boolean {
 async function processImage(
   buffer: Buffer,
   originalUrl?: string,
-  contentType?: string,
+  contentType?: string
 ): Promise<Buffer> {
   // If it's an ICO file, just return it as-is (no conversion needed)
   if (originalUrl && isIcoFile(originalUrl, contentType)) {
@@ -171,28 +178,18 @@ async function processImage(
       bufferSize: buffer.length,
     });
 
-    // If Sharp fails, try to create a simple fallback image
-    return createFallbackImage();
+    throw error;
   }
 }
 
-// Create a simple transparent fallback image when Sharp can't process the original
-function createFallbackImage(): Buffer {
-  // 1x1 transparent PNG
-  return Buffer.from(
-    'iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=',
-    'base64',
-  );
-}
-
 // Process OG image with Sharp (resize to 300px width)
 async function processOgImage(
   buffer: Buffer,
   originalUrl?: string,
-  contentType?: string,
+  contentType?: string
 ): Promise<Buffer> {
   // If buffer is small enough, return it as-is
-  if (buffer.length < 10000) {
+  if (buffer.length < 10_000) {
     logger.debug('Serving OG image directly without processing', {
       originalUrl,
       bufferSize: buffer.length,
@@ -216,8 +213,7 @@ async function processOgImage(
       bufferSize: buffer.length,
     });
 
-    // If Sharp fails, try to create a simple fallback image
-    return createFallbackImage();
+    throw error;
   }
 }
 
@@ -234,12 +230,18 @@ export async function getFavicon(
   request: FastifyRequest<{
     Querystring: GetFaviconParams;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   try {
+    logger.info('getFavicon', {
+      url: request.query.url,
+    });
     const url = validateUrl(request.query.url);
     if (!url) {
-      return createFallbackImage();
+      return reply
+        .status(404)
+        .header('Content-Type', 'text/plain')
+        .send('Not found');
     }
 
     const cacheKey = createCacheKey(url.toString());
@@ -253,41 +255,110 @@ export async function getFavicon(
     }
 
     let imageUrl: URL;
-
     // If it's a direct image URL, use it directly
     if (isDirectImage(url)) {
       imageUrl = url;
     } else {
+      logger.info('before parseUrlMeta', {
+        url: url.toString(),
+      });
       // For website URLs, extract favicon from HTML
       const meta = await parseUrlMeta(url.toString());
+      logger.info('parseUrlMeta result', {
+        url: url.toString(),
+        favicon: meta?.favicon,
+      });
       if (meta?.favicon) {
         imageUrl = new URL(meta.favicon);
       } else {
-        // Fallback to Google's favicon service
-        const { hostname } = url;
-        imageUrl = new URL(
-          `https://www.google.com/s2/favicons?domain=${hostname}&sz=256`,
-        );
+        // Try standard favicon location first
+        const { origin } = url;
+        imageUrl = new URL(`${origin}/favicon.ico`);
       }
     }
 
-    // Fetch the image
-    const { buffer, contentType, status } = await fetchImage(imageUrl);
+    logger.info('Fetching favicon', {
+      originalUrl: url.toString(),
+      imageUrl: imageUrl.toString(),
+    });
 
-    if (status !== 200 || buffer.length === 0) {
-      return reply.send(createFallbackImage());
+    // Fetch the image
+    let { buffer, contentType, status } = await fetchImage(imageUrl);
+
+    logger.info('Favicon fetch result', {
+      originalUrl: url.toString(),
+      imageUrl: imageUrl.toString(),
+      status,
+      bufferLength: buffer.length,
+      contentType,
+    });
+
+    // If the direct favicon fetch failed and it's not from DuckDuckGo's service,
+    // try DuckDuckGo's favicon service as a fallback
+    if (buffer.length === 0 && !imageUrl.hostname.includes('duckduckgo.com')) {
+      const { hostname } = url;
+      const duckduckgoUrl = new URL(
+        `https://icons.duckduckgo.com/ip3/${hostname}.ico`
+      );
+
+      logger.info('Trying DuckDuckGo favicon service', {
+        originalUrl: url.toString(),
+        duckduckgoUrl: duckduckgoUrl.toString(),
+      });
+
+      const duckduckgoResult = await fetchImage(duckduckgoUrl);
+      buffer = duckduckgoResult.buffer;
+      contentType = duckduckgoResult.contentType;
+      status = duckduckgoResult.status;
+      imageUrl = duckduckgoUrl;
+
+      logger.info('DuckDuckGo favicon result', {
+        status,
+        bufferLength: buffer.length,
+        contentType,
+      });
+    }
+
+    // Accept any response as long as we have valid image data
+    if (buffer.length === 0) {
+      return reply
+        .status(404)
+        .header('Content-Type', 'text/plain')
+        .send('Not found');
     }
 
     // Process the image (resize to 30x30 PNG, or serve ICO as-is)
     const processedBuffer = await processImage(
       buffer,
       imageUrl.toString(),
-      contentType,
+      contentType
     );
 
+    logger.info('Favicon processing result', {
+      originalUrl: url.toString(),
+      originalBufferLength: buffer.length,
+      processedBufferLength: processedBuffer.length,
+    });
+
     // Determine the correct content type for caching and response
     const isIco = isIcoFile(imageUrl.toString(), contentType);
-    const responseContentType = isIco ? 'image/x-icon' : contentType;
+    const isSvg = isSvgFile(imageUrl.toString(), contentType);
+    let responseContentType = contentType;
+
+    if (isIco) {
+      responseContentType = 'image/x-icon';
+    } else if (isSvg) {
+      responseContentType = 'image/svg+xml';
+    } else if (
+      processedBuffer.length < 5000 &&
+      buffer.length === processedBuffer.length
+    ) {
+      // Image was returned as-is, keep original content type
+      responseContentType = contentType;
+    } else {
+      // Image was processed by Sharp, it's now a PNG
+      responseContentType = 'image/png';
+    }
 
     // Cache the result with correct content type
     await setToCacheBinary(cacheKey, processedBuffer, responseContentType);
@@ -312,7 +383,7 @@ export async function getFavicon(
 
 export async function clearFavicons(
   request: FastifyRequest,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const redis = getRedisCache();
   const keys = await redis.keys('favicon:*');
@@ -328,7 +399,7 @@ export async function clearFavicons(
 
 export async function clearOgImages(
   request: FastifyRequest,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const redis = getRedisCache();
   const keys = await redis.keys('og:*');
@@ -349,7 +420,7 @@ export async function ping(
       count: number;
     };
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   try {
     await ch.insert({
@@ -381,10 +452,10 @@ export async function ping(
 export async function stats(request: FastifyRequest, reply: FastifyReply) {
   const res = await getCache('api:stats', 60 * 60, async () => {
     const projects = await chQuery<{ project_id: string; count: number }>(
-      `SELECT project_id, count(*) as count from ${TABLE_NAMES.events} GROUP by project_id order by count()`,
+      `SELECT project_id, count(*) as count from ${TABLE_NAMES.events} GROUP by project_id order by count()`
     );
     const last24h = await chQuery<{ count: number }>(
-      `SELECT count(*) as count from ${TABLE_NAMES.events} WHERE created_at > now() - interval '24 hours'`,
+      `SELECT count(*) as count from ${TABLE_NAMES.events} WHERE created_at > now() - interval '24 hours'`
     );
     return { projects, last24hCount: last24h[0]?.count || 0 };
   });
@@ -406,7 +477,7 @@ export async function getGeo(request: FastifyRequest, reply: FastifyReply) {
         ip,
         geo: await getGeoLocation(ip),
       };
-    }),
+    })
   );
 
   if (!ip) {
@@ -424,7 +495,7 @@ export async function getGeo(request: FastifyRequest, reply: FastifyReply) {
         acc[other.header] = other;
         return acc;
       },
-      {} as Record<string, { ip: string; header: string; geo: GeoLocation }>,
+      {} as Record<string, { ip: string; header: string; geo: GeoLocation }>
     ),
   });
 }
@@ -435,7 +506,7 @@ export async function getOgImage(
       url: string;
     };
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   try {
     const url = validateUrl(request.query.url);
@@ -479,7 +550,7 @@ export async function getOgImage(
     const processedBuffer = await processOgImage(
       buffer,
       imageUrl.toString(),
-      contentType,
+      contentType
     );
 
     // Cache the result

apps/api/src/controllers/oauth-callback.controller.tsx

@@ -1,16 +1,17 @@
-import { LogError } from '@/utils/errors';
 import {
   Arctic,
-  type OAuth2Tokens,
   createSession,
   generateSessionToken,
   github,
   google,
+  type OAuth2Tokens,
+  setLastAuthProviderCookie,
   setSessionTokenCookie,
 } from '@openpanel/auth';
 import { type Account, connectUserToOrganization, db } from '@openpanel/db';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { z } from 'zod';
+import { LogError } from '@/utils/errors';
 
 async function getGithubEmail(githubAccessToken: string) {
   const emailListRequest = new Request('https://api.github.com/user/emails');
@@ -74,10 +75,14 @@ async function handleExistingUser({
   setSessionTokenCookie(
     (...args) => reply.setCookie(...args),
     sessionToken,
-    session.expiresAt,
+    session.expiresAt
+  );
+  setLastAuthProviderCookie(
+    (...args) => reply.setCookie(...args),
+    providerName
   );
   return reply.redirect(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!,
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
   );
 }
 
@@ -103,7 +108,7 @@ async function handleNewUser({
         existingUser,
         oauthUser,
         providerName,
-      },
+      }
     );
   }
 
@@ -138,10 +143,14 @@ async function handleNewUser({
   setSessionTokenCookie(
     (...args) => reply.setCookie(...args),
     sessionToken,
-    session.expiresAt,
+    session.expiresAt
+  );
+  setLastAuthProviderCookie(
+    (...args) => reply.setCookie(...args),
+    providerName
   );
   return reply.redirect(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!,
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
   );
 }
 
@@ -219,7 +228,7 @@ interface ValidatedOAuthQuery {
 
 async function validateOAuthCallback(
   req: FastifyRequest,
-  provider: Provider,
+  provider: Provider
 ): Promise<ValidatedOAuthQuery> {
   const schema = z.object({
     code: z.string(),
@@ -353,7 +362,7 @@ export async function googleCallback(req: FastifyRequest, reply: FastifyReply) {
 
 function redirectWithError(reply: FastifyReply, error: LogError | unknown) {
   const url = new URL(
-    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!,
+    process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL!
   );
   url.pathname = '/login';
   if (error instanceof LogError) {

apps/api/src/controllers/profile.controller.ts

@@ -1,19 +1,18 @@
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { assocPath, pathOr } from 'ramda';
-
 import { parseUserAgent } from '@openpanel/common/server';
 import { getProfileById, upsertProfile } from '@openpanel/db';
 import { getGeoLocation } from '@openpanel/geo';
 import type {
-  IncrementProfilePayload,
-  UpdateProfilePayload,
-} from '@openpanel/sdk';
+  DeprecatedIncrementProfilePayload,
+  DeprecatedUpdateProfilePayload,
+} from '@openpanel/validation';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { assocPath, pathOr } from 'ramda';
 
 export async function updateProfile(
   request: FastifyRequest<{
-    Body: UpdateProfilePayload;
+    Body: DeprecatedUpdateProfilePayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const payload = request.body;
   const projectId = request.client!.projectId;
@@ -52,9 +51,9 @@ export async function updateProfile(
 
 export async function incrementProfileProperty(
   request: FastifyRequest<{
-    Body: IncrementProfilePayload;
+    Body: DeprecatedIncrementProfilePayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const { profileId, property, value } = request.body;
   const projectId = request.client!.projectId;
@@ -69,7 +68,7 @@ export async function incrementProfileProperty(
 
   const parsed = Number.parseInt(
     pathOr<string>('0', property.split('.'), profile.properties),
-    10,
+    10
   );
 
   if (Number.isNaN(parsed)) {
@@ -79,7 +78,7 @@ export async function incrementProfileProperty(
   profile.properties = assocPath(
     property.split('.'),
     parsed + value,
-    profile.properties,
+    profile.properties
   );
 
   await upsertProfile({
@@ -94,9 +93,9 @@ export async function incrementProfileProperty(
 
 export async function decrementProfileProperty(
   request: FastifyRequest<{
-    Body: IncrementProfilePayload;
+    Body: DeprecatedIncrementProfilePayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const { profileId, property, value } = request.body;
   const projectId = request.client?.projectId;
@@ -111,7 +110,7 @@ export async function decrementProfileProperty(
 
   const parsed = Number.parseInt(
     pathOr<string>('0', property.split('.'), profile.properties),
-    10,
+    10
   );
 
   if (Number.isNaN(parsed)) {
@@ -121,7 +120,7 @@ export async function decrementProfileProperty(
   profile.properties = assocPath(
     property.split('.'),
     parsed - value,
-    profile.properties,
+    profile.properties
   );
 
   await upsertProfile({

apps/api/src/controllers/track.controller.ts

@@ -1,19 +1,33 @@
-import type { FastifyReply, FastifyRequest } from 'fastify';
-import { assocPath, pathOr, pick } from 'ramda';
-
 import { generateId, slug } from '@openpanel/common';
 import { generateDeviceId, parseUserAgent } from '@openpanel/common/server';
-import { getProfileById, getSalts, upsertProfile } from '@openpanel/db';
+import {
+  getProfileById,
+  getSalts,
+  groupBuffer,
+  replayBuffer,
+  upsertProfile,
+} from '@openpanel/db';
 import { type GeoLocation, getGeoLocation } from '@openpanel/geo';
-import { getEventsGroupQueueShard } from '@openpanel/queue';
+import {
+  type EventsQueuePayloadIncomingEvent,
+  getEventsGroupQueueShard,
+} from '@openpanel/queue';
 import { getRedisCache } from '@openpanel/redis';
-import type {
-  DecrementPayload,
-  IdentifyPayload,
-  IncrementPayload,
-  TrackHandlerPayload,
-  TrackPayload,
-} from '@openpanel/sdk';
+import {
+  type IAssignGroupPayload,
+  type IDecrementPayload,
+  type IGroupPayload,
+  type IIdentifyPayload,
+  type IIncrementPayload,
+  type IReplayPayload,
+  type ITrackHandlerPayload,
+  type ITrackPayload,
+  zTrackHandlerPayload,
+} from '@openpanel/validation';
+import type { FastifyReply, FastifyRequest } from 'fastify';
+import { assocPath, pathOr, pick } from 'ramda';
+import { HttpError } from '@/utils/errors';
+import { getDeviceId } from '@/utils/ids';
 
 export function getStringHeaders(headers: FastifyRequest['headers']) {
   return Object.entries(
@@ -25,36 +39,40 @@ export function getStringHeaders(headers: FastifyRequest['headers']) {
         'openpanel-client-id',
         'request-id',
       ],
-      headers,
-    ),
+      headers
+    )
   ).reduce(
     (acc, [key, value]) => ({
       ...acc,
       [key]: value ? String(value) : undefined,
     }),
-    {},
+    {}
   );
 }
 
-function getIdentity(body: TrackHandlerPayload): IdentifyPayload | undefined {
-  const identity =
-    'properties' in body.payload
-      ? (body.payload?.properties?.__identify as IdentifyPayload | undefined)
-      : undefined;
+function getIdentity(body: ITrackHandlerPayload): IIdentifyPayload | undefined {
+  if (body.type === 'track') {
+    const identity = body.payload.properties?.__identify as
+      | IIdentifyPayload
+      | undefined;
 
-  return (
-    identity ||
-    (body?.payload?.profileId
+    if (identity) {
+      return identity;
+    }
+
+    return body.payload.profileId
       ? {
-          profileId: body.payload.profileId,
+          profileId: String(body.payload.profileId),
         }
-      : undefined)
-  );
+      : undefined;
+  }
+
+  return undefined;
 }
 
 export function getTimestamp(
   timestamp: FastifyRequest['timestamp'],
-  payload: TrackHandlerPayload['payload'],
+  payload: ITrackHandlerPayload['payload']
 ) {
   const safeTimestamp = timestamp || Date.now();
   const userDefinedTimestamp =
@@ -81,7 +99,7 @@ export function getTimestamp(
     return { timestamp: safeTimestamp, isTimestampFromThePast: false };
   }
 
-  // isTimestampFromThePast is true only if timestamp is older than 1 hour
+  // isTimestampFromThePast is true only if timestamp is older than 15 minutes
   const isTimestampFromThePast =
     clientTimestampNumber < safeTimestamp - FIFTEEN_MINUTES_MS;
 
@@ -91,209 +109,141 @@ export function getTimestamp(
   };
 }
 
-export async function handler(
-  request: FastifyRequest<{
-    Body: TrackHandlerPayload;
-  }>,
-  reply: FastifyReply,
-) {
-  const timestamp = getTimestamp(request.timestamp, request.body.payload);
-  const ip =
-    'properties' in request.body.payload &&
-    request.body.payload.properties?.__ip
-      ? (request.body.payload.properties.__ip as string)
-      : request.clientIp;
-  const ua = request.headers['user-agent'];
-  const projectId = request.client?.projectId;
-
-  if (!projectId) {
-    return reply.status(400).send({
-      status: 400,
-      error: 'Bad Request',
-      message: 'Missing projectId',
-    });
-  }
-
-  const identity = getIdentity(request.body);
-  const profileId = identity?.profileId;
-  const overrideDeviceId = (() => {
-    const deviceId =
-      'properties' in request.body.payload
-        ? request.body.payload.properties?.__deviceId
-        : undefined;
-    if (typeof deviceId === 'string') {
-      return deviceId;
-    }
-    return undefined;
-  })();
-
-  // We might get a profileId from the alias table
-  // If we do, we should use that instead of the one from the payload
-  if (profileId) {
-    request.body.payload.profileId = profileId;
-  }
-
-  switch (request.body.type) {
-    case 'track': {
-      const [salts, geo] = await Promise.all([getSalts(), getGeoLocation(ip)]);
-      const currentDeviceId =
-        overrideDeviceId ||
-        (ua
-          ? generateDeviceId({
-              salt: salts.current,
-              origin: projectId,
-              ip,
-              ua,
-            })
-          : '');
-      const previousDeviceId = ua
-        ? generateDeviceId({
-            salt: salts.previous,
-            origin: projectId,
-            ip,
-            ua,
-          })
-        : '';
-
-      const promises = [];
-
-      // If we have more than one property in the identity object, we should identify the user
-      // Otherwise its only a profileId and we should not identify the user
-      if (identity && Object.keys(identity).length > 1) {
-        promises.push(
-          identify({
-            payload: identity,
-            projectId,
-            geo,
-            ua,
-          }),
-        );
-      }
-
-      promises.push(
-        track({
-          payload: request.body.payload,
-          currentDeviceId,
-          previousDeviceId,
-          projectId,
-          geo,
-          headers: getStringHeaders(request.headers),
-          timestamp: timestamp.timestamp,
-          isTimestampFromThePast: timestamp.isTimestampFromThePast,
-        }),
-      );
-
-      await Promise.all(promises);
-      break;
-    }
-    case 'identify': {
-      const geo = await getGeoLocation(ip);
-      await identify({
-        payload: request.body.payload,
-        projectId,
-        geo,
-        ua,
-      });
-      break;
-    }
-    case 'alias': {
-      return reply.status(400).send({
-        status: 400,
-        error: 'Bad Request',
-        message: 'Alias is not supported',
-      });
-    }
-    case 'increment': {
-      await increment({
-        payload: request.body.payload,
-        projectId,
-      });
-      break;
-    }
-    case 'decrement': {
-      await decrement({
-        payload: request.body.payload,
-        projectId,
-      });
-      break;
-    }
-    default: {
-      return reply.status(400).send({
-        status: 400,
-        error: 'Bad Request',
-        message: 'Invalid type',
-      });
-    }
-  }
-
-  reply.status(200).send();
+interface TrackContext {
+  projectId: string;
+  ip: string;
+  ua?: string;
+  headers: Record<string, string | undefined>;
+  timestamp: { value: number; isFromPast: boolean };
+  identity?: IIdentifyPayload;
+  deviceId: string;
+  sessionId: string;
+  session?: EventsQueuePayloadIncomingEvent['payload']['session'];
+  geo: GeoLocation;
 }
 
-async function track({
-  payload,
-  currentDeviceId,
-  previousDeviceId,
-  projectId,
-  geo,
-  headers,
-  timestamp,
-  isTimestampFromThePast,
-}: {
-  payload: TrackPayload;
-  currentDeviceId: string;
-  previousDeviceId: string;
-  projectId: string;
-  geo: GeoLocation;
-  headers: Record<string, string | undefined>;
-  timestamp: number;
-  isTimestampFromThePast: boolean;
-}) {
+async function buildContext(
+  request: FastifyRequest<{
+    Body: ITrackHandlerPayload;
+  }>,
+  validatedBody: ITrackHandlerPayload
+): Promise<TrackContext> {
+  const projectId = request.client?.projectId;
+  if (!projectId) {
+    throw new HttpError('Missing projectId', { status: 400 });
+  }
+
+  const timestamp = getTimestamp(request.timestamp, validatedBody.payload);
+  const ip =
+    validatedBody.type === 'track' && validatedBody.payload.properties?.__ip
+      ? (validatedBody.payload.properties.__ip as string)
+      : request.clientIp;
+  const ua = request.headers['user-agent'] ?? 'unknown/1.0';
+
+  const headers = getStringHeaders(request.headers);
+  const identity = getIdentity(validatedBody);
+  const profileId = identity?.profileId;
+
+  if (profileId && validatedBody.type === 'track') {
+    validatedBody.payload.profileId = profileId;
+  }
+
+  const overrideDeviceId =
+    validatedBody.type === 'track' &&
+    typeof validatedBody.payload?.properties?.__deviceId === 'string'
+      ? validatedBody.payload?.properties.__deviceId
+      : undefined;
+
+  // Get geo location (needed for track and identify)
+  const [geo, salts] = await Promise.all([getGeoLocation(ip), getSalts()]);
+
+  const deviceIdResult = await getDeviceId({
+    projectId,
+    ip,
+    ua,
+    salts,
+    overrideDeviceId,
+  });
+
+  return {
+    projectId,
+    ip,
+    ua,
+    headers,
+    timestamp: {
+      value: timestamp.timestamp,
+      isFromPast: timestamp.isTimestampFromThePast,
+    },
+    identity,
+    deviceId: deviceIdResult.deviceId,
+    sessionId: deviceIdResult.sessionId,
+    session: deviceIdResult.session,
+    geo,
+  };
+}
+
+async function handleTrack(
+  payload: ITrackPayload,
+  context: TrackContext
+): Promise<void> {
+  const { projectId, deviceId, geo, headers, timestamp, sessionId, session } =
+    context;
+
   const uaInfo = parseUserAgent(headers['user-agent'], payload.properties);
   const groupId = uaInfo.isServer
     ? payload.profileId
       ? `${projectId}:${payload.profileId}`
-      : `${projectId}:${generateId()}`
-    : currentDeviceId;
+      : undefined
+    : deviceId;
   const jobId = [
     slug(payload.name),
-    timestamp,
+    timestamp.value,
     projectId,
-    currentDeviceId,
+    deviceId,
     groupId,
   ]
     .filter(Boolean)
     .join('-');
-  await getEventsGroupQueueShard(groupId).add({
-    orderMs: timestamp,
-    data: {
-      projectId,
-      headers,
-      event: {
-        ...payload,
-        timestamp,
-        isTimestampFromThePast,
+
+  const promises: Promise<unknown>[] = [];
+
+  // If we have more than one property in the identity object, we should identify the user
+  // Otherwise its only a profileId and we should not identify the user
+  if (context.identity && Object.keys(context.identity).length > 1) {
+    promises.push(handleIdentify(context.identity, context));
+  }
+
+  promises.push(
+    getEventsGroupQueueShard(groupId || generateId()).add({
+      orderMs: timestamp.value,
+      data: {
+        projectId,
+        headers,
+        event: {
+          ...payload,
+          groups: payload.groups ?? [],
+          timestamp: timestamp.value,
+          isTimestampFromThePast: timestamp.isFromPast,
+        },
+        uaInfo,
+        geo,
+        deviceId,
+        sessionId,
+        session,
       },
-      uaInfo,
-      geo,
-      currentDeviceId,
-      previousDeviceId,
-    },
-    groupId,
-    jobId,
-  });
+      groupId,
+      jobId,
+    })
+  );
+
+  await Promise.all(promises);
 }
 
-async function identify({
-  payload,
-  projectId,
-  geo,
-  ua,
-}: {
-  payload: IdentifyPayload;
-  projectId: string;
-  geo: GeoLocation;
-  ua?: string;
-}) {
+async function handleIdentify(
+  payload: IIdentifyPayload,
+  context: TrackContext
+): Promise<void> {
+  const { projectId, geo, ua } = context;
   const uaInfo = parseUserAgent(ua, payload.properties);
   await upsertProfile({
     ...payload,
@@ -318,32 +268,30 @@ async function identify({
   });
 }
 
-async function increment({
-  payload,
-  projectId,
-}: {
-  payload: IncrementPayload;
-  projectId: string;
-}) {
+async function adjustProfileProperty(
+  payload: IIncrementPayload | IDecrementPayload,
+  projectId: string,
+  direction: 1 | -1
+): Promise<void> {
   const { profileId, property, value } = payload;
   const profile = await getProfileById(profileId, projectId);
   if (!profile) {
-    throw new Error('Not found');
+    throw new HttpError('Profile not found', { status: 404 });
   }
 
   const parsed = Number.parseInt(
     pathOr<string>('0', property.split('.'), profile.properties),
-    10,
+    10
   );
 
   if (Number.isNaN(parsed)) {
-    throw new Error('Not number');
+    throw new HttpError('Property value is not a number', { status: 400 });
   }
 
   profile.properties = assocPath(
     property.split('.'),
-    parsed + (value || 1),
-    profile.properties,
+    parsed + direction * (value || 1),
+    profile.properties
   );
 
   await upsertProfile({
@@ -354,45 +302,142 @@ async function increment({
   });
 }
 
-async function decrement({
-  payload,
-  projectId,
-}: {
-  payload: DecrementPayload;
-  projectId: string;
-}) {
-  const { profileId, property, value } = payload;
-  const profile = await getProfileById(profileId, projectId);
-  if (!profile) {
-    throw new Error('Not found');
+async function handleIncrement(
+  payload: IIncrementPayload,
+  context: TrackContext
+): Promise<void> {
+  await adjustProfileProperty(payload, context.projectId, 1);
+}
+
+async function handleDecrement(
+  payload: IDecrementPayload,
+  context: TrackContext
+): Promise<void> {
+  await adjustProfileProperty(payload, context.projectId, -1);
+}
+
+async function handleReplay(
+  payload: IReplayPayload,
+  context: TrackContext
+): Promise<void> {
+  if (!context.sessionId) {
+    throw new HttpError('Session ID is required for replay', { status: 400 });
   }
 
-  const parsed = Number.parseInt(
-    pathOr<string>('0', property.split('.'), profile.properties),
-    10,
-  );
+  const row = {
+    project_id: context.projectId,
+    session_id: context.sessionId,
+    chunk_index: payload.chunk_index,
+    started_at: payload.started_at,
+    ended_at: payload.ended_at,
+    events_count: payload.events_count,
+    is_full_snapshot: payload.is_full_snapshot,
+    payload: payload.payload,
+  };
+  await replayBuffer.add(row);
+}
 
-  if (Number.isNaN(parsed)) {
-    throw new Error('Not number');
+async function handleGroup(
+  payload: IGroupPayload,
+  context: TrackContext
+): Promise<void> {
+  const { id, type, name, properties = {} } = payload;
+  await groupBuffer.add({
+    id,
+    projectId: context.projectId,
+    type,
+    name,
+    properties,
+  });
+}
+
+async function handleAssignGroup(
+  payload: IAssignGroupPayload,
+  context: TrackContext
+): Promise<void> {
+  const profileId = payload.profileId ?? context.deviceId;
+  if (!profileId) {
+    return;
   }
-
-  profile.properties = assocPath(
-    property.split('.'),
-    parsed - (value || 1),
-    profile.properties,
-  );
-
   await upsertProfile({
-    id: profile.id,
-    projectId,
-    properties: profile.properties,
-    isExternal: true,
+    id: String(profileId),
+    projectId: context.projectId,
+    isExternal: !!payload.profileId,
+    groups: payload.groupIds,
+  });
+}
+
+export async function handler(
+  request: FastifyRequest<{
+    Body: ITrackHandlerPayload;
+  }>,
+  reply: FastifyReply
+) {
+  // Validate request body with Zod
+  const validationResult = zTrackHandlerPayload.safeParse(request.body);
+  if (!validationResult.success) {
+    return reply.status(400).send({
+      status: 400,
+      error: 'Bad Request',
+      message: 'Validation failed',
+      errors: validationResult.error.errors,
+    });
+  }
+
+  const validatedBody = validationResult.data;
+
+  // Handle alias (not supported)
+  if (validatedBody.type === 'alias') {
+    return reply.status(400).send({
+      status: 400,
+      error: 'Bad Request',
+      message: 'Alias is not supported',
+    });
+  }
+
+  // Build request context
+  const context = await buildContext(request, validatedBody);
+
+  // Dispatch to appropriate handler
+  switch (validatedBody.type) {
+    case 'track':
+      await handleTrack(validatedBody.payload, context);
+      break;
+    case 'identify':
+      await handleIdentify(validatedBody.payload, context);
+      break;
+    case 'increment':
+      await handleIncrement(validatedBody.payload, context);
+      break;
+    case 'decrement':
+      await handleDecrement(validatedBody.payload, context);
+      break;
+    case 'replay':
+      await handleReplay(validatedBody.payload, context);
+      break;
+    case 'group':
+      await handleGroup(validatedBody.payload, context);
+      break;
+    case 'assign_group':
+      await handleAssignGroup(validatedBody.payload, context);
+      break;
+    default:
+      return reply.status(400).send({
+        status: 400,
+        error: 'Bad Request',
+        message: 'Invalid type',
+      });
+  }
+
+  reply.status(200).send({
+    deviceId: context.deviceId,
+    sessionId: context.sessionId,
   });
 }
 
 export async function fetchDeviceId(
   request: FastifyRequest,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const salts = await getSalts();
   const projectId = request.client?.projectId;
@@ -425,20 +470,31 @@ export async function fetchDeviceId(
 
   try {
     const multi = getRedisCache().multi();
-    multi.exists(`bull:sessions:sessionEnd:${projectId}:${currentDeviceId}`);
-    multi.exists(`bull:sessions:sessionEnd:${projectId}:${previousDeviceId}`);
+    multi.hget(
+      `bull:sessions:sessionEnd:${projectId}:${currentDeviceId}`,
+      'data'
+    );
+    multi.hget(
+      `bull:sessions:sessionEnd:${projectId}:${previousDeviceId}`,
+      'data'
+    );
     const res = await multi.exec();
-
     if (res?.[0]?.[1]) {
+      const data = JSON.parse(res?.[0]?.[1] as string);
+      const sessionId = data.payload.sessionId;
       return reply.status(200).send({
         deviceId: currentDeviceId,
+        sessionId,
         message: 'current session exists for this device id',
       });
     }
 
     if (res?.[1]?.[1]) {
+      const data = JSON.parse(res?.[1]?.[1] as string);
+      const sessionId = data.payload.sessionId;
       return reply.status(200).send({
         deviceId: previousDeviceId,
+        sessionId,
         message: 'previous session exists for this device id',
       });
     }
@@ -448,6 +504,7 @@ export async function fetchDeviceId(
 
   return reply.status(200).send({
     deviceId: currentDeviceId,
+    sessionId: '',
     message: 'No session exists for this device id',
   });
 }

apps/api/src/controllers/webhook.controller.ts

@@ -1,18 +1,18 @@
 import fs from 'node:fs';
-import path from 'node:path';
-import { dirname } from 'node:path';
+import path, { dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const __filename = fileURLToPath(import.meta.url);
 const __dirname = dirname(__filename);
+
 import { db, getOrganizationByProjectIdCached } from '@openpanel/db';
 import {
   sendSlackNotification,
   slackInstaller,
 } from '@openpanel/integrations/src/slack';
 import {
-  PolarWebhookVerificationError,
   getProduct,
+  PolarWebhookVerificationError,
   validatePolarEvent,
 } from '@openpanel/payments';
 import { publishEvent } from '@openpanel/redis';
@@ -34,7 +34,7 @@ export async function slackWebhook(
   request: FastifyRequest<{
     Querystring: unknown;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const parsedParams = paramsSchema.safeParse(request.query);
 
@@ -45,10 +45,10 @@ export async function slackWebhook(
 
   const veryfiedState = await slackInstaller.stateStore?.verifyStateParam(
     new Date(),
-    parsedParams.data.state,
+    parsedParams.data.state
   );
   const parsedMetadata = metadataSchema.safeParse(
-    JSON.parse(veryfiedState?.metadata ?? '{}'),
+    JSON.parse(veryfiedState?.metadata ?? '{}')
   );
 
   if (!parsedMetadata.success) {
@@ -75,7 +75,7 @@ export async function slackWebhook(
           zod: parsedJson,
           json,
         },
-        'Failed to parse slack auth response',
+        'Failed to parse slack auth response'
       );
       const html = fs.readFileSync(path.join(__dirname, 'error.html'), 'utf8');
       return reply.status(500).header('Content-Type', 'text/html').send(html);
@@ -104,7 +104,7 @@ export async function slackWebhook(
     });
 
     return reply.redirect(
-      `${process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL}/${organizationId}/integrations/installed`,
+      `${process.env.DASHBOARD_URL || process.env.NEXT_PUBLIC_DASHBOARD_URL}/${organizationId}/integrations/installed`
     );
   } catch (err) {
     request.log.error(err);
@@ -128,13 +128,13 @@ export async function polarWebhook(
   request: FastifyRequest<{
     Querystring: unknown;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   try {
     const event = validatePolarEvent(
       request.rawBody!,
       request.headers as Record<string, string>,
-      process.env.POLAR_WEBHOOK_SECRET ?? '',
+      process.env.POLAR_WEBHOOK_SECRET ?? ''
     );
 
     switch (event.type) {
@@ -191,7 +191,9 @@ export async function polarWebhook(
             where: {
               subscriptionCustomerId: event.data.customer.id,
               subscriptionId: event.data.id,
-              subscriptionStatus: 'active',
+              subscriptionStatus: {
+                in: ['active', 'past_due', 'unpaid'],
+              },
             },
           });
 

apps/api/src/hooks/client.hook.ts

@@ -1,12 +1,15 @@
-import { SdkAuthError, validateSdkRequest } from '@/utils/auth';
-import type { PostEventPayload, TrackHandlerPayload } from '@openpanel/sdk';
+import type {
+  DeprecatedPostEventPayload,
+  ITrackHandlerPayload,
+} from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
+import { SdkAuthError, validateSdkRequest } from '@/utils/auth';
 
 export async function clientHook(
   req: FastifyRequest<{
-    Body: PostEventPayload | TrackHandlerPayload;
+    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   try {
     const client = await validateSdkRequest(req);

apps/api/src/hooks/duplicate.hook.ts

@@ -1,23 +1,28 @@
-import { isDuplicatedEvent } from '@/utils/deduplicate';
-import type { PostEventPayload, TrackHandlerPayload } from '@openpanel/sdk';
+import type {
+  DeprecatedPostEventPayload,
+  ITrackHandlerPayload,
+} from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
+import { isDuplicatedEvent } from '@/utils/deduplicate';
 
 export async function duplicateHook(
   req: FastifyRequest<{
-    Body: PostEventPayload | TrackHandlerPayload;
+    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const ip = req.clientIp;
   const origin = req.headers.origin;
   const clientId = req.headers['openpanel-client-id'];
-  const shouldCheck = ip && origin && clientId;
-
+  const body = req?.body;
+  const isTrackPayload = getIsTrackPayload(req);
+  const isReplay = isTrackPayload && req.body.type === 'replay';
+  const shouldCheck = ip && origin && clientId && !isReplay;
   const isDuplicate = shouldCheck
     ? await isDuplicatedEvent({
         ip,
         origin,
-        payload: req.body,
+        payload: body,
         projectId: clientId as string,
       })
     : false;
@@ -26,3 +31,25 @@ export async function duplicateHook(
     return reply.status(200).send('Duplicate event');
   }
 }
+
+function getIsTrackPayload(
+  req: FastifyRequest<{
+    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
+  }>
+): req is FastifyRequest<{
+  Body: ITrackHandlerPayload;
+}> {
+  if (req.method !== 'POST') {
+    return false;
+  }
+
+  if (!req.body) {
+    return false;
+  }
+
+  if (typeof req.body !== 'object' || Array.isArray(req.body)) {
+    return false;
+  }
+
+  return 'type' in req.body;
+}

apps/api/src/hooks/is-bot.hook.ts

@@ -1,22 +1,19 @@
-import { isBot } from '@/bots';
 import { createBotEvent } from '@openpanel/db';
-import type { TrackHandlerPayload } from '@openpanel/sdk';
+import type {
+  DeprecatedPostEventPayload,
+  ITrackHandlerPayload,
+} from '@openpanel/validation';
 import type { FastifyReply, FastifyRequest } from 'fastify';
-
-type DeprecatedEventPayload = {
-  name: string;
-  properties: Record<string, unknown>;
-  timestamp: string;
-};
+import { isBot } from '@/bots';
 
 export async function isBotHook(
   req: FastifyRequest<{
-    Body: TrackHandlerPayload | DeprecatedEventPayload;
+    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
   }>,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   const bot = req.headers['user-agent']
-    ? isBot(req.headers['user-agent'])
+    ? await isBot(req.headers['user-agent'])
     : null;
 
   if (bot && req.client?.projectId) {
@@ -46,6 +43,6 @@ export async function isBotHook(
       }
     }
 
-    return reply.status(202).send('OK');
+    return reply.status(202).send({ bot });
   }
 }

apps/api/src/hooks/request-id.hook.ts

@@ -1,8 +1,4 @@
-import type {
-  FastifyReply,
-  FastifyRequest,
-  HookHandlerDoneFunction,
-} from 'fastify';
+import type { FastifyRequest } from 'fastify';
 
 export async function requestIdHook(request: FastifyRequest) {
   if (!request.headers['request-id']) {

apps/api/src/hooks/request-logging.hook.ts

@@ -1,4 +1,3 @@
-import { DEFAULT_IP_HEADER_ORDER } from '@openpanel/common';
 import type { FastifyReply, FastifyRequest } from 'fastify';
 import { path, pick } from 'ramda';
 
@@ -6,7 +5,7 @@ const ignoreLog = ['/healthcheck', '/healthz', '/metrics', '/misc'];
 const ignoreMethods = ['OPTIONS'];
 
 const getTrpcInput = (
-  request: FastifyRequest,
+  request: FastifyRequest
 ): Record<string, unknown> | undefined => {
   const input = path<any>(['query', 'input'], request);
   try {
@@ -18,7 +17,7 @@ const getTrpcInput = (
 
 export async function requestLoggingHook(
   request: FastifyRequest,
-  reply: FastifyReply,
+  reply: FastifyReply
 ) {
   if (ignoreMethods.includes(request.method)) {
     return;
@@ -40,9 +39,8 @@ export async function requestLoggingHook(
       elapsed: reply.elapsedTime,
       headers: pick(
         ['openpanel-client-id', 'openpanel-sdk-name', 'openpanel-sdk-version'],
-        request.headers,
+        request.headers
       ),
-      body: request.body,
     });
   }
 }

apps/api/src/index.ts

@@ -1,27 +1,28 @@
+/** biome-ignore-all lint/suspicious/useAwait: fastify need async or done callbacks */
+process.env.TZ = 'UTC';
+
 import compress from '@fastify/compress';
 import cookie from '@fastify/cookie';
 import cors, { type FastifyCorsOptions } from '@fastify/cors';
-import type { FastifyTRPCPluginOptions } from '@trpc/server/adapters/fastify';
-import { fastifyTRPCPlugin } from '@trpc/server/adapters/fastify';
-import type { FastifyBaseLogger, FastifyRequest } from 'fastify';
-import Fastify from 'fastify';
-import metricsPlugin from 'fastify-metrics';
-
+import {
+  decodeSessionToken,
+  EMPTY_SESSION,
+  type SessionValidationResult,
+  validateSessionToken,
+} from '@openpanel/auth';
 import { generateId } from '@openpanel/common';
 import {
   type IServiceClientWithProject,
   runWithAlsSession,
 } from '@openpanel/db';
-import { getCache, getRedisPub } from '@openpanel/redis';
+import { getRedisPub } from '@openpanel/redis';
 import type { AppRouter } from '@openpanel/trpc';
 import { appRouter, createContext } from '@openpanel/trpc';
-
-import {
-  EMPTY_SESSION,
-  type SessionValidationResult,
-  decodeSessionToken,
-  validateSessionToken,
-} from '@openpanel/auth';
+import type { FastifyTRPCPluginOptions } from '@trpc/server/adapters/fastify';
+import { fastifyTRPCPlugin } from '@trpc/server/adapters/fastify';
+import type { FastifyBaseLogger, FastifyRequest } from 'fastify';
+import Fastify from 'fastify';
+import metricsPlugin from 'fastify-metrics';
 import sourceMapSupport from 'source-map-support';
 import {
   healthcheck,
@@ -35,9 +36,12 @@ import { timestampHook } from './hooks/timestamp.hook';
 import aiRouter from './routes/ai.router';
 import eventRouter from './routes/event.router';
 import exportRouter from './routes/export.router';
+import gscCallbackRouter from './routes/gsc-callback.router';
 import importRouter from './routes/import.router';
 import insightsRouter from './routes/insights.router';
 import liveRouter from './routes/live.router';
+import logsRouter from './routes/logs.router';
+import manageRouter from './routes/manage.router';
 import miscRouter from './routes/misc.router';
 import oauthRouter from './routes/oauth-callback.router';
 import profileRouter from './routes/profile.router';
@@ -49,8 +53,6 @@ import { logger } from './utils/logger';
 
 sourceMapSupport.install();
 
-process.env.TZ = 'UTC';
-
 declare module 'fastify' {
   interface FastifyRequest {
     client: IServiceClientWithProject | null;
@@ -62,13 +64,16 @@ declare module 'fastify' {
 }
 
 const port = Number.parseInt(process.env.API_PORT || '3000', 10);
+const host =
+  process.env.API_HOST ||
+  (process.env.NODE_ENV === 'production' ? '0.0.0.0' : 'localhost');
 
 const startServer = async () => {
   logger.info('Starting server');
   try {
     const fastify = Fastify({
       maxParamLength: 15_000,
-      bodyLimit: 1048576 * 500, // 500MB
+      bodyLimit: 1_048_576 * 500, // 500MB
       loggerInstance: logger as unknown as FastifyBaseLogger,
       disableRequestLogging: true,
       genReqId: (req) =>
@@ -80,7 +85,7 @@ const startServer = async () => {
     fastify.register(cors, () => {
       return (
         req: FastifyRequest,
-        callback: (error: Error | null, options: FastifyCorsOptions) => void,
+        callback: (error: Error | null, options: FastifyCorsOptions) => void
       ) => {
         // TODO: set prefix on dashboard routes
         const corsPaths = [
@@ -93,7 +98,7 @@ const startServer = async () => {
         ];
 
         const isPrivatePath = corsPaths.some((path) =>
-          req.url.startsWith(path),
+          req.url.startsWith(path)
         );
 
         if (isPrivatePath) {
@@ -114,6 +119,7 @@ const startServer = async () => {
 
         return callback(null, {
           origin: '*',
+          maxAge: 86_400 * 7, // cache preflight for 7 days
         });
       };
     });
@@ -143,12 +149,21 @@ const startServer = async () => {
       instance.addHook('onRequest', async (req) => {
         if (req.cookies?.session) {
           try {
-            const sessionId = decodeSessionToken(req.cookies.session);
+            const sessionId = decodeSessionToken(req.cookies?.session);
             const session = await runWithAlsSession(sessionId, () =>
-              validateSessionToken(req.cookies.session),
+              validateSessionToken(req.cookies.session)
             );
             req.session = session;
-          } catch (e) {
+          } catch {
+            req.session = EMPTY_SESSION;
+          }
+        } else if (process.env.DEMO_USER_ID) {
+          try {
+            const session = await runWithAlsSession('1', () =>
+              validateSessionToken(null)
+            );
+            req.session = session;
+          } catch {
             req.session = EMPTY_SESSION;
           }
         } else {
@@ -160,7 +175,7 @@ const startServer = async () => {
         prefix: '/trpc',
         trpcOptions: {
           router: appRouter,
-          createContext: createContext,
+          createContext,
           onError(ctx) {
             if (
               ctx.error.code === 'UNAUTHORIZED' &&
@@ -181,8 +196,10 @@ const startServer = async () => {
       instance.register(liveRouter, { prefix: '/live' });
       instance.register(webhookRouter, { prefix: '/webhook' });
       instance.register(oauthRouter, { prefix: '/oauth' });
+      instance.register(gscCallbackRouter, { prefix: '/gsc' });
       instance.register(miscRouter, { prefix: '/misc' });
       instance.register(aiRouter, { prefix: '/ai' });
+      instance.register(logsRouter, { prefix: '/logs' });
     });
 
     // Public API
@@ -194,6 +211,7 @@ const startServer = async () => {
       instance.register(importRouter, { prefix: '/import' });
       instance.register(insightsRouter, { prefix: '/insights' });
       instance.register(trackRouter, { prefix: '/track' });
+      instance.register(manageRouter, { prefix: '/manage' });
       // Keep existing endpoints for backward compatibility
       instance.get('/healthcheck', healthcheck);
       // New Kubernetes-style health endpoints
@@ -203,39 +221,50 @@ const startServer = async () => {
         reply.send({
           status: 'ok',
           message: 'Successfully running OpenPanel.dev API',
-        }),
+        })
       );
     });
 
+    const SKIP_LOG_ERRORS = ['UNAUTHORIZED', 'FST_ERR_CTP_INVALID_MEDIA_TYPE'];
     fastify.setErrorHandler((error, request, reply) => {
-      if (error instanceof HttpError) {
-        request.log.error(`${error.message}`, error);
-        if (process.env.NODE_ENV === 'production' && error.status === 500) {
-          request.log.error('request error', { error });
-          reply.status(500).send('Internal server error');
-        } else {
-          reply.status(error.status).send({
-            status: error.status,
-            error: error.error,
-            message: error.message,
-          });
-        }
-      } else if (error.statusCode === 429) {
-        reply.status(429).send({
+      if (error.statusCode === 429) {
+        return reply.status(429).send({
           status: 429,
           error: 'Too Many Requests',
           message: 'You have exceeded the rate limit for this endpoint.',
         });
-      } else if (error.statusCode === 400) {
-        reply.status(400).send({
-          status: 400,
-          error,
-          message: 'The request was invalid.',
-        });
-      } else {
-        request.log.error('request error', { error });
-        reply.status(500).send('Internal server error');
       }
+
+      if (error instanceof HttpError) {
+        if (!SKIP_LOG_ERRORS.includes(error.code)) {
+          request.log.error('internal server error', { error });
+        }
+
+        if (process.env.NODE_ENV === 'production' && error.status === 500) {
+          return reply.status(500).send('Internal server error');
+        }
+
+        return reply.status(error.status).send({
+          status: error.status,
+          error: error.error,
+          message: error.message,
+        });
+      }
+
+      if (!SKIP_LOG_ERRORS.includes(error.code)) {
+        request.log.error('request error', { error });
+      }
+
+      const status = error?.statusCode ?? 500;
+      if (process.env.NODE_ENV === 'production' && status === 500) {
+        return reply.status(500).send('Internal server error');
+      }
+
+      return reply.status(status).send({
+        status,
+        error,
+        message: error.message,
+      });
     });
 
     if (process.env.NODE_ENV === 'production') {
@@ -252,10 +281,7 @@ const startServer = async () => {
       });
     }
 
-    await fastify.listen({
-      host: process.env.NODE_ENV === 'production' ? '0.0.0.0' : 'localhost',
-      port,
-    });
+    await fastify.listen({ host, port });
 
     try {
       // Notify when keys expires
@@ -263,7 +289,7 @@ const startServer = async () => {
     } catch (error) {
       logger.warn('Failed to set redis notify-keyspace-events', error);
       logger.warn(
-        'If you use a managed Redis service, you may need to set this manually.',
+        'If you use a managed Redis service, you may need to set this manually.'
       );
       logger.warn('Otherwise some functions may not work as expected.');
     }

apps/api/src/routes/ai.router.ts

@@ -1,6 +1,6 @@
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/ai.controller';
 import { activateRateLimiter } from '@/utils/rate-limiter';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 
 const aiRouter: FastifyPluginCallback = async (fastify) => {
   await activateRateLimiter<

apps/api/src/routes/event.router.ts

@@ -1,6 +1,5 @@
-import * as controller from '@/controllers/event.controller';
 import type { FastifyPluginCallback } from 'fastify';
-
+import * as controller from '@/controllers/event.controller';
 import { clientHook } from '@/hooks/client.hook';
 import { duplicateHook } from '@/hooks/duplicate.hook';
 import { isBotHook } from '@/hooks/is-bot.hook';

apps/api/src/routes/export.router.ts

@@ -1,8 +1,8 @@
+import { Prisma } from '@openpanel/db';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/export.controller';
 import { validateExportRequest } from '@/utils/auth';
 import { activateRateLimiter } from '@/utils/rate-limiter';
-import { Prisma } from '@openpanel/db';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 
 const exportRouter: FastifyPluginCallback = async (fastify) => {
   await activateRateLimiter({

apps/api/src/routes/gsc-callback.router.ts

@@ -0,0 +1,12 @@
+import type { FastifyPluginCallback } from 'fastify';
+import { gscGoogleCallback } from '@/controllers/gsc-oauth-callback.controller';
+
+const router: FastifyPluginCallback = async (fastify) => {
+  fastify.route({
+    method: 'GET',
+    url: '/callback',
+    handler: gscGoogleCallback,
+  });
+};
+
+export default router;

apps/api/src/routes/import.router.ts

@@ -1,8 +1,7 @@
+import { Prisma } from '@openpanel/db';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/import.controller';
 import { validateImportRequest } from '@/utils/auth';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
-
-import { Prisma } from '@openpanel/db';
 
 const importRouter: FastifyPluginCallback = async (fastify) => {
   fastify.addHook('preHandler', async (req: FastifyRequest, reply) => {

apps/api/src/routes/insights.router.ts

@@ -1,8 +1,8 @@
+import { Prisma } from '@openpanel/db';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 import * as controller from '@/controllers/insights.controller';
 import { validateExportRequest } from '@/utils/auth';
 import { activateRateLimiter } from '@/utils/rate-limiter';
-import { Prisma } from '@openpanel/db';
-import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
 
 const insightsRouter: FastifyPluginCallback = async (fastify) => {
   await activateRateLimiter({

apps/api/src/routes/live.router.ts

@@ -1,6 +1,6 @@
-import * as controller from '@/controllers/live.controller';
 import fastifyWS from '@fastify/websocket';
 import type { FastifyPluginCallback } from 'fastify';
+import * as controller from '@/controllers/live.controller';
 
 const liveRouter: FastifyPluginCallback = async (fastify) => {
   fastify.register(fastifyWS);
@@ -9,22 +9,22 @@ const liveRouter: FastifyPluginCallback = async (fastify) => {
     fastify.get(
       '/organization/:organizationId',
       { websocket: true },
-      controller.wsOrganizationEvents,
+      controller.wsOrganizationEvents
     );
     fastify.get(
       '/visitors/:projectId',
       { websocket: true },
-      controller.wsVisitors,
+      controller.wsVisitors
     );
     fastify.get(
       '/events/:projectId',
       { websocket: true },
-      controller.wsProjectEvents,
+      controller.wsProjectEvents
     );
     fastify.get(
       '/notifications/:projectId',
       { websocket: true },
-      controller.wsProjectNotifications,
+      controller.wsProjectNotifications
     );
   });
 };

apps/api/src/routes/logs.router.ts

@@ -0,0 +1,6 @@
+import { handler } from '@/controllers/logs.controller';
+import type { FastifyInstance } from 'fastify';
+
+export default async function (fastify: FastifyInstance) {
+  fastify.post('/', handler);
+}

apps/api/src/routes/manage.router.ts

@@ -0,0 +1,132 @@
+import { Prisma } from '@openpanel/db';
+import type { FastifyPluginCallback, FastifyRequest } from 'fastify';
+import * as controller from '@/controllers/manage.controller';
+import { validateManageRequest } from '@/utils/auth';
+import { activateRateLimiter } from '@/utils/rate-limiter';
+
+const manageRouter: FastifyPluginCallback = async (fastify) => {
+  await activateRateLimiter({
+    fastify,
+    max: 20,
+    timeWindow: '10 seconds',
+  });
+
+  fastify.addHook('preHandler', async (req: FastifyRequest, reply) => {
+    try {
+      const client = await validateManageRequest(req.headers);
+      req.client = client;
+    } catch (e) {
+      if (e instanceof Prisma.PrismaClientKnownRequestError) {
+        return reply.status(401).send({
+          error: 'Unauthorized',
+          message: 'Client ID seems to be malformed',
+        });
+      }
+
+      if (e instanceof Error) {
+        return reply
+          .status(401)
+          .send({ error: 'Unauthorized', message: e.message });
+      }
+
+      return reply
+        .status(401)
+        .send({ error: 'Unauthorized', message: 'Unexpected error' });
+    }
+  });
+
+  // Projects routes
+  fastify.route({
+    method: 'GET',
+    url: '/projects',
+    handler: controller.listProjects,
+  });
+
+  fastify.route({
+    method: 'GET',
+    url: '/projects/:id',
+    handler: controller.getProject,
+  });
+
+  fastify.route({
+    method: 'POST',
+    url: '/projects',
+    handler: controller.createProject,
+  });
+
+  fastify.route({
+    method: 'PATCH',
+    url: '/projects/:id',
+    handler: controller.updateProject,
+  });
+
+  fastify.route({
+    method: 'DELETE',
+    url: '/projects/:id',
+    handler: controller.deleteProject,
+  });
+
+  // Clients routes
+  fastify.route({
+    method: 'GET',
+    url: '/clients',
+    handler: controller.listClients,
+  });
+
+  fastify.route({
+    method: 'GET',
+    url: '/clients/:id',
+    handler: controller.getClient,
+  });
+
+  fastify.route({
+    method: 'POST',
+    url: '/clients',
+    handler: controller.createClient,
+  });
+
+  fastify.route({
+    method: 'PATCH',
+    url: '/clients/:id',
+    handler: controller.updateClient,
+  });
+
+  fastify.route({
+    method: 'DELETE',
+    url: '/clients/:id',
+    handler: controller.deleteClient,
+  });
+
+  // References routes
+  fastify.route({
+    method: 'GET',
+    url: '/references',
+    handler: controller.listReferences,
+  });
+
+  fastify.route({
+    method: 'GET',
+    url: '/references/:id',
+    handler: controller.getReference,
+  });
+
+  fastify.route({
+    method: 'POST',
+    url: '/references',
+    handler: controller.createReference,
+  });
+
+  fastify.route({
+    method: 'PATCH',
+    url: '/references/:id',
+    handler: controller.updateReference,
+  });
+
+  fastify.route({
+    method: 'DELETE',
+    url: '/references/:id',
+    handler: controller.deleteReference,
+  });
+};
+
+export default manageRouter;

apps/api/src/routes/misc.router.ts

@@ -1,5 +1,5 @@
-import * as controller from '@/controllers/misc.controller';
 import type { FastifyPluginCallback } from 'fastify';
+import * as controller from '@/controllers/misc.controller';
 
 const miscRouter: FastifyPluginCallback = async (fastify) => {
   fastify.route({

apps/api/src/routes/oauth-callback.router.ts

@@ -1,5 +1,5 @@
-import * as controller from '@/controllers/oauth-callback.controller';
 import type { FastifyPluginCallback } from 'fastify';
+import * as controller from '@/controllers/oauth-callback.controller';
 
 const router: FastifyPluginCallback = async (fastify) => {
   fastify.route({

apps/api/src/routes/profile.router.ts

@@ -1,7 +1,7 @@
+import type { FastifyPluginCallback } from 'fastify';
 import * as controller from '@/controllers/profile.controller';
 import { clientHook } from '@/hooks/client.hook';
 import { isBotHook } from '@/hooks/is-bot.hook';
-import type { FastifyPluginCallback } from 'fastify';
 
 const eventRouter: FastifyPluginCallback = async (fastify) => {
   fastify.addHook('preHandler', clientHook);

apps/api/src/routes/track.router.ts

@@ -1,6 +1,5 @@
-import { fetchDeviceId, handler } from '@/controllers/track.controller';
 import type { FastifyPluginCallback } from 'fastify';
-
+import { fetchDeviceId, handler } from '@/controllers/track.controller';
 import { clientHook } from '@/hooks/client.hook';
 import { duplicateHook } from '@/hooks/duplicate.hook';
 import { isBotHook } from '@/hooks/is-bot.hook';
@@ -13,23 +12,7 @@ const trackRouter: FastifyPluginCallback = async (fastify) => {
   fastify.route({
     method: 'POST',
     url: '/',
-    handler: handler,
-    schema: {
-      body: {
-        type: 'object',
-        required: ['type', 'payload'],
-        properties: {
-          type: {
-            type: 'string',
-            enum: ['track', 'increment', 'decrement', 'alias', 'identify'],
-          },
-          payload: {
-            type: 'object',
-            additionalProperties: true,
-          },
-        },
-      },
-    },
+    handler,
   });
 
   fastify.route({
@@ -42,6 +25,7 @@ const trackRouter: FastifyPluginCallback = async (fastify) => {
           type: 'object',
           properties: {
             deviceId: { type: 'string' },
+            sessionId: { type: 'string' },
             message: { type: 'string', optional: true },
           },
         },

apps/api/src/routes/webhook.router.ts

@@ -1,5 +1,5 @@
-import * as controller from '@/controllers/webhook.controller';
 import type { FastifyPluginCallback } from 'fastify';
+import * as controller from '@/controllers/webhook.controller';
 
 const webhookRouter: FastifyPluginCallback = async (fastify) => {
   fastify.route({

apps/api/src/utils/ai-tools.ts

@@ -1,23 +1,18 @@
 import { chartTypes } from '@openpanel/constants';
 import type { IClickhouseSession } from '@openpanel/db';
 import {
+  ch,
+  clix,
   type IClickhouseEvent,
   type IClickhouseProfile,
   TABLE_NAMES,
-  ch,
-  clix,
 } from '@openpanel/db';
-import { ChartEngine } from '@openpanel/db';
 import { getCache } from '@openpanel/redis';
-import { zChartInputAI } from '@openpanel/validation';
+import { zReportInput } from '@openpanel/validation';
 import { tool } from 'ai';
 import { z } from 'zod';
 
-export function getReport({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getReport({ projectId }: { projectId: string }) {
   return tool({
     description: `Generate a report (a chart) for 
     - ${chartTypes.area}
@@ -27,7 +22,10 @@ export function getReport({
     - ${chartTypes.metric}
     - ${chartTypes.bar}
 `,
-    parameters: zChartInputAI,
+    parameters: zReportInput.extend({
+      startDate: z.string().describe('The start date for the report'),
+      endDate: z.string().describe('The end date for the report'),
+    }),
     execute: async (report) => {
       return {
         type: 'report',
@@ -64,15 +62,14 @@ export function getReport({
     },
   });
 }
-export function getConversionReport({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getConversionReport({ projectId }: { projectId: string }) {
   return tool({
     description:
       'Generate a report (a chart) for conversions between two actions a unique user took.',
-    parameters: zChartInputAI,
+    parameters: zReportInput.extend({
+      startDate: z.string().describe('The start date for the report'),
+      endDate: z.string().describe('The end date for the report'),
+    }),
     execute: async (report) => {
       return {
         type: 'report',
@@ -86,15 +83,14 @@ export function getConversionReport({
     },
   });
 }
-export function getFunnelReport({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getFunnelReport({ projectId }: { projectId: string }) {
   return tool({
     description:
       'Generate a report (a chart) for funnel between two or more actions a unique user (session_id or profile_id) took.',
-    parameters: zChartInputAI,
+    parameters: zReportInput.extend({
+      startDate: z.string().describe('The start date for the report'),
+      endDate: z.string().describe('The end date for the report'),
+    }),
     execute: async (report) => {
       return {
         type: 'report',
@@ -109,11 +105,7 @@ export function getFunnelReport({
   });
 }
 
-export function getProfiles({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getProfiles({ projectId }: { projectId: string }) {
   return tool({
     description: 'Get profiles',
     parameters: z.object({
@@ -179,11 +171,7 @@ export function getProfiles({
   });
 }
 
-export function getProfile({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getProfile({ projectId }: { projectId: string }) {
   return tool({
     description: 'Get a specific profile',
     parameters: z.object({
@@ -267,11 +255,7 @@ export function getProfile({
   });
 }
 
-export function getEvents({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getEvents({ projectId }: { projectId: string }) {
   return tool({
     description: 'Get events for a project or specific profile',
     parameters: z.object({
@@ -360,11 +344,7 @@ export function getEvents({
   });
 }
 
-export function getSessions({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getSessions({ projectId }: { projectId: string }) {
   return tool({
     description: 'Get sessions for a project or specific profile',
     parameters: z.object({
@@ -449,11 +429,7 @@ export function getSessions({
   });
 }
 
-export function getAllEventNames({
-  projectId,
-}: {
-  projectId: string;
-}) {
+export function getAllEventNames({ projectId }: { projectId: string }) {
   return tool({
     description: 'Get the top 50 event names in a comma separated list',
     parameters: z.object({}),

apps/api/src/utils/ai.ts

@@ -14,11 +14,7 @@ export const getChatModel = () => {
   }
 };
 
-export const getChatSystemPrompt = ({
-  projectId,
-}: {
-  projectId: string;
-}) => {
+export const getChatSystemPrompt = ({ projectId }: { projectId: string }) => {
   return `You're an product and web analytics expert. Don't generate more than the user asks for. Follow all rules listed below!
 ## General:
 - projectId: \`${projectId}\`

apps/api/src/utils/auth.ts

@@ -1,14 +1,14 @@
-import type { FastifyRequest, RawRequestDefaultExpression } from 'fastify';
-
 import { verifyPassword } from '@openpanel/common/server';
 import type { IServiceClientWithProject } from '@openpanel/db';
 import { ClientType, getClientByIdCached } from '@openpanel/db';
 import { getCache } from '@openpanel/redis';
-import type { PostEventPayload, TrackHandlerPayload } from '@openpanel/sdk';
 import type {
+  DeprecatedPostEventPayload,
   IProjectFilterIp,
   IProjectFilterProfileId,
+  ITrackHandlerPayload,
 } from '@openpanel/validation';
+import type { FastifyRequest, RawRequestDefaultExpression } from 'fastify';
 import { path } from 'ramda';
 
 const cleanDomain = (domain: string) =>
@@ -30,7 +30,7 @@ export class SdkAuthError extends Error {
       clientId?: string;
       clientSecret?: string;
       origin?: string;
-    },
+    }
   ) {
     super(message);
     this.name = 'SdkAuthError';
@@ -41,8 +41,8 @@ export class SdkAuthError extends Error {
 
 export async function validateSdkRequest(
   req: FastifyRequest<{
-    Body: PostEventPayload | TrackHandlerPayload;
-  }>,
+    Body: ITrackHandlerPayload | DeprecatedPostEventPayload;
+  }>
 ): Promise<IServiceClientWithProject> {
   const { headers, clientIp } = req;
   const clientIdNew = headers['openpanel-client-id'] as string;
@@ -69,10 +69,10 @@ export async function validateSdkRequest(
 
   if (
     !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId,
+      clientId
     )
   ) {
-    throw createError('Ingestion: Clean ID must be a valid UUIDv4');
+    throw createError('Ingestion: Client ID must be a valid UUIDv4');
   }
 
   const client = await getClientByIdCached(clientId);
@@ -87,7 +87,7 @@ export async function validateSdkRequest(
 
   // Filter out blocked IPs
   const ipFilter = client.project.filters.filter(
-    (filter): filter is IProjectFilterIp => filter.type === 'ip',
+    (filter): filter is IProjectFilterIp => filter.type === 'ip'
   );
   if (ipFilter.some((filter) => filter.ip === clientIp)) {
     throw createError('Ingestion: IP address is blocked by project filter');
@@ -95,7 +95,7 @@ export async function validateSdkRequest(
 
   // Filter out blocked profile ids
   const profileFilter = client.project.filters.filter(
-    (filter): filter is IProjectFilterProfileId => filter.type === 'profile_id',
+    (filter): filter is IProjectFilterProfileId => filter.type === 'profile_id'
   );
   const profileId =
     path<string | undefined>(['payload', 'profileId'], req.body) || // Track handler
@@ -112,12 +112,11 @@ export async function validateSdkRequest(
   // Only allow revenue tracking if it was sent with a client secret
   // or if the project has allowUnsafeRevenueTracking enabled
   if (
-    !client.project.allowUnsafeRevenueTracking &&
-    !clientSecret &&
+    !(client.project.allowUnsafeRevenueTracking || clientSecret) &&
     typeof revenue !== 'undefined'
   ) {
     throw createError(
-      'Ingestion: Revenue tracking is not allowed without a client secret',
+      'Ingestion: Revenue tracking is not allowed without a client secret'
     );
   }
 
@@ -131,7 +130,7 @@ export async function validateSdkRequest(
       // support wildcard domains `*.foo.com`
       if (cleanedDomain.includes('*')) {
         const regex = new RegExp(
-          `${cleanedDomain.replaceAll('.', '\\.').replaceAll('*', '.+?')}`,
+          `${cleanedDomain.replaceAll('.', '\\.').replaceAll('*', '.+?')}`
         );
 
         return regex.test(origin || '');
@@ -156,7 +155,7 @@ export async function validateSdkRequest(
       `client:auth:${clientId}:${Buffer.from(clientSecret).toString('base64')}`,
       60 * 5,
       async () => await verifyPassword(clientSecret, client.secret!),
-      true,
+      true
     );
     if (isVerified) {
       return client;
@@ -167,14 +166,14 @@ export async function validateSdkRequest(
 }
 
 export async function validateExportRequest(
-  headers: RawRequestDefaultExpression['headers'],
+  headers: RawRequestDefaultExpression['headers']
 ): Promise<IServiceClientWithProject> {
   const clientId = headers['openpanel-client-id'] as string;
   const clientSecret = (headers['openpanel-client-secret'] as string) || '';
 
   if (
     !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId,
+      clientId
     )
   ) {
     throw new Error('Export: Client ID must be a valid UUIDv4');
@@ -202,14 +201,14 @@ export async function validateExportRequest(
 }
 
 export async function validateImportRequest(
-  headers: RawRequestDefaultExpression['headers'],
+  headers: RawRequestDefaultExpression['headers']
 ): Promise<IServiceClientWithProject> {
   const clientId = headers['openpanel-client-id'] as string;
   const clientSecret = (headers['openpanel-client-secret'] as string) || '';
 
   if (
     !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
-      clientId,
+      clientId
     )
   ) {
     throw new Error('Import: Client ID must be a valid UUIDv4');
@@ -235,3 +234,40 @@ export async function validateImportRequest(
 
   return client;
 }
+
+export async function validateManageRequest(
+  headers: RawRequestDefaultExpression['headers']
+): Promise<IServiceClientWithProject> {
+  const clientId = headers['openpanel-client-id'] as string;
+  const clientSecret = (headers['openpanel-client-secret'] as string) || '';
+
+  if (
+    !/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(
+      clientId
+    )
+  ) {
+    throw new Error('Manage: Client ID must be a valid UUIDv4');
+  }
+
+  const client = await getClientByIdCached(clientId);
+
+  if (!client) {
+    throw new Error('Manage: Invalid client id');
+  }
+
+  if (!client.secret) {
+    throw new Error('Manage: Client has no secret');
+  }
+
+  if (client.type !== ClientType.root) {
+    throw new Error(
+      'Manage: Only root clients are allowed to manage resources'
+    );
+  }
+
+  if (!(await verifyPassword(clientSecret, client.secret))) {
+    throw new Error('Manage: Invalid client secret');
+  }
+
+  return client;
+}

apps/api/src/utils/deduplicate.ts

@@ -20,10 +20,10 @@ export async function isDuplicatedEvent({
         origin,
         projectId,
       },
-      'md5',
+      'md5'
     )}`,
     '1',
-    100,
+    100
   );
 
   if (locked) {

apps/api/src/utils/errors.ts

@@ -4,7 +4,7 @@ export class LogError extends Error {
   constructor(
     message: string,
     payload?: Record<string, unknown>,
-    options?: ErrorOptions,
+    options?: ErrorOptions
   ) {
     super(message, options);
     this.name = 'LogError';
@@ -26,7 +26,7 @@ export class HttpError extends Error {
       fingerprint?: string;
       extra?: Record<string, unknown>;
       error?: Error | unknown;
-    },
+    }
   ) {
     super(message);
     this.name = 'HttpError';

apps/api/src/utils/graceful-shutdown.ts

@@ -29,7 +29,7 @@ export function isShuttingDown() {
 export async function shutdown(
   fastify: FastifyInstance,
   signal: string,
-  exitCode = 0,
+  exitCode = 0
 ) {
   if (isShuttingDown()) {
     logger.warn('Shutdown already in progress, ignoring signal', { signal });
@@ -96,7 +96,7 @@ export async function shutdown(
         if (redis.status === 'ready') {
           await redis.quit();
         }
-      }),
+      })
     );
     logger.info('Redis connections closed');
   } catch (error) {

apps/api/src/utils/ids.ts

@@ -0,0 +1,181 @@
+import crypto from 'node:crypto';
+import { generateDeviceId } from '@openpanel/common/server';
+import { getSafeJson } from '@openpanel/json';
+import type {
+  EventsQueuePayloadCreateSessionEnd,
+  EventsQueuePayloadIncomingEvent,
+} from '@openpanel/queue';
+import { getRedisCache } from '@openpanel/redis';
+import { pick } from 'ramda';
+
+export async function getDeviceId({
+  projectId,
+  ip,
+  ua,
+  salts,
+  overrideDeviceId,
+}: {
+  projectId: string;
+  ip: string;
+  ua: string | undefined;
+  salts: { current: string; previous: string };
+  overrideDeviceId?: string;
+}) {
+  if (overrideDeviceId) {
+    return { deviceId: overrideDeviceId, sessionId: '' };
+  }
+
+  if (!ua) {
+    return { deviceId: '', sessionId: '' };
+  }
+
+  const currentDeviceId = generateDeviceId({
+    salt: salts.current,
+    origin: projectId,
+    ip,
+    ua,
+  });
+  const previousDeviceId = generateDeviceId({
+    salt: salts.previous,
+    origin: projectId,
+    ip,
+    ua,
+  });
+
+  return await getInfoFromSession({
+    projectId,
+    currentDeviceId,
+    previousDeviceId,
+  });
+}
+
+interface DeviceIdResult {
+  deviceId: string;
+  sessionId: string;
+  session?: EventsQueuePayloadIncomingEvent['payload']['session'];
+}
+
+async function getInfoFromSession({
+  projectId,
+  currentDeviceId,
+  previousDeviceId,
+}: {
+  projectId: string;
+  currentDeviceId: string;
+  previousDeviceId: string;
+}): Promise<DeviceIdResult> {
+  try {
+    const multi = getRedisCache().multi();
+    multi.hget(
+      `bull:sessions:sessionEnd:${projectId}:${currentDeviceId}`,
+      'data'
+    );
+    multi.hget(
+      `bull:sessions:sessionEnd:${projectId}:${previousDeviceId}`,
+      'data'
+    );
+    const res = await multi.exec();
+    if (res?.[0]?.[1]) {
+      const data = getSafeJson<EventsQueuePayloadCreateSessionEnd>(
+        (res?.[0]?.[1] as string) ?? ''
+      );
+      if (data) {
+        return {
+          deviceId: currentDeviceId,
+          sessionId: data.payload.sessionId,
+          session: pick(
+            ['referrer', 'referrerName', 'referrerType'],
+            data.payload
+          ),
+        };
+      }
+    }
+    if (res?.[1]?.[1]) {
+      const data = getSafeJson<EventsQueuePayloadCreateSessionEnd>(
+        (res?.[1]?.[1] as string) ?? ''
+      );
+      if (data) {
+        return {
+          deviceId: previousDeviceId,
+          sessionId: data.payload.sessionId,
+          session: pick(
+            ['referrer', 'referrerName', 'referrerType'],
+            data.payload
+          ),
+        };
+      }
+    }
+  } catch (error) {
+    console.error('Error getting session end GET /track/device-id', error);
+  }
+
+  return {
+    deviceId: currentDeviceId,
+    sessionId: getSessionId({
+      projectId,
+      deviceId: currentDeviceId,
+      graceMs: 5 * 1000,
+      windowMs: 1000 * 60 * 30,
+    }),
+  };
+}
+
+/**
+ * Deterministic session id for (projectId, deviceId) within a time window,
+ * with a grace period at the *start* of each window to avoid boundary splits.
+ *
+ * - windowMs: 30 minutes by default
+ * - graceMs: 1 minute by default (events in first minute of a bucket map to previous bucket)
+ * - Output: base64url, 128-bit (16 bytes) truncated from SHA-256
+ */
+function getSessionId(params: {
+  projectId: string;
+  deviceId: string;
+  eventMs?: number; // use event timestamp; defaults to Date.now()
+  windowMs?: number; // default 5 min
+  graceMs?: number; // default 1 min
+  bytes?: number; // default 16 (128-bit). You can set 24 or 32 for longer ids.
+}): string {
+  const {
+    projectId,
+    deviceId,
+    eventMs = Date.now(),
+    windowMs = 5 * 60 * 1000,
+    graceMs = 60 * 1000,
+    bytes = 16,
+  } = params;
+
+  if (!projectId) {
+    throw new Error('projectId is required');
+  }
+  if (!deviceId) {
+    throw new Error('deviceId is required');
+  }
+  if (windowMs <= 0) {
+    throw new Error('windowMs must be > 0');
+  }
+  if (graceMs < 0 || graceMs >= windowMs) {
+    throw new Error('graceMs must be >= 0 and < windowMs');
+  }
+  if (bytes < 8 || bytes > 32) {
+    throw new Error('bytes must be between 8 and 32');
+  }
+
+  const bucket = Math.floor(eventMs / windowMs);
+  const offset = eventMs - bucket * windowMs;
+
+  // Grace at the start of the bucket: stick to the previous bucket.
+  const chosenBucket = offset < graceMs ? bucket - 1 : bucket;
+
+  const input = `sess:v1:${projectId}:${deviceId}:${chosenBucket}`;
+
+  const digest = crypto.createHash('sha256').update(input).digest();
+  const truncated = digest.subarray(0, bytes);
+
+  // base64url
+  return truncated
+    .toString('base64')
+    .replace(/\+/g, '-')
+    .replace(/\//g, '_')
+    .replace(/=+$/g, '');
+}

apps/api/src/utils/parse-zod-query-string.ts

@@ -3,14 +3,21 @@ import { getSafeJson } from '@openpanel/json';
 export const parseQueryString = (obj: Record<string, any>): any => {
   return Object.fromEntries(
     Object.entries(obj).map(([k, v]) => {
-      if (typeof v === 'object') return [k, parseQueryString(v)];
+      if (typeof v === 'object') {
+        return [k, parseQueryString(v)];
+      }
       if (
         /^-?[0-9]+(\.[0-9]+)?$/i.test(v) &&
         !Number.isNaN(Number.parseFloat(v))
-      )
+      ) {
         return [k, Number.parseFloat(v)];
-      if (v === 'true') return [k, true];
-      if (v === 'false') return [k, false];
+      }
+      if (v === 'true') {
+        return [k, true];
+      }
+      if (v === 'false') {
+        return [k, false];
+      }
       if (typeof v === 'string') {
         if (getSafeJson(v) !== null) {
           return [k, getSafeJson(v)];
@@ -18,6 +25,6 @@ export const parseQueryString = (obj: Record<string, any>): any => {
         return [k, v];
       }
       return [k, null];
-    }),
+    })
   );
 };

apps/api/src/utils/parseUrlMeta.ts

@@ -1,7 +1,13 @@
 import urlMetadata from 'url-metadata';
 
 function fallbackFavicon(url: string) {
-  return `https://www.google.com/s2/favicons?domain=${url}&sz=256`;
+  try {
+    const hostname = new URL(url).hostname;
+    return `https://icons.duckduckgo.com/ip3/${hostname}.ico`;
+  } catch {
+    // If URL parsing fails, use the original string
+    return `https://icons.duckduckgo.com/ip3/${url}.ico`;
+  }
 }
 
 function findBestFavicon(favicons: UrlMetaData['favicons']) {
@@ -13,7 +19,7 @@ function findBestFavicon(favicons: UrlMetaData['favicons']) {
       (favicon) =>
         favicon.rel === 'shortcut icon' ||
         favicon.rel === 'icon' ||
-        favicon.rel === 'apple-touch-icon',
+        favicon.rel === 'apple-touch-icon'
     );
 
   if (match) {
@@ -66,7 +72,9 @@ interface UrlMetaData {
 
 export async function parseUrlMeta(url: string) {
   try {
-    const metadata = (await urlMetadata(url)) as UrlMetaData;
+    const metadata = (await urlMetadata(url, {
+      timeout: 500,
+    })) as UrlMetaData;
     const data = transform(metadata, url);
     return data;
   } catch (err) {

apps/api/tsconfig.json

@@ -5,7 +5,8 @@
     "paths": {
       "@/*": ["./src/*"]
     },
-    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json"
+    "tsBuildInfoFile": "node_modules/.cache/tsbuildinfo.json",
+    "strictNullChecks": true
   },
   "include": ["."],
   "exclude": ["node_modules", "dist"]

apps/api/tsdown.config.ts

@@ -1,5 +1,5 @@
-import { defineConfig } from 'tsdown';
 import type { Options } from 'tsdown';
+import { defineConfig } from 'tsdown';
 
 const options: Options = {
   clean: true,

apps/justfuckinguseopenpanel/index.html

@@ -0,0 +1,767 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1.0">
+
+    <!-- Primary Meta Tags -->
+    <title>Just Fucking Use OpenPanel - Stop Overpaying for Analytics</title>
+    <meta
+      name="title"
+      content="Just Fucking Use OpenPanel - Stop Overpaying for Analytics"
+    >
+    <meta
+      name="description"
+      content="Mixpanel costs $2,300/month at scale. PostHog costs $1,982/month. Web-only tools tell you nothing about user behavior. OpenPanel gives you full product analytics for a fraction of the cost, or FREE self-hosted."
+    >
+    <meta
+      name="keywords"
+      content="openpanel, analytics, mixpanel alternative, posthog alternative, product analytics, web analytics, open source analytics, self-hosted analytics"
+    >
+    <meta name="author" content="OpenPanel">
+    <meta name="robots" content="index, follow">
+    <link rel="canonical" href="https://justfuckinguseopenpanel.dev/">
+    <link rel="icon" type="image/x-icon" href="/favicon.ico">
+
+    <!-- Open Graph / Facebook -->
+    <meta property="og:type" content="website">
+    <meta property="og:url" content="https://justfuckinguseopenpanel.dev/">
+    <meta
+      property="og:title"
+      content="Just Fucking Use OpenPanel - Stop Overpaying for Analytics"
+    >
+    <meta
+      property="og:description"
+      content="Mixpanel costs $2,300/month at scale. PostHog costs $1,982/month. Web-only tools tell you nothing about user behavior. OpenPanel gives you full product analytics for a fraction of the cost, or FREE self-hosted."
+    >
+    <meta property="og:image" content="/ogimage.png">
+    <meta property="og:image:width" content="1200">
+    <meta property="og:image:height" content="630">
+    <meta property="og:site_name" content="Just Fucking Use OpenPanel">
+
+    <!-- Twitter -->
+    <meta name="twitter:card" content="summary_large_image">
+    <meta name="twitter:url" content="https://justfuckinguseopenpanel.dev/">
+    <meta
+      name="twitter:title"
+      content="Just Fucking Use OpenPanel - Stop Overpaying for Analytics"
+    >
+    <meta
+      name="twitter:description"
+      content="Mixpanel costs $2,300/month at scale. PostHog costs $1,982/month. Web-only tools tell you nothing about user behavior. OpenPanel gives you full product analytics for a fraction of the cost, or FREE self-hosted."
+    >
+    <meta name="twitter:image" content="/ogimage.png">
+
+    <!-- Additional Meta Tags -->
+    <meta name="theme-color" content="#0a0a0a">
+    <meta name="color-scheme" content="dark">
+    <style>
+    * {
+      margin: 0;
+      padding: 0;
+      box-sizing: border-box;
+    }
+
+    body {
+      background: #0a0a0a;
+      color: #e5e5e5;
+      font-family:
+        -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue",
+        Arial, sans-serif;
+      font-size: 18px;
+      line-height: 1.75;
+      padding: 2rem 1.5rem;
+    }
+
+    .container {
+      max-width: 700px;
+      margin: 0 auto;
+    }
+
+    h1 {
+      font-size: 2rem;
+      font-weight: 700;
+      line-height: 1;
+      margin-bottom: 0.5rem;
+      color: #ffffff;
+    }
+
+    h2 {
+      font-size: 1.875rem;
+      font-weight: 800;
+      line-height: 1.3;
+      margin-top: 3rem;
+      margin-bottom: 1.5rem;
+      color: #ffffff;
+    }
+
+    h3 {
+      font-size: 1.5rem;
+      font-weight: 700;
+      line-height: 1.4;
+      margin-top: 2rem;
+      margin-bottom: 1rem;
+      color: #ffffff;
+    }
+
+    p {
+      margin-bottom: 1.25em;
+    }
+
+    strong {
+      font-weight: 700;
+      color: #ffffff;
+    }
+
+    a {
+      color: #3b82f6;
+      text-decoration: underline;
+      text-underline-offset: 2px;
+    }
+
+    a:hover {
+      color: #60a5fa;
+    }
+
+    ul,
+    ol {
+      margin-left: 1.5rem;
+      margin-bottom: 1.25em;
+    }
+
+    li {
+      margin-bottom: 0.5em;
+    }
+
+    blockquote {
+      border-left: 4px solid #3b82f6;
+      padding-left: 1.5rem;
+      margin: 1.5rem 0;
+      font-style: italic;
+      color: #d1d5db;
+    }
+
+    table {
+      width: 100%;
+      border-collapse: collapse;
+      margin: 2rem 0;
+    }
+
+    th,
+    td {
+      padding: 0.75rem;
+      text-align: left;
+      border-bottom: 1px solid #374151;
+    }
+
+    th {
+      font-weight: 700;
+      color: #ffffff;
+      background: #131313;
+    }
+
+    tr:hover {
+      background: #131313;
+    }
+
+    .screenshot {
+      margin: 0 -4rem 4rem;
+      position: relative;
+      z-index: 10;
+    }
+
+    @media (max-width: 840px) {
+      .screenshot {
+        margin: 0;
+      }
+    }
+
+    .screenshot-inner {
+      border-radius: 8px;
+      overflow: hidden;
+      padding: 0.5rem;
+      background: #1a1a1a;
+      border: 1px solid #2a2a2a;
+    }
+
+    .window-controls {
+      display: flex;
+      align-items: center;
+      gap: 0.5rem;
+      margin-bottom: 0.5rem;
+      padding: 0 0.25rem;
+    }
+
+    .window-dot {
+      width: 8px;
+      height: 8px;
+      border-radius: 50%;
+    }
+
+    .window-dot.red {
+      background: #ef4444;
+    }
+
+    .window-dot.yellow {
+      background: #eab308;
+    }
+
+    .window-dot.green {
+      background: #22c55e;
+    }
+
+    .screenshot-image-wrapper {
+      width: 100%;
+      border: 1px solid #2a2a2a;
+      border-radius: 6px;
+      overflow: hidden;
+      background: #0a0a0a;
+    }
+
+    .screenshot img {
+      width: 100%;
+      height: auto;
+      display: block;
+    }
+
+    .cta {
+      background: #131313;
+      border: 1px solid rgba(255, 255, 255, 0.1);
+      border-radius: 8px;
+      padding: 2rem;
+      margin: 3rem 0;
+      text-align: center;
+      margin: 0 -4rem 4rem;
+    }
+
+    @media (max-width: 840px) {
+      .cta {
+        margin: 0;
+      }
+    }
+
+    .cta h2 {
+      margin-top: 0;
+    }
+
+    .cta a {
+      display: inline-block;
+      background: #fff;
+      color: #000;
+      padding: 0.75rem 1.5rem;
+      border-radius: 6px;
+      text-decoration: none;
+      font-weight: 600;
+      margin: 0.5rem;
+      transition: background 0.2s;
+    }
+
+    .cta a:hover {
+      background: #fff;
+      color: #000;
+    }
+
+    footer {
+      margin-top: 4rem;
+      padding-top: 2rem;
+      border-top: 1px solid #374151;
+      text-align: center;
+      color: #9ca3af;
+      font-size: 0.875rem;
+    }
+
+    .hero {
+      text-align: left;
+      margin-top: 4rem;
+      line-height: 1.5;
+    }
+
+    .hero p {
+      font-size: 1.25rem;
+      color: #8f8f8f;
+      margin-top: 1rem;
+    }
+
+    figcaption {
+      margin-top: 1rem;
+      font-size: 0.875rem;
+      text-align: center;
+      color: #9ca3af;
+      max-width: 100%;
+    }
+    </style>
+  </head>
+  <body>
+    <div class="container">
+      <div class="hero">
+        <h1>Just Fucking Use OpenPanel</h1>
+        <p>
+          Stop settling for basic metrics. Get real insights that actually help
+          you build a better product.
+        </p>
+      </div>
+
+      <figure class="screenshot">
+        <div class="screenshot-inner">
+          <div class="window-controls">
+            <div class="window-dot red"></div>
+            <div class="window-dot yellow"></div>
+            <div class="window-dot green"></div>
+          </div>
+          <div class="screenshot-image-wrapper">
+            <img
+              src="screenshots/realtime-dark.webp"
+              alt="OpenPanel Real-time Analytics"
+              width="1400"
+              height="800"
+            >
+          </div>
+        </div>
+        <figcaption>
+          Real-time analytics - see events as they happen. No waiting, no
+          delays.
+        </figcaption>
+      </figure>
+
+      <h2>The PostHog/Mixpanel Problem (Volume Pricing Hell)</h2>
+
+      <p>
+        Let's talk about what happens when you have a
+        <strong>real product</strong> with <strong>real users</strong>.
+      </p>
+
+      <p><strong>Real pricing at scale (20M+ events/month):</strong></p>
+      <ul>
+        <li><strong>Mixpanel</strong>: $2,300/month (and more with add-ons)</li>
+        <li><strong>PostHog</strong>: $1,982/month (and more with add-ons)</li>
+      </ul>
+
+      <p>
+        "1 million free events!" they scream. Cute. Until you have an actual
+        product with actual users doing actual things. Then suddenly you need to
+        "talk to sales" and your wallet starts bleeding.
+      </p>
+
+      <p>
+        Add-ons, add-ons everywhere. Session replay? +$X. Feature flags? +$X.
+        HIPAA compliance? +$250/month. A/B testing? That'll be extra. You're
+        hemorrhaging money just to understand what your users are doing, you
+        magnificent fool.
+      </p>
+
+      <h2>The Web-Only Analytics Trap</h2>
+
+      <p>
+        You built a great fucking product. You have real traffic. Thousands,
+        tens of thousands of visitors. But you're flying blind.
+      </p>
+
+      <blockquote>
+        "Congrats, 50,000 visitors from France this month. Why didn't a single
+        one buy your baguette?"
+      </blockquote>
+
+      <p>
+        You see the traffic. You see the bounce rate. You see the referrers. You
+        see where they're from. You have <strong>NO FUCKING IDEA</strong> what
+        users actually do.
+      </p>
+
+      <p>
+        Where do they drop off? Do they come back? What features do they use?
+        Why didn't they convert? Who the fuck knows! You're using a glorified
+        hit counter with a pretty dashboard that tells you everything about
+        geography and nothing about behavior.
+      </p>
+
+      <p>
+        Plausible. Umami. Fathom. Simple Analytics. GoatCounter. Cabin. Pirsch.
+        They're all the same story: simple analytics with some goals you can
+        define. Page views, visitors, countries, basic funnels. That's it. No
+        retention analysis. No user profiles. No event tracking. No cohorts. No
+        revenue tracking. Just... basic web analytics.
+      </p>
+
+      <p>
+        And when you finally need to understand your users—when you need to see
+        where they drop off in your signup flow, or which features drive
+        retention, or why your conversion rate is shit—you end up paying for a
+        <strong>SECOND tool</strong> on top. Now you're paying for two
+        subscriptions, managing two dashboards, and your users' data is split
+        across two platforms like a bad divorce.
+      </p>
+
+      <h2>Counter One Dollar Stats</h2>
+
+      <p>"$1/month for page views. Adorable."</p>
+
+      <p>
+        Look, I get it. A dollar is cheap. But you're getting exactly what you
+        pay for: page views. That's it. No funnels. No retention. No user
+        profiles. No event tracking. Just... page views.
+      </p>
+
+      <p>
+        Here's the thing: if you want to make <strong>good decisions</strong>
+        about your product, you need to understand
+        <strong>what your users are actually doing</strong>, not just where the
+        fuck they're from.
+      </p>
+
+      <p>
+        OpenPanel gives you the full product analytics suite. Or self-host for
+        <strong>FREE</strong> with <strong>UNLIMITED events</strong>.
+      </p>
+
+      <p>You get:</p>
+      <ul>
+        <li>Funnels to see where users drop off</li>
+        <li>Retention analysis to see who comes back</li>
+        <li>Cohorts to segment your users</li>
+        <li>User profiles to understand individual behavior</li>
+        <li>Custom dashboards to see what matters to YOU</li>
+        <li>Revenue tracking to see what actually makes money</li>
+        <li>
+          All the web analytics (page views, visitors, referrers) that the other
+          tools give you
+        </li>
+      </ul>
+
+      <p>
+        One Dollar Stats tells you 50,000 people visited from France. OpenPanel
+        tells you why they didn't buy your baguette. That's the difference
+        between vanity metrics and actual insights.
+      </p>
+
+      <h2>Why OpenPanel is the Answer</h2>
+
+      <p>
+        You want analytics that actually help you build a better product. Not
+        vanity metrics. Not enterprise pricing. Not two separate tools.
+      </p>
+
+      <p>
+        To make good decisions, you need to understand
+        <strong>what your users are doing</strong>, not just where they're from.
+        You need to see where they drop off. You need to know which features
+        they use. You need to understand why they convert or why they don't.
+      </p>
+
+      <ul>
+        <li>
+          <strong>Open Source & Self-Hostable</strong>: AGPL-3.0 - fork it,
+          audit it, own it. Self-host for FREE with unlimited events, or use our
+          cloud
+        </li>
+        <li>
+          <strong>Price</strong>: Affordable pricing that scales, or FREE
+          self-hosted (unlimited events, forever)
+        </li>
+        <li>
+          <strong>SDK Size</strong>: 2.3KB (PostHog is 52KB+ - that's 22x
+          bigger, you performance-obsessed maniac)
+        </li>
+        <li>
+          <strong>Privacy</strong>: Cookie-free by default, EU-only hosting (or
+          your own servers if you self-host)
+        </li>
+        <li>
+          <strong>Full Suite</strong>: Web analytics + product analytics in one
+          tool. No need for two subscriptions.
+        </li>
+      </ul>
+
+      <figure class="screenshot">
+        <div class="screenshot-inner">
+          <div class="window-controls">
+            <div class="window-dot red"></div>
+            <div class="window-dot yellow"></div>
+            <div class="window-dot green"></div>
+          </div>
+          <div class="screenshot-image-wrapper">
+            <img
+              src="screenshots/overview-dark.webp"
+              alt="OpenPanel Overview Dashboard"
+              width="1400"
+              height="800"
+            >
+          </div>
+        </div>
+        <figcaption>
+          OpenPanel overview showing web analytics and product analytics in one
+          clean interface
+        </figcaption>
+      </figure>
+
+      <h2>Open Source & Self-Hosting: The Ultimate Fuck You to Pricing Hell</h2>
+
+      <p>
+        Tired of watching your analytics bill grow every month? Tired of "talk
+        to sales" when you hit their arbitrary limits? Tired of paying
+        $2,000+/month just to understand your users?
+      </p>
+
+      <p>
+        <strong>OpenPanel is open source.</strong> AGPL-3.0 licensed. You can
+        fork it. You can audit it. You can own it. And you can
+        <strong>self-host it for FREE with UNLIMITED events</strong>.
+      </p>
+
+      <p>
+        That's right. Zero dollars. Unlimited events. All the features. Your
+        data on your servers. No vendor lock-in. No surprise bills. No
+        "enterprise sales" calls.
+      </p>
+
+      <p>
+        Mixpanel at 20M events? $2,300/month. PostHog? $1,982/month. OpenPanel
+        self-hosted? <strong>$0/month</strong>. Forever.
+      </p>
+
+      <p>
+        Don't want to manage infrastructure? That's fine. Use our cloud. But if
+        you want to escape the pricing hell entirely, self-hosting is a Docker
+        command away. Your data, your rules, your wallet.
+      </p>
+
+      <h2>The Comparison Table (The Brutal Truth)</h2>
+
+      <table>
+        <thead>
+          <tr>
+            <th>Tool</th>
+            <th>Price at 20M events</th>
+            <th>What You Get</th>
+          </tr>
+        </thead>
+        <tbody>
+          <tr>
+            <td><strong>Mixpanel</strong></td>
+            <td>$2,300+/month</td>
+            <td>Not all feautres... since addons are extra</td>
+          </tr>
+          <tr>
+            <td><strong>PostHog</strong></td>
+            <td>$1,982+/month</td>
+            <td>Not all feautres... since addons are extra</td>
+          </tr>
+          <tr>
+            <td><strong>Plausible</strong></td>
+            <td>Various pricing</td>
+            <td>
+              Simple analytics with basic goals. Page views and visitors. That's
+              it.
+            </td>
+          </tr>
+          <tr>
+            <td><strong>One Dollar Stats</strong></td>
+            <td>$1/month</td>
+            <td>Page views (but cheaper!)</td>
+          </tr>
+          <tr style="background: #131313; border: 2px solid #3b82f6;">
+            <td><strong>OpenPanel</strong></td>
+            <td><strong>~$530/mo or FREE (self-hosted)</strong></td>
+            <td>
+              <strong
+                >Web + Product analytics. The full package. Open source. Your
+                data.</strong
+              >
+            </td>
+          </tr>
+        </tbody>
+      </table>
+
+      <figure class="screenshot">
+        <div class="screenshot-inner">
+          <div class="window-controls">
+            <div class="window-dot red"></div>
+            <div class="window-dot yellow"></div>
+            <div class="window-dot green"></div>
+          </div>
+          <div class="screenshot-image-wrapper">
+            <img
+              src="screenshots/profile-dark.webp"
+              alt="OpenPanel User Profiles"
+              width="1400"
+              height="800"
+            >
+          </div>
+        </div>
+        <figcaption>
+          User profiles - see individual user journeys and behavior. Something
+          web-only tools can't give you.
+        </figcaption>
+      </figure>
+
+      <figure class="screenshot">
+        <div class="screenshot-inner">
+          <div class="window-controls">
+            <div class="window-dot red"></div>
+            <div class="window-dot yellow"></div>
+            <div class="window-dot green"></div>
+          </div>
+          <div class="screenshot-image-wrapper">
+            <img
+              src="screenshots/report-dark.webp"
+              alt="OpenPanel Reports and Funnels"
+              width="1400"
+              height="800"
+            >
+          </div>
+        </div>
+        <figcaption>
+          Funnels, retention, and custom reports - the features you CAN'T get
+          with web-only tools
+        </figcaption>
+      </figure>
+
+      <h2>The Bottom Fucking Line</h2>
+
+      <p>
+        If you want to make good decisions about your product, you need to
+        understand what your users are actually doing. Not just where they're
+        from. Not just how many page views you got. You need to see the full
+        picture: funnels, retention, user behavior, conversion paths.
+      </p>
+
+      <p>You have three choices:</p>
+
+      <ol>
+        <li>
+          Keep using Google Analytics like a data-harvesting accomplice, adding
+          cookie banners, annoying your users, and contributing to the dystopian
+          surveillance economy
+        </li>
+        <li>
+          Pay $2,000+/month for Mixpanel or PostHog when you scale, or use
+          simple web-only analytics that tell you nothing about user
+          behavior—just where they're from
+        </li>
+        <li>
+          Use OpenPanel (affordable pricing or FREE self-hosted) and get the
+          full analytics suite: web analytics AND product analytics in one tool,
+          so you can actually understand what your users do
+        </li>
+      </ol>
+
+      <p>
+        If you picked option 1 or 2, I can't help you. You're beyond saving. Go
+        enjoy your complicated, privacy-violating, overpriced analytics life
+        where you know everything about where your users are from but nothing
+        about what they actually do.
+      </p>
+
+      <p>
+        But if you have even one functioning brain cell, you'll realize that
+        OpenPanel gives you everything you need—web analytics AND product
+        analytics—for a fraction of what the enterprise tools cost. You'll
+        finally understand what your users are doing, not just where the fuck
+        they're from.
+      </p>
+
+      <div class="cta">
+        <h2>Ready to understand what your users actually do?</h2>
+        <p>
+          Stop settling for vanity metrics. Get the full analytics suite—web
+          analytics AND product analytics—so you can make better decisions. Or
+          self-host for free.
+        </p>
+        <a href="https://openpanel.dev" target="_blank"
+          >Get Started with OpenPanel</a
+        >
+        <a
+          href="https://openpanel.dev/docs/self-hosting/self-hosting"
+          target="_blank"
+          >Self-Host Guide</a
+        >
+      </div>
+
+      <figure class="screenshot">
+        <div class="screenshot-inner">
+          <div class="window-controls">
+            <div class="window-dot red"></div>
+            <div class="window-dot yellow"></div>
+            <div class="window-dot green"></div>
+          </div>
+          <div class="screenshot-image-wrapper">
+            <img
+              src="screenshots/dashboard-dark.webp"
+              alt="OpenPanel Custom Dashboards"
+              width="1400"
+              height="800"
+            >
+          </div>
+        </div>
+        <figcaption>
+          Custom dashboards - build exactly what you need to understand your
+          product
+        </figcaption>
+      </figure>
+
+      <footer>
+        <p><strong>Just Fucking Use OpenPanel</strong></p>
+        <p>
+          Inspired by
+          <a
+            href="https://justfuckingusereact.com"
+            target="_blank"
+            rel="nofollow"
+            >justfuckingusereact.com</a
+          >, <a
+            href="https://justfuckingusehtml.com"
+            target="_blank"
+            rel="nofollow"
+            >justfuckingusehtml.com</a
+          >, and
+          <a
+            href="https://justfuckinguseonedollarstats.com"
+            target="_blank"
+            rel="nofollow"
+            >justfuckinguseonedollarstats.com</a
+          >
+          and all other just fucking use sites.
+        </p>
+        <p style="margin-top: 1rem;">
+          This is affiliated with
+          <a href="https://openpanel.dev" target="_blank" rel="nofollow"
+            >OpenPanel</a
+          >. We still love all products mentioned in this website, and we're
+          grateful for them and what they do 🫶
+        </p>
+      </footer>
+    </div>
+
+    <script>
+    'use strict';
+    window.op =
+      window.op ||
+      (() => {
+        var n = [];
+        return new Proxy(
+          function () {
+            arguments.length && n.push([].slice.call(arguments));
+          },
+          {
+            get(t, r) {
+              returnr === 'q'
+                ? n
+                : function () {
+                    n.push([r].concat([].slice.call(arguments)));
+                  };
+            },
+            has(t, r) {
+              returnr === 'q';
+            },
+          }
+        );
+      })();
+    window.op('init', {
+      clientId: '59d97757-9449-44cf-a8c1-8f213843b4f0',
+      trackScreenViews: true,
+      trackOutgoingLinks: true,
+      trackAttributes: true,
+    });
+    </script>
+    <script src="https://openpanel.dev/op1.js" defer async></script>
+  </body>
+</html>

apps/justfuckinguseopenpanel/wrangler.jsonc

@@ -0,0 +1,7 @@
+{
+  "name": "justfuckinguseopenpanel",
+  "compatibility_date": "2025-12-19",
+  "assets": {
+    "directory": "."
+  }
+}

apps/public/components/sections/supporter-perks.tsx

@@ -1,15 +1,15 @@
-import { cn } from '@/lib/utils';
 import {
   CheckIcon,
   HeartHandshakeIcon,
   MessageSquareIcon,
+  PackageIcon,
   RocketIcon,
   SparklesIcon,
   StarIcon,
   ZapIcon,
-  PackageIcon,
 } from 'lucide-react';
 import Link from 'next/link';
+import { cn } from '@/lib/utils';
 
 const perks = [
   {
@@ -52,17 +52,17 @@ export function SupporterPerks({ className }: { className?: string }) {
   return (
     <div
       className={cn(
-        'col gap-4 p-6 rounded-xl border bg-card',
+        'col gap-4 rounded-xl border bg-card p-6',
         'sticky top-24',
-        className,
+        className
       )}
     >
-      <div className="col gap-2 mb-2">
-        <div className="row gap-2 items-center">
+      <div className="col mb-2 gap-2">
+        <div className="row items-center gap-2">
           <HeartHandshakeIcon className="size-5 text-primary" />
           <h3 className="font-semibold text-lg">Supporter Perks</h3>
         </div>
-        <p className="text-sm text-muted-foreground">
+        <p className="text-muted-foreground text-sm">
           Everything you get when you support OpenPanel
         </p>
       </div>
@@ -72,42 +72,42 @@ export function SupporterPerks({ className }: { className?: string }) {
           const Icon = perk.icon;
           return (
             <div
-              key={index}
               className={cn(
-                'col gap-1.5 p-3 rounded-lg border transition-colors',
+                'col gap-1.5 rounded-lg border p-3 transition-colors',
                 perk.highlight
-                  ? 'bg-primary/5 border-primary/20'
-                  : 'bg-background border-border',
+                  ? 'border-primary/20 bg-primary/5'
+                  : 'border-border bg-background'
               )}
+              key={index}
             >
-              <div className="row gap-2 items-start">
+              <div className="row items-start gap-2">
                 <Icon
                   className={cn(
-                    'size-4 mt-0.5 shrink-0',
-                    perk.highlight ? 'text-primary' : 'text-muted-foreground',
+                    'mt-0.5 size-4 shrink-0',
+                    perk.highlight ? 'text-primary' : 'text-muted-foreground'
                   )}
                 />
-                <div className="col gap-0.5 flex-1 min-w-0">
-                  <div className="row gap-2 items-center">
+                <div className="col min-w-0 flex-1 gap-0.5">
+                  <div className="row items-center gap-2">
                     <h4
                       className={cn(
                         'font-medium text-sm',
-                        perk.highlight && 'text-primary',
+                        perk.highlight && 'text-primary'
                       )}
                     >
                       {perk.title}
                     </h4>
                     {perk.highlight && (
-                      <CheckIcon className="size-3.5 text-primary shrink-0" />
+                      <CheckIcon className="size-3.5 shrink-0 text-primary" />
                     )}
                   </div>
-                  <p className="text-xs text-muted-foreground">
+                  <p className="text-muted-foreground text-xs">
                     {perk.description}
                   </p>
                   {perk.href && (
                     <Link
+                      className="mt-1 text-primary text-xs hover:underline"
                       href={perk.href}
-                      className="text-xs text-primary hover:underline mt-1"
                     >
                       Learn more →
                     </Link>
@@ -119,12 +119,11 @@ export function SupporterPerks({ className }: { className?: string }) {
         })}
       </div>
 
-      <div className="mt-4 pt-4 border-t">
-        <p className="text-xs text-muted-foreground text-center">
+      <div className="mt-4 border-t pt-4">
+        <p className="text-center text-muted-foreground text-xs">
           Starting at <strong className="text-foreground">$20/month</strong>
         </p>
       </div>
     </div>
   );
 }
-

apps/public/content/articles/alternatives-to-mixpanel.mdx

@@ -1,187 +0,0 @@
----
-title: Find an alternative to Mixpanel
-description: A list of alternatives to Mixpanel, including open source and paid options.
-date: 2024-11-12
-updated: 2025-12-02
-team: OpenPanel Team
-tag: Comparison
-cover: /content/cover-alternatives.jpg
----
-
-> Want to understand how people use your website? You might think of using Mixpanel first. But it can be complex and hard to learn.
-
-Think about using something else that's just as good but simpler to use. A tool that makes collecting data easy without the struggle of learning complex features.
-
-Here's what a better website analytics tool can give you:
-- **Confidence**: Make choices based on data
-- **Efficiency**: Work faster with your analytics
-- **Ease**: Less complex, easier to learn
-
-## Understanding Website Analytics
-
-Website analytics helps you collect and understand website data. It shows you how people use your website.
-
-Since 2016, more companies have started using digital analytics. Companies now want to know how users behave, spot patterns, and make better choices using data.
-
-Just counting website visits isn't enough anymore. Understanding how users interact with your website can show you important insights and opportunities.
-
-Good website analytics helps you set goals, track progress, and make your website better. You need tools that are both powerful and easy to use.
-
-These tools turn raw numbers into useful insights, helping you stay ahead of others.
-
-## Introduction to Mixpanel
-
-Mixpanel is a powerful analytics tool that helps marketers, developers, and product managers understand how users behave on their websites and apps.
-
-Started in 2009, this platform changed how we look at data in real-time.
-
-Mixpanel helps teams track user engagement and keep users coming back.
-
-It tracks specific user actions instead of just page views, giving you better insights into what users do.
-
-Its dashboard shows real-time data clearly, helping teams make better decisions.
-
-Mixpanel remains a strong player in analytics, helping businesses improve their online presence.
-
-> See our detailed comparison: [OpenPanel vs Mixpanel](/compare/mixpanel-alternative)
-
-## Limitations of Mixpanel
-
-Despite its strengths, Mixpanel has several problems users need to deal with.
-
-First, [Mixpanel's pricing](/articles/mixpanel-pricing) is often too high. The cost of all its features may not make sense for smaller companies or startups, making it hard for growing businesses to use. Simply put, you might not get enough value for what you pay.
-
-Second, Mixpanel is hard to learn. New users often struggle with its complex interface.
-
-Third, Mixpanel doesn't work well with some important business tools. This makes it hard to connect all your data in one place.
-
-Lastly, setting up event tracking is difficult. Users need to carefully set up tracking for each action they want to monitor, which takes time and can lead to mistakes. This means teams often spend too much time setting things up instead of using the data right away.
-
-## The Need for Simpler Solutions
-
-In today's busy market, having easy-to-use analytics is key for business success.
-
-Simple tools help companies collect and understand data without confusion.
-
-These tools are easy to use and quick to set up, saving time and money. By making data collection and analysis simpler, businesses of any size can use analytics without needing technical experts or long training.
-
-More importantly, simple solutions help small and medium-sized businesses compete better. Good data insights can change how well a business does. With easy-to-use alternatives to Mixpanel, even businesses with small budgets can grow and make smart choices. Using these simple tools lets businesses focus on what matters—growing and succeeding.
-
-## Key Features to Look For
-
-When choosing a Mixpanel alternative, look for these important features:
-- Easy to set up
-- Real-time data
-- Simple to use
-- Good data charts and graphs
-
-First, it should be easy to connect with your website.
-
-The tool should show you data as it happens, helping you make quick decisions.
-
-It should be easy to use. A tool that's simple to understand saves time and is easier to learn.
-
-Good data charts are important. Look for tools that show data in ways that make sense to you.
-
-You should be able to change the tool to fit your needs.
-
-Lastly, it should be worth the money. The best tool gives you good features at a fair price.
-
-## Benefits of a Mixpanel Alternative
-
-Using a simpler alternative to Mixpanel can make your work easier and better.
-
-First, it's more efficient. Simpler tools are faster to learn and use, helping your team work better. When tools are easier to use, people enjoy using them more.
-
-Also, you can save money. Many alternatives do similar things as Mixpanel but cost less, letting you spend money on other important things while still getting good analytics.
-
-Finally, alternatives often let you customize more things to fit your needs. This helps you get better insights and make better plans.
-
-## Cost-Effectiveness
-
-> Choosing a simpler Mixpanel alternative can save you money and help you grow.
-
-The lower prices of many alternatives help you save money. You can use this saved money for other important things while still getting good analytics. These savings add up over time.
-
-**Key Benefits:**
-- Lower prices
-- Fewer extra features you don't need
-- Less training needed
-- Faster to start using
-
-In the end, saving money with alternatives isn't just about the price. By using simpler tools, businesses can balance cost and features better.
-
-## User-Friendly Interface
-
-> A simple, easy-to-use design means you can start using the data quickly, without lots of training.
-
-A big benefit of Mixpanel alternatives is how easy they are to use. This helps everyone use the tool well, no matter their tech skills.
-
-Simple navigation helps you work faster. Users can find what they need quickly and easily. By focusing on the main features, users don't get confused by too many options.
-
-**Impact:** When tools are easy to use, teams can do better work without getting frustrated. Clear dashboards show important information simply.
-
-## Customizable Reports
-
-> Your data, your way. Turn numbers into insights that help you take action.
-
-Custom reports let you see data how you want to. This saves time and helps you understand complex data better.
-
-A good Mixpanel alternative should have:
-- Easy drag-and-drop tools
-- Live data updates
-- Different ways to show charts
-
-## Data Accuracy
-
-> Accurate data helps you trust your analytics.
-
-In website analytics, good data is very important. It affects your decisions and results. With a Mixpanel alternative, getting accurate data is key.
-
-**Important Points:**
-- Data you can trust
-- Regular accuracy checks
-- Ongoing data testing
-- Building trust with your team
-
-## Real-Time Analytics
-
-> In today's fast-moving online world, seeing data right away helps you make better decisions.
-
-These tools let you watch how people use your website as it happens. You don't have to wait for reports; you see everything right away.
-
-**Impact:** Whether you're tracking clicks, page views, or sales, seeing data right away helps you fix problems quickly and find new opportunities.
-
-## Tips for Transitioning
-
-> A good switch starts with a clear plan and ends with confident users.
-
-Start by making a clear plan with goals and timelines. This helps everyone understand what's happening.
-
-**Best Steps:**
-1. Get your team involved early
-2. Train everyone well
-3. Test with a small project first
-4. Keep talking with your team
-5. Find team members who can help others
-
-## Future Trends in Website Analytics
-
-> As websites change, analytics tools are changing too, bringing new ways to understand data.
-
-**Important New Trends:**
-
-**AI tools**
-AI helps businesses not just understand what users did before, but guess what they might do next.
-
-**Privacy first analytics**
-With new privacy laws like GDPR and CCPA, companies are finding new ways to get insights while protecting user privacy.
-
-**Quick data updates**
-Getting data quickly helps businesses make faster, better decisions.
-
-By using these new tools, businesses can better understand their users and do better online.
-
-## Related Articles
-
-Looking for more options? Read our comprehensive guide on [9 best open source web analytics tools](/articles/open-source-web-analytics).

apps/public/content/articles/better-compliance-self-hosted-analytics.mdx

@@ -4,6 +4,7 @@ description: A practical guide to GDPR, CCPA, HIPAA, and other privacy regulatio
 tag: Guide
 team: OpenPanel Team
 date: 2025-12-08
+updated: 2026-02-07
 cover: /content/compliance.jpg
 ---
 
@@ -267,7 +268,7 @@ Self-hosting eliminates third-party data sharing, which simplifies compliance wi
 </FaqItem>
 
 <FaqItem question="Can I migrate from Google Analytics to OpenPanel?">
-Yes. OpenPanel can replace Google Analytics for most use cases. We offer both web analytics and product analytics features. Check our comparison with other platforms like the [Google Analytics alternative](/compare/google-analytics-alternative) page.
+Yes. OpenPanel can replace Google Analytics for most use cases. We offer both [web analytics](/features/web-analytics) and product analytics features. Check our comparison with other platforms like the [Google Analytics alternative](/compare/google-analytics-alternative) page.
 </FaqItem>
 
 <FaqItem question="Is OpenPanel open source?">

apps/public/content/articles/bullmq-alternative.mdx

@@ -1,7 +1,8 @@
 ---
-title: A BullMQ Alternative for Grouped Job Processing
-description: An open-source queue system that eliminates race conditions through intelligent job grouping, perfect for high-throughput event processing pipelines
+title: "BullMQ Alternative: GroupMQ for Sequential Job Processing Without Race Conditions"
+description: "Tired of race conditions with BullMQ? GroupMQ is a free, open-source alternative that processes grouped jobs sequentially — no locks, no Pro license needed."
 date: 2025-10-31
+updated: 2026-02-12
 team: OpenPanel Team
 tag: Article
 cover: /content/bullmq-alternative.jpg
@@ -53,7 +54,7 @@ Here's what makes GroupMQ special:
 
 GroupMQ shines in scenarios where you need to maintain order within related operations:
 
-**Analytics Processing**: Process events from the same user sequentially to maintain accurate session tracking and prevent duplicate counting.
+**Analytics Processing**: Process events from the same user sequentially to maintain accurate [session tracking](/features/session-tracking) and prevent duplicate counting.
 
 **E-commerce Orders**: Handle order updates, payment processing, and inventory changes for the same order ID without race conditions.
 

apps/public/content/articles/cookieless-analytics.mdx

@@ -1,93 +1,195 @@
 ---
-title: Cookieless Analytics
-description: Discover how to gather meaningful insights without cookies and why OpenPanel makes it effortless.
+title: "Cookieless Analytics: Best Tools & How They Work in 2026"
+description: "The complete guide to cookieless analytics platforms. Compare the best cookie-free analytics tools, learn how tracking without cookies works, and find the right solution for your site."
 tag: Guide
 team: OpenPanel Team
 date: 2025-06-17
-updated: 2025-12-02
+updated: 2026-02-16
 cover: /content/cookieless-analytics.jpg
 ---
+import { Faqs, FaqItem } from '@/components/faq';
+import { Figure } from '@/components/figure';
 
-The age of tracking everyone, everywhere, with endless cookies is fading fast. Today’s users expect both useful experiences and respect for their privacy. Enter **cookieless analytics**—a smarter way to understand your audience without leaving a trail of crumbs behind. In this guide, we’ll unpack why this approach matters, and how you can get up and running in minutes with OpenPanel.
+Third-party cookies are dying. Safari and Firefox blocked them years ago. Chrome is finally following through. And privacy regulations keep getting stricter.
 
-## What Is Cookieless Analytics, Really?
+If your analytics still depends on cookies, you're working with incomplete data — and possibly breaking the law. **Cookieless analytics** gives you accurate visitor insights without cookies, consent banners, or compliance headaches.
 
-Put simply, it’s tracking without relying on third-party cookies. Instead of stuffing bits of data into a user’s browser, you pivot to methods like:
+This guide covers how cookieless tracking works, why it matters, and which tools do it best.
 
-* **Server-side events.** Capture interactions directly on your backend.
-* **Session-based identifiers.** Tie actions together during a visit—then discard the identifier when they leave.
-* **First-party data.** Use your own signup forms, preferences, and logs.
-* **Device fingerprints** (used sparingly). Hash together non-identifying signals like screen size and language.
+## Why Cookies Are Going Away
 
-Each of these respects privacy laws and keeps you off users’ “block” lists—without sacrificing insights.
+The shift away from cookies didn't happen overnight. It's been building for years.
 
-## Why Ditch Cookies? Four Big Wins
+### Browser restrictions
 
-### 1. Stay Ahead of Privacy Laws
+Safari's Intelligent Tracking Prevention (ITP) started blocking third-party cookies in 2017. Firefox followed with Enhanced Tracking Protection in 2019. Both browsers now block third-party cookies by default and limit first-party cookie lifetimes.
 
-Regulations like GDPR and CCPA aren’t going away. By design, cookieless systems:
+Chrome — which holds roughly 65% of browser market share — announced its cookie deprecation plans in 2020. After multiple delays, Google is now phasing out third-party cookies through its Privacy Sandbox initiative. The timeline has shifted, but the direction is clear: third-party cookies are on borrowed time.
 
-* Avoid endless consent banners
-* Keep you clear of hefty fines
-* Show customers you take privacy seriously
+### Privacy regulations
 
-### 2. Delight Your Visitors
+GDPR requires explicit consent before setting non-essential cookies. That means cookie banners, consent management platforms, and the constant risk of getting it wrong. Fines can reach €20 million or 4% of global revenue.
 
-Nothing disrupts a first impression like a pop-up you can’t close. With cookieless analytics:
+CCPA, Brazil's LGPD, and similar laws in other regions add their own requirements. The regulatory trend is unmistakable: more restrictions, not fewer.
 
-* Pages load faster
-* There are no nagging “Accept cookies?” prompts
-* Your site works even when someone’s browser is locked down
+### Ad blockers and privacy tools
 
-### 3. Future-Proof Your Data
+Over 40% of internet users run ad blockers or privacy tools. Most of these block analytics cookies too. That means cookie-based analytics is already missing a large chunk of your traffic.
 
-Browsers are phasing out third-party cookies (Safari, Firefox already have). A cookieless stack means:
+### The result
 
-* No last-minute scrambling when Chrome follows suit
-* Compatibility with privacy-focused browsers
-* A sustainable analytics foundation
+If you're still relying on cookies for analytics, you're getting incomplete data from a shrinking pool of users — and jumping through legal hoops to do it. Cookieless analytics solves all three problems at once.
 
-### 4. Cleaner, More Trustworthy Insights
+## How Cookieless Tracking Works
 
-When you rely on your own data sources:
+Cookieless analytics doesn't mean you stop collecting data. It means you collect it differently. Here are the main approaches:
 
-* You reduce duplicate or incomplete sessions
-* You focus on active, consenting users
-* Your reports match your real user base
+### Server-side tracking
 
-## Why OpenPanel Shines for Cookieless Tracking
+Instead of running JavaScript that sets cookies in the browser, server-side tracking captures events on your backend. The user's browser never receives a tracking cookie because the data collection happens on your server.
 
-We built OpenPanel from the ground up with privacy at its heart—and with features you actually need:
+This approach is immune to ad blockers, doesn't require consent banners for basic analytics, and gives you more control over what data you collect.
 
-> See how OpenPanel compares to other cookieless analytics tools: [OpenPanel vs Plausible](/compare/plausible-alternative) | [OpenPanel vs Fathom](/compare/fathom-alternative)
+### Session-based identifiers
 
-### Privacy by Default
+Some tools create a temporary, non-persistent identifier for each visit. This ties actions together during a single session — page views, clicks, form submissions — without storing anything in the browser. When the session ends, the identifier is discarded.
 
-* **Zero cookies.** Ever.
-* **GDPR & CCPA compliant.** Out of the box.
-* **Transparent data policies.** Your users know what’s collected and why.
+This gives you meaningful session-level data (bounce rate, pages per visit, conversion paths) without the privacy implications of persistent tracking.
 
-### Powerful, Yet Simple Analytics
+### First-party data
 
-* **Real-time dashboards.** Watch events as they happen.
-* **Custom events & properties.** Track anything from “add to wishlist” to “video watched.”
-* **Rich reports.** Dive deep on funnels, retention, and user journeys.
+Your own signup forms, user accounts, and preference settings are first-party data. You collected it directly from the user with their knowledge. Cookieless analytics tools can combine anonymous session data with authenticated user data when someone logs in — no cookies needed.
 
-### Plug-and-Play Setup
+### Hashed identifiers
 
-1. **Drop in our script:** Copy–paste, and you’re live.
-2. **Pick your SDK:** JavaScript, Python, Go… whatever fits.
-3. **Start tracking in minutes.** No extra configuration.
+Some tools generate a daily hash from non-identifying signals like the visitor's IP address, user agent, and screen size. This lets you count unique visitors without storing personal data or setting cookies. The hash changes daily, so there's no long-term tracking.
 
-### Open Source & Self-Hosted Option
+OpenPanel uses this approach: a daily rotating hash that counts unique visitors accurately without storing any personal information.
 
-* **Inspect the code.** Full transparency.
-* **Self-host if you choose.** Keep data on your servers.
-* **No vendor lock-in.** Export anytime.
+## Best Cookieless Analytics Tools Compared
 
-## Quick Start: Two Steps to Cookieless Insights
+Not all cookieless analytics tools are the same. Some focus on simple pageview tracking. Others offer full product analytics with funnels, retention, and user journeys. Here's how the main options compare:
 
-1. **Add the tracking snippet**
+| Tool | Type | Cookieless | Open Source | Self-Host | Cloud Pricing (from) | Best For |
+|------|------|-----------|-------------|-----------|---------------------|----------|
+| **OpenPanel** | Web + Product | Yes | Yes (AGPL-3.0) | Free | $2.50/mo | Teams wanting product analytics without cookies |
+| **Plausible** | Web | Yes | Yes (AGPL-3.0) | Free | $9/mo | Simple, lightweight pageview analytics |
+| **Fathom** | Web | Yes | No | No | $15/mo | Privacy-focused teams wanting managed hosting |
+| **Simple Analytics** | Web | Yes | No | No | $9/mo | Simplest possible analytics setup |
+| **Pirsch** | Web | Yes | Yes (AGPL-3.0) | License | $6/mo | Server-side analytics without JavaScript |
+
+### OpenPanel
+
+<Figure
+  src="/content/tools/openpanel.png"
+  caption="OpenPanel's web analytics dashboard — cookieless by default"
+/>
+
+[OpenPanel](/) is an open source analytics platform that combines web analytics and product analytics — all without cookies. You get pageviews and traffic sources alongside funnels, retention, custom events, and user journeys.
+
+**What sets it apart:** Most cookieless tools only track pageviews. OpenPanel gives you Mixpanel-level product analytics (event tracking, [funnels](/features/funnels), [retention](/features/retention), user properties) without setting a single cookie. And you can [self-host it for free](/articles/how-to-self-host-openpanel).
+
+- Zero cookies, ever
+- GDPR and CCPA compliant out of the box
+- Real-time dashboards
+- Custom events and properties
+- Open source with full self-hosting support
+- Starts at $2.50/month on cloud
+
+### Plausible
+
+<Figure
+  src="/content/tools/plausible.png"
+  caption="Plausible's minimal analytics dashboard"
+/>
+
+[Plausible](/compare/plausible-alternative) is a lightweight, privacy-first web analytics tool. It tracks pageviews, referral sources, and basic engagement metrics without cookies.
+
+**Best for:** Sites that need simple traffic stats and nothing more. If you don't need event tracking, funnels, or user-level analytics, Plausible keeps things minimal.
+
+- Under 1 KB script size
+- No cookies, no consent banner needed
+- Self-hostable (community edition)
+- Starts at $9/month on cloud
+
+### Fathom
+
+<Figure
+  src="/content/tools/fathom.png"
+  caption="Fathom's privacy-focused analytics dashboard"
+/>
+
+[Fathom](/compare/fathom-alternative) is a privacy-focused, managed analytics tool. It handles cookieless tracking, EU isolation, and compliance so you don't have to think about it.
+
+**Best for:** Teams that want a fully managed solution with zero maintenance. Fathom handles all the infrastructure and compliance details.
+
+- Cookieless by default
+- EU data isolation available
+- Managed hosting only (no self-host)
+- Starts at $15/month
+
+### Simple Analytics
+
+[Simple Analytics](/compare/simple-analytics-alternative) does exactly what its name suggests: simple, privacy-friendly analytics with no cookies, no tracking scripts on the user's device, and a clean dashboard.
+
+**Best for:** Teams that want the absolute simplest analytics setup. No configuration, no complex features — just traffic data.
+
+- No cookies, no fingerprinting
+- Lightweight script
+- AI-powered insights
+- Starts at $9/month
+
+### Pirsch
+
+<Figure
+  src="/content/tools/pirsch.png"
+  caption="Pirsch's server-side analytics dashboard"
+/>
+
+Pirsch takes a different approach entirely: server-side only analytics. There's no JavaScript snippet to load. Instead, you send events from your backend, which means ad blockers can't interfere.
+
+**Best for:** Developers who want 100% accurate tracking that can't be blocked by browser extensions.
+
+- Server-side only, no JavaScript needed
+- Cookie-free by design
+- Open source core
+- Starts at $6/month
+
+## Cookieless Analytics vs Traditional Analytics
+
+Switching from cookie-based analytics (like Google Analytics) to a cookieless platform isn't just a privacy upgrade. It changes what data you get and how you use it.
+
+### What you gain
+
+**Accurate visitor counts.** Cookie-based analytics misses users who block cookies, use private browsing, or decline consent banners. Cookieless tools track everyone because there's nothing to block or decline.
+
+**No consent banners.** If your analytics tool doesn't set cookies, most privacy laws don't require a consent banner for basic analytics. That means no pop-ups, faster page loads, and better user experience.
+
+**Simpler compliance.** No cookies means no cookie audits, no consent management platforms, no records of consent, and no worrying about which cookies are "strictly necessary." Your legal team will thank you.
+
+**Faster pages.** Cookie-based analytics scripts are typically larger and heavier. Most cookieless tools use lightweight scripts under 5 KB. Some, like Pirsch, use no client-side script at all.
+
+**Future-proof data.** Your analytics won't break when Chrome finishes deprecating third-party cookies. You're already ahead.
+
+### What you lose
+
+**Cross-session user tracking (mostly).** Without persistent cookies, you can't easily track the same anonymous visitor across multiple sessions over weeks or months. If a user visits Monday and returns Thursday, most cookieless tools count that as two separate visitors.
+
+However, this matters less than you think. Once a user logs in or signs up, you can track them across sessions using your own first-party data. Tools like OpenPanel support this with authenticated user identification.
+
+**Some Google Analytics features.** GA's remarketing audiences, cross-domain tracking, and integration with Google Ads all rely on cookies. If you depend on these, you'll need alternative approaches.
+
+**Attribution modeling.** Multi-touch attribution across long time windows gets harder without persistent identifiers. But honestly, cookie-based attribution was never as accurate as people assumed — it was already broken by ad blockers and browser restrictions.
+
+### The bottom line
+
+For most sites, cookieless analytics gives you *more* accurate data (because nothing is blocked) while removing the legal and UX overhead of cookie consent. The tradeoff — less cross-session anonymous tracking — is increasingly irrelevant as cookies disappear anyway.
+
+## Getting Started with Cookieless Analytics
+
+Setting up OpenPanel takes about two minutes. No cookies, no consent banners, no complex configuration.
+
+### 1. Add the tracking snippet
 
 ```html
 <script>
@@ -102,18 +204,54 @@ We built OpenPanel from the ground up with privacy at its heart—and with featu
 <script src="https://openpanel.dev/op1.js" defer async></script>
 ```
 
-2. **Fire off your first event**
+### 2. Track custom events
 
 ```javascript
-// Simple click
 window.op('track', 'signup_button_clicked');
 
-// Purchase with details
 window.op('track', 'order_placed', {
-  orderId: 'ORD-20250617-001',
+  orderId: 'ORD-20260216-001',
   revenue: 49.95,
   currency: 'EUR',
 });
 ```
 
-That’s it—you’re capturing all the user interactions you need, cookie-free.
+That's it. You're collecting analytics data without cookies, without consent banners, and without compromising on the insights you need.
+
+Want full control over your data? You can also [self-host OpenPanel](/articles/how-to-self-host-openpanel) on your own infrastructure for free.
+
+## FAQ
+
+<Faqs>
+<FaqItem question="What is cookieless analytics?">
+Cookieless analytics is a way to track website and app usage without storing cookies in the visitor's browser. Instead, it uses techniques like server-side tracking, session-based identifiers, and hashed signals to collect data. This avoids the need for cookie consent banners and improves compliance with privacy regulations like GDPR and CCPA.
+</FaqItem>
+
+<FaqItem question="Is cookieless analytics GDPR compliant?">
+Cookieless analytics makes GDPR compliance significantly easier. Since no cookies are set, you typically don't need a cookie consent banner for basic analytics. However, GDPR applies to all personal data processing, not just cookies. Choose a tool that minimizes data collection and offers EU data hosting or self-hosting. OpenPanel is GDPR compliant by design — it collects no personal data and can be [self-hosted](/articles/how-to-self-host-openpanel) on your own EU servers.
+</FaqItem>
+
+<FaqItem question="Do I still need a cookie banner with cookieless analytics?">
+For basic analytics, no. Cookie consent banners are required when your site sets non-essential cookies. If your analytics tool doesn't use cookies at all — like OpenPanel, Plausible, or Fathom — you don't need a cookie banner specifically for analytics. You may still need one if other parts of your site use cookies (marketing tools, chat widgets, etc.).
+</FaqItem>
+
+<FaqItem question="How accurate is cookieless analytics compared to Google Analytics?">
+Cookieless analytics is often *more* accurate than Google Analytics for basic metrics like pageviews and unique visitors. That's because cookie-based analytics misses users who block cookies, use ad blockers, or decline consent banners — which can be 30-40% of traffic. Cookieless tools capture these visitors because there's nothing to block or decline.
+</FaqItem>
+
+<FaqItem question="Can cookieless analytics track individual users?">
+Cookieless analytics tracks anonymous sessions by default. However, once a user logs in or identifies themselves, tools like OpenPanel can associate their activity with a user profile using first-party data. This gives you user-level analytics (funnels, retention, journeys) for authenticated users without ever needing a cookie.
+</FaqItem>
+
+<FaqItem question="What is the best cookieless analytics platform?">
+It depends on your needs. For teams that want both web analytics and product analytics (funnels, retention, events) without cookies, [OpenPanel](/) is the best option — it's open source, self-hostable, and starts at $2.50/month. For simple pageview tracking, [Plausible](/compare/plausible-alternative) is the most popular choice. For fully managed, zero-maintenance analytics, [Fathom](/compare/fathom-alternative) is worth considering.
+</FaqItem>
+
+<FaqItem question="Is Google Analytics cookieless?">
+No. Google Analytics (GA4) still uses first-party cookies by default. Google has introduced a "cookieless measurement" mode, but it relies on Google's modeling and machine learning to estimate data — it doesn't actually track without cookies in the same way purpose-built cookieless tools do. For genuine cookieless analytics, you need a tool designed for it from the ground up.
+</FaqItem>
+
+<FaqItem question="Can I use cookieless analytics with a self-hosted setup?">
+Yes. Several cookieless analytics tools support self-hosting, which gives you full data ownership and the strongest possible privacy posture. OpenPanel, Plausible, and Pirsch all offer self-hosted options. With self-hosting, your analytics data never leaves your own servers. See our guide on [self-hosted analytics and compliance](/articles/better-compliance-self-hosted-analytics) for more details.
+</FaqItem>
+</Faqs>

apps/public/content/articles/how-to-create-a-funnel.mdx

@@ -4,11 +4,12 @@ description: Funnels are powerful tools that help you understand how users move
 tag: Guide
 team: OpenPanel Team
 date: 2025-03-31
+updated: 2026-02-07
 cover: /content/funnels.jpg
 ---
 import { Figure } from "@/components/figure";
 
-Funnels are powerful tools that help you understand how users move through your website or app. In this guide, we'll walk you through everything you need to know about creating and using funnels effectively.
+[Funnels](/features/funnels) are powerful tools that help you understand how users move through your website or app. In this guide, we'll walk you through everything you need to know about creating and using funnels effectively.
 
 ## What is a Funnel?
 
@@ -66,7 +67,7 @@ Before you change report type you'll see a linear chart with a line for each eve
 
 ### 4. Understanding Your Funnel Results
 
-When your funnel is ready, you'll see a visualization that tells an important story. Let's say 1,000 people view a recipe - that's the top of your funnel. If 175 of those people save the recipe, your conversion rate is 17.5%. This number tells you how well this part of your process is working.
+When your funnel is ready, you'll see a visualization that tells an important story. Let's say 1,000 people view a recipe - that's the top of your funnel. If 175 of those people save the recipe, your [conversion rate](/features/conversion) is 17.5%. This number tells you how well this part of your process is working.
 
 > In this example we just did a 2-step-funnel, you can have as many steps as you want, but we recommend around 3-5.
 

apps/public/content/articles/how-to-export-data-from-umami.mdx

@@ -2,6 +2,7 @@
 title: How to Export Data from Umami Analytics
 description: Learn how to export your analytics data from Umami for migration or backup
 date: 2025-10-30
+updated: 2026-02-07
 cover: /content/export-data-from-umami.jpg
 tag: Guide
 team: OpenPanel Team
@@ -16,7 +17,7 @@ import { Figure } from '@/components/figure'
   caption="Running the OpenPanel Umami exporter to export analytics data from Umami"
 />
 
-When it comes to web analytics, having control over your data is crucial. Whether you're planning to switch analytics platforms, need to create backups, or want to analyze your data in specialized tools, being able to export your Umami Analytics data is essential.
+When it comes to [web analytics](/features/web-analytics), having control over your data is crucial. Whether you're planning to switch analytics platforms, need to create backups, or want to analyze your data in specialized tools, being able to export your Umami Analytics data is essential.
 
 The challenge is that Umami handles data export differently depending on whether you're using their cloud service or self-hosting. This guide will walk you through both scenarios and help you understand why you might want to consider alternatives like OpenPanel for your analytics needs.
 
@@ -83,7 +84,7 @@ We built OpenPanel with the understanding that modern websites need more than ju
 
 One key difference is real-time data processing. With our platform, you see visitor activity as it happens, not with the delays common in batch-processing systems. This immediacy helps you respond quickly to traffic spikes, marketing campaigns, or technical issues.
 
-Our event tracking goes beyond simple pageviews. You can track custom events, user interactions, and conversion funnels without writing complex code. Our platform automatically captures many interactions that would require manual setup in Umami.
+Our [event tracking](/features/event-tracking) goes beyond simple pageviews. You can track custom events, user interactions, and [conversion funnels](/features/funnels) without writing complex code. Our platform automatically captures many interactions that would require manual setup in Umami.
 
 Our filtering and segmentation capabilities are also more advanced. You can create complex queries to understand specific user segments, compare time periods with more flexibility, and build custom dashboards that focus on your key metrics.
 

apps/public/content/articles/how-to-secure-ubuntu-server.mdx

@@ -4,6 +4,7 @@ description: Learn essential steps to secure your Ubuntu server, including user
 tag: Hosting
 team: OpenPanel Team
 date: 2024-11-14
+updated: 2026-02-12
 cover: /content/secure-server.jpg
 ---
 

apps/public/content/articles/how-to-self-host-openpanel.mdx

@@ -2,7 +2,7 @@
 title: How to Self-Host OpenPanel Analytics Platform
 description: Learn how to self-host OpenPanel web analytics platform. Step-by-step guide to install and configure your own analytics server for better privacy and cost savings.
 date: 2025-02-28
-updated: 2025-12-02
+updated: 2026-02-07
 cover: /content/how-to-self-host-openpanel.jpg
 tag: Guide
 team: OpenPanel Team
@@ -22,7 +22,7 @@ cd openpanel/self-hosting
 
 ## Why Self-Host Your Own Analytics Platform?
 
-Looking for a [Mixpanel alternative](/articles/alternatives-to-mixpanel)? Self-hosting your own web analytics and product analytics platform comes with several benefits. Let's break down the pros and cons of running your own analytics server.
+Looking for a [Mixpanel alternative](/articles/alternatives-to-mixpanel)? Self-hosting your own [web analytics](/features/web-analytics) and product analytics platform comes with several benefits. Let's break down the pros and cons of running your own analytics server.
 
 For a comparison of all open source analytics platforms, see our [comprehensive guide to open source web analytics tools](/articles/open-source-web-analytics).
 

apps/public/content/articles/introduction-to-openpanel.mdx

@@ -4,7 +4,7 @@ description: OpenPanel is a versatile analytics platform that offers a wide arra
 tag: Introduction
 team: OpenPanel Team
 date: 2024-11-09
-updated: 2025-12-02
+updated: 2026-02-07
 ---
 
 Welcome to OpenPanel, the open-source analytics platform designed to be a robust alternative to Mixpanel and a great substitute for Google Analytics. In this article, we'll explore why OpenPanel is the ideal choice for businesses looking to leverage powerful analytics while maintaining control over their data.
@@ -15,7 +15,7 @@ At OpenPanel, we are committed to the principles of open-source software. By mak
 
 ## Why Choose OpenPanel?
 
-Our journey began with a vision to create an open-source alternative to Mixpanel, a tool we admired for its product analytics capabilities. However, as we developed OpenPanel, we realized the potential to offer more comprehensive features that Mixpanel lacked, particularly in the realm of web analytics. While Mixpanel excels in product analytics, it doesn't fully address web analytics needs. OpenPanel bridges this gap by integrating both web and product analytics, providing a holistic view of user behavior.
+Our journey began with a vision to create an open-source alternative to Mixpanel, a tool we admired for its product analytics capabilities. However, as we developed OpenPanel, we realized the potential to offer more comprehensive features that Mixpanel lacked, particularly in the realm of [web analytics](/features/web-analytics). While Mixpanel excels in product analytics, it doesn't fully address web analytics needs. OpenPanel bridges this gap by integrating both web and product analytics, providing a holistic view of user behavior.
 
 For a detailed comparison with other tools, see our guide on [open source web analytics](/articles/open-source-web-analytics).
 
@@ -25,8 +25,8 @@ OpenPanel is a versatile analytics platform that offers a wide array of features
 
 -   **Web Analytics**: Gain insights similar to tools like Plausible, Fathom, and Simple Analytics.
 -   **Product Analytics**: Analyze product usage and user interactions, akin to Mixpanel.
--   **User Retention**: Track and enhance user retention rates.
--   **Funnels**: Visualize user journeys and conversion paths.
+-   **[User Retention](/features/retention)**: Track and enhance user retention rates.
+-   **[Funnels](/features/funnels)**: Visualize user journeys and [conversion paths](/features/conversion).
 -   **Events**: Monitor specific user actions and interactions.
 -   **Profiles**: Create detailed user profiles to better understand your audience.
 -   **Real-Time View**: Display real-time data on a big monitor in your office for dynamic insights.

apps/public/content/articles/mixpanel-alternatives.mdx

@@ -1,7 +1,8 @@
 ---
-title: Mixpanel Alternatives - 4 Best Options for Product Analytics
-description: Looking for Mixpanel alternatives? Compare pricing, features, and privacy options among the best product analytics tools including open-source solutions.
 date: 2025-07-18
+title: "13 Best Product Analytics Tools in 2026 (Ranked & Compared)"
+description: "Compare the best product analytics tools in 2026. Side-by-side pricing, features, and privacy comparison of 13 platforms — including open source, self-hosted, and free options for every team size."
+updated: 2026-02-16
 tag: Comparison
 team: OpenPanel Team
 cover: /content/cover-alternatives.jpg
@@ -9,7 +10,7 @@ cover: /content/cover-alternatives.jpg
 import { Faqs, FaqItem } from '@/components/faq';
 import { Figure } from '@/components/figure'
 
-Mixpanel revolutionized product analytics by making it easy to track user behavior beyond simple pageviews. But as powerful as it is, many teams are searching for Mixpanel alternatives that better fit their needs, budget, or privacy requirements.
+Mixpanel revolutionized product analytics by making it easy to track user behavior beyond simple pageviews. But as powerful as it is, many teams are searching for Mixpanel alternatives and competitors that better fit their needs, budget, or privacy requirements. Whether you need a free open source option you can self-host or an affordable cloud tool, there are strong alternatives worth considering in 2026.
 
 The surge in demand for Mixpanel alternatives stems from several pain points that teams frequently encounter:
 
@@ -23,7 +24,21 @@ The surge in demand for Mixpanel alternatives stems from several pain points tha
 
 **Self-hosting Requirements**: Some organizations, particularly in regulated industries, need to keep analytics data within their own infrastructure. Mixpanel's cloud-only approach doesn't accommodate these security and compliance requirements.
 
-In this guide, we'll explore the top 5 Mixpanel alternatives specifically designed for product analytics. Whether you're looking to reduce costs, improve privacy, or gain more flexibility, there's an alternative that fits your needs. If you're also interested in web analytics tools, check out our guide to [open-source web analytics](/articles/open-source-web-analytics).
+In this guide, we'll explore 13 Mixpanel alternatives — 7 in-depth reviews of the strongest competitors plus 6 honorable mentions worth knowing about. Whether you're looking to reduce costs, improve privacy, or gain more flexibility, there's an alternative that fits your needs. If you're also interested in [web analytics](/features/web-analytics) tools, check out our guide to [open-source web analytics](/articles/open-source-web-analytics).
+
+Here's a quick comparison of all 7 top alternatives:
+
+| Tool | Type | Open Source | Self-Host | Free Tier | Paid From | Best For |
+|------|------|-------------|-----------|-----------|-----------|----------|
+| [**OpenPanel**](#1-openpanel---the-privacy-first-alternative) | Web + Product | Yes (AGPL-3.0) | Free | 30-day trial | $2.50/mo | Affordable, privacy-first product analytics |
+| [**PostHog**](#2-posthog---the-all-in-one-platform) | Product + More | Yes (MIT) | Free | 1M events/mo | Usage-based | All-in-one: analytics + replay + flags |
+| [**Heap**](#3-heap---the-autocapture-alternative) | Product | No | No | 10K sessions/mo | ~$3,600/yr | Autocapture and retroactive analysis |
+| [**Amplitude**](#4-amplitude---the-enterprise-alternative) | Product | No | No | 10M events/mo | Contact sales | Enterprise ML-powered analytics |
+| [**Pendo**](#5-pendo---the-product-experience-alternative) | Product + UX | No | No | 500 users | Contact sales | Analytics + in-app guides + feedback |
+| [**Matomo**](#6-matomo---the-privacy-focused-on-premise-alternative) | Web + Product | Yes (GPL-3.0) | Free | Self-hosted free | €23/mo (cloud) | Privacy-first, GDPR-compliant analytics |
+| [**GA4**](#7-google-analytics-4---the-free-enterprise-alternative) | Web + Product | No | No | 25M events/mo | ~$50K/yr (360) | Free analytics at scale, Google ecosystem |
+
+Now let's look at what matters when choosing a Mixpanel alternative, then dive deep into each tool.
 
 <Figure
   src="/content/mixpanel.png"
@@ -37,9 +52,9 @@ Before diving into specific tools, let's establish what features are essential f
 
 ### Core Product Analytics Features
 
-**Event Tracking**: The foundation of product analytics. You need to track custom events like signups, purchases, feature usage, and any user action that matters to your business. The tool should support [event properties and user properties](/docs/api/track#tracking-events) for rich data collection.
+**[Event Tracking](/features/event-tracking)**: The foundation of product analytics. You need to track custom events like signups, purchases, feature usage, and any user action that matters to your business. The tool should support [event properties and user properties](/docs/api/track#tracking-events) for rich data collection.
 
-**Funnel Analysis**: Understanding conversion rates through multi-step processes is crucial. Whether it's onboarding, checkout, or feature adoption, you need to visualize where users drop off and optimize accordingly.
+**[Funnel Analysis](/features/funnels)**: Understanding [conversion rates](/features/conversion) through multi-step processes is crucial. Whether it's onboarding, checkout, or feature adoption, you need to visualize where users drop off and optimize accordingly.
 
 **Retention Analytics**: Track how often users return and engage with your product over time. Look for cohort analysis, retention curves, and the ability to segment users by behavior patterns.
 
@@ -98,7 +113,7 @@ All plans include unlimited websites, team members, and 5 years of data retentio
 
 **Funnel Builder**: Create multi-step funnels to analyze conversion rates. Visualize drop-off points and optimize user flows.
 
-**Retention Analysis**: Understand user stickiness with cohort retention charts. Track daily, weekly, or monthly retention patterns.
+**[Retention Analysis](/features/retention)**: Understand user stickiness with cohort retention charts. Track daily, weekly, or monthly retention patterns.
 
 **Individual User Profiles**: Drill down into specific user journeys. See complete event timelines for debugging or customer support.
 
@@ -338,6 +353,181 @@ Amplitude's pricing isn't publicly available for paid tiers, but their free tier
 - Teams needing advanced data governance
 - Organizations with large free tier requirements
 
+## 5. Pendo - The Product Experience Alternative
+
+### Overview
+
+Pendo goes beyond traditional product analytics by combining behavioral tracking with in-app guidance, user feedback, and product planning tools. It's designed for product managers who want to understand how users interact with their product and then act on those insights directly within the application.
+
+Where Mixpanel focuses purely on analytics, Pendo helps you close the loop: analyze behavior, then deploy targeted in-app guides, tooltips, and announcements to improve adoption and onboarding without writing code.
+
+- **Homepage**: [pendo.io](https://pendo.io)
+- **Free Tier**: Up to 500 monthly active users
+- **License**: Proprietary
+
+### Pricing
+
+Pendo's pricing is based on monthly active users (MAUs) rather than events:
+
+| Plan | MAUs | Price | Features |
+|------|------|-------|----------|
+| Free | Up to 500 | $0 | Core analytics, 1 guide |
+| Base | Custom | Contact sales | Analytics, guides, NPS |
+| Core | Custom | Contact sales | Full platform, roadmapping |
+| Pulse | Custom | Contact sales | Enterprise features, SLAs |
+
+*Note: Pendo's paid plans typically start at $7,000-12,000/year depending on MAU count and features.*
+
+### Key Features
+
+**Product Analytics**: Event tracking, funnels, paths, and retention analysis similar to Mixpanel's core offering.
+
+**In-App Guides**: Create tooltips, walkthroughs, and onboarding flows without code. Target users based on behavior segments.
+
+**NPS & Surveys**: Collect user feedback directly within your product with built-in NPS, polls, and surveys.
+
+**Product Planning**: Roadmapping tools that connect user feedback and analytics data to product decisions.
+
+**Session Replay**: Watch user sessions to understand behavior in context (add-on feature).
+
+### Pros
+- Combines analytics with actionable in-app guidance
+- No-code guide builder for product managers
+- Built-in NPS and user feedback collection
+- Strong onboarding optimization capabilities
+- Good mobile analytics support
+
+### Cons
+- Expensive — paid plans start at $7,000+/year
+- Not open source — full vendor lock-in
+- Analytics are less deep than dedicated tools like Mixpanel
+- Heavier SDK can impact page performance
+- Free tier limited to 500 MAUs
+
+<Faqs>
+<FaqItem question="How does Pendo compare to Mixpanel for analytics?">
+Mixpanel is stronger for pure analytics — deeper funnels, more flexible queries, and better data exploration. Pendo's analytics are competent but simpler. The real value of Pendo is combining analytics with in-app guides and feedback, which Mixpanel doesn't offer at all.
+</FaqItem>
+<FaqItem question="Can Pendo replace Mixpanel entirely?">
+For teams that primarily need basic product analytics plus in-app guidance, yes. But if you rely heavily on advanced event analysis, custom queries, or detailed funnel breakdowns, you may find Pendo's analytics too limited and still need a dedicated tool alongside it.
+</FaqItem>
+<FaqItem question="Is Pendo worth the price?">
+Pendo is one of the most expensive options in this list. It's worth it if you actively use the in-app guide and feedback features — that's where the unique value lies. If you only need analytics, there are much more affordable alternatives like OpenPanel or PostHog.
+</FaqItem>
+</Faqs>
+
+### Best For
+- Product managers who need analytics plus in-app guidance
+- Teams optimizing user onboarding without engineering resources
+- Companies that want to collect user feedback alongside behavioral data
+- Organizations willing to pay premium prices for an integrated product experience platform
+
+## 6. Matomo - The Privacy-Focused On-Premise Alternative
+
+### Overview
+
+Matomo (formerly Piwik) is one of the longest-standing open-source analytics platforms, used by over 1 million websites worldwide. Unlike Mixpanel, Matomo was built with privacy at its core — it's the go-to choice for government agencies, universities, and organizations in regulated industries that need full GDPR compliance without legal uncertainty.
+
+While Matomo started as a web analytics tool (and still excels there), it has expanded into product analytics territory with features like custom events, funnels, and cohort analysis. It's not as deep as Mixpanel for product analytics, but for teams that need both web and product analytics with complete data ownership, Matomo is a proven choice. See our detailed [OpenPanel vs Matomo comparison](/compare/matomo-alternative) for a feature-by-feature breakdown.
+
+- **Homepage**: [matomo.org](https://matomo.org)
+- **GitHub**: [github.com/matomo-org/matomo](https://github.com/matomo-org/matomo)
+- **License**: GPL-3.0 (fully open source)
+- **Free Tier**: Self-hosted is free forever
+
+### Pricing
+
+| Plan | Price | Features |
+|------|-------|----------|
+| Self-hosted (On-Premise) | Free | Full platform, unlimited sites, community support |
+| Cloud - Essential | From €23/month | 50k hits, managed hosting, email support |
+| Cloud - Business | From €45/month | 50k hits, advanced features, phone support |
+| Cloud - Enterprise | Contact sales | Custom limits, SLAs, dedicated support |
+
+### Key Features
+
+**Web Analytics**: Comprehensive pageview tracking, referrers, campaigns, and real-time visitors — comparable to Google Analytics.
+
+**Custom Events & Goals**: Track custom events and define conversion goals with multi-step funnels.
+
+**Heatmaps & Session Recording**: Built-in heatmaps, scroll depth, and session replays (premium features on cloud, available as plugins on self-hosted).
+
+**Tag Manager**: Server-side tag manager included, reducing reliance on third-party scripts.
+
+**GDPR Manager**: Built-in tools for data subject access requests, consent management, and data anonymization.
+
+### Pros
+- Battle-tested open-source platform with 15+ years of development
+- 100% data ownership when self-hosted — no data sent to third parties
+- GDPR compliance built in, trusted by EU government agencies
+- Large plugin ecosystem for extending functionality
+- Can import Google Analytics data for easier migration
+
+### Cons
+- Product analytics features are less mature than Mixpanel
+- Self-hosted version requires PHP/MySQL stack and ongoing maintenance
+- Cloud pricing can get expensive at scale (charged per hit)
+- Interface feels dated compared to modern analytics tools
+- Some advanced features (heatmaps, A/B testing) require paid plugins
+
+### Best For
+- Organizations in regulated industries (healthcare, government, finance)
+- Teams migrating from Google Analytics who want data ownership
+- Companies in the EU that need bulletproof GDPR compliance
+- Self-hosting teams already running PHP/MySQL infrastructure
+
+## 7. Google Analytics 4 - The Free Enterprise Alternative
+
+### Overview
+
+Google Analytics 4 (GA4) is the default analytics platform for millions of websites and the most common tool teams already have in place before considering Mixpanel. While GA4 has evolved significantly from Universal Analytics, adding event-based tracking and product analytics features, it still lags behind Mixpanel in areas like user-level analysis, custom funnels, and real-time event debugging.
+
+That said, GA4 is hard to ignore as a Mixpanel alternative purely because of its price tag: free for up to 25 million events per month. For teams on a tight budget that need basic product analytics alongside comprehensive web analytics, GA4 can cover a lot of ground before you need a dedicated tool. For a detailed look at how OpenPanel compares, see our [Google Analytics alternative](/compare/google-analytics-alternative) page.
+
+- **Homepage**: [analytics.google.com](https://analytics.google.com)
+- **Free Tier**: 25 million events per month
+- **License**: Proprietary (Google)
+
+### Pricing
+
+| Plan | Price | Features |
+|------|-------|----------|
+| GA4 (Standard) | Free | 25M events/month, 14 months retention, standard reports |
+| GA4 360 (Enterprise) | From ~$50,000/year | Unlimited events, 50 months retention, SLAs, BigQuery streaming |
+
+### Key Features
+
+**Event-Based Tracking**: GA4 uses an event-driven model similar to Mixpanel — every interaction is an event with parameters.
+
+**Exploration Reports**: Freeform analysis, funnel exploration, path exploration, and cohort analysis — closer to Mixpanel-style ad hoc querying.
+
+**BigQuery Integration**: Export raw event data to BigQuery for custom SQL analysis at no additional cost.
+
+**Predictive Metrics**: ML-powered predictions for purchase probability, churn probability, and revenue forecasts.
+
+**Cross-Platform Tracking**: Unified web and app analytics with Google's identity resolution.
+
+### Pros
+- Free for most businesses (25M events/month is generous)
+- Seamless integration with Google Ads, Search Console, and the Google ecosystem
+- Event-based model is a major improvement over Universal Analytics
+- BigQuery export enables advanced custom analysis
+- Largest community and resource base of any analytics tool
+
+### Cons
+- Not open source — your data lives on Google's servers
+- Privacy concerns: data is used for Google's advertising products
+- Not GDPR-compliant by default (requires careful configuration)
+- Limited to 14 months of data retention on the free tier
+- User-level analysis is restricted compared to Mixpanel
+- Complex setup for accurate event tracking
+
+### Best For
+- Teams that need free analytics at scale
+- Companies already deep in the Google ecosystem (Ads, Search Console)
+- Organizations that need basic product analytics alongside web analytics
+- Businesses where privacy and data ownership are not primary concerns
+
 ## Making the Right Choice
 
 Choosing the right Mixpanel alternative depends on your specific needs:
@@ -373,33 +563,100 @@ Choosing the right Mixpanel alternative depends on your specific needs:
 - You need to collect user feedback and manage feature requests
 - You have the budget for a premium product experience platform
 
+### Choose Matomo if:
+- You need bulletproof GDPR compliance for regulated industries
+- You're migrating from Google Analytics and want data ownership
+- You need a battle-tested open-source platform with a large plugin ecosystem
+- Your team is comfortable with PHP/MySQL self-hosting
+
+### Choose GA4 if:
+- You need free analytics at massive scale (25M events/month)
+- You're already invested in the Google ecosystem (Ads, Search Console, BigQuery)
+- You need basic product analytics alongside comprehensive web analytics
+- Privacy and data ownership are not your primary concerns
+
+## Honorable Mentions
+
+Beyond the seven alternatives above, several other tools are worth considering depending on your specific use case:
+
+### [Countly](https://count.ly/)
+
+An open-source mobile and web analytics platform with a focus on mobile apps. Offers self-hosting, push notifications, crash analytics, and user profiles. Good for mobile-first teams that want a Mixpanel alternative with built-in engagement tools. Community edition is free and open source (AGPL-3.0).
+
+### [Kissmetrics](https://www.kissmetrics.io/)
+
+One of the original Mixpanel competitors, Kissmetrics focuses on revenue-driven analytics for SaaS and ecommerce. It connects user behavior directly to revenue metrics, making it valuable for teams that think in terms of customer lifetime value rather than raw event counts. Pricing starts around $299/month.
+
+### [FullStory](https://www.fullstory.com/)
+
+Combines product analytics with session replay and heatmaps. FullStory's auto-capture approach is similar to Heap's, but with a stronger focus on digital experience intelligence. Best for UX teams and enterprises with budget for premium tooling. No free tier for analytics.
+
+### [Statsig](https://www.statsig.com/)
+
+Built by ex-Facebook engineers, Statsig combines product analytics with feature flags, A/B testing, and experimentation. The analytics layer is newer but the experimentation platform is mature. Generous free tier with 1 million events/month. A strong choice if experimentation is as important to you as analytics.
+
+### [Plausible Analytics](https://plausible.io/)
+
+A lightweight, privacy-first [web analytics tool](/compare/plausible-alternative) that's the opposite of Mixpanel: simple, no cookies, GDPR-compliant by default. It won't replace Mixpanel's product analytics, but if you've realized you only need web analytics (not custom events and funnels), Plausible is a clean, affordable option at $9/month. Also available as open source for self-hosting.
+
+### [Umami](https://umami.is/)
+
+Another lightweight open-source [web analytics alternative](/compare/umami-alternative) focused on simplicity and privacy. Similar to Plausible but fully free and self-hostable. Great for developers who want basic analytics without the complexity. Like Plausible, it's a web analytics tool — not a product analytics replacement for Mixpanel.
+
 ## Migration Considerations
 
 When switching from Mixpanel to any alternative, consider:
 
-**Data Migration**: Most tools allow you to export Mixpanel data and import historical events. Check for migration guides and tools.
+**Data Migration**: Most tools allow you to export Mixpanel data and import historical events. Check for migration guides — we have a dedicated [migrate from Mixpanel](/guides/migrate-from-mixpanel) guide for OpenPanel.
 
-**SDK Compatibility**: Review your current Mixpanel implementation and plan for code changes. Many alternatives offer similar APIs to ease transition.
+**SDK Compatibility**: Review your current Mixpanel implementation and plan for code changes. OpenPanel supports [Next.js](/docs/sdks/nextjs), [React](/docs/sdks/react), [Vue](/docs/sdks/vue), [Python](/docs/sdks/python), and [many more frameworks](/docs/sdks).
 
-**Feature Parity**: List your must-have Mixpanel features and ensure your chosen alternative supports them.
+**Feature Parity**: List your must-have Mixpanel features and ensure your chosen alternative supports them. For a detailed feature-by-feature comparison, see our [OpenPanel vs Mixpanel](/compare/mixpanel-alternative) page.
 
 **Team Training**: Budget time for your team to learn the new tool. Simpler alternatives like OpenPanel require less training than complex platforms like PostHog.
 
-**Cost Analysis**: Calculate total cost including hosting, maintenance, and potential feature add-ons. Don't forget to factor in engineering time for self-hosted solutions.
+**Cost Analysis**: Calculate total cost including hosting, maintenance, and potential feature add-ons. Don't forget to factor in engineering time for [self-hosted solutions](/articles/self-hosted-web-analytics).
 
 ## Conclusion
 
 The best Mixpanel alternative varies based on your priorities and product type:
 
-- **[OpenPanel](https://openpanel.dev)** offers the best balance of features, affordability, and privacy for most teams
-- **PostHog** is ideal if you need an all-in-one platform with session replay and feature flags
-- **Heap** suits enterprises that value retroactive analysis and can afford premium pricing
-- **Amplitude** works for high-volume products that fit within the generous free tier
+- **[OpenPanel](/compare/mixpanel-alternative)** offers the best balance of features, affordability, and privacy for most teams
+- **[PostHog](/compare/posthog-alternative)** is ideal if you need an all-in-one platform with session replay and feature flags
+- **[Heap](/compare/heap-alternative)** suits enterprises that value retroactive analysis and can afford premium pricing
+- **[Amplitude](/compare/amplitude-alternative)** works for high-volume products that fit within the generous free tier
 - **Pendo** is perfect for teams that need analytics plus in-app guidance and user onboarding
+- **[Matomo](/compare/matomo-alternative)** is the go-to choice for GDPR compliance and regulated industries
+- **GA4** is unbeatable on price if you're already in the Google ecosystem
 
 The key is understanding what you actually need versus what sounds impressive. Many teams pay for complex analytics platforms but only use basic features. Start with your real requirements, not aspirational ones, and you'll find the right Mixpanel alternative for your needs.
 
-**Also consider:** If you're primarily tracking website traffic rather than product events, check out our guide to [open-source web analytics tools](/articles/open-source-web-analytics) for simpler alternatives like Plausible, Umami, and Matomo.
+**Also consider:** If you're primarily tracking website traffic rather than product events, check out our guide to [open-source web analytics tools](/articles/open-source-web-analytics) for simpler alternatives like [Plausible](/compare/plausible-alternative), [Umami](/compare/umami-alternative), and [Matomo](/compare/matomo-alternative).
 
 Ready to try a simpler, more affordable approach to product analytics? [Start your free trial of OpenPanel](https://dashboard.openpanel.dev/onboarding) and see how easy analytics can be.
 
+## Frequently Asked Questions
+
+<Faqs>
+<FaqItem question="What is the best free Mixpanel alternative?">
+For most teams, **OpenPanel** is the best free Mixpanel alternative because you can [self-host it](/articles/how-to-self-host-openpanel) with no feature limitations. PostHog also offers a generous free tier of 1 million events per month on their cloud, and Amplitude gives you 10 million events free (though paid plans are opaque). If you just need web analytics without product analytics features, [Plausible](/compare/plausible-alternative) and Umami are excellent free open-source options.
+</FaqItem>
+<FaqItem question="What is the best open source Mixpanel alternative?">
+**OpenPanel** (AGPL-3.0) and **PostHog** (MIT) are the two leading [open source analytics](/articles/open-source-web-analytics) alternatives to Mixpanel. OpenPanel is lighter-weight and more affordable, while PostHog offers more features (session replay, feature flags) at the cost of complexity and higher resource requirements.
+</FaqItem>
+<FaqItem question="How much does Mixpanel cost in 2026?">
+Mixpanel offers a free plan with 20 million events per month (increased from 100k). Paid Growth plans start at $28/month for additional features like unlimited saved reports and advanced analytics. At scale, costs grow quickly — tracking 1 million events on the Growth plan costs approximately $779/month. See our full [Mixpanel pricing breakdown](/articles/mixpanel-pricing) for details.
+</FaqItem>
+<FaqItem question="Can I self-host a Mixpanel alternative?">
+Yes. OpenPanel and PostHog both offer full [self-hosted deployments](/docs/self-hosting/self-hosting). OpenPanel can run on a single VPS with minimal resources, while PostHog requires more infrastructure (16GB+ RAM). Self-hosting gives you complete data ownership, GDPR compliance by design, and eliminates recurring SaaS costs.
+</FaqItem>
+<FaqItem question="Which Mixpanel alternative is best for startups?">
+**OpenPanel** is the best choice for most startups because of its low pricing ($2.50/mo starting) and the option to self-host for free. PostHog's free tier (1M events) is also attractive for early-stage startups. Amplitude's 10M event free tier works well if you don't need self-hosting. Avoid Heap and Pendo for startups — their pricing starts in the thousands per year.
+</FaqItem>
+<FaqItem question="What's the easiest Mixpanel alternative to set up?">
+OpenPanel is the easiest to get started with — cloud setup takes under 5 minutes, and the SDK is lightweight. PostHog cloud is also quick to set up. Self-hosting adds complexity for both tools, but OpenPanel's single Docker Compose deployment is simpler than PostHog's multi-service architecture.
+</FaqItem>
+<FaqItem question="Do Mixpanel alternatives support mobile analytics?">
+Yes. OpenPanel has SDKs for [React Native](/docs/sdks/react-native), [Swift](/docs/sdks/swift) (iOS), and [Kotlin](/docs/sdks/kotlin) (Android). PostHog supports iOS, Android, React Native, and Flutter. Amplitude and Pendo also have strong mobile SDKs. Heap supports mobile via their autocapture SDK.
+</FaqItem>
+</Faqs>

apps/public/content/articles/mixpanel-pricing.mdx

@@ -1,54 +1,90 @@
 ---
-title: Mixpanel Pricing
-description: A complete breakdown of Mixpanel's pricing plans, what's included, hidden costs to watch for, and how it compares to alternatives like OpenPanel.
+title: "Mixpanel Pricing 2026: Free Plan, Growth Costs & Full Breakdown"
+description: "Complete guide to Mixpanel pricing in 2026. Free plan (1M events), Growth plan ($0.00028/event), Enterprise, hidden add-on costs, and how it compares to OpenPanel."
 tag: Guide
 team: OpenPanel Team
 date: 2025-12-08
+updated: 2026-02-13
 cover: /content/mixpanel-pricing-cover.jpg
 ---
 
-Mixpanel is one of the most popular product analytics tools out there. It's powerful, well-designed, and used by thousands of companies. But before you commit, you probably want to understand exactly what you'll be paying.
+Mixpanel pricing starts with a free plan capped at **1 million monthly events**. The Growth plan charges **$0.00028 per event** ($0.28 per 1,000 events) after 1M free events, with costs reaching ~$2,520/month at 10 million events. Enterprise pricing requires contacting sales and typically starts around $25,000/year.
 
-Mixpanel's pricing has gone through several changes over the years. They've made it more transparent recently, which is great. But there are still some things that aren't immediately obvious when you're looking at their pricing page.
+Here's the quick overview:
 
-In this guide, we'll break down exactly how Mixpanel pricing works, what you get at each tier, and some things to watch out for as your usage grows.
+| Plan | Monthly Events | Price | Best For |
+|------|---------------|-------|----------|
+| **Free** | Up to 1M | $0 | Small projects, MVPs |
+| **Growth** | 1M free, up to 20M | From $0 (scales with usage) | Growing companies |
+| **Enterprise** | Unlimited | Custom (from ~$25K/year) | Large organizations |
+
+Now let's break down exactly what you get at each tier, what the hidden costs are, and whether Mixpanel is worth the price for your use case.
 
 ## How Mixpanel Pricing Works
 
-Mixpanel uses event-based pricing. This means you pay based on the number of events you track, not the number of users on your team or the number of projects you have.
+Mixpanel uses **event-based pricing**. You pay based on the number of events you track, not the number of users on your team or the number of projects you have.
 
-An "event" is any user action you decide to track. A button click, a page view, a purchase, a sign-up. Each one counts as an event. If you track 10 different actions and have 10,000 monthly active users, you could easily be looking at millions of events per month.
+An "event" is any user action you decide to track: a button click, a page view, a purchase, a sign-up. Each one counts as one event. If you track 10 different actions and have 10,000 monthly active users, you could easily be looking at millions of events per month.
 
-Mixpanel offers three main plans: Free, Growth, and Enterprise.
+This model means your costs scale directly with your product's usage. The more successful your product becomes, the more you pay.
 
 ## Mixpanel Free Plan
 
-The free plan is genuinely generous for getting started. You get up to 20 million events per month, which sounds like a lot. For many small projects and early-stage startups, this is plenty.
+Does Mixpanel have a free tier? **Yes.** The Mixpanel free plan includes up to **1 million monthly events** with core analytics features. It's a decent starting point for small projects and early-stage startups.
 
 Here's what's included in the free plan:
 
-The core analytics features work well. You get access to Insights, Funnels, Flows, and Retention reports. You can create unlimited reports and dashboards. The data is real-time, and you can segment by any property you're tracking.
+- **1M monthly events** — once you hit the cap, you'll need to upgrade
+- **Core analytics** — Insights, [Funnels](/features/funnels), Flows, and [Retention](/features/retention) reports
+- **5 saved reports per seat** — enough to start, but teams feel this limit quickly
+- **10K monthly session replays** — see exactly how users interact with your product
+- **30 Spark AI queries per month** — Mixpanel's AI-powered query builder
+- **Unlimited seats** — no per-user charges
 
-However, there are limitations. You don't get access to some of the more advanced features like behavioral cohorts, saved metrics, or custom properties beyond the basics. The free plan also doesn't include Group Analytics, which is pretty much essential if you're building a B2B product and want to analyze data at the company level rather than just individual users.
+However, the free plan has significant limitations:
 
-There's also no data export on the free plan. If you want to pull your data into a warehouse or analyze it elsewhere, you'll need to upgrade.
+- **No Group Analytics** — essential for B2B products that need account-level analysis
+- **No data export** — you can't pull data into a warehouse
+- **Limited behavioral cohorts** — advanced segmentation requires Growth
+- **No formulas or saved metrics** — basic reporting only
+- **No anomaly detection or root cause analysis**
+- **No multi-touch attribution**
+- **Limited custom properties and borrowed properties**
+- **5 monitoring alerts per project** (Growth gets unlimited)
+
+The free plan works well for validating a product idea or running basic analytics on a small project. But once you need collaboration features, advanced analysis, or your events exceed 1 million per month, you'll need to upgrade.
 
 ## Mixpanel Growth Plan
 
-The Growth plan is where most paying customers land. As of early 2025, Mixpanel made the Growth plan more accessible by including the first 1 million events free each month when you add a credit card.
+The Growth plan is where most paying customers land. It includes the first **1 million events free** each month. After that, you pay approximately **$0.00028 per event** ($0.28 per 1,000 events), with volume discounts available at higher tiers.
 
-After that first million, you pay based on your event volume. The pricing scales something like this:
+Here's how Mixpanel Growth plan pricing scales with event volume:
 
-- 1.5 million events: around $140/month
-- 5 million events: around $612.5/month  
-- 10 million events: around $1,176/month
-- 20 million events: around $2,289/month
+| Monthly Events | Estimated Monthly Cost | Cost per 1K Events |
+|---------------|----------------------|-------------------|
+| 1M | $0 (free) | $0.00 |
+| 2M | ~$280 | ~$0.28 |
+| 5M | ~$1,120 | ~$0.28 |
+| 10M | ~$2,520 | ~$0.28 |
+| 20M | ~$5,320 | ~$0.28 |
+| 20M+ | Contact sales | Volume discounts |
 
-These are approximate figures since Mixpanel's pricing page uses a slider and the exact numbers depend on your specific configuration.
+*Prices are approximate based on Mixpanel's pricing calculator. Annual billing typically offers 10-15% discounts.*
 
-The Growth plan adds several important features over Free. You get full access to advanced analysis tools including multi-touch attribution, formulas, saved metrics, and behavioral cohorts. Custom properties become more flexible. You also get access to experiment analysis and more detailed reporting.
+The Growth plan adds several important features over Free:
 
-One thing to note: these prices are for the core analytics. Add-ons cost extra.
+- **Unlimited saved reports** — no more caps on collaborative analytics
+- **Full behavioral cohorts** — segment users based on actions
+- **20K monthly session replays** (customizable up to 500K)
+- **60 Spark AI queries per month** (double the free plan)
+- **Formulas & saved metrics** — build advanced calculations
+- **Multi-touch attribution** — understand which channels drive conversions
+- **Impact & statistical significance** — measure feature impact
+- **Anomaly detection & root cause analysis** — catch issues early
+- **Unlimited monitoring alerts**
+- **Custom properties and borrowed properties** — full flexibility
+
+One thing to note: these prices are for core analytics only. Several features that many teams consider essential are **paid add-ons** on top of the Growth plan.
 
 <Figure
   src="/content/mixpanel-pricing.png"
@@ -57,7 +93,7 @@ One thing to note: these prices are for the core analytics. Add-ons cost extra.
 
 ## Free vs Growth Plan: What's the Difference?
 
-If you're trying to decide whether to stay on Free or upgrade to Growth, here's a detailed breakdown of what you get with each plan:
+If you're trying to decide whether to stay on Free or upgrade to Growth, here's a detailed breakdown:
 
 | Feature | Free Plan | Growth Plan |
 |---------|-----------|-------------|
@@ -67,72 +103,105 @@ If you're trying to decide whether to stay on Free or upgrade to Growth, here's
 | **Spark AI queries** | 30/month | 60/month |
 | **Behavioral cohorts** | Limited | Full access |
 | **Custom properties** | Limited | Full access |
-| **Formulas & saved metrics** | ❌ | ✅ |
-| **Impact & statistical significance** | ❌ | ✅ |
-| **Multi-touch attribution** | ❌ | ✅ |
+| **Formulas & saved metrics** | Limited | Full access |
+| **Impact & statistical significance** | No | Yes |
+| **Multi-touch attribution** | No | Yes |
 | **Monitoring alerts** | 5 per project | Unlimited |
-| **Anomaly detection** | ❌ | ✅ |
-| **Root cause analysis** | ❌ | ✅ |
-| **Experiment reporting** | ❌ | Add-on |
-| **Feature flags** | ❌ | Add-on |
-| **Account-level analytics** | ❌ | Add-on |
-| **Data pipelines** | ❌ | Add-on |
+| **Anomaly detection** | No | Yes |
+| **Root cause analysis** | No | Yes |
+| **Cart analysis** | No | Yes |
+| **Campaign reporting** | No | Yes |
+| **Experiment reporting** | No | Add-on |
+| **Feature flags** | No | Add-on |
+| **Account-level analytics** | No | Add-on |
+| **Data pipelines** | No | Add-on |
+| **Metric Trees** | No | Add-on |
 | **Lookup tables** | Limited | Full access |
 | **Support** | Email (standard) | Email (24/5) |
 
-The key takeaway: Free is genuinely useful for basic analytics, but once you need advanced features like formulas, cohort analysis, or more than 5 saved reports per person, you'll need to upgrade. And even on Growth, several important features like account-level analytics and data pipelines are still add-ons.
+The bottom line: Free works for basic analytics and small projects. Once you need advanced features like formulas, cohort analysis, unlimited saved reports, or more than 1M monthly events, you'll need Growth. And even on Growth, several important features are still add-ons that cost extra.
 
 ## Mixpanel Enterprise Plan
 
-Enterprise pricing isn't published. You need to contact sales, and pricing depends on your specific needs, event volume, and how good you are at negotiating.
+Enterprise pricing isn't published. You need to contact sales, and the final price depends on your event volume, feature requirements, and negotiation.
 
-Based on publicly available information from sites that track B2B pricing, Enterprise plans typically start around $20,000 per year for MTU-based pricing (monthly tracked users) or around $27,000 per year for 300 million events on event-based pricing.
+Based on publicly available data, **Mixpanel Enterprise plans typically start around $25,000-$30,000 per year** and can go well over $100,000/year for large-scale deployments.
 
-Enterprise adds features like SSO, advanced permissions and data governance, dedicated support, custom contracts, and access to some exclusive reports like Signal and Impact.
+Enterprise adds features that larger organizations need:
 
-If you're a larger organization with compliance requirements or need specific security features, Enterprise is likely where you'll end up.
+- **Unlimited monthly events** — custom volume with no caps
+- **Up to 1 trillion events** capacity
+- **SAML-based SSO & SCIM provisioning** — critical for security-conscious orgs
+- **Advanced data governance** — sensitive data classification & protection
+- **Compartmentalized data access** — granular permissions at the report level
+- **HIPAA compliance tools** — for healthcare companies
+- **Customizable data retention policy** — keep data longer than standard limits
+- **300 Spark AI queries per month**
+- **24/7 support** with faster response SLAs
+- **Slack shared channel support** (add-on)
+- **Dedicated account manager**
+- **Professional services** available
+- **Signal correlation analysis** — advanced analytics
+- **Cross-product analytics** — analyze across multiple products
+- **Data quality monitoring** and verified data
+- **Custom pricing & terms**
+
+If you're a larger organization with compliance requirements, need SSO, or require specific security features, Enterprise is where you'll end up.
 
 ## The Add-Ons That Add Up
 
-Here's where Mixpanel pricing gets a bit tricky. Several features that you might consider core functionality are actually paid add-ons, even on Growth plans.
+Here's where Mixpanel pricing gets tricky. Several features that you might consider core functionality are **paid add-ons**, even on Growth plans:
 
-**Group Analytics** is the big one. If you're building a B2B product, you almost certainly need this. It lets you analyze data at the account or company level, not just individual users. Without it, you can't answer basic questions like "which companies are most engaged?" or "what's our retention by account?" Group Analytics is a separate line item on your bill.
+**Account-Level Behavioral Analytics (Group Analytics)** is the big one. If you're building a B2B product, you almost certainly need this. It lets you analyze data at the account or company level, not just individual users. Without it, you can't answer basic questions like "which companies are most engaged?" or "what's our retention by account?" This is a separate line item on your bill, even on Growth and Enterprise.
 
-**Data Pipelines** is another common add-on. This lets you export your Mixpanel data to a data warehouse like BigQuery, Snowflake, or Redshift. Based on publicly available pricing data, this can add around $19,000+ annually for larger implementations. If you need your analytics data in your warehouse for broader analysis or reporting, this cost adds up.
+**Data Pipelines** is another common add-on. This lets you export your Mixpanel data to a data warehouse like BigQuery, Snowflake, or Redshift. If you need your analytics data in your warehouse for broader analysis, this cost adds up — estimates suggest $19,000+ annually for larger implementations.
 
-**Session Replay** lets you watch recordings of user sessions. It's useful for understanding the context behind your quantitative data, but it's another add-on with its own pricing.
+**Session Replay** beyond the included free tier. Growth includes 20K monthly replays, but if you need more (up to 500K), that's extra.
 
-**Warehouse Connectors** allow you to import data from your warehouse into Mixpanel. Again, separate pricing.
+**Warehouse Connectors** allow you to import data from your warehouse into Mixpanel. Separate pricing.
+
+**Feature Flags** for controlling feature rollouts. Add-on on Growth.
+
+**Experiment Reporting** for A/B testing analysis. Add-on on Growth.
+
+**Metric Trees** for visualizing metric dependencies. Add-on on Growth.
 
 When budgeting for Mixpanel, make sure you factor in which add-ons you'll actually need. The base plan price can be misleading if you end up needing two or three add-ons to do what you want.
 
 ## Mixpanel Startup Program
 
-If you're an early-stage startup, Mixpanel offers a pretty solid deal. Their startup program gives you access to a "Startup Plan" free for one year.
+If you're an early-stage startup, Mixpanel offers a solid deal. Their startup program gives you access to a "Startup Plan" **free for one year**.
 
-To qualify, your company needs to be founded less than 5 years ago, have less than $8 million in total funding, and not have previously redeemed similar offers.
+To qualify:
+- Founded less than **5 years ago**
+- Less than **$8 million** in total funding
+- Haven't redeemed similar offers before
 
 The Startup Plan includes advanced features, Group Analytics, Data Pipelines, Warehouse Connectors, and Session Replay. You get up to 1 billion events over the year and 500,000 session replay recordings.
 
-There's a catch though: you need to start sending data within 90 days of acceptance, or you get removed from the program. And after the year is up, you'll need to move to a paid plan or downgrade to Free.
+There's a catch: you need to start sending data within **90 days** of acceptance, or you get removed. And after the year is up, you'll need to move to a paid plan or downgrade to Free.
 
-It's a good deal if you qualify, but plan ahead for what happens when that first year ends.
+It's a good deal if you qualify, but plan ahead for what happens when that first year ends. Many startups get locked into Mixpanel during this free year and face a significant bill when it expires.
 
 ## When Mixpanel Gets Expensive
 
-Mixpanel's event-based pricing means your costs are directly tied to your growth. The more successful your product becomes, the more you pay. This makes sense from Mixpanel's perspective, but it can create some challenges for growing companies.
+Mixpanel's event-based pricing means your costs are directly tied to your product's growth. Here's a realistic scenario:
 
-Here's a scenario. Let's say you're tracking 15 different events per user. Your product has 50,000 monthly active users, each doing an average of 20 tracked actions per session, with 3 sessions per month. That's 15 × 50,000 × 20 × 3 = 45 million events per month. You've already blown past the free tier and are looking at significant monthly costs.
+Let's say you're tracking 15 different events per user. Your product has 50,000 monthly active users, each doing an average of 20 tracked actions per session, with 3 sessions per month. That's:
+
+**15 × 50,000 × 20 × 3 = 45 million events per month**
+
+At that volume, you're well past the Growth plan's 20M cap and into Enterprise territory — likely looking at $40,000+ per year minimum.
 
 Now imagine you launch a marketing campaign that doubles your user base. Your analytics bill just doubled too.
 
-Some teams respond to this by tracking fewer events or being very selective about what they measure. That's not ideal. You want your analytics to grow with your product, not become a constraint on what you can learn about your users.
+Some teams respond by tracking fewer events or being selective about what they measure. That's not ideal. You want your analytics to grow with your product, not become a constraint on what you can learn about your users.
 
-The other thing that catches people off guard is the gap between the free tier and paid pricing. 20 million events is free. But once you hit 20,000,001 events, you're on a paid plan. The jump can feel steep if you weren't expecting it.
+The other thing that catches people off guard is the cost of add-ons stacking up. Base plan + Group Analytics + Data Pipelines + extra Session Replays can easily 2-3x your expected bill.
 
 ## What Users Say About Mixpanel Pricing
 
-Looking at reviews on G2, Capterra, and similar sites, pricing is one of the most common complaints about Mixpanel. Here are some themes that come up repeatedly:
+Looking at reviews on G2, Capterra, and similar sites, pricing is one of the most common complaints about Mixpanel:
 
 > "The jump from free to paid can be steep." Many users start on the generous free tier, get comfortable with the tool, and then face a significant cost when they outgrow it.
 
@@ -142,100 +211,122 @@ Looking at reviews on G2, Capterra, and similar sites, pricing is one of the mos
 
 > "Pricing forced us to track less." Some users report deliberately limiting their tracking to stay within budget, which defeats the purpose of having comprehensive analytics.
 
-To be fair, there are also plenty of users who think Mixpanel provides good value, especially compared to building custom analytics infrastructure. The complaints tend to come from teams that have scaled beyond the free tier and are comparing costs to alternatives.
+To be fair, many users think Mixpanel provides good value, especially compared to building custom analytics infrastructure. The complaints tend to come from teams that have scaled beyond the free tier and are comparing costs to alternatives.
 
-## Mixpanel vs OpenPanel: A Direct Comparison
+## Mixpanel vs OpenPanel: Pricing Comparison
 
-Since you're reading this on the OpenPanel blog, let's be upfront about how we compare. We built [OpenPanel](/articles/introduction-to-openpanel) specifically as a more affordable alternative to Mixpanel, so we think the comparison is worth making.
+Since you're reading this on the OpenPanel blog, let's be upfront about how we compare. We built [OpenPanel](/articles/introduction-to-openpanel) specifically as a more affordable alternative to Mixpanel.
 
-Here's how the pricing stacks up at different event volumes:
+Here's how pricing stacks up at different event volumes:
 
-| Monthly Events | Mixpanel Growth | OpenPanel Cloud |
-|---------------|-----------------|-----------------|
-| 100K | ~$28* | $20 |
-| 500K | ~$70* | $50 |
-| 1M | Free (with card) | $90 |
-| 1.5M | ~$140 | $180 |
-| 5M | ~$612 | $250 |
-| 10M | ~$1,176 | $350 |
-| 20M | ~$2,289 | $530 |
-| 50M | Contact sales | $900 |
+| Monthly Events | Mixpanel Growth | OpenPanel Cloud | Savings |
+|---------------|-----------------|-----------------|---------|
+| 100K | ~$0 (free tier)* | $20 | — |
+| 500K | ~$0 (free tier)* | $50 | — |
+| 1M | $0 (free tier) | $90 | — |
+| 2.5M | ~$420 | $180 | 57% cheaper |
+| 5M | ~$1,120 | $250 | 78% cheaper |
+| 10M | ~$2,520 | $350 | 86% cheaper |
+| 20M | ~$5,320 | $530 | 90% cheaper |
+| 30M | Contact sales | $680 | — |
+| 50M | Contact sales | $900 | — |
 
-*Mixpanel's free tier covers up to 20M events, but with limited features
+*Mixpanel's free tier covers up to 1M events but with limited features (5 saved reports per seat, no Group Analytics, no data export, limited cohorts).
 
-At 20 million events, OpenPanel is about 77% cheaper than Mixpanel's Growth plan. But the pricing difference is only part of the story.
+At 10 million events, **OpenPanel is ~86% cheaper** than Mixpanel's Growth plan. But the pricing difference is only part of the story.
 
-**What's included matters.** With [OpenPanel pricing](/pricing), everything is included. Unlimited websites, unlimited users, unlimited dashboards. There are no tiers within tiers, no add-ons, no "contact sales for this feature." You pick your event volume and that's your price.
+**Everything is included.** With [OpenPanel pricing](/pricing), all features are included at every tier. Unlimited websites, unlimited users, unlimited dashboards. No tiers within tiers, no add-ons, no "contact sales for this feature." Pick your event volume and that's your price.
 
-**Self-hosting is an option.** If you want to go even further on cost savings, you can [self-host OpenPanel](/articles/how-to-self-host-openpanel) for free. Your only cost is the infrastructure itself, which can be surprisingly affordable. A decent VPS can handle millions of events and costs maybe $20-50/month.
+**Self-hosting is free.** If you want maximum cost control, you can [self-host OpenPanel](/articles/how-to-self-host-openpanel) for free. Your only cost is infrastructure — a decent VPS can handle millions of events for $20-50/month.
 
-**Privacy by default.** OpenPanel uses [cookieless tracking](/articles/cookieless-analytics) out of the box. No cookie consent banners needed. This isn't just about compliance, it means you get more accurate data because you're not losing users who decline cookies.
+**Privacy by default.** OpenPanel uses [cookieless tracking](/articles/cookieless-analytics) out of the box. No cookie consent banners needed. This means more accurate data because you're not losing users who decline cookies.
 
-Obviously, we're biased here. Mixpanel has been around longer, has more integrations, and has a larger team building features. If you need very specific capabilities that only Mixpanel offers, it might be worth the premium. But for most teams doing product analytics, OpenPanel covers the core use cases at a fraction of the cost.
+**No hidden costs.** Mixpanel's Growth plan price is just the starting point once you factor in Group Analytics, Data Pipelines, extra Session Replays, and other add-ons. OpenPanel's price is the full price.
 
-You can see a more detailed comparison on our [Mixpanel alternative](/compare/mixpanel-alternative) page.
+Obviously, we're biased here. Mixpanel has been around longer, has more integrations, and has a larger team. If you need very specific capabilities that only Mixpanel offers, it might be worth the premium. But for most teams doing product analytics, OpenPanel covers the core use cases at a fraction of the cost.
+
+See our full [Mixpanel vs OpenPanel comparison](/compare/mixpanel-alternative) for a feature-by-feature breakdown.
 
 ## Tips for Managing Mixpanel Costs
 
-If you decide Mixpanel is the right tool for you, here are some ways to keep costs under control:
+If you decide Mixpanel is the right tool for you, here are ways to keep costs under control:
 
-**Be intentional about what you track.** Don't track everything just because you can. Define your key metrics and the events that feed into them. You can always add more tracking later if you need it.
+**Be intentional about what you track.** Don't track everything just because you can. Define your key metrics and the events that feed into them. You can always add more tracking later.
 
-**Use the startup program if you qualify.** That free year gives you runway to grow before you need to worry about analytics costs.
+**Use the startup program if you qualify.** That free year gives you runway to grow before analytics costs hit.
 
 **Consider annual billing.** Mixpanel typically offers 10-15% discounts for annual commitments. If you're confident you'll stick with the tool, this is easy savings.
 
-**Audit your tracking regularly.** Over time, teams tend to accumulate tracking that's no longer used. Old features get deprecated, experiments end, but the events keep flowing. A quarterly audit can help you trim unnecessary events.
+**Audit your tracking regularly.** Over time, teams accumulate tracking that's no longer used. Old features get deprecated, experiments end, but the events keep flowing. A quarterly audit can trim unnecessary events.
 
-**Negotiate at renewal.** B2B SaaS pricing is often negotiable, especially at higher volumes. Don't just accept the renewal quote, ask what flexibility exists.
+**Negotiate at renewal.** B2B SaaS pricing is often negotiable, especially at higher volumes. Don't just accept the renewal quote — ask what flexibility exists.
+
+**Evaluate add-on necessity.** Before committing to Group Analytics or Data Pipelines, assess whether you truly need them or if there are workarounds.
 
 ## Making the Decision
 
-Mixpanel is a good product. The analytics are powerful, the UI is well-designed, and there's a reason it's one of the most popular tools in the category.
+Mixpanel is a solid product. The analytics are powerful, the UI is well-designed, and there's a reason it's one of the most popular tools in the category.
 
-But pricing matters. If you're a growing startup watching your runway, or a bootstrapped company keeping costs lean, or an enterprise trying to justify spend to finance, you need to factor in the true cost of your analytics stack.
+But pricing matters. If you're a growing startup watching your runway, a bootstrapped company keeping costs lean, or an enterprise trying to justify spend to finance — you need to understand the true cost of your analytics stack.
 
 The questions to ask yourself:
 
 1. How many events will you realistically track as you grow?
 2. Do you need Group Analytics for B2B analysis?
 3. Do you need data export to a warehouse?
-4. What happens to your budget when your user base doubles?
+4. What's your total cost including add-ons, not just the base plan?
+5. What happens to your budget when your user base doubles?
 
-If the answers to those questions make you nervous about Mixpanel's pricing trajectory, it might be worth looking at alternatives before you're locked in.
+If the answers make you nervous about Mixpanel's pricing trajectory, it's worth looking at alternatives before you're locked in.
 
-[OpenPanel](/) offers a 30-day free trial with no credit card required. You can try it alongside Mixpanel and see which fits better for your needs and budget. And if you want maximum control over costs and data, [self-hosting](/docs/self-hosting/self-hosting) is always an option.
+[OpenPanel](/) offers a 30-day free trial with no credit card required. You can try it alongside Mixpanel and see which fits your needs and budget. And if you want maximum control over costs and data, [self-hosting](/docs/self-hosting/self-hosting) is always an option.
 
 <Faqs>
-<FaqItem question="How much does Mixpanel cost per month?">
-Mixpanel's cost depends on your event volume. The free plan covers up to 20 million events with limited features. The Growth plan starts with 1 million free events (with credit card), then scales from around $28/month for additional events up to $2,289/month for 20 million events. Enterprise pricing requires contacting sales but typically starts around $20,000/year.
+<FaqItem question="How much does Mixpanel cost in 2026?">
+Mixpanel offers three plans in 2026: a Free plan with up to 1M monthly events and limited features, a Growth plan starting at $0 with 1M free events then $0.00028 per event ($0.28 per 1,000 events) scaling up to ~$5,320/month for 20M events, and an Enterprise plan with custom pricing typically starting around $25,000/year. Add-ons like Group Analytics, Data Pipelines, and extra Session Replays cost extra on top of the base plan.
 </FaqItem>
 
-<FaqItem question="Is Mixpanel free to use?">
-Yes, Mixpanel has a free tier that includes up to 20 million events per month. However, it comes with feature limitations. You don't get Group Analytics, data export, advanced cohorts, or some other features. For basic product analytics on smaller projects, the free tier can work well.
+<FaqItem question="Does Mixpanel have a free tier?">
+Yes. Mixpanel's free tier includes up to 1 million monthly events, 5 saved reports per seat, 10,000 monthly session replays, and 30 Spark AI queries per month. Core analytics features like Insights, Funnels, Flows, and Retention reports are included. However, you don't get Group Analytics, data export, advanced cohorts, formulas, multi-touch attribution, or anomaly detection on the free plan.
+</FaqItem>
+
+<FaqItem question="What are the Mixpanel free plan limits?">
+The Mixpanel free plan is limited to 1M monthly events, 5 saved reports per seat, 10K session replays per month, 30 Spark AI queries per month, and 5 monitoring alerts per project. Advanced features like behavioral cohorts, custom properties, formulas, and saved metrics are limited or unavailable. Group Analytics, Data Pipelines, and data export are not included.
+</FaqItem>
+
+<FaqItem question="How much does Mixpanel cost per event?">
+On the Mixpanel Growth plan, you pay approximately $0.00028 per event ($0.28 per 1,000 events) after the first 1 million free monthly events. Volume discounts may be available at higher tiers. Enterprise plans have custom per-event pricing negotiated directly with Mixpanel's sales team.
 </FaqItem>
 
 <FaqItem question="What counts as an event in Mixpanel?">
-An event is any user action you choose to track. This includes button clicks, page views, sign-ups, purchases, form submissions, feature usage, or any custom action you define. Each occurrence counts as one event toward your monthly total.
+An event is any user action you choose to track. This includes button clicks, page views, sign-ups, purchases, form submissions, feature usage, or any custom action you define. Each occurrence counts as one event toward your monthly total. Mixpanel also supports autocapture which automatically tracks events without manual instrumentation.
 </FaqItem>
 
 <FaqItem question="Is Mixpanel worth the price?">
-It depends on your needs and budget. Mixpanel is a powerful tool with excellent analytics capabilities. For well-funded companies that need its specific features, it can be worth it. For cost-conscious teams, the pricing can escalate quickly as you grow. Alternatives like OpenPanel offer similar core functionality at significantly lower prices.
+It depends on your needs and budget. Mixpanel excels at deep product analytics — funnels, retention, cohort analysis, and experimentation. For well-funded companies that need its specific features and can afford the add-ons, it delivers value. For cost-conscious teams or those who need simpler analytics, the pricing can escalate quickly as you grow. Alternatives like OpenPanel offer similar core functionality at significantly lower prices with all features included.
 </FaqItem>
 
 <FaqItem question="Does Mixpanel charge for Group Analytics?">
-Yes. Group Analytics is a paid add-on, even on Growth plans. This feature is essential for B2B products that need to analyze data at the company or account level rather than just individual users. The additional cost isn't prominently displayed on the main pricing page.
+Yes. Group Analytics (account-level behavioral analytics) is a paid add-on on both Growth and Enterprise plans. This feature is essential for B2B products that need to analyze data at the company or account level rather than just individual users. The extra cost is not included in the base plan price shown on Mixpanel's pricing page.
 </FaqItem>
 
 <FaqItem question="How does Mixpanel pricing compare to OpenPanel?">
-OpenPanel is significantly cheaper at most event volumes. At 20 million events, OpenPanel costs $530/month compared to Mixpanel's approximately $2,289/month. OpenPanel also includes all features in every plan with no add-ons, and offers a free self-hosting option.
+OpenPanel is significantly cheaper at most event volumes and includes all features at every tier. At 10 million events, OpenPanel costs $350/month compared to Mixpanel's approximately $2,520/month — about 86% cheaper. OpenPanel also has no add-ons or hidden costs, and offers a free self-hosting option for maximum cost control.
 </FaqItem>
 
 <FaqItem question="Can startups get Mixpanel for free?">
-Yes. Mixpanel's Startup Program offers eligible startups their first year free on the Startup Plan. To qualify, your company must be founded less than 5 years ago and have less than $8 million in total funding. The plan includes advanced features and up to 1 billion events over the year.
+Yes. Mixpanel's Startup Program offers eligible startups their first year free on the Startup Plan. To qualify, your company must be founded less than 5 years ago, have less than $8 million in total funding, and not have redeemed similar offers. The plan includes advanced features and up to 1 billion events over the year. You must start sending data within 90 days of acceptance.
 </FaqItem>
 
 <FaqItem question="What happens if I go over my Mixpanel event limit?">
-On the Growth plan, you'll be charged for additional events at your plan's overage rate. Mixpanel states they don't apply punitive overcharges, you just pay the regular per-event rate. They also have a "forgiveness policy" for events tracked by mistake. On the free plan, exceeding limits may require upgrading to a paid plan.
+On the Growth plan, you'll be charged for additional events at your plan's overage rate. Mixpanel states they don't apply punitive overcharges — you pay the regular per-event rate. They also have a "forgiveness policy" for events tracked by mistake. On the free plan, exceeding the 1M event limit requires upgrading to a paid plan.
 </FaqItem>
-</Faqs>
+
+<FaqItem question="How many Spark AI queries does Mixpanel include?">
+The Free plan includes 30 Spark AI queries per month. The Growth plan doubles this to 60 queries per month. Enterprise plans include 300 Spark AI queries per month. Spark is Mixpanel's AI-powered query builder that lets you ask questions about your data in natural language.
+</FaqItem>
+
+<FaqItem question="What are Mixpanel's pricing alternatives for startups on a budget?">
+For startups looking for affordable product analytics, OpenPanel is a strong alternative starting at $2.50/month for 5,000 events and $90/month for 1M events with all features included. OpenPanel also offers free self-hosting. Other alternatives include PostHog (open source with a free tier) and Amplitude (limited free plan). Unlike Mixpanel, OpenPanel has no add-on costs for features like group analytics or data export.
+</FaqItem>
+</Faqs>

apps/public/content/articles/open-source-web-analytics.mdx

@@ -1,8 +1,8 @@
 ---
-title: 9 best open source web analytics tools
-description: In an era where data drives decisions, what are your best options for web analytics?
+title: "9 Best Open Source Analytics Tools in 2026 (Compared)"
+description: "Comprehensive comparison of the best open source web analytics and product analytics tools in 2026. Self-hosted and cloud options with pricing, features, and honest reviews."
 date: 2024-11-10
-updated: 2025-12-02
+updated: 2026-02-13
 cover: /content/cover-best-web-analytics.jpg
 tag: Comparison
 team: OpenPanel Team
@@ -10,16 +10,36 @@ team: OpenPanel Team
 import { Faqs, FaqItem } from '@/components/faq';
 import { Figure } from '@/components/figure'
 
-In today's data-driven world, understanding your website's performance is crucial for making informed decisions. While Google Analytics dominates the market, many developers and businesses are turning to open source web analytics tools for better privacy, data ownership, and customization.
+The best open source web analytics tools in 2026 are **OpenPanel** (best overall for web + product analytics), **PostHog** (best all-in-one platform), **Plausible** (best for simplicity), and **Matomo** (best Google Analytics replacement). All offer self-hosting, privacy-first tracking, and GDPR compliance.
 
-Open source web analytics solutions offer several advantages over proprietary alternatives:
-- **Complete data ownership** - Your analytics data stays on your servers
-- **Privacy compliance** - Many are GDPR/CCPA compliant by design
-- **No vendor lock-in** - You can modify and extend the code as needed
-- **Cost control** - Self-host for free or choose affordable hosted options
-- **Transparency** - Open source code means you know exactly what's being tracked
+Open source analytics tools give you what proprietary platforms like Google Analytics can't: **complete data ownership**, **no vendor lock-in**, **privacy compliance by design**, and **the ability to self-host for free**. Whether you need simple pageview tracking or advanced product analytics with funnels, retention, and session replay — there's an open source solution that fits. If you're specifically looking to replace GA4, see our [Google Analytics alternative comparison](/compare/google-analytics-alternative) and [migration guide](/guides/migrate-from-google-analytics).
 
-In this comprehensive guide, we've evaluated 9 of the best open source web analytics tools available today. Each tool has been assessed based on features, pricing, ease of use, and community support. Whether you need simple pageview tracking or advanced product analytics, there's an open source solution that fits your needs.
+Here's a quick comparison of all 9 tools:
+
+| Tool | Type | License | Self-Host | Cloud Pricing (from) | Best For |
+|------|------|---------|-----------|---------------------|----------|
+| [**OpenPanel**](#openpanel) | Web + Product | AGPL-3.0 | Free | $2.50/mo | Teams wanting Mixpanel-like analytics, open source |
+| [**PostHog**](#posthog) | Product + Web | MIT | Free | $0 + usage | Developers needing analytics + flags + experiments |
+| [**Plausible**](#plausible) | Web | AGPL-3.0 | Free | $9/mo | Simple, privacy-first pageview analytics |
+| [**Matomo**](#matomo) | Web | GPL-3.0 | Free | €29/mo | Google Analytics replacement with full feature set |
+| [**Fathom**](#fathom) | Web | Proprietary | License | $15/mo | Privacy-focused teams wanting zero maintenance |
+| [**Umami**](#umami) | Web | MIT | Free | $0 + usage | Developers wanting lightweight, self-hosted analytics |
+| [**Ackee**](#ackee) | Web | MIT | Free | None | Minimalist self-hosted tracking |
+| [**Pirsch**](#pirsch) | Web | AGPL-3.0 | License | $6/mo | Server-side analytics without JavaScript |
+| [**Swetrix**](#swetrix) | Web | AGPL-3.0 | Free | $5/mo | Cookieless analytics with performance monitoring |
+
+Now let's dive deep into each tool.
+
+## What to Look for in Open Source Analytics
+
+Before picking a tool, consider these key factors:
+
+- **Web analytics vs product analytics** — Do you just need pageviews and traffic sources, or do you need event tracking, funnels, retention, and user journeys?
+- **Self-hosted vs cloud** — Self-hosting gives you full data control and is often free, but requires server maintenance. Cloud hosting is easier but costs money.
+- **Privacy and compliance** — Does the tool track without cookies? Is it GDPR/CCPA compliant by design?
+- **Ease of setup** — Some tools take minutes to deploy, others need significant DevOps work.
+- **Community and maintenance** — Is the project actively maintained? How large is the community?
+- **Pricing model** — Event-based, pageview-based, or flat fee? How does cost scale with growth?
 
 ## OpenPanel
 
@@ -29,7 +49,7 @@ In this comprehensive guide, we've evaluated 9 of the best open source web analy
 />
 
 ### Summary
-OpenPanel is an open-source, privacy-friendly web and product analytics platform. It combines the power of Mixpanel with the simplicity of Plausible. You get real-time event tracking, customizable charts, an overview dashboard with instant insights, individual user and session views, and plenty of SDKs. It uses cookie-free tracking and is GDPR compliant. You can self-host it for free or use the hosted Cloud service with a 30-day free trial.
+OpenPanel is an open source analytics platform that combines **web analytics and product analytics** in one tool. Think of it as Mixpanel meets Plausible — you get real-time [event tracking](/features/event-tracking), customizable charts, an overview dashboard with instant insights, individual user and session views, [funnels](/features/funnels), [retention analysis](/features/retention), and multiple SDKs. It uses cookieless tracking and is GDPR compliant by design. You can self-host for free or use the Cloud service with a 30-day free trial.
 
 - Homepage: [**https://openpanel.dev**](https://openpanel.dev)  
 - GitHub: [**https://github.com/Openpanel-dev/openpanel**](https://github.com/Openpanel-dev/openpanel)  
@@ -39,61 +59,65 @@ OpenPanel is an open-source, privacy-friendly web and product analytics platform
 
 ### Pricing
 
-OpenPanel Cloud has a 30-day free trial with no credit card required. After the trial, you choose the tier matching your monthly event volume. If you outgrow your tier you simply upgrade. Self-hosting is free (you provide your own infrastructure).
+OpenPanel Cloud has a 30-day free trial with no credit card required. After the trial, you choose the tier matching your monthly event volume. Self-hosting is completely free — you provide your own infrastructure.
 
-| Events per Month | Price (USD/month) | Annual Price (10× monthly) |
-| ---------------- | ----------------- | -------------------------- |
-| Up to 5 000      | \$2.50            | \$25                       |
-| Up to 10 000     | \$5               | \$50                       |
-| Up to 100 000    | \$20              | \$200                      |
-| Up to 250 000    | \$30              | \$300                      |
-| Up to 500 000    | \$50              | \$500                      |
-| Up to 1 000 000  | \$90              | \$900                      |
-| Up to 2 500 000  | \$180             | \$1 800                    |
-| Up to 5 000 000  | \$250             | \$2 500                    |
-| Up to 10 000 000 | \$400             | \$4 000                    |
-| > 10 000 000     | Contact sales     | Contact sales              |
+| Events per Month | Price (USD/month) |
+| ---------------- | ----------------- |
+| Up to 5,000      | $2.50             |
+| Up to 10,000     | $5                |
+| Up to 100,000    | $20               |
+| Up to 250,000    | $30               |
+| Up to 500,000    | $50               |
+| Up to 1,000,000  | $90               |
+| Up to 2,500,000  | $180              |
+| Up to 5,000,000  | $250              |
+| Up to 10,000,000 | $350              |
+| Up to 20,000,000 | $530              |
+| Up to 30,000,000 | $680              |
+| Up to 40,000,000 | $800              |
+| Up to 50,000,000 | $900              |
 
-> All Cloud plans include unlimited websites, unlimited dashboards, unlimited team members, email & Discord support, and 5 years of data retention.
+> All Cloud plans include unlimited websites, unlimited dashboards, unlimited team members, email & Discord support, and 5 years of data retention. No add-ons or hidden costs.
 
 ### Pros
-- Open-source and self-hostable so you control your data  
-- Combines web and product analytics in one platform  
-- Real-time tracking and instant insights, no delays  
-- Cookie-free, GDPR/CCPA compliant by design  
-- Generous free trial and usage-based pricing
+- Open source and self-hostable — you control your data completely
+- Combines web and product analytics in one platform (replaces both GA and Mixpanel)
+- Real-time tracking and instant insights, no delays
+- Cookieless, GDPR/CCPA compliant by design — no consent banners needed
+- Generous free trial and straightforward usage-based pricing
+- All features included at every tier, no add-ons
 
 ### Cons
-- Cloud costs grow as event volume increases  
-- Self-hosting requires server setup and maintenance  
-- Project is still early-stage with a smaller community  
-- Lacks some advanced features like session replay or heatmaps
+- Cloud costs grow as event volume increases
+- Self-hosting requires server setup and maintenance
+- Project is newer with a smaller community than Matomo or PostHog
+- No built-in session replay or heatmaps (yet)
 
 ### FAQ
 
 <Faqs>
 <FaqItem question="How does OpenPanel pricing work after the free trial?">
-After your 30-day free trial, you pick the plan that covers your monthly events. If you exceed your tier's limit, you simply move up to the next tier or contact sales for a custom enterprise plan.
+After your 30-day free trial, you pick the plan that covers your monthly events. If you exceed your tier's limit, you simply move up to the next tier or contact sales for a custom enterprise plan. All features are included at every pricing level.
 </FaqItem>
 <FaqItem question="What tools can OpenPanel replace?">
-OpenPanel can stand in for Mixpanel, Amplitude and even Google Analytics by offering both product and web analytics in a single, privacy-friendly platform.
+OpenPanel can replace Mixpanel, Amplitude, and Google Analytics by offering both product and web analytics in a single, privacy-friendly platform. It tracks events, pageviews, user journeys, funnels, and retention — all without cookies.
 </FaqItem>
-<FaqItem question="What's included in the open-source version of OpenPanel?">
-Everything—custom dashboards, charts, real-time views, user/session drill-downs and all SDKs—ships under an AGPL-3.0 licence with no feature gating.
+<FaqItem question="What's included in the open source version of OpenPanel?">
+Everything — custom dashboards, charts, real-time views, user/session drill-downs, funnels, retention, and all SDKs ship under an AGPL-3.0 license with no feature gating. The self-hosted version is identical to the cloud version.
 </FaqItem>
-<FaqItem question="What are the hosting requirements?">
-A mid-range VPS (≈ 4 vCPU / 8 GB RAM / SSD) running Docker Compose is sufficient for most projects; scale vertically as event volume grows.
+<FaqItem question="What are the hosting requirements for OpenPanel?">
+A mid-range VPS (approximately 4 vCPU, 8 GB RAM, SSD) running Docker Compose is sufficient for most projects. Scale vertically as event volume grows. A decent VPS costs $20-50/month and can handle millions of events.
 </FaqItem>
-<FaqItem question="Is there a hosted option?">
-Yes. OpenPanel Cloud starts with a 30-day free trial, then switches to usage-based tiers—e.g. \$20 for 100 k events or \$90 for 1 M events per month.
+<FaqItem question="Is there a hosted option for OpenPanel?">
+Yes. OpenPanel Cloud starts with a 30-day free trial (no credit card required), then switches to usage-based tiers — for example, $20/month for 100K events or $90/month for 1M events.
 </FaqItem>
 </Faqs>
 
 ### Alternative to OpenPanel
 **Plausible Analytics**  
-- Open-source, privacy-focused web analytics with flat pricing  
-- Lightweight, cookie-free tracking and simple dashboards  
-- Predictable monthly cost starting at \$9 for 10 000 pageviews  
+- Open source, privacy-focused web analytics with flat pricing  
+- Lightweight, cookieless tracking and simple dashboards  
+- Predictable monthly cost starting at $9 for 10,000 pageviews  
 - Ideal if you need core web metrics without product analytics  
 
 ## PostHog
@@ -106,55 +130,60 @@ Yes. OpenPanel Cloud starts with a 30-day free trial, then switches to usage-bas
 > See our detailed comparison: [OpenPanel vs PostHog](/compare/posthog-alternative)
 
 ### Summary
-PostHog is an open-source platform for product analytics. You can track events, watch session replays, roll out feature flags, run A/B tests, track errors, send surveys, and more—all in one place. You can self-host it or use their cloud service. All users get a generous free tier every month.
+PostHog is an open source platform for product analytics, session replay, feature flags, A/B testing, error tracking, and surveys — all in one place. It's developer-focused and offers both self-hosting and a generous cloud free tier. If you need a Swiss Army knife for product development, PostHog is a strong choice.
 
 - Homepage: [**https://posthog.com**](https://posthog.com)
-- Github: [**https://github.com/PostHog/posthog**](https://github.com/PostHog/posthog)
+- GitHub: [**https://github.com/PostHog/posthog**](https://github.com/PostHog/posthog)
 - License: **MIT**
 - Rating: **4/5**
 
 ### Pricing
 
-PostHog offers a generous free tier that includes 1 million events per month, along with 5,000 session recordings, 1 million feature flag requests, 100,000 error events, and 250 survey responses. This free tier covers 1 project with community support and 1 year of data retention.
+PostHog offers a generous free tier with 1 million analytics events per month, plus 5,000 session recordings, 1M feature flag requests, and more. Beyond the free limits, pricing uses volume-based step-down rates:
 
-Beyond the free limits, PostHog operates on a pay-as-you-go model. Product analytics costs $0.00005 per event, session replay is $0.005 per recording, feature flags are $0.0001 per request, error tracking is $0.00037 per event, surveys are $0.20 per response, and data pipelines cost $0.000062 per event. The pay-as-you-go plan includes 6 projects, email support, and 7 years of data retention.
+| Monthly Events | Cost per Event | Example Monthly Cost |
+|---------------|---------------|---------------------|
+| First 1M | Free | $0 |
+| 1-2M | $0.00005 | ~$50 |
+| 2-15M | $0.0000343 | ~$396 (at 12M) |
+| 15-50M | $0.0000295 | Declining rate |
+| 50-100M | $0.0000218 | Declining rate |
+| 100-250M | $0.000015 | Declining rate |
 
-| Plan           | Price            | Monthly Free Limits                       | Support        | Projects | Retention |
-| -------------- | ---------------- | ----------------------------------------- | -------------- | -------- | --------- |
-| Free forever   | $0               | See free tier details above               | Community forum| 1        | 1 year    |
-| Pay-as-you-go  | $0 + usage rates | First free limits then usage-based billing| Email          | 6        | 7 years   |
+Anonymous events are 55-80% cheaper than identified events, which can significantly reduce costs.
 
 ### Pros
-- Open-source and self-host friendly so you keep full data control  
-- All-in-one suite: analytics, replays, flags, experiments, errors, surveys  
-- Generous monthly free tier for smaller sites or dev testing  
+- Open source and self-host friendly — you keep full data control
+- All-in-one suite: analytics, replays, flags, experiments, errors, surveys
+- Generous monthly free tier for smaller projects
+- Strong developer community and active development
 
 ### Cons
-- Usage-based pricing can be hard to predict as you grow  
-- Managing a self-hosted instance takes extra ops work and maintenance
-- Self-hosting vs cloud is not 1-to-1
-- Enterprise support and advanced add-ons can get costly  
+- Usage-based pricing can be hard to predict as you grow
+- Managing a self-hosted instance takes significant ops work
+- Self-hosting vs cloud is not feature-equivalent
+- Complexity — the sheer number of features can be overwhelming
 
 ### FAQ
 
 <Faqs>
 <FaqItem question="How does PostHog pricing work after the free tier?">
-PostHog's pricing can be tricky since it's usage based. Depending on how many events you send you will pay X amount per event.
+PostHog uses volume-based step-down pricing. After the first 1M free events, you pay $0.00005 per event for the next million, then the rate drops as volume increases. A company sending 12M events monthly would pay approximately $393/month.
 </FaqItem>
 <FaqItem question="What's the difference between PostHog and OpenPanel?">
-OpenPanel is more affordable than PostHog once you exceed 1 million events, making it a cost-effective choice for growing projects. While PostHog offers a broader range of features, OpenPanel stands out for its simplicity in self-hosting and provides the same capabilities whether you use the cloud or self-hosted version. Both platforms serve as robust product and web analytics tools, but OpenPanel's pricing and deployment flexibility make it especially appealing for teams seeking value and ease of use.
+OpenPanel is more affordable than PostHog once you exceed 1 million events, making it a cost-effective choice for growing projects. While PostHog offers a broader range of features (flags, experiments, surveys, error tracking), OpenPanel focuses on web and product analytics with simpler self-hosting and identical cloud/self-hosted feature parity.
 </FaqItem>
 <FaqItem question="What tools can PostHog replace?">
-By bundling product analytics, web analytics, session replay, feature flags, experiments, error tracking and surveys, PostHog can replace Mixpanel, Amplitude, Google Analytics, Hotjar / FullStory and LaunchDarkly in one stack.
+By bundling product analytics, web analytics, session replay, feature flags, experiments, error tracking, and surveys, PostHog can replace Mixpanel, Amplitude, Google Analytics, Hotjar/FullStory, and LaunchDarkly in one stack.
 </FaqItem>
-<FaqItem question="What's included in the open-source version?">
-PostHog Open Source (MIT) includes almost every feature but is limited to a single project per instance and comes without an uptime guarantee—ideal for hobby or proof-of-concept use.
+<FaqItem question="What's included in the open source version?">
+PostHog Open Source (MIT) includes almost every feature but is limited to a single project per instance and comes without an uptime guarantee — ideal for hobby or proof-of-concept use.
 </FaqItem>
 <FaqItem question="What are the self-hosting requirements?">
-The team recommends ≥ 4 vCPU, 16 GB RAM and 30 GB+ storage. Self-hosting works best up to ~300 k events / month; beyond that, PostHog Cloud scales for you.
+The team recommends at least 4 vCPU, 16 GB RAM and 30 GB+ storage. Self-hosting works best up to ~300K events/month; beyond that, PostHog Cloud handles scaling for you.
 </FaqItem>
 <FaqItem question="Is there a hosted option?">
-Yes. PostHog Cloud offers a free tier (1 M events, 5 k recordings, 1 M flag API requests) with US or EU data residency, then pay-as-you-go pricing after the limits.
+Yes. PostHog Cloud offers a free tier (1M events, 5K recordings, 1M flag API requests) with US or EU data residency, then pay-as-you-go pricing after the free limits.
 </FaqItem>
 </Faqs>
 
@@ -168,57 +197,60 @@ Yes. PostHog Cloud offers a free tier (1 M events, 5 k recordings, 1 M flag API
 > See our detailed comparison: [OpenPanel vs Plausible](/compare/plausible-alternative)
 
 ### Summary
-Plausible is an open-source, privacy-friendly web analytics tool. It tracks pageviews and custom events without cookies or personal data. You get real-time reports, goals, custom events, email or Slack reports, and GDPR/CCPA compliance. You can self-host for free or use their cloud service.
+Plausible is an open source, privacy-friendly web analytics tool built as a lightweight alternative to Google Analytics. It tracks pageviews and custom events without cookies or personal data. You get real-time reports, goals, custom events, email/Slack reports, and GDPR/CCPA compliance out of the box. It's the go-to choice if you want simple, clean analytics without complexity.
 
 - Homepage: [**https://plausible.io**](https://plausible.io)  
-- Github: [**https://github.com/plausible/analytics**](https://github.com/plausible/analytics)  
+- GitHub: [**https://github.com/plausible/analytics**](https://github.com/plausible/analytics)  
 - License: **AGPL v3**
 - Rating: **4/5**
 
 ### Pricing
 
-Plausible offers traffic-based plans you can bill monthly or yearly (2 months free on annual). All plans include unlimited data retention, unlimited team members, Google Analytics import, and core features.
+Plausible uses traffic-based plans billed monthly or yearly (2 months free on annual). All plans include unlimited data retention, unlimited team members, Google Analytics import, and all core features.
 
-| Plan      | Pageviews per Month | Price (Monthly) | Price (Yearly) | Sites | Team Members | Data Retention |
-|-----------|---------------------|-----------------|----------------|-------|--------------|----------------|
-| Starter   | Up to 10 000        | \$9             | \$90           | 1     | Unlimited    | Unlimited      |
-| Growth    | Up to 100 000       | \$14            | \$140          | 3     | 3            | Unlimited      |
-| Business  | Up to 200 000       | \$19            | \$190          | 10    | 10           | Unlimited      |
-| Enterprise| 200 001+            | Custom          | Custom         | 10+   | 10+          | Unlimited      |
+| Plan      | Pageviews per Month | Price (Monthly) | Price (Yearly) | Sites | Data Retention |
+|-----------|---------------------|-----------------|----------------|-------|----------------|
+| Starter   | Up to 10,000        | $9              | $90            | 1     | Unlimited      |
+| Growth    | Up to 100,000       | $14             | $140           | 3     | Unlimited      |
+| Business  | Up to 200,000       | $19             | $190           | 10    | Unlimited      |
+| Enterprise| 200,001+            | Custom          | Custom         | 10+   | Unlimited      |
 
 ### Pros
-- Designed for privacy, with no cookies or personal data tracking  
-- Simple, intuitive dashboard and easy setup  
-- Open source, with free self-host option and transparent pricing  
+- Designed for privacy — no cookies, no personal data tracking
+- Simple, intuitive dashboard that anyone can understand
+- Open source with free self-host option and transparent pricing
+- Very lightweight script (~1 KB) that doesn't slow your site
 
 ### Cons
-- No free tier beyond self-hosting  
-- Costs can rise quickly as traffic grows  
-- Fewer advanced features (like funnels or session replay) than some competitors  
+- No free tier beyond self-hosting
+- Costs can rise quickly as traffic grows
+- No product analytics features (no [funnels](/features/funnels), retention, or user-level tracking)
+- No session replay or heatmaps
 
 ### FAQ
 
 <Faqs>
-<FaqItem question="What's the differnece between OpenPanel?">
-OpenPanel is similar to Plausible in that both offer privacy-friendly, open-source web analytics with easy self-hosting. However, OpenPanel goes further by including advanced product analytics features—such as event tracking, user journeys, and session replays—making it suitable for teams that need deeper insights into user behavior, not just website traffic. If you want a simple, privacy-focused analytics tool, Plausible is great; if you need more advanced product analytics in addition to web stats, OpenPanel is a better fit.
+<FaqItem question="What's the difference between Plausible and OpenPanel?">
+Both offer privacy-friendly, open source web analytics with easy self-hosting. However, OpenPanel goes further by including advanced product analytics features — such as event tracking, user journeys, funnels, and retention analysis — making it suitable for teams that need deeper insights into user behavior, not just website traffic. If you want the simplest possible analytics, Plausible is great; if you need product analytics too, OpenPanel is the better fit.
 </FaqItem>
 <FaqItem question="How does Plausible protect user privacy?">
-Plausible does not use cookies or collect personal data. All tracking is aggregated and anonymized, making it GDPR and CCPA compliant by design.
+Plausible does not use cookies or collect personal data. All tracking is aggregated and anonymized, making it GDPR and CCPA compliant by design. No consent banners needed.
 </FaqItem>
 <FaqItem question="What tools can Plausible replace?">
-Plausible is a privacy-first alternative to Google Analytics and other page-view focused trackers, giving you simple dashboards without cookies.
+Plausible is a privacy-first alternative to Google Analytics and other pageview-focused trackers, giving you simple dashboards without cookies or personal data collection.
 </FaqItem>
-<FaqItem question="What's included in the open-source version?">
-Everything you see in Plausible Cloud—real-time dashboards, goals, custom events, unlimited retention and team members—is also in the self-hosted AGPL build.
+<FaqItem question="What's included in the open source version?">
+Everything you see in Plausible Cloud — real-time dashboards, goals, custom events, unlimited retention and team members — is also in the self-hosted AGPL build.
 </FaqItem>
 <FaqItem question="Is there a hosted option?">
-Yes. Plausible Cloud starts at \$9/month for 10 k page-views with simple, traffic-based pricing.
+Yes. Plausible Cloud starts at $9/month for 10K pageviews with simple, traffic-based pricing. A 30-day free trial is available.
 </FaqItem>
 </Faqs>
 
 ### Alternative to Plausible
 **Umami**  
-- Umami is almost a 1-to-1 alternative to Plausible. A great web analytics tool
+- Umami is almost a 1-to-1 alternative to Plausible with an MIT license
+- Free cloud tier with 1M events/month
 
 **OpenPanel**
 - Similar to both Umami and Plausible but also adds product analytics to the mix
@@ -233,58 +265,59 @@ Yes. Plausible Cloud starts at \$9/month for 10 k page-views with simple, traffi
 > See our detailed comparison: [OpenPanel vs Matomo](/compare/matomo-alternative)
 
 ### Summary
-Matomo (formerly Piwik) is an open-source web analytics platform. You can track web and mobile visits, build charts, create dashboards, set goals, run A/B tests, record sessions, view heatmaps, and more. You own all your data and can choose to self-host for free or use Matomo Cloud for hosting and support.
+Matomo (formerly Piwik) is the most established open source web analytics platform. It's been around since 2007 and positions itself as the leading Google Analytics alternative. You can track web and mobile visits, build charts, create dashboards, set goals, run A/B tests, record sessions, view heatmaps, and more. You own all your data and can choose to self-host for free or use Matomo Cloud.
 
 - Homepage: [**https://matomo.org**](https://matomo.org)  
-- Github: [**https://github.com/matomo-org/matomo**](https://github.com/matomo-org/matomo)  
+- GitHub: [**https://github.com/matomo-org/matomo**](https://github.com/matomo-org/matomo)  
 - License: **GNU GPL v3**
 - Rating: **4/5**
 
 ### Pricing
 
-Matomo offers two main options:
+| Plan         | Price                            | Hits per Month        | Support                                    | Websites | Data Retention |
+| ------------ | -------------------------------- | --------------------- | ------------------------------------------ | -------- | -------------- |
+| On-Premise   | €0                               | Unlimited             | Free community support or paid subscriptions | Unlimited| Forever        |
+| Cloud (50K)  | €29/month or €290/year           | Up to 50,000          | Email support & Customer Success Manager    | 30       | 24 months      |
 
-| Plan         | Price                            | Hits per Month        | Billing                     | Support                                    | Websites | Team Members | Data Retention |
-| ------------ | -------------------------------- | --------------------- | --------------------------- | ------------------------------------------ | -------- | ------------ | -------------- |
-| On-Premise   | €0                               | Unlimited             | Self-host (download)        | Free community support or paid subscriptions | Unlimited| Unlimited    | Forever        |
-| Cloud (50 k) | €29/month or €290/year (2 months free) | Up to 50 000         | Monthly or annual           | Email support & Customer Success Manager    | 30       | 30           | 24 months      |
-
-- For more hits or custom allowances (100 k, 300 k, 1 M, etc.), contact sales for enterprise pricing.
+For higher volumes (100K, 300K, 1M+ hits), contact sales for enterprise pricing.
 
 ### Pros
-- You fully own your data and stay GDPR/CCPA compliant  
-- Rich feature set: dashboards, A/B tests, heatmaps, session recordings, funnels  
-- Free self-hosted option with no limits on hits or users  
+- Most mature open source analytics platform (since 2007)
+- Full data ownership and GDPR/CCPA compliance
+- Rich feature set: dashboards, A/B tests, heatmaps, session recordings, funnels
+- Free self-hosted option with no limits on hits or users
+- Large plugin ecosystem
 
 ### Cons
-- Managing self-hosting requires server setup and maintenance  
-- Cloud costs can rise sharply as traffic grows beyond base tiers  
-- Many advanced plugins incur extra annual fees  
+- Self-hosting requires server setup, maintenance, and PHP knowledge
+- Cloud costs rise sharply beyond the base 50K tier
+- Many advanced plugins (A/B testing, heatmaps, etc.) require paid subscriptions even on self-hosted
+- UI can feel dated compared to newer tools
 
 ### FAQ
 
 <Faqs>
 <FaqItem question="What is included in Matomo Cloud's €29/month plan?">
-For €29 per month (or €290 per year), you get up to 50 000 hits, 30 websites, 30 team members, 24 months of raw data retention, email support, and a Customer Success Manager.
+For €29 per month (or €290/year), you get up to 50,000 hits, 30 websites, 30 team members, 24 months of raw data retention, email support, and a Customer Success Manager.
 </FaqItem>
 <FaqItem question="What tools can Matomo replace?">
-Matomo positions itself as a GDPR-compliant alternative to Google Analytics 4.
+Matomo is designed as a direct GDPR-compliant replacement for Google Analytics 4. It covers web analytics, ecommerce tracking, and basic product analytics.
 </FaqItem>
-<FaqItem question="What's included in the open-source version?">
-Self-hosted Matomo covers user & event tracking, ecommerce analytics, segmentation and customizable dashboards; premium add-ons (A/B testing, heatmaps, etc.) cost extra.
+<FaqItem question="What's included in the open source version?">
+Self-hosted Matomo covers user and event tracking, ecommerce analytics, segmentation, and customizable dashboards. However, premium add-ons (A/B testing, heatmaps, session recordings) cost extra.
 </FaqItem>
 <FaqItem question="What are the self-hosting requirements?">
-For ~100 k page-views / month: 2 CPU, 2 GB RAM and 50 GB SSD. Over 1 M page-views Matomo recommends separate app and DB servers.
+For ~100K pageviews/month: 2 CPU, 2 GB RAM and 50 GB SSD. Over 1M pageviews, Matomo recommends separate app and database servers.
 </FaqItem>
 <FaqItem question="Is there a hosted option?">
-Yes. Matomo Cloud charges by "hits per month" and unlocks all paid add-ons out-of-the-box.
+Yes. Matomo Cloud charges by "hits per month" and unlocks all paid add-ons out of the box. Plans start at €29/month for 50K hits.
 </FaqItem>
 </Faqs>
 
 ### Alternative to Matomo
 **Fathom Analytics**  
 - Privacy-focused, simple analytics with no cookies or personal data  
-- Flat monthly pricing (starts at $14/month) for unlimited pageviews  
+- Flat monthly pricing (starts at $15/month) for unlimited sites
 - Easy setup with minimal interface for core metrics  
 
 ## Fathom
@@ -297,51 +330,50 @@ Yes. Matomo Cloud charges by "hits per month" and unlocks all paid add-ons out-o
 > See our detailed comparison: [OpenPanel vs Fathom](/compare/fathom-alternative)
 
 ### Summary
-Fathom is a simple, privacy-focused web analytics tool. It tracks pageviews and events without cookies or personal data. You get real-time reports, unlimited data retention, unlimited sites, and simple dashboards. You can use Fathom's hosted service with a free trial or self-host with their Docker image (self-hosting requires a license).
+Fathom is a privacy-focused web analytics tool that tracks pageviews and events without cookies or personal data. You get real-time reports, unlimited data retention, unlimited sites, and simple dashboards. While Fathom isn't truly open source (it's proprietary with a self-host license available), it's included here because it's a popular alternative in the privacy-first analytics space.
 
 - Homepage: [**https://usefathom.com**](https://usefathom.com)  
-- Github: **Unsure** (no public repo for core analytics)  
+- GitHub: **No public repository** (proprietary)
 - License: **Proprietary** (self-host license available)  
 - Rating: **4/5**
 
 ### Pricing
 
-Fathom bills by monthly data points (pageviews + events). You pay for the tier you need and can move up at any time. All plans include unlimited sites, data retention, email reports, exports, and support.
+Fathom bills by monthly data points (pageviews + events). All plans include unlimited sites, data retention, email reports, exports, and support.
 
 | Plan                   | Data Points / Month | Price (Monthly) | Price (Yearly, 17% off) |
 | ---------------------- | ------------------- | --------------- | ----------------------- |
-| Starter                | Up to 100 000       | \$15            | \$150/yr                |
-| Growth                 | Up to 200 000       | \$25            | \$250/yr                |
-| Business               | Up to 500 000       | \$45            | \$450/yr                |
-| Scale                  | Up to 1 000 000     | \$60            | \$600/yr                |
-| Scale+                 | Up to 2 000 000     | \$100           | \$1 000/yr              |
-| Enterprise Small       | Up to 5 000 000     | \$140           | \$1 400/yr              |
-| Enterprise Medium      | Up to 10 000 000    | \$200           | \$2 000/yr              |
-| Enterprise Large       | Up to 15 000 000    | \$290           | \$2 900/yr              |
-| Enterprise X-Large     | Up to 20 000 000    | \$380           | \$3 800/yr              |
-| Enterprise Custom¹     | Over 25 000 000     | Contact sales   | Contact sales          |
-
-¹ For volumes above 25 million data points, contact sales.
+| Starter                | Up to 100,000       | $15             | $150/yr                 |
+| Growth                 | Up to 200,000       | $25             | $250/yr                 |
+| Business               | Up to 500,000       | $45             | $450/yr                 |
+| Scale                  | Up to 1,000,000     | $60             | $600/yr                 |
+| Scale+                 | Up to 2,000,000     | $100            | $1,000/yr               |
+| Enterprise Small       | Up to 5,000,000     | $140            | $1,400/yr               |
+| Enterprise Medium      | Up to 10,000,000    | $200            | $2,000/yr               |
+| Enterprise Large       | Up to 15,000,000    | $290            | $2,900/yr               |
+| Enterprise X-Large     | Up to 20,000,000    | $380            | $3,800/yr               |
+| Enterprise Custom      | Over 25,000,000     | Contact sales   | Contact sales           |
 
 ### Pros
-- No cookies or personal data collection by design  
-- Real-time, simple dashboard with core metrics only  
-- Unlimited sites and data retention on every plan  
-- Self-host option lets you run it on your own infrastructure  
+- No cookies or personal data collection by design
+- Real-time, simple dashboard with core metrics
+- Unlimited sites and data retention on every plan
+- EU-isolation option available for GDPR compliance
 
 ### Cons
-- Proprietary platform (core code is not open source)  
-- Costs rise linearly as traffic grows  
-- Lacks advanced features like funnels or session replay  
+- **Not open source** — proprietary platform with no public code
+- Costs rise linearly as traffic grows
+- No product analytics features (no funnels, retention, or user tracking)
+- No session replay or heatmaps
 
 ### FAQ
 
 <Faqs>
 <FaqItem question="How does Fathom pricing work after the free trial?">
-Fathom charges by data-point tiers. You start on the plan matching your monthly pageviews and events, and you move up if you exceed your quota at month's end.
+Fathom charges by data-point tiers. You start on the plan matching your monthly pageviews and events, and you move up if you exceed your quota.
 </FaqItem>
 <FaqItem question="What's the difference between Fathom and OpenPanel?">
-Fathom is a hosted, proprietary analytics service with simple, tiered pricing. OpenPanel is open source and privacy friendly, offering both web and product analytics, real-time views, individual session tracking, charts, cookie-free GDPR compliance, and multiple SDKs you can self-host for free.
+Fathom is a hosted, proprietary analytics service with simple, tiered pricing focused on web analytics only. OpenPanel is open source and privacy-friendly, offering both web and product analytics, real-time views, individual [session tracking](/features/session-tracking), funnels, retention, charts, cookieless GDPR compliance, and multiple SDKs you can self-host for free.
 </FaqItem>
 </Faqs>
 
@@ -362,7 +394,7 @@ Fathom is a hosted, proprietary analytics service with simple, tiered pricing. O
 > See our detailed comparison: [OpenPanel vs Umami](/compare/umami-alternative)
 
 ### Summary
-Umami is an open-source, privacy-friendly web analytics tool. It tracks pageviews and basic events without cookies or personal data. The lightweight script (~2 KB) loads fast and is GDPR/CCPA compliant by default. You can self-host it for free or use Umami Cloud with usage-based pricing.
+Umami is an open source, privacy-friendly web analytics tool. It tracks pageviews and basic events without cookies or personal data. The lightweight script (~2 KB) loads fast and is GDPR/CCPA compliant by default. It's one of the simplest open source analytics tools to self-host, making it popular with developers who want a quick Google Analytics replacement.
 
 - Homepage: [**https://umami.is**](https://umami.is)  
 - GitHub: [**https://github.com/umami-software/umami**](https://github.com/umami-software/umami)  
@@ -373,22 +405,24 @@ Umami is an open-source, privacy-friendly web analytics tool. It tracks pageview
 
 Self-hosted Umami is free with unlimited sites and events, managed by you with community support.
 
-Umami Cloud is free for the first 1 million events per month. Beyond that, you pay $0.00002 per additional event. You get unlimited websites, unlimited team members, 5 years of data retention, and email support.
+Umami Cloud is free for the first 1 million events per month. Beyond that, you pay $0.00002 per additional event.
 
 | Plan        | Price                            | Monthly Free Limits | Support       | Retention  |
 | ----------- | -------------------------------- | ------------------- | ------------- | ---------- |
 | Self-host   | $0                               | Unlimited events & sites | Community forum | Unlimited  |
-| Cloud       | $0 + $0.00002 per event over 1 M | 1 000 000 events     | Email support | 5 years    |
+| Cloud       | $0 + $0.00002 per event over 1M  | 1,000,000 events    | Email support | 5 years    |
 
 ### Pros
-- Fully open-source and self-hosted option gives you data control  
-- Privacy-first design with no cookies or personal data collection  
-- Very lightweight tracking script that won't slow your site  
+- Fully open source (MIT) and self-hosted option gives you complete data control
+- Privacy-first design with no cookies or personal data collection
+- Very lightweight tracking script that won't slow your site
+- Simple to self-host with Docker Compose
 
 ### Cons
-- Limited to basic metrics; no session replay, funnels, or heatmaps  
-- Running your own server means more maintenance and updates  
-- Cloud costs can add up if you exceed free event limits significantly  
+- Limited to basic web metrics; no product analytics, session replay, or heatmaps
+- Running your own server means maintenance and updates
+- Cloud costs can add up at high event volumes
+- Fewer advanced features compared to OpenPanel or PostHog
 
 ### FAQ
 
@@ -397,25 +431,25 @@ Umami Cloud is free for the first 1 million events per month. Beyond that, you p
 After the first 1 million events each month, Umami Cloud charges $0.00002 for each additional event. There are no per-site or per-user fees.
 </FaqItem>
 <FaqItem question="What's the difference between Umami and OpenPanel?">
-Umami provides open-source, cookie-free web analytics focused on pageviews and basic events. OpenPanel is also open-source and privacy-friendly but adds product analytics, real-time dashboards, individual session and user tracking, event visualization charts, and multiple SDKs—all cookie-free and GDPR compliant.
+Umami provides open source, cookieless web analytics focused on pageviews and basic events. OpenPanel is also open source and privacy-friendly but adds product analytics, real-time dashboards, individual session and user tracking, funnels, retention analysis, event visualization charts, and multiple SDKs — all cookieless and GDPR compliant.
 </FaqItem>
 <FaqItem question="What tools can Umami replace?">
-Primarily Google Analytics or any lightweight page-view tracker that relies on cookies.
+Umami is primarily a Google Analytics replacement for teams that want cookie-free, privacy-first pageview tracking without the complexity.
 </FaqItem>
-<FaqItem question="What's included in the open-source version?">
-There's no feature gap—funnels, user paths, retention and custom events are all in the MIT-licensed build.
+<FaqItem question="What's included in the open source version?">
+There's no feature gap — funnels, user paths, retention, and custom events are all in the MIT-licensed build.
 </FaqItem>
 <FaqItem question="What are the self-hosting requirements?">
-A server with Node 18+ and either MySQL 8+ or PostgreSQL 12+; official Docker Compose templates make deployment straightforward.
+A server with Node 18+ and either MySQL 8+ or PostgreSQL 12+. Official Docker Compose templates make deployment straightforward.
 </FaqItem>
 <FaqItem question="Is there a hosted option?">
-Yes. Umami Cloud lets you track up to 100 k events each month for free, then bills \$0.00002 per event thereafter (e.g. \$20 for 1 M events).
+Yes. Umami Cloud lets you track up to 1M events each month for free, then bills $0.00002 per event thereafter.
 </FaqItem>
 </Faqs>
 
 ### Alternative to Umami
 **GoatCounter**  
-- Open-source, privacy-focused analytics with simple pageview and event tracking  
+- Open source, privacy-focused analytics with simple pageview and event tracking  
 - Self-host for free or use hosted plans starting at €5/month  
 - Lightweight script, no cookies required, GDPR compliant  
 - Very simple setup and predictable flat pricing  
@@ -430,45 +464,46 @@ Yes. Umami Cloud lets you track up to 100 k events each month for free, then bil
 > See our detailed comparison: [OpenPanel vs Ackee](/compare/ackee-alternative)
 
 ### Summary
-Ackee is an open-source, self-hosted web analytics tool that focuses on privacy and simplicity. It runs on your own server with Node.js and MongoDB, tracks pageviews and custom events without cookies or personal data, and presents stats in a minimal interface. It uses a GraphQL API and keeps all tracked data anonymized by default.
+Ackee is an open source, self-hosted web analytics tool that focuses on privacy and minimalism. It runs on your own server with Node.js and MongoDB, tracks pageviews and custom events without cookies or personal data, and presents stats in a minimal interface. It uses a GraphQL API and keeps all tracked data anonymized by default.
 
 - Homepage: [**https://ackee.electerious.com**](https://ackee.electerious.com)  
-- Github: [**https://github.com/electerious/Ackee**](https://github.com/electerious/Ackee)  
+- GitHub: [**https://github.com/electerious/Ackee**](https://github.com/electerious/Ackee)  
 - License: **MIT**
 - Rating: **4/5**
 
 ### Pricing
 
-Ackee itself is completely free to self-host. You download the code, run it on your server, and there are no limits on sites, pageviews, team members, or data retention.
+Ackee is completely free to self-host. You download the code, run it on your server, and there are no limits on sites, pageviews, team members, or data retention.
 
-> _Note: There is no official Ackee-hosted service. Some third-party providers (for example Elestio) offer managed Ackee hosting on a credits-or-hourly basis, but pricing and terms vary by provider._
+> _Note: There is no official Ackee-hosted service. Some third-party providers (like Elestio) offer managed Ackee hosting, but pricing varies by provider._
 
 ### Pros
-- Fully open-source and free to self-host so you control all your data  
-- Privacy-first design: no cookies, anonymized tracking, GDPR/CCPA compliant  
-- Lightweight and minimal UI with fast load times  
-- GraphQL API allows custom integrations and flexible querying  
+- Fully open source and free to self-host — you control all your data
+- Privacy-first design: no cookies, anonymized tracking, GDPR/CCPA compliant
+- Lightweight and minimal UI with fast load times
+- GraphQL API allows custom integrations and flexible querying
 
 ### Cons
-- Limited to basic metrics (no funnels, session replay, or heatmaps)  
-- Requires server setup, maintenance, and security updates  
-- No official hosted offering—managed hosting depends on third parties  
-- Minimal feature set may not suit advanced analytics needs  
+- Limited to basic metrics (no funnels, session replay, or heatmaps)
+- Requires server setup, maintenance, and security updates
+- No official hosted offering — managed hosting depends on third parties
+- Minimal feature set won't suit teams needing advanced analytics
+- Requires MongoDB, which adds complexity
 
 ### FAQ
 
 <Faqs>
-<FaqItem question="How does Ackee pricing work after the free tier?">
-Ackee is free forever if you self-host. There is no paid tier or usage fees for the core software.
+<FaqItem question="How does Ackee pricing work?">
+Ackee is free forever if you self-host. There is no paid tier or usage fees for the core software. Your only costs are the server infrastructure you run it on.
 </FaqItem>
 <FaqItem question="What's the difference between Ackee and OpenPanel?">
-Ackee is a self-hosted, minimal web analytics tool that tracks pageviews and basic events without cookies. OpenPanel is also open-source and privacy-friendly but adds product analytics, real-time dashboards, individual session and user tracking, event visualization charts, and multiple SDKs you can use via cloud or self-host.
+Ackee is a self-hosted, minimal web analytics tool that tracks pageviews and basic events without cookies. OpenPanel is also open source and privacy-friendly but adds product analytics, real-time dashboards, individual session and user tracking, funnels, retention, event visualization charts, and multiple SDKs you can use via cloud or self-host.
 </FaqItem>
 </Faqs>
 
 ### Alternative to Ackee
 **GoatCounter**  
-- Open-source and privacy-focused, with GDPR-compliant, cookie-free tracking  
+- Open source and privacy-focused, with GDPR-compliant, cookieless tracking  
 - Self-host free or use hosted plans starting at €5/month  
 - Simple pageview and basic event metrics, predictable flat pricing  
 
@@ -482,7 +517,7 @@ Ackee is a self-hosted, minimal web analytics tool that tracks pageviews and bas
 > See our detailed comparison: [OpenPanel vs Pirsch](/compare/pirsch-analytics-alternative)
 
 ### Summary
-Pirsch is a drop-in, server-side, no-cookie, privacy-focused web analytics solution built in Go. It generates anonymized visitor fingerprints, works even with ad blockers, and is GDPR, CCPA, and PECR compliant. You can use the hosted SaaS offering or self-host under an enterprise license.
+Pirsch is a server-side, cookieless, privacy-focused web analytics solution built in Go. It generates anonymized visitor fingerprints, works even with ad blockers, and is GDPR, CCPA, and PECR compliant. The server-side approach means the tracking isn't affected by client-side blockers — a unique advantage.
 
 - Homepage: [**https://pirsch.io**](https://pirsch.io)  
 - GitHub: [**https://github.com/pirsch-analytics/pirsch**](https://github.com/pirsch-analytics/pirsch)  
@@ -493,44 +528,42 @@ Pirsch is a drop-in, server-side, no-cookie, privacy-focused web analytics solut
 
 Pirsch offers a 30-day free trial with no credit card required. After that, plans are usage-based on monthly pageviews:
 
-| Plan        | Monthly Price      | Annual Price (2 mo. free) | Pageviews Included | Websites           | Members           | Data Retention    |
-|-------------|--------------------|---------------------------|--------------------|--------------------|-------------------|-------------------|
-| Standard    | \$6                | \$60                      | Up to 10 000       | Up to 50           | Unlimited         | Unlimited         |
-| Plus (Best Value) | \$12           | \$120                     | Custom¹            | Unlimited          | Unlimited         | Unlimited         |
-| Enterprise  | Custom             | Custom                    | Custom             | Custom             | Custom            | Custom            |
+| Plan            | Monthly Price | Annual Price | Pageviews Included | Websites  |
+|-----------------|---------------|--------------|--------------------|-----------| 
+| Standard        | $6            | $60          | Up to 10,000       | Up to 50  |
+| Plus            | $12           | $120         | Custom             | Unlimited |
+| Enterprise      | Custom        | Custom       | Custom             | Custom    |
 
-¹ Plus plan adds funnels, A/B testing, custom domains/themes, white-labeling, priority support, and event goals.
-
-> _You pay per pageview tier; if you exceed your included pageviews, you move up to the next tier or contact sales for enterprise licensing._
+Plus plan adds funnels, A/B testing, custom domains/themes, white-labeling, priority support, and event goals.
 
 ### Pros
-- Fully privacy-focused with no cookies and anonymized data by default  
-- Server-side tracking works around ad blockers and gives full data ownership  
-- Lightweight Go library and multiple SDKs (JS, PHP, Laravel, etc.)  
-- Hosted in the EU on German servers (Hetzner)  
+- Server-side tracking works around ad blockers — get more complete data
+- Privacy-focused with no cookies and anonymized data by default
+- Lightweight Go library and multiple SDKs (JS, PHP, Laravel, etc.)
+- Hosted in the EU on German servers (Hetzner)
 
 ### Cons
-- Core self-host requires an enterprise license and setup support  
-- Usage tiers can get costly as traffic grows beyond small sites  
-- Hosted plans have feature gaps vs. self-host (e.g., custom integrations)  
-- No built-in session replay or heatmaps  
+- Self-hosting requires an enterprise license (not free)
+- Usage tiers can get costly as traffic grows
+- No session replay or heatmaps
+- Smaller community compared to Plausible or Matomo
 
 ### FAQ
 
 <Faqs>
 <FaqItem question="How does Pirsch pricing work after the free trial?">
-After 30 days, you choose the tier matching your monthly pageviews. If you go over your included pageviews, you upgrade to the next tier or contact sales for enterprise options.
+After 30 days, you choose the tier matching your monthly pageviews. If you exceed your included pageviews, you upgrade to the next tier or contact sales for enterprise options.
 </FaqItem>
 <FaqItem question="What's the difference between Pirsch and OpenPanel?">
-Pirsch is a hosted or enterprise-licensed Go-based analytics service focused on server-side tracking and EU hosting. OpenPanel is fully open-source, privacy-friendly, and cookie-free, offering both web and product analytics, real-time dashboards, individual session/user tracking, charts, GDPR compliance, and multiple SDKs you can self-host for free.
+Pirsch is a server-side Go-based analytics service focused on ad-blocker-resistant tracking and EU hosting. OpenPanel is fully open source, privacy-friendly, and cookieless, offering both web and product analytics, real-time dashboards, individual session/user tracking, funnels, retention, and multiple SDKs you can self-host for free.
 </FaqItem>
 </Faqs>
 
 ### Alternative to Pirsch
 **Plausible Analytics**  
-- Open-source, cookie-free web analytics with a flat pricing model  
+- Open source, cookieless web analytics with a flat pricing model  
 - Simple dashboard, real-time data, and GDPR/CCPA compliance  
-- Self-host for free or use hosted plans starting at \$9/month for 10 000 pageviews  
+- Self-host for free or use hosted plans starting at $9/month for 10,000 pageviews  
 
 
 ## Swetrix
@@ -541,7 +574,7 @@ Pirsch is a hosted or enterprise-licensed Go-based analytics service focused on
 />
 
 ### Summary
-Swetrix is an open-source, cookieless web analytics platform that focuses on privacy and ease of use. You can track pageviews, custom events, user flows, performance metrics, and more—all without showing cookie banners. You can self-host for free or use the hosted service with a 14-day trial.
+Swetrix is an open source, cookieless web analytics platform that focuses on privacy and ease of use. You can track pageviews, custom events, user flows, performance metrics, and more — all without cookie banners. It also includes web performance monitoring, which most other tools in this list don't offer.
 
 - Homepage: [**https://swetrix.com**](https://swetrix.com)  
 - GitHub: [**https://github.com/Swetrix/swetrix**](https://github.com/Swetrix/swetrix)  
@@ -550,31 +583,31 @@ Swetrix is an open-source, cookieless web analytics platform that focuses on pri
 
 ### Pricing
 
-Swetrix offers a 14-day free trial with no credit card required. After that, you pick a plan based on monthly events. If you need more than 10 million events, you contact sales.
+Swetrix offers a 14-day free trial with no credit card required. After that, you pick a plan based on monthly events:
 
 | Plan               | Events per Month | Price (USD/month) |
 | ------------------ | ---------------- | ----------------- |
-| Basic              | Up to 10 000     | \$5               |
-| Growth             | Up to 100 000    | \$15              |
-| Pro                | Up to 200 000    | \$25              |
-| Business           | Up to 500 000    | \$45              |
-| Premium            | Up to 1 000 000  | \$59              |
-| Enterprise Small   | Up to 2 000 000  | \$84              |
-| Enterprise Medium  | Up to 5 000 000  | \$110             |
-| Enterprise Large   | Up to 10 000 000 | \$150             |
-| Enterprise X-Large | Over 10 000 000  | Contact sales     |   
+| Basic              | Up to 10,000     | $5                |
+| Growth             | Up to 100,000    | $15               |
+| Pro                | Up to 200,000    | $25               |
+| Business           | Up to 500,000    | $45               |
+| Premium            | Up to 1,000,000  | $59               |
+| Enterprise Small   | Up to 2,000,000  | $84               |
+| Enterprise Medium  | Up to 5,000,000  | $110              |
+| Enterprise Large   | Up to 10,000,000 | $150              |
+| Enterprise X-Large | Over 10,000,000  | Contact sales     |   
 
 ### Pros
-- Fully open source and self-hostable so you keep full control of your data  
-- Cookie-free tracking that is GDPR/CCPA compliant by design  
-- Clean, simple dashboard with user flows, alerts, exports, and performance monitoring  
-- No limits on sites or data exports in any plan  
+- Fully open source and self-hostable for complete data control
+- Cookieless tracking that is GDPR/CCPA compliant by design
+- Includes web performance monitoring (page load times, Core Web Vitals)
+- Clean, simple dashboard with user flows, alerts, and exports
 
 ### Cons
-- Hosted plans use usage-based tiers, so costs rise with traffic  
-- Self-hosting requires setup, maintenance, and hosting infrastructure  
-- Lacks advanced features like session replay or heatmaps  
-- Smaller community compared to older analytics platforms  
+- Hosted plans use usage-based tiers, so costs rise with traffic
+- Self-hosting requires setup, maintenance, and hosting infrastructure
+- No session replay or heatmaps
+- Smaller community compared to more established tools
 
 ### FAQ
 
@@ -583,13 +616,74 @@ Swetrix offers a 14-day free trial with no credit card required. After that, you
 After your 14-day trial, you choose the plan that covers your monthly events. If you exceed your plan's limit, you move up to the next tier or contact sales for a custom enterprise plan.
 </FaqItem>
 <FaqItem question="What's the difference between Swetrix and OpenPanel?">
-Swetrix is a cookieless, open-source web analytics tool focused on pageviews, events, performance, and user flows. OpenPanel also tracks product events and sessions, offers real-time dashboards, individual user views, and multiple SDKs, all cookie-free and GDPR compliant.
+Swetrix is a cookieless, open source web analytics tool focused on pageviews, events, performance monitoring, and user flows. OpenPanel also offers web analytics but adds product analytics with event tracking, funnels, retention, individual user/session views, and multiple SDKs — all cookieless and GDPR compliant.
 </FaqItem>
 </Faqs>
 
 ### Alternative to Swetrix
 **Plausible Analytics**  
-- Open-source, privacy-first web analytics with flat pricing  
+- Open source, privacy-first web analytics with flat pricing  
 - Tracks pageviews and goals with no cookies required  
-- Self-host for free or start hosted plans at \$9/month for 10 000 pageviews  
-- Simple setup and predictable costs  
+- Self-host for free or start hosted plans at $9/month for 10,000 pageviews  
+- Simple setup and predictable costs  
+
+## Pricing Comparison: All 9 Tools at a Glance
+
+Here's how the cloud/hosted pricing compares across all tools at common event volumes:
+
+| Monthly Events | OpenPanel | PostHog | Plausible | Matomo Cloud | Fathom | Umami Cloud | Pirsch | Swetrix |
+|---------------|-----------|---------|-----------|-------------|--------|-------------|--------|---------|
+| 10K | $5 | $0 | $9 | €29 | $15 | $0 | $6 | $5 |
+| 100K | $20 | $0 | $14 | €29 | $15 | $0 | ~$12+ | $15 |
+| 500K | $50 | $0 | ~$19+ | Custom | $45 | $0 | Custom | $45 |
+| 1M | $90 | $0 | Custom | Custom | $60 | $0 | Custom | $59 |
+| 5M | $250 | ~$187 | Custom | Custom | $140 | ~$80 | Custom | $110 |
+| 10M | $350 | ~$393 | Custom | Custom | $200 | ~$180 | Custom | $150 |
+
+*PostHog and Umami include 1M free events/month. Plausible prices by pageviews, not events. Matomo prices by "hits." Exact pricing varies — check each provider for current rates.*
+
+## How to Choose the Right Open Source Analytics Tool
+
+**Choose OpenPanel if** you want the power of product analytics (funnels, retention, user tracking) combined with web analytics, at an affordable price. Best for startups and growing companies.
+
+**Choose PostHog if** you need an all-in-one developer platform with analytics, feature flags, experiments, error tracking, and surveys. Best for engineering-heavy teams.
+
+**Choose Plausible if** you want the simplest possible privacy-first web analytics. No complexity, just clean traffic data. Best for blogs, marketing sites, and simple web projects.
+
+**Choose Matomo if** you need a mature, full-featured Google Analytics replacement with heatmaps, session recordings, and A/B testing. Best for enterprises moving away from GA4. See our full [Google Analytics alternative comparison](/compare/google-analytics-alternative) for a detailed breakdown.
+
+**Choose Umami if** you want a lightweight, MIT-licensed tool to self-host with minimal setup. Best for developers who want basic analytics on personal projects.
+
+**Choose Fathom if** you want simple privacy analytics without any self-hosting. Best for businesses that want zero maintenance.
+
+**Choose Pirsch if** you need server-side tracking that works around ad blockers. Best for sites where tracking accuracy is critical.
+
+**Choose Swetrix if** you want web analytics plus performance monitoring in one tool. Best for teams focused on web performance.
+
+**Choose Ackee if** you want the most minimal self-hosted solution possible. Best for personal projects or developers who want maximum simplicity.
+
+<Faqs>
+<FaqItem question="What is the best open source web analytics tool?">
+The best open source web analytics tool depends on your needs. For combined web and product analytics, OpenPanel offers the best value. For simplicity, Plausible is hard to beat. For an all-in-one developer platform, PostHog is the most comprehensive. For a mature Google Analytics replacement, Matomo has the longest track record. All four offer self-hosting and GDPR compliance.
+</FaqItem>
+
+<FaqItem question="What is the best open source alternative to Google Analytics?">
+The top open source alternatives to Google Analytics are Matomo (most similar feature set), Plausible (simplest and most privacy-focused), OpenPanel (adds product analytics), and Umami (lightest weight). All are GDPR compliant and can be self-hosted for free. Matomo is the most direct replacement since it tracks similar metrics to GA4. For a detailed comparison, see our [Google Analytics alternative page](/compare/google-analytics-alternative). Ready to switch? Follow our step-by-step [migration guide](/guides/migrate-from-google-analytics).
+</FaqItem>
+
+<FaqItem question="Can I self-host open source analytics for free?">
+Yes. OpenPanel, PostHog, Plausible, Matomo, Umami, Ackee, and Swetrix all offer free self-hosting. Your only cost is the server infrastructure, which typically runs $5-50/month for a VPS depending on your traffic volume. Self-hosting gives you complete data ownership and privacy control.
+</FaqItem>
+
+<FaqItem question="What is the best open source product analytics tool?">
+For open source product analytics (event tracking, funnels, retention, user journeys), the top options are OpenPanel and PostHog. OpenPanel is more affordable and simpler to self-host, while PostHog offers additional features like feature flags, experiments, and error tracking. Both support self-hosting and have generous free tiers on their cloud platforms.
+</FaqItem>
+
+<FaqItem question="Which open source analytics tools don't use cookies?">
+Most modern open source analytics tools are cookieless by design. OpenPanel, Plausible, Umami, Pirsch, Fathom, Swetrix, and Ackee all track without cookies. Matomo offers a cookieless tracking mode. PostHog uses cookies by default but can be configured for cookieless tracking. Cookieless tools don't require consent banners, improving both user experience and data accuracy.
+</FaqItem>
+
+<FaqItem question="Is open source analytics secure?">
+Open source analytics can be more secure than proprietary alternatives because the code is publicly auditable. With self-hosted solutions, your data never leaves your servers. Tools like OpenPanel, Matomo, and PostHog are GDPR and CCPA compliant by design, with built-in privacy features like IP anonymization and data minimization.
+</FaqItem>
+</Faqs>

apps/public/content/articles/recap-2024.mdx

@@ -2,6 +2,7 @@
 title: Recap of 2024
 description: As we approach the end of the year, I wanted to share a summary of how this year unfolded and how everything began.
 date: 2024-12-30
+updated: 2026-02-07
 tag: Article
 team: Carl-Gerhard Lindesvärd
 cover: /content/recap-2024.jpg
@@ -19,7 +20,7 @@ And here we are...
 
 ## Inspiration
 
-I've always been a fan of Mixpanel - they crush it at product analytics. But I felt they were missing something when it came to web analytics.
+I've always been a fan of Mixpanel - they crush it at product analytics. But I felt they were missing something when it came to [web analytics](/features/web-analytics).
 
 I also noticed all these privacy-focused web analytics tools popping up in the last few years, which I love. That's where OpenPanel comes in. I wanted to build something that takes privacy seriously, has both web and product analytics, great support for native apps but is still super easy to use, even if you're new to the whole analytics game.
 
@@ -53,10 +54,10 @@ Making OpenPanel [open-source](https://git.new/openpanel) and [self-hosted](http
 
 Exciting developments are coming in 2025. Here are some of the priorities:
 
-- Revenue tracking 💸
+- [Revenue tracking](/features/revenue-tracking) 💸
 - Release Android and iOS apps. 📱
 - Improve report creation. 📊
-- Add more conversion rate charts (conversion is one of the best ways to understand your product). 📈
+- Add more [conversion rate](/features/conversion) charts (conversion is one of the best ways to understand your product). 📈
 - Enable report sharing. 🔗
 - Customize the overview page. 🎨
 - Enhance the real-time view. 📈

apps/public/content/articles/self-hosted-product-analytics.mdx

@@ -0,0 +1,381 @@
+---
+title: "Best Self-Hosted Product Analytics Tools in 2026 (Compared)"
+description: "Compare the best self-hosted product analytics tools in 2026. Detailed breakdown of OpenPanel, PostHog, Countly, Matomo, and more — with features, pricing, deployment, and honest pros/cons."
+tag: Comparison
+team: OpenPanel Team
+date: 2026-02-16
+updated: 2026-02-16
+cover: /content/self-hosted-analytics.jpg
+---
+import { Faqs, FaqItem } from '@/components/faq';
+
+Product analytics tells you *what users do* inside your product — which features they use, where they drop off, how often they come back, and what paths they take before converting. It's the difference between knowing "we got 10,000 pageviews" and knowing "40% of users who start onboarding never finish step 3."
+
+If you want those insights without sending user behavior data to a third party, self-hosted product analytics is the way to go.
+
+But here's the problem: most self-hosted analytics tools only cover **web analytics** — pageviews, traffic sources, and referrals. Product analytics features like funnels, retention, cohorts, and user identification require a different class of tool.
+
+We compared every self-hosted tool that offers real product analytics capabilities. Here's what's worth your time.
+
+## Quick Comparison
+
+| Tool | Focus | License | Self-Host Cost | Cloud Pricing (from) | Best For |
+|------|-------|---------|---------------|---------------------|----------|
+| [**OpenPanel**](#openpanel) | Web + Product | AGPL-3.0 | Free | $2.50/mo | Teams wanting Mixpanel-like analytics, self-hosted |
+| [**PostHog**](#posthog) | Product + Web | MIT | Free | $0 + usage | Dev teams needing analytics + flags + experiments |
+| [**Countly**](#countly) | Product + Mobile | AGPL-3.0 | Free (Community) | Custom | Mobile-first product analytics |
+| [**Matomo**](#matomo) | Web (+ Product plugins) | GPL-3.0 | Free (core) | €29/mo | GA replacement with product add-ons |
+| [**Mitzu**](#mitzu) | Product | Source Available | Paid | Custom | Warehouse-native product analytics |
+
+## What Makes Product Analytics Different from Web Analytics
+
+Web analytics answers questions about your **website traffic**: where visitors come from, which pages they view, and how long they stay. Tools like [Plausible](/compare/plausible-alternative), [Umami](/compare/umami-alternative), and [GoatCounter](/compare/goatcounter-alternative) do this well.
+
+Product analytics goes deeper. It answers questions about **user behavior**:
+
+- **Funnels**: What percentage of users complete signup? Where exactly do they drop off?
+- **Retention**: Are users coming back after their first week? First month?
+- **User journeys**: What do users do before upgrading to a paid plan?
+- **Cohort analysis**: Do users who onboard on mobile retain better than desktop users?
+- **Event tracking**: Which features get used? How often? By whom?
+
+If you're building a SaaS, mobile app, or any product where understanding user behavior matters, you need product analytics — not just pageview counts.
+
+For a comparison of self-hosted tools focused purely on web analytics, see our [self-hosted web analytics guide](/articles/self-hosted-web-analytics).
+
+---
+
+## OpenPanel
+
+**Best for: Teams that want Mixpanel-like product analytics with a self-hosted option**
+
+[OpenPanel](/) was built to give you the power of tools like [Mixpanel](/compare/mixpanel-alternative) and [Amplitude](/compare/amplitude-alternative) without sending your data to a third party. It combines web analytics and product analytics in one platform, with cookieless tracking and a straightforward self-hosting setup.
+
+![OpenPanel Dashboard](/content/tools/openpanel.png)
+
+### Product Analytics Features
+
+- **[Funnels](/features/funnels)**: Build multi-step conversion funnels with any events. See where users drop off and break down by properties.
+- **[Retention](/features/retention)**: Analyze how many users come back over time. Compare retention across cohorts, plans, or acquisition channels.
+- **[Event tracking](/features/event-tracking)**: Track any custom event with properties. Visualize with charts, tables, and breakdowns.
+- **User identification**: Link events to individual users. View complete user profiles with their full event history.
+- **[Session tracking](/features/session-tracking)**: See individual sessions with the full sequence of events and pages.
+- **Real-time dashboards**: Custom dashboards with multiple chart types, updated in real time.
+
+### Deployment
+
+Four commands to self-host:
+
+```bash
+git clone -b self-hosting https://github.com/Openpanel-dev/openpanel && cd openpanel/self-hosting && ./setup
+./start
+```
+
+Runs on Docker Compose with ClickHouse, PostgreSQL, and Redis. A mid-range VPS (4 vCPU, 8 GB RAM) handles millions of events. The setup wizard handles configuration, database setup, and SSL.
+
+Full guide: [How to self-host OpenPanel](/articles/how-to-self-host-openpanel) | [Self-hosting docs](/docs/self-hosting/self-hosting)
+
+### Pricing
+
+Self-hosting is free. All features included — the self-hosted version is identical to the cloud version with no feature gating.
+
+Cloud plans start at $2.50/month (5,000 events) and scale to $90/month for 1 million events. Every tier includes every feature.
+
+### Pros
+- Full product analytics (funnels, retention, user profiles) plus web analytics in one tool
+- Simplest self-hosting setup among tools with comparable features
+- Cookieless tracking — no consent banners needed
+- Self-hosted and cloud versions are identical
+- Multiple SDKs: JavaScript, React, Next.js, Vue, React Native, Flutter, and more
+
+### Cons
+- Newer project — smaller community than PostHog or Matomo
+- No built-in session replay or heatmaps yet
+- No built-in feature flags or A/B testing
+
+---
+
+## PostHog
+
+**Best for: Engineering teams that want analytics, feature flags, and experiments in one platform**
+
+[PostHog](https://posthog.com/) is the most feature-rich self-hosted product analytics tool. It bundles product analytics with session replay, feature flags, A/B testing, surveys, and error tracking. If you want a Swiss Army knife for product development, PostHog is the most complete option.
+
+![PostHog Dashboard](/content/tools/posthog.png)
+
+### Product Analytics Features
+
+- **Funnels**: Multi-step funnel analysis with breakdown by user properties
+- **Retention**: Cohort-based retention analysis
+- **User paths**: Visualize how users navigate through your product
+- **Cohorts**: Group users by behavior, properties, or lifecycle stage
+- **Session replay**: Watch recordings of actual user sessions
+- **Feature flags**: Roll out features to specific user segments
+- **A/B testing**: Run experiments and measure impact on metrics
+- **Surveys**: Collect in-product feedback
+
+### Deployment
+
+PostHog self-hosting uses Docker Compose for small deployments or Kubernetes (Helm charts) for production. The infrastructure stack includes PostgreSQL, Redis, ClickHouse, and Kafka — significantly more complex than other options.
+
+Requirements: Minimum 4 vCPU, 16 GB RAM, 30 GB+ storage. PostHog recommends self-hosting only for up to ~300K events/month. Beyond that, they push you toward their cloud offering.
+
+### Pricing
+
+Self-hosting is free under MIT license. Cloud has a generous free tier: 1 million analytics events, 5,000 session recordings, and 1 million feature flag requests per month. Beyond that, usage-based pricing kicks in (roughly $0.00005 per event for the next million).
+
+### Pros
+- Most comprehensive feature set of any self-hosted analytics tool
+- MIT license — very permissive
+- Generous cloud free tier for getting started
+- Active community and rapid development cycle
+
+### Cons
+- Complex self-hosting with multiple infrastructure dependencies
+- Resource-heavy — needs 4x the RAM of simpler tools
+- Self-hosted and cloud versions aren't feature-equivalent
+- Can be overwhelming — lots of features most teams won't use
+- PostHog actively discourages self-hosting at scale
+
+Compare with OpenPanel: [PostHog vs OpenPanel](/compare/posthog-alternative)
+
+---
+
+## Countly
+
+**Best for: Mobile-first product analytics with self-hosting**
+
+[Countly](https://countly.com/) is a product analytics platform with strong mobile analytics roots. It supports web, mobile, and desktop apps with SDKs for iOS, Android, React Native, Flutter, and more. The Community Edition is self-hostable under AGPL-3.0.
+
+### Product Analytics Features
+
+- **Funnels**: Define conversion funnels and track drop-off rates
+- **Retention**: Cohort retention analysis with configurable time periods
+- **User profiles**: Individual user tracking with event history
+- **Segmentation**: Filter and segment users by properties and behaviors
+- **Push notifications**: Built-in push notification system (mobile)
+- **Crash reporting**: Crash analytics for mobile apps
+
+### Deployment
+
+Countly self-hosts with Docker or manual installation on Linux. It uses MongoDB as its primary database. The setup is straightforward but requires MongoDB expertise for production deployments.
+
+Requirements: 4 vCPU, 8 GB RAM minimum. MongoDB 6+. More resources needed for high-traffic mobile apps.
+
+### Pricing
+
+The Community Edition is free under AGPL-3.0 but has limited features. Enterprise pricing is custom and includes advanced analytics, push notifications, crash reporting, and dedicated support. Expect significant cost for the Enterprise version.
+
+### Pros
+- Strong mobile analytics with native SDKs for all major platforms
+- Built-in push notifications and crash reporting
+- Established platform with enterprise customers
+- Good for mobile-first or hybrid app analytics
+
+### Cons
+- Community Edition is feature-limited — most product analytics features require Enterprise
+- Enterprise pricing is opaque and expensive
+- MongoDB-only — no PostgreSQL or ClickHouse option
+- UI feels dated compared to newer tools
+- Smaller open source community than PostHog
+
+Compare with OpenPanel: [Countly vs OpenPanel](/compare/countly-alternative)
+
+---
+
+## Matomo
+
+**Best for: Organizations that want a Google Analytics replacement with optional product analytics features**
+
+[Matomo](https://matomo.org/) is primarily a web analytics tool, but it offers product analytics capabilities through its plugin system. Heatmaps, session recordings, A/B testing, and funnels are available as paid plugins — even on self-hosted instances.
+
+![Matomo Dashboard](/content/tools/matomo.png)
+
+### Product Analytics Features
+
+- **Funnels** (paid plugin): Multi-step conversion funnels
+- **Cohorts** (paid plugin): Group users by behavior and analyze over time
+- **Heatmaps** (paid plugin): See where users click, scroll, and hover
+- **Session recordings** (paid plugin): Watch recordings of user sessions
+- **A/B testing** (paid plugin): Run experiments on your site
+- **Custom events**: Track custom events and goals
+
+### Deployment
+
+Matomo runs on PHP + MySQL/MariaDB. Deploy on any LAMP stack or use their Docker images. More complex than Docker-only tools because it requires a PHP environment and web server configuration.
+
+Full details in our [open source web analytics comparison](/articles/open-source-web-analytics#matomo).
+
+### Pricing
+
+The core platform is free under GPL-3.0. Product analytics plugins are sold separately:
+- Funnels: €199/year
+- Heatmaps + Session Recording: €249/year
+- A/B Testing: €199/year
+- Cohorts: €79/year
+
+These costs add up. A full product analytics setup on self-hosted Matomo can cost €500-700+/year in plugin licenses.
+
+### Pros
+- Most mature self-hosted analytics platform (since 2007)
+- Closest feature parity to Google Analytics
+- Large plugin ecosystem
+- Strong compliance track record
+
+### Cons
+- Product analytics features are paid add-ons, not included in the core
+- Plugin costs add up significantly
+- PHP stack requires more maintenance
+- Not a native product analytics tool — it's web analytics with product features bolted on
+
+Compare with OpenPanel: [Matomo vs OpenPanel](/compare/matomo-alternative)
+
+---
+
+## Mitzu
+
+**Best for: Data teams that want product analytics on top of their existing data warehouse**
+
+[Mitzu](https://www.mitzu.io/) takes a different approach. Instead of ingesting data into its own database, it runs analytics queries directly on your existing data warehouse (BigQuery, Snowflake, Databricks, etc.). If you already have event data in a warehouse, Mitzu gives you product analytics without duplicating data.
+
+### Product Analytics Features
+
+- **Funnels**: Conversion funnel analysis running on your warehouse
+- **Retention**: Cohort retention directly on warehouse data
+- **Segmentation**: Filter users by any property in your warehouse
+- **User journeys**: Path analysis on warehouse data
+- **Revenue analytics**: Connect events to revenue data
+
+### Deployment
+
+Mitzu deploys as a web application that connects to your existing warehouse. Self-hosting is available but requires a paid license.
+
+Requirements: An existing data warehouse (BigQuery, Snowflake, Databricks, ClickHouse, or PostgreSQL) with event data already flowing in.
+
+### Pricing
+
+Self-hosting requires a paid license (pricing available on request). Cloud plans are also custom-priced. There is no free tier for self-hosting.
+
+### Pros
+- No data duplication — queries your existing warehouse
+- Works with the data infrastructure you already have
+- Strong for data teams who live in SQL and warehouses
+- Good for organizations with complex data pipelines
+
+### Cons
+- Requires an existing data warehouse with event data
+- Self-hosting requires a paid license
+- Not suitable for teams starting from scratch
+- Smaller community and less documentation
+
+---
+
+## Self-Hosted Product Analytics vs Cloud: When to Self-Host
+
+The case for self-hosting product analytics is even stronger than for web analytics. Product analytics involves **user-level data** — individual users, their behaviors, their journeys through your product. This data is more sensitive than aggregate pageview counts.
+
+### Self-host product analytics when:
+
+- **You handle sensitive user data.** Healthcare (HIPAA), finance, or any industry where user behavior data is regulated. Self-hosting eliminates third-party data transfers entirely. See our [compliance guide](/articles/better-compliance-self-hosted-analytics).
+- **You need user-level data control.** Product analytics tracks individual users. Under GDPR, this is personal data. Self-hosting gives you full control over retention, deletion, and access.
+- **You want cost predictability.** Cloud product analytics pricing scales with events and identified users. At scale, this gets expensive fast. Self-hosting costs are your server costs.
+- **You have data residency requirements.** Some regulations require data to stay in specific geographic regions. Self-hosting on your own infrastructure solves this.
+
+### Use cloud when:
+
+- **You're just getting started with product analytics.** Cloud gets you insights faster. Self-host later when you've validated the tool fits your needs.
+- **You don't have ops capacity.** Product analytics tools with ClickHouse backends need some database knowledge to maintain.
+- **You need guaranteed uptime.** If analytics downtime directly impacts product decisions, a managed service with SLAs may be worth the cost.
+
+With [OpenPanel](/pricing), you can start on Cloud and migrate to self-hosting at any time. The features are identical in both versions.
+
+---
+
+## How to Get Started
+
+### 1. Pick a server
+
+For self-hosted product analytics, you'll want slightly more resources than for basic web analytics since product analytics involves more complex queries (funnels, retention calculations).
+
+Recommended starting point: 4 vCPU, 8 GB RAM, 80 GB SSD. This handles most small-to-medium products comfortably.
+
+- **[Hetzner](https://hetzner.cloud/?ref=7Hq0H5mQh7tM)** — A CX31 (4 vCPU, 8 GB RAM) for around €8.50/month
+- **DigitalOcean** — Equivalent droplet for ~$48/month
+- **Vultr** — Similar pricing to DigitalOcean
+
+### 2. Install and configure
+
+For OpenPanel:
+
+```bash
+git clone -b self-hosting https://github.com/Openpanel-dev/openpanel && cd openpanel/self-hosting && ./setup
+./start
+```
+
+The setup wizard walks you through domain configuration, database setup, SSL, and worker settings. Full guide: [How to self-host OpenPanel](/articles/how-to-self-host-openpanel).
+
+### 3. Instrument your product
+
+Product analytics requires event tracking in your codebase. With OpenPanel, install the SDK for your framework:
+
+```bash
+npm install @openpanel/nextjs
+# or @openpanel/react, @openpanel/vue, @openpanel/sdk
+```
+
+Then track events where they happen:
+
+```typescript
+import { op } from '@openpanel/nextjs';
+
+// Track a custom event
+op.track('signup_completed', {
+  plan: 'pro',
+  source: 'landing_page'
+});
+
+// Identify a user
+op.identify({
+  profileId: 'user_123',
+  email: 'user@example.com',
+  plan: 'pro'
+});
+```
+
+See the [SDK documentation](/docs/get-started/install-openpanel) for your specific framework.
+
+### 4. Build your first funnel
+
+Once events are flowing, create your first conversion funnel. A common starting point: **Visit landing page > Sign up > Complete onboarding > First key action**. This immediately shows you where users drop off in your core flow.
+
+---
+
+<Faqs>
+<FaqItem question="What is the best self-hosted product analytics tool?">
+For most teams, OpenPanel offers the best balance of product analytics features, ease of self-hosting, and cost. PostHog is more feature-rich (session replay, feature flags) but significantly more complex to self-host. Countly is best for mobile-first products.
+</FaqItem>
+
+<FaqItem question="Can I self-host Mixpanel or Amplitude?">
+No. Mixpanel and Amplitude are cloud-only platforms with no self-hosting option. The closest self-hosted alternatives are OpenPanel (most similar to Mixpanel in product analytics features) and PostHog (broader feature set with more complexity).
+</FaqItem>
+
+<FaqItem question="What is the difference between product analytics and web analytics?">
+Web analytics tracks website traffic — pageviews, referrals, devices, and geographic data. Product analytics tracks user behavior — events, funnels, retention, cohorts, and user journeys. Most self-hosted tools only offer web analytics. OpenPanel, PostHog, and Countly offer both. See our [self-hosted web analytics comparison](/articles/self-hosted-web-analytics) for web-focused tools.
+</FaqItem>
+
+<FaqItem question="How much does self-hosted product analytics cost?">
+The software is free for OpenPanel (AGPL-3.0) and PostHog (MIT). Your cost is server infrastructure — typically $10-50/month for a VPS, depending on traffic. Countly's Enterprise features and Matomo's product analytics plugins require paid licenses on top of server costs.
+</FaqItem>
+
+<FaqItem question="Do I need separate tools for web and product analytics?">
+Not necessarily. OpenPanel and PostHog both combine web analytics and product analytics in one platform. This means a single tracking snippet, one dashboard, and unified user profiles. If you only need web analytics, simpler tools like Plausible or Umami are better suited.
+</FaqItem>
+
+<FaqItem question="Is self-hosted product analytics GDPR compliant?">
+Self-hosting is one of the strongest approaches for GDPR compliance because user data never leaves your infrastructure. Combined with cookieless tracking (available in OpenPanel), you can run product analytics without consent banners and with full control over data retention and deletion.
+</FaqItem>
+
+<FaqItem question="Can I start with cloud and migrate to self-hosting later?">
+With OpenPanel, yes. The cloud and self-hosted versions are identical in features. You can start with Cloud to validate the tool and migrate to self-hosting when you're ready. PostHog also supports both, though there are some feature differences between their cloud and self-hosted versions.
+</FaqItem>
+</Faqs>

apps/public/content/articles/self-hosted-web-analytics.mdx

@@ -1,96 +1,405 @@
 ---
-title: Self-hosted web analytics
-description: Self-host your web analytics on your own infrastructure.
-tag: Hosting
+title: "Best Self-Hosted Web Analytics Tools in 2026 (Compared)"
+description: "Compare the best self-hosted web analytics tools in 2026. Detailed breakdown of OpenPanel, Plausible, Matomo, Umami, GoatCounter, and more — with pricing, features, deployment, and honest pros/cons."
+tag: Comparison
 team: OpenPanel Team
 date: 2024-11-14
-updated: 2025-12-02
+updated: 2026-02-16
 cover: /content/self-hosted-analytics.jpg
 ---
+import { Faqs, FaqItem } from '@/components/faq';
 
-In the digital age, understanding website traffic is crucial for any online presence. However, traditional analytics tools often come with privacy concerns and complex interfaces.
+Self-hosted web analytics gives you something cloud-only tools can't: **complete ownership of your data**. No third-party servers. No vendor lock-in. No surprise pricing changes. Your analytics data lives on your infrastructure, under your control.
 
-Self-hosted web analytics empowers you to maintain control over your data while gaining valuable insights into your website's performance. By hosting your own analytics platform, you can ensure data privacy and tailor the tool to your specific needs.
+But which self-hosted analytics tool should you actually use? There are over a dozen options, and they vary wildly in features, deployment complexity, and what they're good at.
 
-## Why Choose Self-Hosted Web Analytics?
+We tested and compared the most popular self-hosted web analytics tools so you don't have to. Here's what we found.
 
-You own your data - completely. No more worrying about what third-party services are doing with your information.
+## Quick Comparison
 
-Think about it: with your own analytics setup, you're in the driver's seat. You can:
-- Keep your data private and GDPR-compliant
-- Customize everything to work exactly how you want
-- Skip paying for expensive services (but keep in mind that you'll have to pay for your own server and maintenance)
+| Tool | Type | License | Deployment | Cloud Option | Best For |
+|------|------|---------|------------|-------------|----------|
+| [**OpenPanel**](#openpanel) | Web + Product | AGPL-3.0 | Docker Compose | From $2.50/mo | Teams needing web and product analytics |
+| [**Plausible**](#plausible) | Web | AGPL-3.0 | Docker Compose | From $9/mo | Simple, privacy-first pageview tracking |
+| [**Matomo**](#matomo) | Web | GPL-3.0 | PHP + MySQL | From €29/mo | Full Google Analytics replacement |
+| [**Umami**](#umami) | Web | MIT | Docker Compose | Free tier | Lightweight self-hosted analytics |
+| [**GoatCounter**](#goatcounter) | Web | EUPL | Single binary | Free tier | Minimalist analytics for small sites |
+| [**PostHog**](#posthog) | Product + Web | MIT | Docker/K8s | Free tier | Developer teams needing analytics + flags |
+| [**Ackee**](#ackee) | Web | MIT | Docker + MongoDB | None | Privacy-focused minimalist tracking |
 
-If you've been using tools like Mixpanel or Google Analytics, you might be surprised by how liberating it feels to have full control over your analytics.
+## How to Choose the Right Self-Hosted Analytics Tool
 
-## Self-Hosted Analytics as an Alternative to Mixpanel and Google Analytics
+Before picking a tool, think about what you actually need:
 
-While Google Analytics and Mixpanel are powerful tools, they come with their own set of limitations, particularly regarding data privacy and customization. Here’s how self-hosted analytics can serve as a viable alternative:
+**Web analytics vs product analytics.** If you only need pageviews, traffic sources, and referrals, a simple web analytics tool like Plausible or Umami will do. If you also need [funnels](/features/funnels), [retention analysis](/features/retention), user identification, and [event tracking](/features/event-tracking), you need a tool with product analytics capabilities.
 
-- **Google Analytics Alternatives**: Google Analytics is a comprehensive tool, but it often involves data sharing with Google itself. Self-hosted solutions eliminate this concern, providing similar functionalities without compromising privacy.
+**Deployment complexity.** Some tools deploy in under 5 minutes with a single Docker Compose command. Others need Kubernetes clusters, multiple databases, or PHP environments. Be honest about your ops capacity.
 
-- [**Mixpanel Alternatives**](/articles/alternatives-to-mixpanel): Mixpanel is known for its in-depth user analytics but can be costly and complex. Self-hosted alternatives offer a more cost-effective solution with the ability to customize and scale based on your unique requirements.
+**Maintenance burden.** Self-hosting means you handle updates, backups, and scaling. Simpler tools like GoatCounter or Umami need minimal maintenance. Feature-rich tools like Matomo or PostHog require more attention.
 
-## Simple analytics is key
+**Privacy and compliance.** All self-hosted tools keep data on your servers. But some go further with cookieless tracking (no consent banners needed), while others still use cookies by default.
 
-Most of the analytics tools out there are complex, feature packed and have a steep learning curve.
+**Cost at scale.** Self-hosting isn't free — you pay for server infrastructure. A $5/month VPS handles most small-to-medium sites, but high-traffic sites need more resources.
 
-**Look at Google Analytics**, for example. It's a powerful tool, but most often people don't even use a fraction of what it offers.
+---
 
-It's because they have made a tool that is so complex that it's hard to know where to start.
+## OpenPanel
 
-**Mixpanel has done it right**, but with their constant pricing changes, you never know what you're paying for.
+**Best for: Teams that need both web analytics and product analytics in one self-hosted tool**
 
-Open-source tools tend to be simpler and easier to understand, since they don't have to deal with the complexity of a big company with lots of stakeholders.
+[OpenPanel](/) combines [web analytics](/features/web-analytics) and product analytics in a single platform. You get pageviews and traffic sources alongside funnels, retention, user journeys, and event tracking. It uses cookieless tracking by default, which means no consent banners.
 
-## Privacy and security
+![OpenPanel Dashboard](/content/tools/openpanel.png)
 
-With growing concerns about data privacy, using a self-hosted solution ensures that your website's data is stored securely on your own servers. This approach minimizes the risk of data breaches and unauthorized access, providing peace of mind to both you and your website visitors. 
+### Deployment
 
-By removing the need for cookie consent banners, you create a smoother user experience while still adhering to privacy standards. This level of control makes self-hosted solutions attractive for those prioritizing privacy.
+OpenPanel is one of the easiest tools to self-host. Four commands and you're running:
 
-## Setting Up Your Self-Hosted Analytics
+```bash
+git clone -b self-hosting https://github.com/Openpanel-dev/openpanel && cd openpanel/self-hosting && ./setup
+./start
+```
 
-Transitioning to a self-hosted analytics solution may seem daunting, but it can be straightforward with the right approach:
+The setup wizard handles Docker, database configuration, and SSL. It runs on a single VPS with Docker Compose. A mid-range VPS (4 vCPU, 8 GB RAM) handles millions of events per month.
 
-### 1. Pick a server provider
+For detailed instructions, see the [self-hosting guide](/docs/self-hosting/self-hosting).
 
-Picking a server provider not an easy task. There are many things to consider, such as cost, performance, and security. We would advice you to do your own research and choose a provider that fits your needs.
+### Key Features
+- Real-time web analytics dashboard with traffic, referrals, pages, and devices
+- Product analytics: funnels, retention, user identification, custom events
+- Cookieless tracking — GDPR/CCPA compliant without consent banners
+- Multiple SDKs (JavaScript, React, Next.js, Vue, and more)
+- Self-hosted version is identical to the cloud version — no feature gating
 
-Here is a list of some providers that differ in both price and complexity:
+### Pricing
+Self-hosting is free. Cloud plans start at $2.50/month for up to 5,000 events, scaling to $90/month for 1 million events. All features included at every tier.
 
-- **AWS** - Complex but you can do almost anything
-- **Google Cloud** - Complex but you can do almost anything
-- **DigitalOcean** - Easy to use but limited, great price
-- **Hetzner** - Easy to use but limited, best price!
-- **Vultr** - Easy to use but limited, great price
+### Pros
+- Only self-hosted tool that combines web and product analytics at this price point
+- Simple Docker Compose deployment with guided setup
+- Cookieless by default — no cookie banners needed
+- Open source (AGPL-3.0) with no feature differences between cloud and self-hosted
 
-### 2. Pick a open-source analytics platform
+### Cons
+- Newer project with a smaller community than Matomo or PostHog
+- No built-in session replay or heatmaps (yet)
+- Self-hosting still requires server maintenance
 
-We're of course biased, but we think OpenPanel is the best self-hosted analytics platform out there since it has both product and web analytics. Most of the self-hosted analytics tools out there is just for web analytics.
+---
 
-So depending on your needs you might consider what you choose.
+## Plausible
 
-- **Plausible** - Simple and privacy focused ([compare with OpenPanel](/compare/plausible-alternative))
-- **Simple Analytics** - Simple and privacy focused
-- **Fathom** - Simple and privacy focused ([compare with OpenPanel](/compare/fathom-alternative))
-- **OpenPanel** - Best of both worlds, easy to use and privacy focused
-- **Umami** - Lightweight and privacy focused ([compare with OpenPanel](/compare/umami-alternative))
+**Best for: Simple, privacy-first pageview analytics with minimal setup**
 
-For a detailed comparison of all options, see our guide on the [best open source web analytics tools](/articles/open-source-web-analytics).
+[Plausible](https://plausible.io/self-hosted-web-analytics) is the go-to choice if you want clean, simple web analytics without complexity. It tracks pageviews, referrals, and goals without cookies. The dashboard fits on a single screen — no training required.
 
-Each of these platforms has guides how to set up on your own server, here is ours: [How to install OpenPanel on your own server](/docs/self-hosting/self-hosting)
+![Plausible Dashboard](/content/tools/plausible.png)
 
-### 3. Secure your server
+### Deployment
 
-Before you start installning your analytics platform, you should secure your server.
+Plausible self-hosts with Docker Compose. The setup involves cloning their hosting repo, configuring a `plausible-conf.env` file, and running `docker compose up`.
 
-Read our guide on [how to secure your server](/articles/how-to-secure-ubuntu-server) for more information.
+Requirements: A server with Docker, at least 2 GB RAM. Uses PostgreSQL and ClickHouse under the hood.
 
-### 4. Install your analytics platform
+### Key Features
+- Single-screen dashboard with real-time data
+- Cookieless tracking — no consent banners
+- Goal tracking and custom events
+- Google Search Console integration
+- Lightweight script (~1 KB)
 
-Each of the platforms has guides how to install on your own server. Usually this information is available on the project's website or GitHub repository.
+### Pricing
+Self-hosting is free under AGPL-3.0. Cloud plans start at $9/month for 10,000 pageviews.
 
-## Conclusion
+### Pros
+- The simplest analytics dashboard available — anyone can use it
+- Very lightweight tracking script that won't slow your site
+- Active open source community
+- Clean Docker Compose deployment
 
-Self-hosted web analytics is a strategic move for anyone looking to prioritize privacy and control over their website data. By opting for a solution that aligns with your values and needs, you can gain valuable insights without compromising on security. For those exploring [Mixpanel alternatives](/articles/alternatives-to-mixpanel) or Google Analytics alternatives, self-hosted platforms provide a robust and private solution. Take the leap into self-hosting today and experience the benefits of a more private and streamlined analytics process.
+### Cons
+- No product analytics (no funnels, retention, or user-level tracking)
+- No session replay or heatmaps
+- Self-hosted version requires manual updates
+- AGPL license requires source disclosure if you modify and distribute
+
+Compare with OpenPanel: [Plausible vs OpenPanel](/compare/plausible-alternative)
+
+---
+
+## Matomo
+
+**Best for: Organizations that need a full Google Analytics replacement**
+
+[Matomo](https://matomo.org/) (formerly Piwik) has been around since 2007 and is the most feature-rich self-hosted web analytics tool available. If you're migrating from Google Analytics and want a similar experience under your own control, Matomo is the closest match.
+
+![Matomo Dashboard](/content/tools/matomo.png)
+
+### Deployment
+
+Matomo runs on PHP + MySQL/MariaDB. You can deploy it on any LAMP stack or use their Docker images. The setup is more involved than Docker-only tools — you'll need PHP, a web server (Apache/Nginx), and a database.
+
+Requirements: PHP 8.1+, MySQL 8+ or MariaDB 10.4+, at least 2 GB RAM. For high traffic (1M+ pageviews/month), separate app and database servers are recommended.
+
+### Key Features
+- Full web analytics suite (traffic, referrals, campaigns, goals, ecommerce)
+- Heatmaps and session recordings (paid plugins)
+- A/B testing (paid plugin)
+- Google Analytics data import
+- Large plugin ecosystem
+
+### Pricing
+Self-hosting the core platform is free under GPL-3.0. However, advanced features like heatmaps, session recordings, and A/B testing require paid plugin subscriptions even on self-hosted instances. Cloud starts at €29/month.
+
+### Pros
+- Most mature and feature-rich self-hosted analytics tool
+- Closest replacement for Google Analytics
+- Huge plugin ecosystem
+- Strong compliance track record (used by governments and enterprises)
+
+### Cons
+- PHP stack is more complex to deploy and maintain than Docker-only tools
+- Premium plugins add cost even on self-hosted
+- UI feels dated compared to newer tools
+- Resource-heavy at scale
+
+Compare with OpenPanel: [Matomo vs OpenPanel](/compare/matomo-alternative)
+
+---
+
+## Umami
+
+**Best for: Developers who want a lightweight, MIT-licensed analytics tool**
+
+[Umami](https://umami.is/) is a lightweight, privacy-focused web analytics tool. It's one of the simplest tools to self-host and maintain. If you want basic web analytics with minimal overhead, Umami delivers.
+
+![Umami Dashboard](/content/tools/umami.png)
+
+### Deployment
+
+Umami self-hosts with Docker Compose or directly with Node.js. Clone the repo, configure your database connection, and start. It supports PostgreSQL and MySQL.
+
+Requirements: Node 18+ with PostgreSQL 12+ or MySQL 8+. Very lightweight — runs comfortably on a $5/month VPS for small to medium sites.
+
+### Key Features
+- Clean dashboard with real-time data
+- Pageviews, referrals, devices, and basic events
+- Cookieless tracking
+- Multiple website support
+- API access for custom integrations
+
+### Pricing
+Self-hosting is completely free under MIT license. Umami Cloud offers a free tier with 1 million events/month, then $0.00002 per additional event.
+
+### Pros
+- MIT license — the most permissive license among comparable tools
+- Very lightweight and easy to maintain
+- Simple deployment with Docker Compose
+- Free cloud tier for those who want to try before self-hosting
+
+### Cons
+- Limited to basic web metrics
+- No funnels, retention, or product analytics
+- Fewer features than Plausible (no Google Search Console integration)
+- No session replay or heatmaps
+
+Compare with OpenPanel: [Umami vs OpenPanel](/compare/umami-alternative)
+
+---
+
+## GoatCounter
+
+**Best for: Minimalist analytics for personal sites and blogs**
+
+[GoatCounter](https://goatcounter.com/) takes minimalism to the extreme. It's a single Go binary that tracks pageviews without cookies. No Docker, no complex setup — just download and run.
+
+### Deployment
+
+GoatCounter ships as a single binary. Download it, run it, point your domain at it. You can also run it with SQLite (default) or PostgreSQL. No Docker required, though Docker images are available.
+
+Requirements: Minimal. Runs on the smallest VPS you can find. SQLite mode needs almost no resources.
+
+### Key Features
+- Pageview tracking without cookies or JavaScript (optional)
+- Single binary deployment
+- SQLite or PostgreSQL backend
+- Basic referral and browser tracking
+- Public dashboard option
+
+### Pricing
+Self-hosting is free under EUPL license. The hosted service is free for non-commercial use, with paid plans starting at €5/month.
+
+### Pros
+- Simplest deployment of any analytics tool — single binary
+- Runs on minimal resources
+- Can work without JavaScript (server-side counting)
+- Free hosted tier for personal sites
+
+### Cons
+- Very basic feature set — pageviews and referrals only
+- No event tracking or custom properties
+- No product analytics features
+- Small development team (mostly one person)
+
+---
+
+## PostHog
+
+**Best for: Developer teams that need analytics, feature flags, and experiments in one platform**
+
+[PostHog](https://posthog.com/) is an all-in-one product analytics platform with web analytics, session replay, feature flags, A/B testing, and surveys. It's the most feature-rich option here, but also the most complex to self-host.
+
+![PostHog Dashboard](/content/tools/posthog.png)
+
+### Deployment
+
+PostHog self-hosting uses Docker Compose for small deployments or Kubernetes via Helm charts for production. The setup requires PostgreSQL, Redis, ClickHouse, and Kafka. It's significantly more complex than other tools on this list.
+
+Requirements: Minimum 4 vCPU, 16 GB RAM, 30 GB+ storage. The team recommends self-hosting only for up to ~300K events/month; beyond that, PostHog Cloud handles scaling better.
+
+### Key Features
+- Product analytics with funnels, retention, and cohorts
+- Web analytics dashboard
+- Session replay
+- Feature flags and A/B testing
+- Surveys and error tracking
+
+### Pricing
+Self-hosting is free under MIT license. Cloud has a generous free tier (1M analytics events, 5K session recordings/month), then usage-based pricing.
+
+### Pros
+- Most comprehensive feature set — replaces multiple tools
+- MIT license
+- Generous cloud free tier
+- Active community and rapid development
+
+### Cons
+- Complex self-hosting setup with multiple infrastructure dependencies
+- Resource-heavy — needs significantly more server power
+- Self-hosted vs cloud is not feature-equivalent
+- Overkill if you just need web analytics
+
+Compare with OpenPanel: [PostHog vs OpenPanel](/compare/posthog-alternative)
+
+---
+
+## Ackee
+
+**Best for: Privacy-focused minimalist tracking on small projects**
+
+[Ackee](https://github.com/electerious/Ackee) is a self-hosted analytics tool that focuses on privacy and minimalism. It tracks pageviews and basic events with a clean, minimal interface.
+
+### Deployment
+
+Ackee runs on Node.js with MongoDB. Deploy with Docker Compose or directly on a server with Node and MongoDB installed.
+
+Requirements: Node 18+, MongoDB 7+. Lightweight on resources.
+
+### Key Features
+- Pageview and event tracking
+- Cookieless, anonymized tracking
+- GraphQL API for custom integrations
+- Multiple domain support
+- Minimal, clean UI
+
+### Pricing
+Completely free to self-host under MIT license. No cloud offering from the team.
+
+### Pros
+- Fully free with MIT license
+- Privacy-first with anonymized data
+- GraphQL API for flexible querying
+- Very simple and focused
+
+### Cons
+- Requires MongoDB (adds complexity vs PostgreSQL-based tools)
+- Minimal feature set
+- No cloud option
+- Development has slowed in recent years
+
+Compare with OpenPanel: [Ackee vs OpenPanel](/compare/ackee-alternative)
+
+---
+
+## Self-Hosted vs Cloud Analytics: When to Self-Host
+
+Self-hosting isn't always the right choice. Here's when it makes sense — and when it doesn't.
+
+### Self-host when:
+
+- **You need data sovereignty.** Regulations like GDPR, HIPAA, or industry-specific rules require data to stay on your infrastructure. Self-hosting eliminates third-party data transfers entirely. Read more in our [compliance guide](/articles/better-compliance-self-hosted-analytics).
+- **You want predictable costs.** Cloud analytics pricing scales with events or pageviews. Self-hosting costs are your server costs, which are more predictable and often cheaper at scale.
+- **You have ops capacity.** Someone on your team can manage Docker, handle updates, and monitor uptime.
+- **You want full control.** Custom retention policies, direct database access, integration with internal systems.
+
+### Use cloud when:
+
+- **You want zero maintenance.** No server management, no updates, no uptime monitoring.
+- **You're just getting started.** Cloud gets you analytics in minutes. Self-hosting takes longer to set up.
+- **Your team is small.** If nobody on the team is comfortable managing infrastructure, cloud is safer.
+- **You need guaranteed uptime.** Cloud providers handle redundancy and failover.
+
+Most self-hosted analytics tools also offer cloud versions. With [OpenPanel](/pricing), you can start with Cloud and migrate to self-hosting later — or vice versa — since the features are identical.
+
+## How to Get Started with Self-Hosted Analytics
+
+### 1. Pick a server
+
+You need a VPS. For most self-hosted analytics tools, a server with 2-4 vCPU, 4-8 GB RAM, and 40 GB SSD is enough to start.
+
+Recommended providers:
+- **[Hetzner](https://hetzner.cloud/?ref=7Hq0H5mQh7tM)** — Best price-to-performance. A CX31 (4 vCPU, 8 GB RAM) costs around €8.50/month.
+- **DigitalOcean** — Easy to use, good documentation. Droplets from $6/month.
+- **Vultr** — Similar to DigitalOcean with competitive pricing.
+- **AWS/GCP** — More complex, but useful if you're already in their ecosystem.
+
+### 2. Secure your server
+
+Before installing anything, lock down your server. At minimum: disable root login, set up SSH keys, configure a firewall. We have a full guide on [how to secure your Ubuntu server](/articles/how-to-secure-ubuntu-server).
+
+### 3. Install your analytics tool
+
+Each tool has its own installation process. For OpenPanel, it's four commands:
+
+```bash
+git clone -b self-hosting https://github.com/Openpanel-dev/openpanel && cd openpanel/self-hosting && ./setup
+./start
+```
+
+The setup wizard handles everything — Docker, databases, SSL certificates. Full walkthrough: [How to self-host OpenPanel](/articles/how-to-self-host-openpanel).
+
+### 4. Add tracking to your site
+
+Install the tracking script on your website. With OpenPanel, you add a small JavaScript snippet or use one of the framework-specific SDKs (React, Next.js, Vue, and more). Check the [SDK documentation](/docs/get-started/install-openpanel) for your stack.
+
+---
+
+<Faqs>
+<FaqItem question="What is the best self-hosted web analytics tool?">
+It depends on your needs. For combined web and product analytics, OpenPanel offers the best value. For simple pageview tracking, Plausible is the most popular. For a full Google Analytics replacement, Matomo has the most features. For the lightest option, GoatCounter or Umami work well.
+</FaqItem>
+
+<FaqItem question="Is self-hosted analytics free?">
+The software is free for most tools (OpenPanel, Plausible, Matomo, Umami, GoatCounter, PostHog, and Ackee all offer free self-hosting). Your cost is the server infrastructure — typically $5-50/month for a VPS depending on your traffic volume.
+</FaqItem>
+
+<FaqItem question="Do I need a cookie banner with self-hosted analytics?">
+Not if your tool uses cookieless tracking. OpenPanel, Plausible, Umami, GoatCounter, and Ackee all track without cookies, so no cookie consent banner is needed for basic analytics. Matomo uses cookies by default but offers a cookieless mode.
+</FaqItem>
+
+<FaqItem question="Can I self-host analytics and be GDPR compliant?">
+Yes. Self-hosting is one of the strongest approaches for GDPR compliance because your data never leaves your infrastructure. There are no third-party data transfers to worry about, and you have full control over data retention and deletion. Tools like OpenPanel and Plausible add cookieless tracking on top, making compliance even simpler.
+</FaqItem>
+
+<FaqItem question="How much server resources do I need for self-hosted analytics?">
+For most tools: 2-4 vCPU, 4-8 GB RAM, and 40 GB SSD handles up to a few hundred thousand events per month. PostHog needs more (16 GB RAM minimum). GoatCounter and Ackee run on minimal resources. Scale up as your traffic grows.
+</FaqItem>
+
+<FaqItem question="What is the difference between self-hosted web analytics and product analytics?">
+Web analytics tracks website traffic — pageviews, referrals, devices, and geographic data. Product analytics tracks user behavior within your product — events, funnels, retention, and user journeys. Some tools like OpenPanel and PostHog offer both. Most self-hosted tools (Plausible, Umami, GoatCounter) focus on web analytics only. See our guide on [self-hosted product analytics](/articles/self-hosted-product-analytics) for tools that cover the product side.
+</FaqItem>
+
+<FaqItem question="Can I migrate from Google Analytics to a self-hosted tool?">
+Yes. Matomo offers direct Google Analytics data import. Other tools like OpenPanel and Plausible let you start fresh with their tracking. You can run both in parallel during the transition to make sure you're comfortable with the new tool before removing GA.
+</FaqItem>
+</Faqs>

apps/public/content/articles/vs-mixpanel.mdx

@@ -1,110 +0,0 @@
----
-title: Mixpanel vs OpenPanel
-description: A comparison between Mixpanel and OpenPanel
-date: 2024-11-13
-updated: 2025-12-02
-tag: Comparison
-team: OpenPanel Team
-cover: /content/cover-mixpanel.jpg
----
-import { Figure } from "@/components/figure";
-
-OpenPanel is based on the same principles as Mixpanel, but with a few key differences. We'll go through some of the features and see how they compare.
-
-> See our detailed comparison: [OpenPanel vs Mixpanel](/compare/mixpanel-alternative)
->
-> Looking for pricing details? Check out our [complete Mixpanel pricing breakdown](/articles/mixpanel-pricing)
-
-## Web analytics
-
-Mixpanel is a great product analytics tool but in our minds its lacking in this area. Web analytics should always be easy to get going and we think Mixpanel has to much focus on product analytics.
-
-In OpenPanel you do not need to do anything to get your web analytics up and running. Just add the tracking snippet to your website or app and you're up and running.
-
-<Figure
-  src="/content/screenshot-web-analytics.png"
-  alt="OpenPanel web analytics dashboard showing pageviews, sessions and other key metrics"
-  caption="OpenPanel's web analytics dashboard provides key metrics at a glance"
-/>
-
-## Product analytics
-
-Mixpanel's strength is in product analytics and it's hard to beat (to be honest). Nevertheless we aim to have the same great features in OpenPanel.
-
-Probably the most used feature in Mixpanel is their report tool, where you can create all kinds of charts and see how different things are doing. We have tried to make a similar experiance where you can pick and choose different metrics and dimensions to create your own custom reports.
-
-Some of the features we have added are:
-
-- **Funnels**
-- **Retention**
-- **Line charts**
-- **Bar charts**
-- **Histogram charts**
-- **Area charts**
-- **Pie charts**
-- **Map charts**
-- **Events**
-- **Profiles**
-
-<Figure
-  src="/content/screenshot-report-funnel.png"
-  alt="OpenPanel report tool showing a funnel"
-  caption="OpenPanel's report tool provides a wide range of charts and metrics"
-/>
-
-## Cookies vs Cookieless
-
-Mixpanel is a cookie-based tool, which means that it relies on cookies to track users. This provides advantages like:
-- More accurate user identification across sessions
-- Better cross-domain tracking
-- Easier integration with existing cookie-based systems
-
-However, it also comes with challenges:
-- Requires cookie consent banners in many jurisdictions
-- Can be blocked by ad blockers and privacy-focused browsers
-- May not work with upcoming cookie restrictions
-
-OpenPanel uses a cookieless approach, relying instead on privacy-preserving techniques like fingerprinting and session-based tracking. This offers benefits such as:
-- No cookie consent banners required
-- Works even when cookies are blocked
-- Future-proof against upcoming cookie restrictions
-
-> Its up to you to decide what's best for your users and your business.
-
-## Realtime
-
-Both Mixpanel and OpenPanel have real-time analytics. Its just a matter of seconds before you can see what's happening in your product or website. 
-
-But we have added a new feature in OpenPanel which we call `Realtime`. It's similar to Google Analytics' real-time view since we love looking at big screens with live data.
-
-<Figure
-  src="/content/screenshot-realtime.png"
-  alt="OpenPanel real-time analytics dashboard showing active users and other key metrics"
-  caption="See where all your users are at the moment in OpenPanel's realtime view"
-/>
-
-## Notifications
-
-In OpenPanel you can create notifications for different events. This is a great way to stay on top of things and get notified when something is happening.
-
-You can define advanced conditions when and what to notify you about. We have several integrations with other tools so you can easily connect your notifications to other tools you use.
-
-As of now, we don't believe Mixpanel has this feature.
-
-## Similarities
-
-### Profiles
-
-Both Mixpanel and OpenPanel allow you to see profiles of your users. This is a great way to understand your users and see how they are doing.
-
-### Events
-
-You get new events in realtime in both Mixpanel and OpenPanel, you can search and filter on any property. Mixpanel might be a bit faster but it's not a big difference.
-
-## Conclusion
-
-Mixpanel is a great product analytics tool but in our minds its lacking in this area. Web analytics should always be easy to get going and we think Mixpanel has to much focus on product analytics.
-
-**OpenPanel is a great alternative to Mixpanel** if you want to get started with analytics quickly and easily.
-
-Looking for more options? Check out our guide on [9 best open source web analytics tools](/articles/open-source-web-analytics) for a comprehensive comparison.

apps/public/content/compare/ackee-alternative.json

@@ -2,12 +2,12 @@
   "slug": "ackee-alternative",
   "page_type": "alternative",
   "seo": {
-    "title": "Ackee Alternative: Why Teams Choose OpenPanel",
-    "description": "Compare OpenPanel vs Ackee Analytics. Discover why teams choose OpenPanel as their Ackee alternative for product analytics, user identification, and scalable analytics while maintaining privacy.",
+    "title": "Best Ackee Alternative 2026 - Open Source & Free",
+    "description": "Looking for an Ackee alternative? OpenPanel offers deeper product analytics with funnels, retention, and user identification \u2014 plus cloud and self-hosting options. Open source and free to start.",
     "noindex": false
   },
   "hero": {
-    "heading": "Ackee Alternative",
+    "heading": "Best Ackee Alternative",
     "subheading": "Love Ackee's privacy-first approach and self-hosting simplicity? OpenPanel adds product analytics capabilities - funnels, cohorts, retention, and user identification - with a modern architecture built for scale.",
     "badges": [
       "Open-source",
@@ -24,6 +24,15 @@
     "founded": 2016,
     "headquarters": "Germany"
   },
+  "overview": {
+    "title": "Why consider OpenPanel over Ackee?",
+    "paragraphs": [
+      "Ackee is an ultra-minimal, self-hosted analytics tool that prioritizes anonymous tracking and a clean interface. Built on MongoDB, it's a solid choice for developers who want basic web metrics on their own server without any third-party data sharing. But its intentional minimalism means no user identification, no product analytics, and no cloud-hosted option.",
+      "OpenPanel provides everything Ackee offers \u2014 privacy-focused, open-source, and self-hostable \u2014 while adding the product analytics capabilities that help you actually grow your product. Funnels let you understand where users drop off, retention analysis shows whether they come back, and user identification connects anonymous visits to real accounts once users sign in.",
+      "The database architecture is a fundamental difference. Ackee uses MongoDB, which works for small sites but isn't designed for analytical queries. OpenPanel uses ClickHouse, a column-oriented database purpose-built for analytics, which means fast queries even with millions of events. And if you don't want to manage servers, OpenPanel offers a cloud option with a free tier \u2014 something Ackee doesn't provide.",
+      "If you appreciate Ackee's self-hosted simplicity but need mobile app analytics through native SDKs, deeper insights into user behavior, or the option to use a managed cloud service, OpenPanel is the natural upgrade path."
+    ]
+  },
   "summary_comparison": {
     "title": "OpenPanel vs Ackee: Which is right for you?",
     "intro": "Both are privacy-focused open source analytics tools. Ackee focuses on simple web metrics with anonymous tracking. OpenPanel adds product analytics capabilities with user identification.",
@@ -495,6 +504,20 @@
     ]
   },
   "related_links": {
+    "guides": [
+      {
+        "title": "Website analytics setup",
+        "url": "/guides/website-analytics-setup"
+      },
+      {
+        "title": "Node.js analytics setup",
+        "url": "/guides/nodejs-analytics"
+      },
+      {
+        "title": "Migrate from Google Analytics",
+        "url": "/guides/migrate-from-google-analytics"
+      }
+    ],
     "articles": [
       {
         "title": "9 best open source web analytics tools",
@@ -526,4 +549,4 @@
       "href": "https://github.com/Openpanel-dev/openpanel"
     }
   }
-}
+}

apps/public/content/compare/amplitude-alternative.json

@@ -2,19 +2,14 @@
   "slug": "amplitude-alternative",
   "page_type": "alternative",
   "seo": {
-    "title": "Amplitude alternative",
-    "description": "Compare OpenPanel with Amplitude: open-source, privacy-first analytics with a lighter SDK. Get web and product analytics without the complexity or enterprise pricing.",
+    "title": "Best Amplitude Alternatives 2026 - Open Source, Free & Paid",
+    "description": "Compare the best Amplitude alternatives in 2026: OpenPanel, PostHog, Heap, and Plausible. Open source, privacy-first, and affordable options for every team size. See which fits you best.",
     "noindex": false
   },
   "hero": {
-    "heading": "Amplitude alternative",
+    "heading": "Best Amplitude Alternatives",
     "subheading": "OpenPanel is an open-source, privacy-first alternative to Amplitude. Get powerful product analytics with web analytics built in, cookie-free tracking, and the freedom to self-host or use our cloud.",
-    "badges": [
-      "Open-source",
-      "Cookie-free",
-      "EU-only hosting",
-      "Self-hostable"
-    ]
+    "badges": ["Open-source", "Cookie-free", "EU-only hosting", "Self-hostable"]
   },
   "competitor": {
     "name": "Amplitude",
@@ -24,6 +19,15 @@
     "founded": 2012,
     "headquarters": "San Francisco, CA"
   },
+  "overview": {
+    "title": "Why consider OpenPanel over Amplitude?",
+    "paragraphs": [
+      "Amplitude is one of the leading enterprise product analytics platforms, trusted by large companies for behavioral analytics, experimentation, and customer data management. But its power comes with significant complexity \u2014 a steep learning curve, enterprise-level pricing that can scale to six figures annually, and a cloud-only architecture that gives you no option to self-host your data.",
+      "OpenPanel offers a simpler, more affordable approach to product analytics without sacrificing the features that matter most. You get event tracking, funnels, retention analysis, cohort breakdowns, and user profiles \u2014 all in a clean interface that doesn't require a dedicated analytics team to operate. And because OpenPanel is open source, you can inspect the code, self-host on your own infrastructure, and avoid vendor lock-in entirely.",
+      "One of the biggest differences is privacy. Amplitude uses cookies and stores data on US servers by default, which means consent banners and GDPR complexity for European users. OpenPanel is cookie-free by default with EU-only data storage, so you can track user behavior without privacy trade-offs. The SDK is also dramatically smaller \u2014 2.3 KB compared to Amplitude's 36-96 KB \u2014 which directly impacts your page performance and Core Web Vitals.",
+      "For startups and growing teams who need solid product analytics without the enterprise overhead, OpenPanel delivers the insights you need at a price point that makes sense from day one."
+    ]
+  },
   "summary_comparison": {
     "title": "OpenPanel vs Amplitude: Which is right for you?",
     "intro": "Both platforms help product teams understand user behavior. The key differences are pricing model, complexity, privacy approach, and deployment options.",
@@ -38,7 +42,7 @@
       "Large enterprises with dedicated analytics teams",
       "Organizations that need advanced experimentation and feature flags",
       "Teams requiring sophisticated behavioral cohorts and predictive analytics",
-      "Companies wanting an all-in-one platform with session replay and guides"
+      "Companies wanting an all-in-one platform with guides, surveys, and advanced experimentation"
     ]
   },
   "highlights": {
@@ -175,9 +179,9 @@
           },
           {
             "name": "Session replay",
-            "openpanel": false,
+            "openpanel": true,
             "competitor": true,
-            "notes": "Included in Amplitude platform"
+            "notes": "Both platforms include session replay"
           },
           {
             "name": "Custom dashboards",
@@ -414,15 +418,49 @@
       },
       {
         "title": "Simpler analytics needs",
-        "description": "If you don't need predictive ML models, feature flags, or session replay, OpenPanel gives you core analytics without the bloat.",
+        "description": "If you don't need predictive ML models or feature flags, OpenPanel gives you core analytics — including session replay — without the enterprise bloat.",
         "icon": "target"
       }
     ]
   },
+  "benefits_section": {
+    "label": "Why teams switch",
+    "title": "Everything you need, none of what you don't",
+    "description": "Amplitude packs in features most teams never use — and charges accordingly. OpenPanel focuses on the analytics that actually drive product decisions, at a price that makes sense from day one.",
+    "cta": {
+      "label": "Start free with OpenPanel",
+      "href": "https://dashboard.openpanel.dev/onboarding"
+    },
+    "benefits": [
+      "Event tracking, funnels, retention, and cohorts — without the enterprise learning curve",
+      "Cookie-free by default: no consent banners, no GDPR headaches for EU users",
+      "2.3 KB SDK vs Amplitude's 36–96 KB — real impact on page speed and Core Web Vitals",
+      "Self-host on your own infrastructure with Docker, or use our EU-only cloud",
+      "Transparent pricing from $2.50/month — no MTU surprises, no overage fees at 1.2x",
+      "Open source (AGPL-3.0): inspect the code, fork it, run it yourself",
+      "Web analytics and product analytics in one tool — no stitching together separate products"
+    ]
+  },
   "faqs": {
     "title": "Frequently asked questions",
-    "intro": "Common questions about switching from Amplitude to OpenPanel.",
+    "intro": "Common questions about Amplitude alternatives and switching to OpenPanel.",
     "items": [
+      {
+        "question": "What are the best Amplitude alternatives in 2026?",
+        "answer": "The top Amplitude alternatives depend on your team's needs: OpenPanel (open source, self-hostable, cookie-free — best for privacy-conscious teams and startups), PostHog (open source all-in-one with session replay and feature flags — best for developer-led teams who want everything in one tool), Mixpanel (mature event-based analytics with strong funnels and cohorts — best for established product teams), Heap (automatic event capture with retroactive analysis — best for teams who don't want to instrument events manually), and Plausible (simple, lightweight web analytics — best for teams who only need traffic data, not product analytics). OpenPanel is the strongest open-source alternative if self-hosting or cookie-free tracking matters to you."
+      },
+      {
+        "question": "How does Amplitude compare to PostHog?",
+        "answer": "Both Amplitude and PostHog are powerful product analytics platforms, but they differ significantly in approach. PostHog is fully open source and self-hostable, bundles session replay, feature flags, and A/B testing natively, and has a generous free tier. Amplitude is more mature in behavioral analytics and experimentation but is cloud-only, charges based on MTUs, and its pricing can reach six figures annually for large teams. PostHog tends to appeal to developer-led companies; Amplitude fits enterprise product and growth teams with dedicated analysts."
+      },
+      {
+        "question": "How does Amplitude compare to Mixpanel?",
+        "answer": "Amplitude and Mixpanel are the two most common enterprise product analytics tools and are often evaluated together. Mixpanel charges per event (not per user like Amplitude), which can be cheaper or more expensive depending on your usage pattern. Amplitude has stronger experimentation features and ML-powered predictions; Mixpanel is generally considered easier to set up and use. Neither offers self-hosting. For teams looking for an open-source alternative to both, OpenPanel covers core funnels, retention, and cohorts without the enterprise pricing of either."
+      },
+      {
+        "question": "Is there a free Amplitude alternative?",
+        "answer": "Yes — OpenPanel is free to self-host with unlimited events. You run it on your own infrastructure using Docker, and there are no per-event or per-user fees. The cloud-hosted version starts at $2.50/month. PostHog also has a generous free tier (1M events/month). Mixpanel's free plan includes up to 1M events. If you're looking for something completely free with no limits, self-hosted OpenPanel is the strongest option."
+      },
       {
         "question": "Is Amplitude free?",
         "answer": "Amplitude offers a free Starter plan with up to 50,000 Monthly Tracked Users (MTUs) and 10 million events. However, it has limited features, no customer support, and you'll need to upgrade quickly as you grow. The Plus plan starts at $49/month for just 1,000 MTUs."
@@ -441,7 +479,7 @@
       },
       {
         "question": "What Amplitude features will I lose?",
-        "answer": "OpenPanel doesn't have feature flags, session replay, predictive cohorts, or the Guides & Surveys product. If you rely heavily on these enterprise features, Amplitude may still be the better fit."
+        "answer": "OpenPanel doesn't have feature flags, predictive cohorts, or the Guides & Surveys product. OpenPanel does include session replay. If you rely heavily on Amplitude's enterprise experimentation or ML-powered features, Amplitude may still be the better fit."
       },
       {
         "question": "How does the SDK size affect my app?",
@@ -458,10 +496,28 @@
     ]
   },
   "related_links": {
+    "guides": [
+      {
+        "title": "Migrate from Mixpanel",
+        "url": "/guides/migrate-from-mixpanel"
+      },
+      {
+        "title": "Track custom events",
+        "url": "/guides/track-custom-events"
+      },
+      {
+        "title": "Ecommerce event tracking",
+        "url": "/guides/ecommerce-tracking"
+      }
+    ],
     "articles": [
       {
-        "title": "Find an alternative to Mixpanel",
-        "url": "/articles/alternatives-to-mixpanel"
+        "title": "Best Mixpanel alternatives in 2026",
+        "url": "/articles/mixpanel-alternatives"
+      },
+      {
+        "title": "Best self-hosted product analytics tools",
+        "url": "/articles/self-hosted-product-analytics"
       },
       {
         "title": "9 best open source web analytics tools",
@@ -476,6 +532,18 @@
       {
         "name": "PostHog",
         "url": "/compare/posthog-alternative"
+      },
+      {
+        "name": "Heap",
+        "url": "/compare/heap-alternative"
+      },
+      {
+        "name": "Plausible",
+        "url": "/compare/plausible-alternative"
+      },
+      {
+        "name": "Fullstory",
+        "url": "/compare/fullstory-alternative"
       }
     ]
   },
@@ -489,4 +557,4 @@
       "href": "https://github.com/Openpanel-dev/openpanel"
     }
   }
-}
+}