Problem
No path to delete analytics data. The only DELETE handlers are for goals/conversions (routes/analytics.ts:483-497) and share tokens (:534-543). There is no "delete this site’s data", no site delete, and no per-visitor erasure.
Why it matters (privacy-first)
GDPR/CCPA erasure and basic operator hygiene both require it. A privacy product that cannot delete data is a contradiction.
Proposed fix
- Site-level: "delete all data for this site" + cascade on site delete.
- Visitor-level: erase-by-visitor_id endpoint (the hashed id is the only handle we have; document that cross-day erasure is inherently limited by the daily salt rotation).
Priority: P0.
From the 2026-07-20 privacy-first competitive audit (vs. Plausible / Fathom / Simple Analytics / Umami).