# Lumenstat

> Privacy-first web and API analytics for Stellar ecosystem projects. No cookies, no stored IP addresses, and four layers of defense against inflated numbers.

- [Lumenstat](https://docs.lumenstat.com/index.md): Privacy-first web and API analytics for Stellar ecosystem projects, built so the Stellar Community Fund can trust the numbers.
- [Quickstart](https://docs.lumenstat.com/quickstart.md): Enroll a project, add the tracker and confirm your first page view, in about 15 minutes.
- [How it works](https://docs.lumenstat.com/how-it-works.md): Two ingest paths, one store, three views: the architecture behind Lumenstat and what happens to each event.
- [Add the tracker](https://docs.lumenstat.com/web/add-the-tracker.md): Put the pinned Lumenstat script on your site, confirm page views arrive, and measure more than one domain.
- [Framework recipes](https://docs.lumenstat.com/web/frameworks.md): The pinned tracker tag for plain HTML, Next.js, React with Vite, Astro, SvelteKit and Nuxt, with preview deploys kept out of your numbers.
- [Custom events](https://docs.lumenstat.com/web/custom-events.md): Count actions such as wallet connections and sign-ups with umami.track or data attributes, and keep personal data out of them.
- [Verify the tracker](https://docs.lumenstat.com/web/verify-the-tracker.md): Hash the tracker yourself, compare it with the published release, rebuild it from source, and see what browsers do if the file changes.
- [Self-host the tracker](https://docs.lumenstat.com/web/self-host-the-tracker.md): Serve the tracker file from your own domain with the @lumenstat/tracker npm package, and what changes when you do.
- [How API analytics works](https://docs.lumenstat.com/api/overview.md): Add a second OpenTelemetry exporter. Your APM keeps full traces. Lumenstat keeps request counts, status codes and latency per route.
- [Node.js](https://docs.lumenstat.com/api/node.md): Send API metrics from an Express or NestJS service with a second OpenTelemetry span exporter, next to the APM you already use.
- [Collector and other languages](https://docs.lumenstat.com/api/collector.md): Send API metrics from Go, Python, Rust, Java or any OpenTelemetry SDK, through your own Collector or with SDK environment variables.
- [Route normalization](https://docs.lumenstat.com/api/routes.md): How Lumenstat turns request paths into routes such as /accounts/{account}, and why every project gets the same fixed rules.
- [Your numbers](https://docs.lumenstat.com/dashboard/your-numbers.md): What the Overview, Website, API, Setup and Settings pages show, how date ranges work, and how unique visitors are counted.
- [Flagged traffic](https://docs.lumenstat.com/dashboard/flagged-traffic.md): What the Flagged, not counted card on the Website page means, why someone might inflate your numbers, and how to read each reason.
- [Operator overview](https://docs.lumenstat.com/operators/overview.md): What SCF operators see in the dashboard: every project, side-by-side comparisons, traffic quality, enrollment, and keys and service health.
- [Enrollment](https://docs.lumenstat.com/operators/enrollment.md): How projects sign up, the open, approval and closed modes, what the Stellar link check proves, and how to approve or reject a sign-up.
- [Traffic quality](https://docs.lumenstat.com/operators/traffic-quality.md): Read the Traffic quality screen, inspect a website's latest flagged events, and decide what to do about a project with a lot of flagged traffic.
- [Privacy model](https://docs.lumenstat.com/trust/privacy.md): What Lumenstat collects from website visitors, API traffic and dashboard users, how long it keeps it, and why stored records cannot identify a person.
- [Bot and inflation defense](https://docs.lumenstat.com/trust/bot-defense.md): The four checks every event passes before it counts, what each one stops and what it misses, and how to test them yourself.
- [Tracker supply chain](https://docs.lumenstat.com/trust/tracker-supply-chain.md): How the script you embed is pinned, verified and rebuilt from source, so a changed file cannot run on your site.
- [Tenant isolation](https://docs.lumenstat.com/trust/tenant-isolation.md): How Lumenstat keeps one project from reading or writing another project's web and API data, and where that boundary is enforced.
- [Security policy](https://docs.lumenstat.com/trust/security-policy.md): How to report a vulnerability in Lumenstat, what happens after you report, what is in scope, and the safe harbor for good-faith research.
- [Tracker attributes](https://docs.lumenstat.com/reference/tracker-attributes.md): Every data attribute the tracker reads, the umami JavaScript API, and the proof-of-work header sent with each event.
- [Tracker releases](https://docs.lumenstat.com/reference/tracker-releases.md): Every published tracker version with its URL, size and integrity hash, and how a release is built, checked and shipped.
- [OTLP ingest](https://docs.lumenstat.com/reference/otlp-ingest.md): Endpoint, protocol, header, accepted metric series, spanmetrics dimensions and histogram buckets for otlp.lumenstat.com.
- [Metrics API](https://docs.lumenstat.com/reference/metrics-api.md): The writer's read-only JSON API for stored API metrics: per-project totals and per-route requests, status codes and latency.
- [Flag reasons](https://docs.lumenstat.com/reference/flag-reasons.md): Every reason the collect endpoint flags an event: its layer, exact trigger, common legitimate causes and what to do.
- [Self-hosting overview](https://docs.lumenstat.com/self-hosting/overview.md): Run the whole Lumenstat stack on one Linux server with Docker Compose, reachable only through a Cloudflare Tunnel.
- [Configuration](https://docs.lumenstat.com/self-hosting/configuration.md): Every environment variable for the Umami fork, the dashboard, the collector and the writer, with the values the server Compose file sets.
- [Infrastructure as code](https://docs.lumenstat.com/self-hosting/infrastructure-as-code.md): The OpenTofu and Ansible code for staging and production, what each part manages, and how to adopt a zone and tunnel set up by hand.
- [Roadmap](https://docs.lumenstat.com/project/roadmap.md): What is live, what is being built, and what comes next, milestone by milestone.
- [Changelog](https://docs.lumenstat.com/project/changelog.md): Every change to the Lumenstat service and tracker, newest first.
- [Open source](https://docs.lumenstat.com/project/open-source.md): The license, how the repository is laid out, and how to contribute.
- [Feedback](https://docs.lumenstat.com/project/feedback.md): Suggest a feature, report a bug, or vote on what gets built next.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.