Admin-group visitor and download counters
- Visitor and app-download totals appear only for signed-in, active, verified full administrators or members of the admin group. Any assigned admin permission, including the Software Engineer group, permits aggregate totals. Both counters appear in the footer, including on the Admin page and shared phone app. Guests and ordinary members receive neither counter nor its explanatory note in HTML; the app download link remains available.
- GET /api/v1/stats requires an admin-group browser session: guests receive 401 and ordinary members 403, without totals. Authorized admins receive visitors and downloads only, with no-store caching. Aggregate access does not grant Security permissions or access to raw IP logs; those keep their existing Security or Galaxy moderator-key protection. Never embed the Galaxy key in a public app.
- Counting continues unchanged: one IP per UTC day accumulated over time, and one app-download-link GET request per permitted request, not completed installations. Repeated page loads add private page views, not another daily visitor. Existing totals, logs and retention are preserved. Reopen online or Refresh the shared app. Signing out or revoking all admin-group access removes both counters on the next request.
Open feature · All guides