Add Plausible analytics and say so in the privacy policy

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

content/privacy.md

@@ -6,7 +6,7 @@ sections:
     compact: true
     eyebrow: "Last updated November 8, 2026"
     title: "Privacy."
-    subhead: "CoreDesktop doesn't watch what you do. There's no telemetry, no analytics and no tracking. We only receive what your machine has to send to download CoreDesktop and its updates, and a log when you choose to send us one."
+    subhead: "CoreDesktop doesn't watch what you do. There's no telemetry and no tracking. We only receive what your machine has to send to download CoreDesktop and its updates, and a log when you choose to send us one. This website counts its visitors, anonymously and on our own server."
     visual: false
 
   - type: text
@@ -16,7 +16,7 @@ sections:
     body: |
       This policy covers Federated CoreDesktop: the scripts installed on your machine, the installer at `federated.sh`, this website, and the error reports you can send us. It's provided by Federated Computer, Inc. ("we").
 
-      - **Nothing is collected in the background.** CoreDesktop has no telemetry or usage statistics, and this website has no analytics, cookies or trackers.
+      - **Nothing is collected in the background.** CoreDesktop has no telemetry or usage statistics. This website counts visits with Plausible, which we run ourselves; it sets no cookies and doesn't identify you.
       - **Downloads are seen by our servers.** When you install CoreDesktop, update it, or it checks for an update, your machine connects to our servers, which see its IP address, as any server does.
       - **Error reports are your choice.** If an install or update fails, CoreDesktop asks whether to send us the log. Nothing is sent unless you say yes, and you can read it first.
       - **We don't sell or share your data** with anyone for advertising or any other purpose.
@@ -24,9 +24,13 @@ sections:
   - type: text
     id: website
     kicker: "This website"
-    headline: "Plain pages, nothing else."
+    headline: "Plain pages, counted anonymously."
     body: |
-      coredesktop.computer is a set of static pages. It sets no cookies, runs no analytics, and loads nothing from other companies: its fonts and images are served from the site itself. Links to other sites, such as Gitea, Arch Linux or a project's home page, take you to those sites, under their own policies.
+      coredesktop.computer is a set of static pages. It sets no cookies and loads nothing from other companies: its fonts and images are served from the site itself.
+
+      To see which pages are read and how people find them, the site uses [Plausible Analytics](https://plausible.io/data-policy), running on our own server at `plausible.federated.computer`. When you open a page, it records the page's address, the site that linked you here, your browser, operating system and device type, and the country your IP address is in. It doesn't store your IP address, and it can't follow you across sites or from one day to the next. The results are only ever seen as totals, and we don't share them with anyone. If your browser or an extension blocks the script, the site works just the same. You can get your own private Plausible instance at [federated.computer](https://federated.computer).
+
+      Links to other sites, such as Gitea, Arch Linux or a project's home page, take you to those sites, under their own policies.
 
   - type: text
     id: installing-and-updating

layouts/partials/head.html

@@ -9,3 +9,9 @@
 <link rel="preload" href="{{ "fonts/inter-latin.woff2" | relURL }}" as="font" type="font/woff2" crossorigin>
 <link rel="stylesheet" href="{{ "css/fonts.css" | relURL }}">
 <link rel="stylesheet" href="{{ "css/style.css" | relURL }}">
+<!-- Privacy-friendly analytics by Plausible -->
+<script async src="https://plausible.federated.computer/js/pa-LB6kQDxarsX00LE4e5zh6.js"></script>
+<script>
+  window.plausible=window.plausible||function(){(plausible.q=plausible.q||[]).push(arguments)},plausible.init=plausible.init||function(i){plausible.o=i||{}};
+  plausible.init()
+</script>