Analytics & telemetry
Status: ⚠️ Compliance · 🧩 Needs SDK
Scope
The architecture references Mixpanel as the analytics provider, config-gated (observability section in arch docs). Given the product's minor-heavy audience, analytics must be strictly opt-in, collect no PII, and comply with COPPA and GDPR. Event tracking for adult admin accounts only; child members must never be tracked. Telemetry must be separately gated from analytics.
Open questions
- Is Mixpanel the right choice, or is a more privacy-friendly alternative (PostHog self-hosted, Plausible) preferable given the minor audience?
- What events are tracked — admin-only actions, or also anonymized child-interaction counts?
- How is the opt-in consent surface presented, and is it separate from the main T&C?
- How is the config gate implemented — remote feature flag (Supabase remote config) or build-time?
Relationship
Children's privacy (COPPA) — no behavioral tracking of minors under any circumstances.