diff --git a/.github/workflows/analytics.yml b/.github/workflows/analytics.yml
new file mode 100644
index 00000000000..6d117a04ff0
--- /dev/null
+++ b/.github/workflows/analytics.yml
@@ -0,0 +1,111 @@
+name: Analytics
+
+on:
+  pull_request:
+    paths:
+      - ".github/workflows/analytics.yml"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "packages/local-docker/**"
+      - "packages/analytics/**"
+      - "packages/env/server.ts"
+      - "packages/web-backend/src/ProductAnalytics/**"
+      - "apps/web/actions/analytics/**"
+      - "apps/web/actions/organization/**"
+      - "apps/web/__tests__/unit/*analytics*.test.ts"
+      - "apps/web/__tests__/unit/developer-credits-webhook.test.ts"
+      - "apps/web/app/Layout/*Analytics*.tsx"
+      - "apps/web/app/api/events/**"
+      - "apps/web/app/api/invite/accept/route.ts"
+      - "apps/web/app/api/settings/billing/**"
+      - "apps/web/app/api/webhooks/stripe/route.ts"
+      - "apps/web/app/utils/analytics.ts"
+      - "apps/web/app/utils/product-analytics.ts"
+      - "apps/web/lib/analytics/**"
+      - "apps/web/lib/rate-limit.ts"
+      - "apps/desktop/src-tauri/src/lib.rs"
+      - "apps/desktop/src/utils/analytics.ts"
+      - "apps/desktop/src/utils/product-analytics.ts"
+      - "apps/desktop/src/utils/*analytics*.test.ts"
+      - "apps/desktop/src-tauri/src/product_analytics.rs"
+      - "scripts/analytics/**"
+  push:
+    branches:
+      - main
+    paths:
+      - ".github/workflows/analytics.yml"
+      - "package.json"
+      - "pnpm-lock.yaml"
+      - "packages/local-docker/**"
+      - "packages/analytics/**"
+      - "packages/env/server.ts"
+      - "packages/web-backend/src/ProductAnalytics/**"
+      - "apps/web/actions/analytics/**"
+      - "apps/web/actions/organization/**"
+      - "apps/web/__tests__/unit/*analytics*.test.ts"
+      - "apps/web/__tests__/unit/developer-credits-webhook.test.ts"
+      - "apps/web/app/Layout/*Analytics*.tsx"
+      - "apps/web/app/api/events/**"
+      - "apps/web/app/api/invite/accept/route.ts"
+      - "apps/web/app/api/settings/billing/**"
+      - "apps/web/app/api/webhooks/stripe/route.ts"
+      - "apps/web/app/utils/analytics.ts"
+      - "apps/web/app/utils/product-analytics.ts"
+      - "apps/web/lib/analytics/**"
+      - "apps/web/lib/rate-limit.ts"
+      - "apps/desktop/src-tauri/src/lib.rs"
+      - "apps/desktop/src/utils/analytics.ts"
+      - "apps/desktop/src/utils/product-analytics.ts"
+      - "apps/desktop/src/utils/*analytics*.test.ts"
+      - "apps/desktop/src-tauri/src/product_analytics.rs"
+      - "scripts/analytics/**"
+  workflow_dispatch:
+    inputs:
+      deploy:
+        description: Deploy the checked Tinybird project to production
+        required: true
+        default: false
+        type: boolean
+
+permissions:
+  contents: read
+
+jobs:
+  validate:
+    name: Validate and test analytics
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: ./.github/actions/setup-js
+      - name: Run analytics regression suites
+        run: pnpm analytics:test
+      - name: Validate Docker Compose
+        run: node scripts/analytics/analytics-cli.js compose-check
+      - name: Build and test with Tinybird Local
+        run: node scripts/analytics/analytics-cli.js local
+      - name: Stop Tinybird Local
+        if: always()
+        run: node scripts/analytics/analytics-cli.js local-stop
+
+  deploy:
+    name: Deploy analytics
+    needs: validate
+    if: github.ref == 'refs/heads/main' && (github.event_name == 'push' || inputs.deploy == true)
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    concurrency:
+      group: analytics-production
+      cancel-in-progress: false
+    environment: production
+    env:
+      TINYBIRD_DEPLOY_TOKEN: ${{ secrets.TINYBIRD_DEPLOY_TOKEN }}
+      TINYBIRD_URL: ${{ secrets.TINYBIRD_URL }}
+      TINYBIRD_WORKSPACE_ID: ${{ secrets.TINYBIRD_WORKSPACE_ID }}
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020
+        with:
+          node-version: 20
+      - name: Check and deploy Tinybird project
+        run: node scripts/analytics/analytics-cli.js cloud-deploy
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 15285c97f6d..17fb42a2d1d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -151,10 +151,6 @@ jobs:
           echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568" >> .env
           echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}" >> .env
           echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo 'NEXT_PUBLIC_POSTHOG_KEY=${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}' >> .env
-          echo 'NEXT_PUBLIC_POSTHOG_HOST=${{ secrets.NEXT_PUBLIC_POSTHOG_HOST }}' >> .env
-          echo 'VITE_POSTHOG_KEY=${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}' >> .env
-          echo 'VITE_POSTHOG_HOST=${{ secrets.NEXT_PUBLIC_POSTHOG_HOST }}' >> .env
           echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
 
           cat .env >> $GITHUB_ENV
@@ -222,10 +218,6 @@ jobs:
           echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568" >> .env
           echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}" >> .env
           echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
-          echo 'NEXT_PUBLIC_POSTHOG_KEY=${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}' >> .env
-          echo 'NEXT_PUBLIC_POSTHOG_HOST=${{ secrets.NEXT_PUBLIC_POSTHOG_HOST }}' >> .env
-          echo 'VITE_POSTHOG_KEY=${{ secrets.NEXT_PUBLIC_POSTHOG_KEY }}' >> .env
-          echo 'VITE_POSTHOG_HOST=${{ secrets.NEXT_PUBLIC_POSTHOG_HOST }}' >> .env
           echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}' >> .env
 
       - name: Copy .env to apps/desktop
diff --git a/.github/workflows/desktop-release.yml b/.github/workflows/desktop-release.yml
index 58b2f5ef899..78f3443bcad 100644
--- a/.github/workflows/desktop-release.yml
+++ b/.github/workflows/desktop-release.yml
@@ -285,8 +285,6 @@ jobs:
             echo "CAP_DESKTOP_SENTRY_URL=https://6a3b6a09e6ae976c2ad6fff710e88748@o4506859771527168.ingest.us.sentry.io/4508330917101568"
             echo "NEXT_PUBLIC_WEB_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}"
             echo 'NEXTAUTH_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}'
-            echo 'VITE_POSTHOG_KEY=${{ secrets.VITE_POSTHOG_KEY }}'
-            echo 'VITE_POSTHOG_HOST=${{ secrets.VITE_POSTHOG_HOST }}'
             echo 'VITE_SERVER_URL=${{ secrets.NEXT_PUBLIC_WEB_URL }}'
             echo 'RUST_TARGET_TRIPLE=${{ matrix.settings.target }}'
           } >> .env
diff --git a/Cargo.lock b/Cargo.lock
index e44be582793..411fca9b632 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -711,9 +711,9 @@ dependencies = [
  "bytes",
  "futures-util",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "http-body-util",
- "hyper 1.7.0",
+ "hyper",
  "hyper-util",
  "itoa",
  "matchit",
@@ -727,7 +727,7 @@ dependencies = [
  "serde_path_to_error",
  "serde_urlencoded",
  "sha1",
- "sync_wrapper 1.0.2",
+ "sync_wrapper",
  "tokio",
  "tokio-tungstenite",
  "tower",
@@ -746,12 +746,12 @@ dependencies = [
  "bytes",
  "futures-util",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "http-body-util",
  "mime",
  "pin-project-lite",
  "rustversion",
- "sync_wrapper 1.0.2",
+ "sync_wrapper",
  "tower-layer",
  "tower-service",
  "tracing",
@@ -1218,7 +1218,7 @@ dependencies = [
  "libc",
  "open",
  "relative-path",
- "reqwest 0.12.24",
+ "reqwest",
  "rmcp",
  "rpassword",
  "scap-screencapturekit",
@@ -1244,7 +1244,7 @@ dependencies = [
 name = "cap-api"
 version = "0.0.0"
 dependencies = [
- "reqwest 0.12.24",
+ "reqwest",
  "workspace-hack",
 ]
 
@@ -1494,11 +1494,10 @@ dependencies = [
  "parakeet-rs",
  "png 0.17.16",
  "pollster",
- "posthog-rs",
  "rand 0.8.5",
  "regex",
  "relative-path",
- "reqwest 0.12.24",
+ "reqwest",
  "rodio",
  "sanitize-filename",
  "scap-direct3d",
@@ -1551,7 +1550,7 @@ dependencies = [
  "windows 0.60.0",
  "windows-core 0.61.2",
  "windows-sys 0.59.0",
- "winreg 0.55.0",
+ "winreg",
  "workspace-hack",
 ]
 
@@ -3393,7 +3392,7 @@ dependencies = [
  "rustc_version",
  "toml 0.9.7",
  "vswhom",
- "winreg 0.55.0",
+ "winreg",
 ]
 
 [[package]]
@@ -4464,25 +4463,6 @@ version = "1.3.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "17e2ac29387b1aa07a1e448f7bb4f35b500787971e965b02842b900afa5c8f6f"
 
-[[package]]
-name = "h2"
-version = "0.3.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0beca50380b1fc32983fc1cb4587bfa4bb9e78fc259aad4a0032d2080309222d"
-dependencies = [
- "bytes",
- "fnv",
- "futures-core",
- "futures-sink",
- "futures-util",
- "http 0.2.12",
- "indexmap 2.11.4",
- "slab",
- "tokio",
- "tokio-util",
- "tracing",
-]
-
 [[package]]
 name = "h2"
 version = "0.4.12"
@@ -4650,17 +4630,6 @@ dependencies = [
  "itoa",
 ]
 
-[[package]]
-name = "http-body"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ceab25649e9960c0311ea418d17bee82c0dcec1bd053b5f9a66e265a693bed2"
-dependencies = [
- "bytes",
- "http 0.2.12",
- "pin-project-lite",
-]
-
 [[package]]
 name = "http-body"
 version = "1.0.1"
@@ -4680,7 +4649,7 @@ dependencies = [
  "bytes",
  "futures-core",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "pin-project-lite",
 ]
 
@@ -4702,30 +4671,6 @@ version = "1.0.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
 
-[[package]]
-name = "hyper"
-version = "0.14.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41dfc780fdec9373c01bae43289ea34c972e40ee3c9f6b3c8801a35f35586ce7"
-dependencies = [
- "bytes",
- "futures-channel",
- "futures-core",
- "futures-util",
- "h2 0.3.27",
- "http 0.2.12",
- "http-body 0.4.6",
- "httparse",
- "httpdate",
- "itoa",
- "pin-project-lite",
- "socket2 0.5.10",
- "tokio",
- "tower-service",
- "tracing",
- "want",
-]
-
 [[package]]
 name = "hyper"
 version = "1.7.0"
@@ -4736,9 +4681,9 @@ dependencies = [
  "bytes",
  "futures-channel",
  "futures-core",
- "h2 0.4.12",
+ "h2",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "httparse",
  "httpdate",
  "itoa",
@@ -4749,20 +4694,6 @@ dependencies = [
  "want",
 ]
 
-[[package]]
-name = "hyper-rustls"
-version = "0.24.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec3efd23720e2049821a693cbc7e65ea87c72f1c58ff2f9522ff332b1491e590"
-dependencies = [
- "futures-util",
- "http 0.2.12",
- "hyper 0.14.32",
- "rustls 0.21.12",
- "tokio",
- "tokio-rustls 0.24.1",
-]
-
 [[package]]
 name = "hyper-rustls"
 version = "0.27.7"
@@ -4770,14 +4701,14 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
 dependencies = [
  "http 1.3.1",
- "hyper 1.7.0",
+ "hyper",
  "hyper-util",
- "rustls 0.23.31",
+ "rustls",
  "rustls-pki-types",
  "tokio",
- "tokio-rustls 0.26.3",
+ "tokio-rustls",
  "tower-service",
- "webpki-roots 1.0.2",
+ "webpki-roots",
 ]
 
 [[package]]
@@ -4788,7 +4719,7 @@ checksum = "70206fc6890eaca9fde8a0bf71caa2ddfc9fe045ac9e5c70df101a7dbde866e0"
 dependencies = [
  "bytes",
  "http-body-util",
- "hyper 1.7.0",
+ "hyper",
  "hyper-util",
  "native-tls",
  "tokio",
@@ -4808,14 +4739,14 @@ dependencies = [
  "futures-core",
  "futures-util",
  "http 1.3.1",
- "http-body 1.0.1",
- "hyper 1.7.0",
+ "http-body",
+ "hyper",
  "ipnet",
  "libc",
  "percent-encoding",
  "pin-project-lite",
  "socket2 0.6.0",
- "system-configuration 0.6.1",
+ "system-configuration",
  "tokio",
  "tower-service",
  "tracing",
@@ -7239,7 +7170,7 @@ dependencies = [
  "bytes",
  "http 1.3.1",
  "opentelemetry",
- "reqwest 0.12.24",
+ "reqwest",
 ]
 
 [[package]]
@@ -7254,7 +7185,7 @@ dependencies = [
  "opentelemetry-proto",
  "opentelemetry_sdk",
  "prost",
- "reqwest 0.12.24",
+ "reqwest",
  "thiserror 2.0.16",
  "tracing",
 ]
@@ -7837,20 +7768,6 @@ dependencies = [
  "portable-atomic",
 ]
 
-[[package]]
-name = "posthog-rs"
-version = "0.3.7"
-source = "git+https://github.com/CapSoftware/posthog-rs?rev=c7e9712be2f9a9122b1df685d5a067afa5415288#c7e9712be2f9a9122b1df685d5a067afa5415288"
-dependencies = [
- "chrono",
- "derive_builder",
- "reqwest 0.11.27",
- "semver",
- "serde",
- "serde_json",
- "uuid",
-]
-
 [[package]]
 name = "potential_utf"
 version = "0.1.3"
@@ -8106,7 +8023,7 @@ dependencies = [
  "quinn-proto",
  "quinn-udp",
  "rustc-hash 2.1.1",
- "rustls 0.23.31",
+ "rustls",
  "socket2 0.6.0",
  "thiserror 2.0.16",
  "tokio",
@@ -8126,7 +8043,7 @@ dependencies = [
  "rand 0.9.2",
  "ring",
  "rustc-hash 2.1.1",
- "rustls 0.23.31",
+ "rustls",
  "rustls-pki-types",
  "slab",
  "thiserror 2.0.16",
@@ -8554,47 +8471,6 @@ version = "0.1.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "51743d3e274e2b18df81c4dc6caf8a5b8e15dbe799e0dca05c7617380094e884"
 
-[[package]]
-name = "reqwest"
-version = "0.11.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dd67538700a17451e7cba03ac727fb961abb7607553461627b97de0b89cf4a62"
-dependencies = [
- "base64 0.21.7",
- "bytes",
- "encoding_rs",
- "futures-core",
- "futures-util",
- "h2 0.3.27",
- "http 0.2.12",
- "http-body 0.4.6",
- "hyper 0.14.32",
- "hyper-rustls 0.24.2",
- "ipnet",
- "js-sys",
- "log",
- "mime",
- "once_cell",
- "percent-encoding",
- "pin-project-lite",
- "rustls 0.21.12",
- "rustls-pemfile 1.0.4",
- "serde",
- "serde_json",
- "serde_urlencoded",
- "sync_wrapper 0.1.2",
- "system-configuration 0.5.1",
- "tokio",
- "tokio-rustls 0.24.1",
- "tower-service",
- "url",
- "wasm-bindgen",
- "wasm-bindgen-futures",
- "web-sys",
- "webpki-roots 0.25.4",
- "winreg 0.50.0",
-]
-
 [[package]]
 name = "reqwest"
 version = "0.12.24"
@@ -8608,12 +8484,12 @@ dependencies = [
  "futures-channel",
  "futures-core",
  "futures-util",
- "h2 0.4.12",
+ "h2",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "http-body-util",
- "hyper 1.7.0",
- "hyper-rustls 0.27.7",
+ "hyper",
+ "hyper-rustls",
  "hyper-tls",
  "hyper-util",
  "js-sys",
@@ -8624,15 +8500,15 @@ dependencies = [
  "percent-encoding",
  "pin-project-lite",
  "quinn",
- "rustls 0.23.31",
+ "rustls",
  "rustls-pki-types",
  "serde",
  "serde_json",
  "serde_urlencoded",
- "sync_wrapper 1.0.2",
+ "sync_wrapper",
  "tokio",
  "tokio-native-tls",
- "tokio-rustls 0.26.3",
+ "tokio-rustls",
  "tokio-util",
  "tower",
  "tower-http",
@@ -8642,7 +8518,7 @@ dependencies = [
  "wasm-bindgen-futures",
  "wasm-streams",
  "web-sys",
- "webpki-roots 1.0.2",
+ "webpki-roots",
 ]
 
 [[package]]
@@ -8893,18 +8769,6 @@ dependencies = [
  "windows-sys 0.61.2",
 ]
 
-[[package]]
-name = "rustls"
-version = "0.21.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f56a14d1f48b391359b22f731fd4bd7e43c97f3c50eee276f3aa09c94784d3e"
-dependencies = [
- "log",
- "ring",
- "rustls-webpki 0.101.7",
- "sct",
-]
-
 [[package]]
 name = "rustls"
 version = "0.23.31"
@@ -8914,20 +8778,11 @@ dependencies = [
  "once_cell",
  "ring",
  "rustls-pki-types",
- "rustls-webpki 0.103.6",
+ "rustls-webpki",
  "subtle",
  "zeroize",
 ]
 
-[[package]]
-name = "rustls-pemfile"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1c74cae0a4cf6ccbbf5f359f08efdf8ee7e1dc532573bf0db71968cb56b1448c"
-dependencies = [
- "base64 0.21.7",
-]
-
 [[package]]
 name = "rustls-pemfile"
 version = "2.2.0"
@@ -8947,16 +8802,6 @@ dependencies = [
  "zeroize",
 ]
 
-[[package]]
-name = "rustls-webpki"
-version = "0.101.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b6275d1ee7a1cd780b64aca7726599a1dbc893b1e64144529e55c3c2f745765"
-dependencies = [
- "ring",
- "untrusted",
-]
-
 [[package]]
 name = "rustls-webpki"
 version = "0.103.6"
@@ -9232,16 +9077,6 @@ dependencies = [
  "syn 2.0.106",
 ]
 
-[[package]]
-name = "sct"
-version = "0.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "da046153aa2352493d6cb7da4b6e5c0c057d8a1d0a9aa8560baffdd945acd414"
-dependencies = [
- "ring",
- "untrusted",
-]
-
 [[package]]
 name = "sctk-adwaita"
 version = "0.10.1"
@@ -9361,7 +9196,7 @@ checksum = "989425268ab5c011e06400187eed6c298272f8ef913e49fcadc3fda788b45030"
 dependencies = [
  "httpdate",
  "native-tls",
- "reqwest 0.12.24",
+ "reqwest",
  "sentry-actix",
  "sentry-anyhow",
  "sentry-backtrace",
@@ -10306,12 +10141,6 @@ dependencies = [
  "unicode-ident",
 ]
 
-[[package]]
-name = "sync_wrapper"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2047c6ded9c721764247e62cd3b03c09ffc529b2ba5b10ec482ae507a4a70160"
-
 [[package]]
 name = "sync_wrapper"
 version = "1.0.2"
@@ -10369,17 +10198,6 @@ dependencies = [
  "windows 0.61.3",
 ]
 
-[[package]]
-name = "system-configuration"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba3a3adc5c275d719af8cb4272ea1c4a6d668a777f37e115f6d11ddbc1c8e0e7"
-dependencies = [
- "bitflags 1.3.2",
- "core-foundation 0.9.4",
- "system-configuration-sys 0.5.0",
-]
-
 [[package]]
 name = "system-configuration"
 version = "0.6.1"
@@ -10388,17 +10206,7 @@ checksum = "3c879d448e9d986b661742763247d3693ed13609438cf3d006f51f5368a5ba6b"
 dependencies = [
  "bitflags 2.13.1",
  "core-foundation 0.9.4",
- "system-configuration-sys 0.6.0",
-]
-
-[[package]]
-name = "system-configuration-sys"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a75fb188eb626b924683e3b95e3a48e63551fcfb51949de2f06a9d91dbee93c9"
-dependencies = [
- "core-foundation-sys",
- "libc",
+ "system-configuration-sys",
 ]
 
 [[package]]
@@ -10541,7 +10349,7 @@ dependencies = [
  "percent-encoding",
  "plist",
  "raw-window-handle",
- "reqwest 0.12.24",
+ "reqwest",
  "serde",
  "serde_json",
  "serde_repr",
@@ -10762,7 +10570,7 @@ dependencies = [
  "data-url",
  "http 1.3.1",
  "regex",
- "reqwest 0.12.24",
+ "reqwest",
  "schemars 0.8.22",
  "serde",
  "serde_json",
@@ -10958,7 +10766,7 @@ dependencies = [
  "minisign-verify",
  "osakit",
  "percent-encoding",
- "reqwest 0.12.24",
+ "reqwest",
  "semver",
  "serde",
  "serde_json",
@@ -11420,23 +11228,13 @@ dependencies = [
  "tokio",
 ]
 
-[[package]]
-name = "tokio-rustls"
-version = "0.24.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c28327cf380ac148141087fbfb9de9d7bd4e84ab5d2c28fbc911d753de8a7081"
-dependencies = [
- "rustls 0.21.12",
- "tokio",
-]
-
 [[package]]
 name = "tokio-rustls"
 version = "0.26.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "05f63835928ca123f1bef57abbcd23bb2ba0ac9ae1235f1e65bda0d06e7786bd"
 dependencies = [
- "rustls 0.23.31",
+ "rustls",
  "tokio",
 ]
 
@@ -11608,11 +11406,11 @@ dependencies = [
  "base64 0.22.1",
  "bytes",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "http-body-util",
  "percent-encoding",
  "pin-project",
- "sync_wrapper 1.0.2",
+ "sync_wrapper",
  "tokio-stream",
  "tower-layer",
  "tower-service",
@@ -11639,7 +11437,7 @@ dependencies = [
  "futures-core",
  "futures-util",
  "pin-project-lite",
- "sync_wrapper 1.0.2",
+ "sync_wrapper",
  "tokio",
  "tower-layer",
  "tower-service",
@@ -11656,7 +11454,7 @@ dependencies = [
  "bytes",
  "futures-util",
  "http 1.3.1",
- "http-body 1.0.1",
+ "http-body",
  "iri-string",
  "pin-project-lite",
  "tower",
@@ -12086,7 +11884,7 @@ dependencies = [
  "log",
  "native-tls",
  "percent-encoding",
- "rustls-pemfile 2.2.0",
+ "rustls-pemfile",
  "rustls-pki-types",
  "socks",
  "ureq-proto",
@@ -12584,12 +12382,6 @@ dependencies = [
  "rustls-pki-types",
 ]
 
-[[package]]
-name = "webpki-roots"
-version = "0.25.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f20c57d8d7db6d3b86154206ae5d8fba62dd39573114de97c2cb0578251f8e1"
-
 [[package]]
 name = "webpki-roots"
 version = "1.0.2"
@@ -13609,16 +13401,6 @@ dependencies = [
  "memchr",
 ]
 
-[[package]]
-name = "winreg"
-version = "0.50.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1"
-dependencies = [
- "cfg-if",
- "windows-sys 0.48.0",
-]
-
 [[package]]
 name = "winreg"
 version = "0.55.0"
@@ -13699,7 +13481,7 @@ dependencies = [
  "regex",
  "regex-automata",
  "regex-syntax",
- "reqwest 0.12.24",
+ "reqwest",
  "rgb",
  "rustc-hash 1.1.0",
  "schemars 0.8.22",
diff --git a/Cargo.toml b/Cargo.toml
index 5c9c2cab521..91e45dbbdc9 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -119,8 +119,5 @@ cidre = { git = "https://github.com/CapSoftware/cidre", rev = "bf84b67079a8" }
 wgpu-hal = { path = "vendor/wgpu-hal" }
 tao = { path = "vendor/tao" }
 
-# https://github.com/CapSoftware/posthog-rs/commit/c7e9712be2f9a9122b1df685d5a067afa5415288
-posthog-rs = { git = "https://github.com/CapSoftware/posthog-rs", rev = "c7e9712be2f9a9122b1df685d5a067afa5415288" }
-
 # https://github.com/CapSoftware/reqwest/commit/9b5ecbd5210a9510fde766015cabb724c1e70d2e
 reqwest = { git = "https://github.com/CapSoftware/reqwest", rev = "9b5ecbd5210a9510fde766015cabb724c1e70d2e" }
diff --git a/README.md b/README.md
index f8943348fba..b0bba710b23 100644
--- a/README.md
+++ b/README.md
@@ -176,14 +176,17 @@ The web API uses Effect and `@effect/platform` HTTP APIs. Desktop capture and ex
 
 ## Analytics
 
-Cap uses [Tinybird](https://www.tinybird.co) for viewer telemetry dashboards. Set `TINYBIRD_ADMIN_TOKEN` or `TINYBIRD_TOKEN` before running analytics commands.
+Cap uses [Tinybird](https://www.tinybird.co) for product and viewer analytics. The product event collector uses a separate append-only token, while agents use read-only query access.
 
 | Command | Purpose |
 | --- | --- |
-| `pnpm analytics:setup` | Deploy Tinybird datasources and pipes from `scripts/analytics/tinybird` |
+| `pnpm analytics:local` | Start the optional Tinybird Local Docker profile, build resources, run fixtures, and write `.env.analytics.local` |
+| `pnpm analytics:test` | Run deterministic infrastructure tests and static validation |
+| `pnpm analytics:deploy:check` | Validate a cloud deployment without promoting it |
+| `pnpm analytics:deploy` | Safely deploy checked-in Tinybird resources |
 | `pnpm analytics:check` | Validate that the Tinybird workspace matches the app expectations |
 
-`analytics:setup` can remove Tinybird resources outside the checked-in analytics configuration. Use it only against the workspace you intend to manage from this repo.
+Routine analytics commands reject destructive operations. See [scripts/analytics/README.md](scripts/analytics/README.md) for local setup, scoped credentials, deployment, and agent access.
 
 ## Contributing
 
diff --git a/apps/desktop/app.config.ts b/apps/desktop/app.config.ts
index cfa423e390d..ba12bcfeb39 100644
--- a/apps/desktop/app.config.ts
+++ b/apps/desktop/app.config.ts
@@ -71,7 +71,6 @@ export default defineConfig({
 				"@tauri-apps/api/webviewWindow",
 				"@tauri-apps/plugin-dialog",
 				"@tauri-apps/plugin-store",
-				"posthog-js",
 				"uuid",
 				"@tauri-apps/plugin-clipboard-manager",
 				"@tauri-apps/api/window",
diff --git a/apps/desktop/package.json b/apps/desktop/package.json
index 3eb2586b91e..5b6ba478c5d 100644
--- a/apps/desktop/package.json
+++ b/apps/desktop/package.json
@@ -15,6 +15,7 @@
 	},
 	"dependencies": {
 		"@aerofoil/rive-solid-canvas": "^2.1.4",
+		"@cap/analytics": "workspace:*",
 		"@cap/database": "workspace:*",
 		"@cap/ui-solid": "workspace:*",
 		"@cap/utils": "workspace:*",
@@ -61,7 +62,6 @@
 		"effect": "^3.18.4",
 		"lz4-wasm": "^0.9.2",
 		"mp4box": "^0.5.2",
-		"posthog-js": "^1.215.3",
 		"solid-js": "^1.9.3",
 		"solid-markdown": "^2.0.13",
 		"solid-presence": "^0.1.8",
diff --git a/apps/desktop/src-tauri/Cargo.toml b/apps/desktop/src-tauri/Cargo.toml
index c560a028796..c27e3927778 100644
--- a/apps/desktop/src-tauri/Cargo.toml
+++ b/apps/desktop/src-tauri/Cargo.toml
@@ -120,7 +120,6 @@ tracing-opentelemetry = "0.32.0"
 opentelemetry = "0.31.0"
 opentelemetry-otlp = "0.31.0"                                                 #{ version = , features = ["http-proto", "reqwest-client"] }
 opentelemetry_sdk = { version = "0.31.0", features = ["rt-tokio", "trace"] }
-posthog-rs = "0.3.7"
 sysinfo = "0.35"
 workspace-hack = { version = "0.1", path = "../../../crates/workspace-hack" }
 aho-corasick.workspace = true
diff --git a/apps/desktop/src-tauri/src/general_settings.rs b/apps/desktop/src-tauri/src/general_settings.rs
index 7d6e422a385..7bead04264d 100644
--- a/apps/desktop/src-tauri/src/general_settings.rs
+++ b/apps/desktop/src-tauri/src/general_settings.rs
@@ -430,7 +430,7 @@ impl GeneralSettingsStore {
         store.set("general_settings", json!(settings));
         store.save().map_err(|e| e.to_string())?;
 
-        crate::posthog::set_telemetry_enabled(settings.enable_telemetry);
+        crate::product_analytics::set_telemetry_enabled(settings.enable_telemetry);
 
         #[cfg(target_os = "macos")]
         crate::permissions::sync_macos_dock_visibility(app);
@@ -492,7 +492,7 @@ pub fn init(app: &AppHandle) {
         raw_store.set(REMOVE_TARGET_SELECT_MIGRATION_KEY, json!(true));
     }
 
-    crate::posthog::set_telemetry_enabled(store.enable_telemetry);
+    crate::product_analytics::set_telemetry_enabled(store.enable_telemetry);
     register_bundled_muxer_binary(app);
 
     #[cfg(target_os = "macos")]
diff --git a/apps/desktop/src-tauri/src/lib.rs b/apps/desktop/src-tauri/src/lib.rs
index d8cc8d4d546..80974523474 100644
--- a/apps/desktop/src-tauri/src/lib.rs
+++ b/apps/desktop/src-tauri/src/lib.rs
@@ -30,9 +30,9 @@ mod notifications;
 mod panel_manager;
 mod permissions;
 mod platform;
-mod posthog;
 mod power_observer;
 mod presets;
+mod product_analytics;
 mod recording;
 mod recording_settings;
 mod recording_telemetry;
@@ -4459,7 +4459,6 @@ async fn check_notification_permissions(app: AppHandle) {
 #[instrument(skip(app))]
 async fn set_server_url(app: MutableState<'_, App>, server_url: String) -> Result<(), ()> {
     let mut app = app.write().await;
-    posthog::set_server_url(&server_url);
     app.server_url = server_url;
 
     Ok(())
@@ -4820,8 +4819,6 @@ pub async fn run(recording_logging_handle: LoggingHandle, logs_dir: PathBuf) {
         camera::init_preview_profile(system.total_memory());
     }
 
-    posthog::init();
-
     let tauri_context = tauri::generate_context!();
 
     let specta_builder = tauri_specta::Builder::new()
@@ -5201,6 +5198,7 @@ pub async fn run(recording_logging_handle: LoggingHandle, logs_dir: PathBuf) {
             specta_builder.mount_events(&app);
             hotkeys::init(&app);
             general_settings::init(&app);
+            product_analytics::init_product_session(&app);
             configure_camera_blur_recovery(&app, previous_termination);
             fake_window::init(&app);
             app.manage(target_select_overlay::WindowFocusManager::default());
@@ -5304,8 +5302,6 @@ pub async fn run(recording_logging_handle: LoggingHandle, logs_dir: PathBuf) {
                     .ok();
                 }
 
-                posthog::set_server_url(&server_url);
-
                 let camera_preview = CameraPreviewManager::new(&app);
                 let camera_session_id_handle = camera_preview.session_id_handle();
 
diff --git a/apps/desktop/src-tauri/src/posthog.rs b/apps/desktop/src-tauri/src/posthog.rs
deleted file mode 100644
index 54872b2b380..00000000000
--- a/apps/desktop/src-tauri/src/posthog.rs
+++ /dev/null
@@ -1,412 +0,0 @@
-use std::{
-    sync::{
-        OnceLock, PoisonError, RwLock,
-        atomic::{AtomicBool, Ordering},
-    },
-    time::Duration,
-};
-use tauri::AppHandle;
-use tracing::error;
-
-use crate::auth::AuthStore;
-
-#[derive(Debug)]
-pub enum PostHogEvent {
-    MultipartUploadComplete {
-        duration: Duration,
-        length: Duration,
-        size: u64,
-    },
-    MultipartUploadFailed {
-        duration: Duration,
-        error: String,
-    },
-    RecordingStarted {
-        mode: &'static str,
-        target_kind: &'static str,
-        has_camera: bool,
-        has_mic: bool,
-        has_system_audio: bool,
-        target_fps: u32,
-        target_width: u32,
-        target_height: u32,
-        fragmented: bool,
-        custom_cursor_capture: bool,
-    },
-    RecordingCompleted {
-        mode: &'static str,
-        status: &'static str,
-        duration_secs: u64,
-        segment_count: u32,
-        track_failure_count: u32,
-        error_class: Option<String>,
-        video_frames_captured: u64,
-        video_frames_dropped: u64,
-        drop_rate_pct: f64,
-        capture_stalls_count: u64,
-        capture_stalls_max_ms: u64,
-        mixer_stalls_count: u64,
-        mixer_stalls_max_ms: u64,
-        audio_gaps_count: u64,
-        audio_gaps_total_ms: u64,
-        frame_drop_rate_high_count: u64,
-        source_restarts_count: u64,
-        muxer_crash_count: u64,
-        audio_degraded_count: u64,
-        dropped_mic_messages: u64,
-    },
-    RecordingMuxerCrashed {
-        mode: &'static str,
-        reason: String,
-        seconds_into_recording: f64,
-    },
-    RecordingAudioDegraded {
-        mode: &'static str,
-        reason: String,
-        seconds_into_recording: f64,
-    },
-    RecordingRecovered {
-        trigger: &'static str,
-        recovered_duration_secs: u64,
-        segments_recovered: u32,
-        validation_took_ms: u64,
-    },
-    RecordingRecoveryFailed {
-        trigger: &'static str,
-        reason: String,
-    },
-    RecordingDiskSpaceLow {
-        mode: &'static str,
-        bytes_remaining: u64,
-    },
-    RecordingDiskSpaceExhausted {
-        mode: &'static str,
-        bytes_remaining: u64,
-    },
-    RecordingDeviceLost {
-        mode: &'static str,
-        subsystem: String,
-    },
-    RecordingEncoderRebuilt {
-        mode: &'static str,
-        backend: String,
-        attempt: u32,
-    },
-    RecordingSourceAudioReset {
-        mode: &'static str,
-        source: String,
-        starvation_ms: u64,
-    },
-    RecordingCaptureTargetLost {
-        mode: &'static str,
-        target: String,
-    },
-}
-
-fn truncate_reason(mut s: String) -> String {
-    const MAX_LEN: usize = 240;
-    if s.len() > MAX_LEN {
-        s.truncate(MAX_LEN);
-        s.push('…');
-    }
-    s
-}
-
-fn posthog_event(event: PostHogEvent, distinct_id: Option<&str>) -> posthog_rs::Event {
-    fn make_event(name: &str, distinct_id: Option<&str>) -> posthog_rs::Event {
-        match distinct_id {
-            Some(id) => posthog_rs::Event::new(name, id),
-            None => posthog_rs::Event::new_anon(name),
-        }
-    }
-
-    fn set(e: &mut posthog_rs::Event, key: &str, value: impl serde::Serialize) {
-        e.insert_prop(key, value)
-            .map_err(|err| error!("Error adding PostHog property {key}: {err:?}"))
-            .ok();
-    }
-
-    match event {
-        PostHogEvent::MultipartUploadComplete {
-            duration,
-            length,
-            size,
-        } => {
-            let mut e = make_event("multipart_upload_complete", distinct_id);
-            set(&mut e, "duration", duration.as_secs());
-            set(&mut e, "length", length.as_secs());
-            set(&mut e, "size", size);
-            e
-        }
-        PostHogEvent::MultipartUploadFailed { duration, error } => {
-            let mut e = make_event("multipart_upload_failed", distinct_id);
-            set(&mut e, "duration", duration.as_secs());
-            set(&mut e, "error", truncate_reason(error));
-            e
-        }
-        PostHogEvent::RecordingStarted {
-            mode,
-            target_kind,
-            has_camera,
-            has_mic,
-            has_system_audio,
-            target_fps,
-            target_width,
-            target_height,
-            fragmented,
-            custom_cursor_capture,
-        } => {
-            let mut e = make_event("recording_started", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "target_kind", target_kind);
-            set(&mut e, "has_camera", has_camera);
-            set(&mut e, "has_mic", has_mic);
-            set(&mut e, "has_system_audio", has_system_audio);
-            set(&mut e, "target_fps", target_fps);
-            set(&mut e, "target_width", target_width);
-            set(&mut e, "target_height", target_height);
-            set(&mut e, "fragmented", fragmented);
-            set(&mut e, "custom_cursor_capture", custom_cursor_capture);
-            e
-        }
-        PostHogEvent::RecordingCompleted {
-            mode,
-            status,
-            duration_secs,
-            segment_count,
-            track_failure_count,
-            error_class,
-            video_frames_captured,
-            video_frames_dropped,
-            drop_rate_pct,
-            capture_stalls_count,
-            capture_stalls_max_ms,
-            mixer_stalls_count,
-            mixer_stalls_max_ms,
-            audio_gaps_count,
-            audio_gaps_total_ms,
-            frame_drop_rate_high_count,
-            source_restarts_count,
-            muxer_crash_count,
-            audio_degraded_count,
-            dropped_mic_messages,
-        } => {
-            let mut e = make_event("recording_completed", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "status", status);
-            set(&mut e, "duration_secs", duration_secs);
-            set(&mut e, "segment_count", segment_count);
-            set(&mut e, "track_failure_count", track_failure_count);
-            if let Some(ec) = error_class {
-                set(&mut e, "error_class", truncate_reason(ec));
-            }
-            set(&mut e, "video_frames_captured", video_frames_captured);
-            set(&mut e, "video_frames_dropped", video_frames_dropped);
-            set(
-                &mut e,
-                "drop_rate_pct",
-                (drop_rate_pct * 100.0).round() / 100.0,
-            );
-            set(&mut e, "capture_stalls_count", capture_stalls_count);
-            set(&mut e, "capture_stalls_max_ms", capture_stalls_max_ms);
-            set(&mut e, "mixer_stalls_count", mixer_stalls_count);
-            set(&mut e, "mixer_stalls_max_ms", mixer_stalls_max_ms);
-            set(&mut e, "audio_gaps_count", audio_gaps_count);
-            set(&mut e, "audio_gaps_total_ms", audio_gaps_total_ms);
-            set(
-                &mut e,
-                "frame_drop_rate_high_count",
-                frame_drop_rate_high_count,
-            );
-            set(&mut e, "source_restarts_count", source_restarts_count);
-            set(&mut e, "muxer_crash_count", muxer_crash_count);
-            set(&mut e, "audio_degraded_count", audio_degraded_count);
-            set(&mut e, "dropped_mic_messages", dropped_mic_messages);
-            e
-        }
-        PostHogEvent::RecordingMuxerCrashed {
-            mode,
-            reason,
-            seconds_into_recording,
-        } => {
-            let mut e = make_event("recording_muxer_crashed", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "reason", truncate_reason(reason));
-            set(
-                &mut e,
-                "seconds_into_recording",
-                (seconds_into_recording * 1000.0).round() / 1000.0,
-            );
-            e
-        }
-        PostHogEvent::RecordingAudioDegraded {
-            mode,
-            reason,
-            seconds_into_recording,
-        } => {
-            let mut e = make_event("recording_audio_degraded", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "reason", truncate_reason(reason));
-            set(
-                &mut e,
-                "seconds_into_recording",
-                (seconds_into_recording * 1000.0).round() / 1000.0,
-            );
-            e
-        }
-        PostHogEvent::RecordingRecovered {
-            trigger,
-            recovered_duration_secs,
-            segments_recovered,
-            validation_took_ms,
-        } => {
-            let mut e = make_event("recording_recovered", distinct_id);
-            set(&mut e, "trigger", trigger);
-            set(&mut e, "recovered_duration_secs", recovered_duration_secs);
-            set(&mut e, "segments_recovered", segments_recovered);
-            set(&mut e, "validation_took_ms", validation_took_ms);
-            e
-        }
-        PostHogEvent::RecordingRecoveryFailed { trigger, reason } => {
-            let mut e = make_event("recording_recovery_failed", distinct_id);
-            set(&mut e, "trigger", trigger);
-            set(&mut e, "reason", truncate_reason(reason));
-            e
-        }
-        PostHogEvent::RecordingDiskSpaceLow {
-            mode,
-            bytes_remaining,
-        } => {
-            let mut e = make_event("recording_disk_space_low", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "bytes_remaining", bytes_remaining);
-            e
-        }
-        PostHogEvent::RecordingDiskSpaceExhausted {
-            mode,
-            bytes_remaining,
-        } => {
-            let mut e = make_event("recording_disk_space_exhausted", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "bytes_remaining", bytes_remaining);
-            e
-        }
-        PostHogEvent::RecordingDeviceLost { mode, subsystem } => {
-            let mut e = make_event("recording_device_lost", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "subsystem", subsystem);
-            e
-        }
-        PostHogEvent::RecordingEncoderRebuilt {
-            mode,
-            backend,
-            attempt,
-        } => {
-            let mut e = make_event("recording_encoder_rebuilt", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "backend", backend);
-            set(&mut e, "attempt", attempt);
-            e
-        }
-        PostHogEvent::RecordingSourceAudioReset {
-            mode,
-            source,
-            starvation_ms,
-        } => {
-            let mut e = make_event("recording_source_audio_reset", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "source", source);
-            set(&mut e, "starvation_ms", starvation_ms);
-            e
-        }
-        PostHogEvent::RecordingCaptureTargetLost { mode, target } => {
-            let mut e = make_event("recording_capture_target_lost", distinct_id);
-            set(&mut e, "mode", mode);
-            set(&mut e, "target", target);
-            e
-        }
-    }
-}
-
-pub fn init() {
-    if let Some(env) = option_env!("VITE_POSTHOG_KEY") {
-        tokio::spawn(async move {
-            posthog_rs::init_global(env)
-                .await
-                .map_err(|err| error!("Error initializing PostHog: {err}"))
-                .ok();
-        });
-    }
-}
-
-pub fn set_server_url(url: &str) {
-    *API_SERVER_IS_CAP_CLOUD
-        .get_or_init(Default::default)
-        .write()
-        .unwrap_or_else(PoisonError::into_inner) = Some(url == "https://cap.so");
-}
-
-static API_SERVER_IS_CAP_CLOUD: OnceLock<RwLock<Option<bool>>> = OnceLock::new();
-
-static TELEMETRY_ENABLED: AtomicBool = AtomicBool::new(true);
-
-pub fn set_telemetry_enabled(enabled: bool) {
-    TELEMETRY_ENABLED.store(enabled, Ordering::Release);
-}
-
-pub fn telemetry_enabled() -> bool {
-    TELEMETRY_ENABLED.load(Ordering::Acquire)
-}
-
-pub fn async_capture_event(app: &AppHandle, event: PostHogEvent) {
-    if option_env!("VITE_POSTHOG_KEY").is_none() {
-        return;
-    }
-
-    let live_enabled = crate::general_settings::GeneralSettingsStore::get(app)
-        .ok()
-        .flatten()
-        .map(|s| s.enable_telemetry)
-        .unwrap_or_else(telemetry_enabled);
-    TELEMETRY_ENABLED.store(live_enabled, Ordering::Release);
-    if !live_enabled {
-        return;
-    }
-
-    let distinct_id = AuthStore::get(app)
-        .ok()
-        .flatten()
-        .and_then(|auth| auth.user_id);
-    tokio::spawn(async move {
-        let mut e = posthog_event(event, distinct_id.as_deref());
-
-        e.insert_prop("cap_version", env!("CARGO_PKG_VERSION"))
-            .map_err(|err| error!("Error adding PostHog property: {err:?}"))
-            .ok();
-        e.insert_prop(
-            "cap_backend",
-            match *API_SERVER_IS_CAP_CLOUD
-                .get_or_init(Default::default)
-                .read()
-                .unwrap_or_else(PoisonError::into_inner)
-            {
-                Some(true) => "cloud",
-                Some(false) => "self_hosted",
-                None => "unknown",
-            },
-        )
-        .map_err(|err| error!("Error adding PostHog property: {err:?}"))
-        .ok();
-        e.insert_prop("os", std::env::consts::OS)
-            .map_err(|err| error!("Error adding PostHog property: {err:?}"))
-            .ok();
-        e.insert_prop("arch", std::env::consts::ARCH)
-            .map_err(|err| error!("Error adding PostHog property: {err:?}"))
-            .ok();
-
-        posthog_rs::capture(e)
-            .await
-            .map_err(|err| error!("Error sending event to PostHog: {err:?}"))
-            .ok();
-    });
-}
diff --git a/apps/desktop/src-tauri/src/product_analytics.rs b/apps/desktop/src-tauri/src/product_analytics.rs
new file mode 100644
index 00000000000..9a3d230cec0
--- /dev/null
+++ b/apps/desktop/src-tauri/src/product_analytics.rs
@@ -0,0 +1,611 @@
+use serde::Serialize;
+use serde_json::{Map, Value};
+use std::{
+    future::Future,
+    sync::{
+        OnceLock,
+        atomic::{AtomicBool, AtomicU64, Ordering},
+    },
+    time::Duration,
+};
+use tauri::AppHandle;
+use tauri_plugin_store::StoreExt;
+use tokio::sync::mpsc;
+use tracing::{debug, error, warn};
+use uuid::Uuid;
+
+use crate::{
+    auth::{AuthSecret, AuthStore},
+    general_settings::GeneralSettingsStore,
+    web_api::ManagerExt,
+};
+
+const PRODUCT_EVENT_QUEUE_CAPACITY: usize = 100;
+const PRODUCT_EVENT_BATCH_SIZE: usize = 20;
+const PRODUCT_EVENT_BATCH_DELAY: Duration = Duration::from_millis(250);
+const PRODUCT_EVENT_RETRY_DELAY: Duration = Duration::from_millis(500);
+const PRODUCT_EVENT_REQUEST_TIMEOUT: Duration = Duration::from_secs(3);
+const PRODUCT_EVENT_SESSION_STORE_KEY: &str = "product_analytics_session_id";
+
+#[derive(Debug)]
+pub enum ProductAnalyticsEvent {
+    MultipartUploadComplete {
+        duration: Duration,
+        length: Duration,
+        size: u64,
+    },
+    MultipartUploadFailed {
+        duration: Duration,
+        error: String,
+    },
+    RecordingStarted {
+        mode: &'static str,
+        target_kind: &'static str,
+        has_camera: bool,
+        has_mic: bool,
+        has_system_audio: bool,
+        target_fps: u32,
+        target_width: u32,
+        target_height: u32,
+        fragmented: bool,
+        custom_cursor_capture: bool,
+    },
+    RecordingCompleted {
+        mode: &'static str,
+        status: &'static str,
+        duration_secs: u64,
+        segment_count: u32,
+        track_failure_count: u32,
+        error_class: Option<String>,
+        video_frames_captured: u64,
+        video_frames_dropped: u64,
+        drop_rate_pct: f64,
+        capture_stalls_count: u64,
+        capture_stalls_max_ms: u64,
+        mixer_stalls_count: u64,
+        mixer_stalls_max_ms: u64,
+        audio_gaps_count: u64,
+        audio_gaps_total_ms: u64,
+        frame_drop_rate_high_count: u64,
+        source_restarts_count: u64,
+        muxer_crash_count: u64,
+        audio_degraded_count: u64,
+        dropped_mic_messages: u64,
+    },
+    RecordingRecoveryFailed {
+        trigger: &'static str,
+        reason: String,
+    },
+}
+
+fn truncate_reason(mut s: String) -> String {
+    const MAX_LEN: usize = 240;
+    if s.len() > MAX_LEN {
+        let mut end = MAX_LEN;
+        while !s.is_char_boundary(end) {
+            end = end.saturating_sub(1);
+        }
+        s.truncate(end);
+        s.push('…');
+    }
+    s
+}
+
+#[derive(Clone, Debug)]
+struct EventData {
+    name: &'static str,
+    properties: Map<String, Value>,
+}
+
+impl EventData {
+    fn new(name: &'static str) -> Self {
+        Self {
+            name,
+            properties: Map::new(),
+        }
+    }
+
+    fn set(&mut self, key: &str, value: impl Serialize) {
+        match serde_json::to_value(value) {
+            Ok(value) => {
+                self.properties.insert(key.to_string(), value);
+            }
+            Err(err) => error!("Error serializing analytics property {key}: {err:?}"),
+        }
+    }
+}
+
+fn event_data(event: ProductAnalyticsEvent) -> EventData {
+    match event {
+        ProductAnalyticsEvent::MultipartUploadComplete {
+            duration,
+            length,
+            size,
+        } => {
+            let mut data = EventData::new("multipart_upload_complete");
+            data.set("duration", duration.as_secs());
+            data.set("length", length.as_secs());
+            data.set("size", size);
+            data
+        }
+        ProductAnalyticsEvent::MultipartUploadFailed { duration, error } => {
+            let mut data = EventData::new("multipart_upload_failed");
+            data.set("duration", duration.as_secs());
+            data.set("error", truncate_reason(error));
+            data
+        }
+        ProductAnalyticsEvent::RecordingStarted {
+            mode,
+            target_kind,
+            has_camera,
+            has_mic,
+            has_system_audio,
+            target_fps,
+            target_width,
+            target_height,
+            fragmented,
+            custom_cursor_capture,
+        } => {
+            let mut data = EventData::new("recording_started");
+            data.set("mode", mode);
+            data.set("target_kind", target_kind);
+            data.set("has_camera", has_camera);
+            data.set("has_mic", has_mic);
+            data.set("has_system_audio", has_system_audio);
+            data.set("target_fps", target_fps);
+            data.set("target_width", target_width);
+            data.set("target_height", target_height);
+            data.set("fragmented", fragmented);
+            data.set("custom_cursor_capture", custom_cursor_capture);
+            data
+        }
+        ProductAnalyticsEvent::RecordingCompleted {
+            mode,
+            status,
+            duration_secs,
+            segment_count,
+            track_failure_count,
+            error_class,
+            video_frames_captured,
+            video_frames_dropped,
+            drop_rate_pct,
+            capture_stalls_count,
+            capture_stalls_max_ms,
+            mixer_stalls_count,
+            mixer_stalls_max_ms,
+            audio_gaps_count,
+            audio_gaps_total_ms,
+            frame_drop_rate_high_count,
+            source_restarts_count,
+            muxer_crash_count,
+            audio_degraded_count,
+            dropped_mic_messages,
+        } => {
+            let mut data = EventData::new("recording_completed");
+            data.set("mode", mode);
+            data.set("status", status);
+            data.set("duration_secs", duration_secs);
+            data.set("segment_count", segment_count);
+            data.set("track_failure_count", track_failure_count);
+            if let Some(ec) = error_class {
+                data.set("error_class", truncate_reason(ec));
+            }
+            data.set("video_frames_captured", video_frames_captured);
+            data.set("video_frames_dropped", video_frames_dropped);
+            data.set("drop_rate_pct", (drop_rate_pct * 100.0).round() / 100.0);
+            data.set("capture_stalls_count", capture_stalls_count);
+            data.set("capture_stalls_max_ms", capture_stalls_max_ms);
+            data.set("mixer_stalls_count", mixer_stalls_count);
+            data.set("mixer_stalls_max_ms", mixer_stalls_max_ms);
+            data.set("audio_gaps_count", audio_gaps_count);
+            data.set("audio_gaps_total_ms", audio_gaps_total_ms);
+            data.set("frame_drop_rate_high_count", frame_drop_rate_high_count);
+            data.set("source_restarts_count", source_restarts_count);
+            data.set("muxer_crash_count", muxer_crash_count);
+            data.set("audio_degraded_count", audio_degraded_count);
+            data.set("dropped_mic_messages", dropped_mic_messages);
+            data
+        }
+        ProductAnalyticsEvent::RecordingRecoveryFailed { trigger, reason } => {
+            let mut data = EventData::new("recording_recovery_failed");
+            data.set("trigger", trigger);
+            data.set("reason", truncate_reason(reason));
+            data
+        }
+    }
+}
+
+fn is_core_product_event(name: &str) -> bool {
+    matches!(
+        name,
+        "recording_started"
+            | "recording_completed"
+            | "multipart_upload_complete"
+            | "multipart_upload_failed"
+            | "recording_recovery_failed"
+    )
+}
+
+#[derive(Clone, Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct ProductEvent {
+    event_id: String,
+    event_name: &'static str,
+    occurred_at: String,
+    anonymous_id: String,
+    session_id: String,
+    platform: &'static str,
+    app_version: &'static str,
+    properties: Map<String, Value>,
+}
+
+#[derive(Serialize)]
+struct ProductEventBatch<'a> {
+    events: &'a [ProductEvent],
+}
+
+fn product_event(data: &EventData, anonymous_id: String) -> Option<ProductEvent> {
+    if !is_core_product_event(data.name) {
+        return None;
+    }
+
+    Some(ProductEvent {
+        event_id: Uuid::new_v4().to_string(),
+        event_name: data.name,
+        occurred_at: chrono::Utc::now().to_rfc3339(),
+        anonymous_id,
+        session_id: PRODUCT_EVENT_SESSION_ID
+            .get_or_init(Uuid::new_v4)
+            .to_string(),
+        platform: "desktop",
+        app_version: env!("CARGO_PKG_VERSION"),
+        properties: product_event_properties(data),
+    })
+}
+
+fn product_event_properties(data: &EventData) -> Map<String, Value> {
+    data.properties
+        .iter()
+        .filter(|(key, value)| {
+            !matches!(
+                key.as_str(),
+                "error" | "error_message" | "file_name" | "file_path" | "raw_error" | "reason"
+            ) && (value.is_null() || value.is_boolean() || value.is_number() || value.is_string())
+        })
+        .map(|(key, value)| {
+            let value = match value {
+                Value::String(value) => Value::String(truncate_reason(value.clone())),
+                value => value.clone(),
+            };
+            (key.clone(), value)
+        })
+        .collect()
+}
+
+fn live_telemetry_enabled(app: &AppHandle) -> bool {
+    let enabled = GeneralSettingsStore::get(app)
+        .ok()
+        .flatten()
+        .map(|settings| settings.enable_telemetry)
+        .unwrap_or_else(telemetry_enabled);
+    TELEMETRY_ENABLED.store(enabled, Ordering::Release);
+    enabled
+}
+
+fn product_auth_token(app: &AppHandle) -> Option<String> {
+    AuthStore::get(app)
+        .ok()
+        .flatten()
+        .map(|auth| match auth.secret {
+            AuthSecret::ApiKey { api_key } => api_key,
+            AuthSecret::Session { token, .. } => token,
+        })
+}
+
+async fn send_product_batch_once(app: &AppHandle, events: &[ProductEvent]) -> Result<(), String> {
+    if !live_telemetry_enabled(app) {
+        return Ok(());
+    }
+
+    let auth_token = product_auth_token(app);
+    let response = app
+        .api_request("/api/events", |client, url| {
+            let request = client
+                .post(url)
+                .timeout(PRODUCT_EVENT_REQUEST_TIMEOUT)
+                .json(&ProductEventBatch { events });
+            match &auth_token {
+                Some(token) => request.bearer_auth(token),
+                None => request,
+            }
+        })
+        .await
+        .map_err(|err| err.to_string())?;
+
+    if response.status().is_success() || !should_retry_product_status(response.status().as_u16()) {
+        Ok(())
+    } else {
+        Err(format!(
+            "product analytics endpoint returned {}",
+            response.status()
+        ))
+    }
+}
+
+fn should_retry_product_status(status: u16) -> bool {
+    status == 429 || status >= 500
+}
+
+async fn retry_once<F, Fut, E>(mut operation: F, retry_delay: Duration) -> Result<(), E>
+where
+    F: FnMut() -> Fut,
+    Fut: Future<Output = Result<(), E>>,
+{
+    if operation().await.is_ok() {
+        return Ok(());
+    }
+
+    tokio::time::sleep(retry_delay).await;
+    operation().await
+}
+
+async fn run_product_event_worker(app: AppHandle, mut receiver: mpsc::Receiver<ProductEvent>) {
+    while let Some(first) = receiver.recv().await {
+        let mut events = Vec::with_capacity(PRODUCT_EVENT_BATCH_SIZE);
+        events.push(first);
+        let deadline = tokio::time::Instant::now() + PRODUCT_EVENT_BATCH_DELAY;
+
+        while events.len() < PRODUCT_EVENT_BATCH_SIZE {
+            match tokio::time::timeout_at(deadline, receiver.recv()).await {
+                Ok(Some(event)) => events.push(event),
+                Ok(None) | Err(_) => break,
+            }
+        }
+
+        if !live_telemetry_enabled(&app) {
+            continue;
+        }
+
+        if let Err(err) = retry_once(
+            || send_product_batch_once(&app, &events),
+            PRODUCT_EVENT_RETRY_DELAY,
+        )
+        .await
+        {
+            warn!(
+                event_count = events.len(),
+                "Dropping product analytics batch after one retry: {err}"
+            );
+        }
+    }
+}
+
+fn enqueue_product_event(app: &AppHandle, event: ProductEvent) {
+    let sender = PRODUCT_EVENT_SENDER.get_or_init(|| {
+        let (sender, receiver) = mpsc::channel(PRODUCT_EVENT_QUEUE_CAPACITY);
+        tokio::spawn(run_product_event_worker(app.clone(), receiver));
+        sender
+    });
+
+    if let Err(err) = sender.try_send(event) {
+        let dropped = PRODUCT_EVENTS_DROPPED.fetch_add(1, Ordering::Relaxed) + 1;
+        if dropped.is_power_of_two() {
+            debug!(
+                dropped,
+                reason = %err,
+                "Product analytics queue is unavailable; event dropped"
+            );
+        }
+    }
+}
+
+pub fn init_product_session(app: &AppHandle) {
+    let session_id = PRODUCT_EVENT_SESSION_ID
+        .get_or_init(Uuid::new_v4)
+        .to_string();
+    match app.store("store") {
+        Ok(store) => {
+            store.set(PRODUCT_EVENT_SESSION_STORE_KEY, session_id);
+            if let Err(err) = store.save() {
+                warn!("Failed to persist product analytics session ID: {err}");
+            }
+        }
+        Err(err) => warn!("Failed to access store for product analytics session: {err}"),
+    }
+}
+
+static TELEMETRY_ENABLED: AtomicBool = AtomicBool::new(true);
+static PRODUCT_EVENT_SESSION_ID: OnceLock<Uuid> = OnceLock::new();
+static PRODUCT_EVENT_SENDER: OnceLock<mpsc::Sender<ProductEvent>> = OnceLock::new();
+static PRODUCT_EVENTS_DROPPED: AtomicU64 = AtomicU64::new(0);
+
+pub fn set_telemetry_enabled(enabled: bool) {
+    TELEMETRY_ENABLED.store(enabled, Ordering::Release);
+}
+
+pub fn telemetry_enabled() -> bool {
+    TELEMETRY_ENABLED.load(Ordering::Acquire)
+}
+
+pub fn capture_event(app: &AppHandle, event: ProductAnalyticsEvent) {
+    if !live_telemetry_enabled(app) {
+        return;
+    }
+
+    let anonymous_id = GeneralSettingsStore::get(app)
+        .ok()
+        .flatten()
+        .map(|settings| settings.instance_id.to_string())
+        .unwrap_or_else(|| {
+            PRODUCT_EVENT_SESSION_ID
+                .get_or_init(Uuid::new_v4)
+                .to_string()
+        });
+    let mut data = event_data(event);
+    data.set("cap_version", env!("CARGO_PKG_VERSION"));
+    data.set("os", std::env::consts::OS);
+    data.set("arch", std::env::consts::ARCH);
+
+    if let Some(event) = product_event(&data, anonymous_id) {
+        enqueue_product_event(app, event);
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use std::sync::atomic::{AtomicUsize, Ordering};
+
+    use super::*;
+
+    fn recording_started() -> ProductAnalyticsEvent {
+        ProductAnalyticsEvent::RecordingStarted {
+            mode: "studio",
+            target_kind: "screen",
+            has_camera: true,
+            has_mic: true,
+            has_system_audio: false,
+            target_fps: 60,
+            target_width: 1920,
+            target_height: 1080,
+            fragmented: true,
+            custom_cursor_capture: true,
+        }
+    }
+
+    #[test]
+    fn core_product_event_catalog_is_intentionally_small() {
+        let included = [
+            "recording_started",
+            "recording_completed",
+            "multipart_upload_complete",
+            "multipart_upload_failed",
+            "recording_recovery_failed",
+        ];
+        let excluded = [
+            "recording_recovered",
+            "recording_muxer_crashed",
+            "recording_audio_degraded",
+            "recording_disk_space_low",
+            "recording_disk_space_exhausted",
+            "recording_device_lost",
+            "recording_encoder_rebuilt",
+            "recording_source_audio_reset",
+            "recording_capture_target_lost",
+        ];
+
+        assert!(included.into_iter().all(is_core_product_event));
+        assert!(!excluded.into_iter().any(is_core_product_event));
+    }
+
+    #[test]
+    fn recording_started_has_scalar_properties() {
+        let data = event_data(recording_started());
+
+        assert_eq!(data.name, "recording_started");
+        assert_eq!(data.properties["mode"], "studio");
+        assert_eq!(data.properties["target_fps"], 60);
+        assert_eq!(data.properties["has_camera"], true);
+        assert!(data.properties.values().all(|value| {
+            value.is_null() || value.is_boolean() || value.is_number() || value.is_string()
+        }));
+    }
+
+    #[test]
+    fn product_event_reuses_install_id_and_process_session() {
+        let data = event_data(recording_started());
+        let first = product_event(&data, "install-id".to_string()).unwrap();
+        let second = product_event(&data, "install-id".to_string()).unwrap();
+
+        assert_eq!(first.anonymous_id, "install-id");
+        assert_eq!(second.anonymous_id, "install-id");
+        assert_eq!(first.session_id, second.session_id);
+        assert_ne!(first.event_id, second.event_id);
+        assert_eq!(first.platform, "desktop");
+    }
+
+    #[test]
+    fn product_events_remove_raw_error_details_before_networking() {
+        let data = event_data(ProductAnalyticsEvent::MultipartUploadFailed {
+            duration: Duration::from_secs(2),
+            error: "/Users/private/recording.cap failed".to_string(),
+        });
+        let event = product_event(&data, "install-id".to_string()).unwrap();
+
+        assert!(!event.properties.contains_key("error"));
+        assert_eq!(event.properties["duration"], 2);
+    }
+
+    #[test]
+    fn truncation_is_safe_for_multibyte_text() {
+        let value = "🙂".repeat(100);
+        let truncated = truncate_reason(value);
+
+        assert!(truncated.ends_with('…'));
+        assert!(truncated.len() <= 243);
+        assert!(truncated.is_char_boundary(truncated.len()));
+    }
+
+    #[test]
+    fn batch_contract_uses_expected_camel_case_fields() {
+        let data = event_data(recording_started());
+        let event = product_event(&data, "install-id".to_string()).unwrap();
+        let json = serde_json::to_value(ProductEventBatch { events: &[event] }).unwrap();
+        let serialized = &json["events"][0];
+
+        assert!(serialized.get("eventId").is_some());
+        assert_eq!(serialized["eventName"], "recording_started");
+        assert_eq!(serialized["anonymousId"], "install-id");
+        assert_eq!(serialized["platform"], "desktop");
+        assert!(serialized.get("occurredAt").is_some());
+        assert!(serialized.get("sessionId").is_some());
+        assert!(serialized.get("appVersion").is_some());
+    }
+
+    #[tokio::test]
+    async fn retry_once_stops_after_success() {
+        let attempts = AtomicUsize::new(0);
+
+        let result = retry_once(
+            || {
+                let attempt = attempts.fetch_add(1, Ordering::Relaxed);
+                async move {
+                    if attempt == 0 {
+                        Err("temporary")
+                    } else {
+                        Ok(())
+                    }
+                }
+            },
+            Duration::ZERO,
+        )
+        .await;
+
+        assert_eq!(result, Ok(()));
+        assert_eq!(attempts.load(Ordering::Relaxed), 2);
+    }
+
+    #[tokio::test]
+    async fn retry_once_never_attempts_more_than_twice() {
+        let attempts = AtomicUsize::new(0);
+
+        let result = retry_once(
+            || {
+                attempts.fetch_add(1, Ordering::Relaxed);
+                async { Err::<(), _>("offline") }
+            },
+            Duration::ZERO,
+        )
+        .await;
+
+        assert_eq!(result, Err("offline"));
+        assert_eq!(attempts.load(Ordering::Relaxed), 2);
+    }
+
+    #[test]
+    fn product_status_retry_policy_matches_the_browser() {
+        assert!(!should_retry_product_status(400));
+        assert!(!should_retry_product_status(401));
+        assert!(should_retry_product_status(429));
+        assert!(should_retry_product_status(503));
+    }
+}
diff --git a/apps/desktop/src-tauri/src/recording.rs b/apps/desktop/src-tauri/src/recording.rs
index fe22e60dded..fc82f197922 100644
--- a/apps/desktop/src-tauri/src/recording.rs
+++ b/apps/desktop/src-tauri/src/recording.rs
@@ -2180,110 +2180,8 @@ pub async fn start_recording(
             async move {
                 let mut is_degraded = false;
                 while let Some(event) = health_rx.recv().await {
-                    if let Some((health, mode)) = accumulator_mode.as_ref()
-                        && let Some((reason_text, critical)) = health.record_event(&event)
-                    {
-                        use crate::posthog::{PostHogEvent, async_capture_event};
-                        use crate::recording_telemetry::{CriticalEvent, mode_label};
-                        match critical {
-                            CriticalEvent::MuxerCrashed {
-                                seconds_into_recording,
-                                ..
-                            } => {
-                                async_capture_event(
-                                    &app,
-                                    PostHogEvent::RecordingMuxerCrashed {
-                                        mode: mode_label(*mode),
-                                        reason: reason_text,
-                                        seconds_into_recording,
-                                    },
-                                );
-                            }
-                            CriticalEvent::AudioDegraded {
-                                seconds_into_recording,
-                                ..
-                            } => {
-                                async_capture_event(
-                                    &app,
-                                    PostHogEvent::RecordingAudioDegraded {
-                                        mode: mode_label(*mode),
-                                        reason: reason_text,
-                                        seconds_into_recording,
-                                    },
-                                );
-                            }
-                        }
-                    }
-
-                    if let Some((_, mode)) = accumulator_mode.as_ref() {
-                        use crate::posthog::{PostHogEvent, async_capture_event};
-                        use crate::recording_telemetry::mode_label;
-                        let mode_str = mode_label(*mode);
-                        match &event {
-                            cap_recording::PipelineHealthEvent::DiskSpaceLow {
-                                bytes_remaining,
-                                ..
-                            } => async_capture_event(
-                                &app,
-                                PostHogEvent::RecordingDiskSpaceLow {
-                                    mode: mode_str,
-                                    bytes_remaining: *bytes_remaining,
-                                },
-                            ),
-                            cap_recording::PipelineHealthEvent::DiskSpaceExhausted {
-                                bytes_remaining,
-                            } => async_capture_event(
-                                &app,
-                                PostHogEvent::RecordingDiskSpaceExhausted {
-                                    mode: mode_str,
-                                    bytes_remaining: *bytes_remaining,
-                                },
-                            ),
-                            cap_recording::PipelineHealthEvent::DeviceLost { subsystem } => {
-                                async_capture_event(
-                                    &app,
-                                    PostHogEvent::RecordingDeviceLost {
-                                        mode: mode_str,
-                                        subsystem: subsystem.clone(),
-                                    },
-                                )
-                            }
-                            cap_recording::PipelineHealthEvent::EncoderRebuilt {
-                                backend,
-                                attempt,
-                            } => async_capture_event(
-                                &app,
-                                PostHogEvent::RecordingEncoderRebuilt {
-                                    mode: mode_str,
-                                    backend: backend.clone(),
-                                    attempt: *attempt,
-                                },
-                            ),
-                            cap_recording::PipelineHealthEvent::SourceAudioReset {
-                                source,
-                                starvation_ms,
-                            } => async_capture_event(
-                                &app,
-                                PostHogEvent::RecordingSourceAudioReset {
-                                    mode: mode_str,
-                                    source: source.clone(),
-                                    starvation_ms: *starvation_ms,
-                                },
-                            ),
-                            cap_recording::PipelineHealthEvent::CaptureTargetLost { target } => {
-                                async_capture_event(
-                                    &app,
-                                    PostHogEvent::RecordingCaptureTargetLost {
-                                        mode: mode_str,
-                                        target: target.clone(),
-                                    },
-                                )
-                            }
-                            cap_recording::PipelineHealthEvent::RecoveryFragmentCorrupt {
-                                ..
-                            } => {}
-                            _ => {}
-                        }
+                    if let Some((health, _)) = accumulator_mode.as_ref() {
+                        let _ = health.record_event(&event);
                     }
 
                     let reason = match &event {
@@ -3036,9 +2934,9 @@ async fn handle_recording_end(
             Some(feed) => feed.dropped_message_count().await,
             None => 0,
         };
-        crate::posthog::async_capture_event(
+        crate::product_analytics::capture_event(
             &handle,
-            crate::posthog::PostHogEvent::RecordingCompleted {
+            crate::product_analytics::ProductAnalyticsEvent::RecordingCompleted {
                 mode: crate::recording_telemetry::mode_label(mode),
                 status,
                 duration_secs,
@@ -3978,13 +3876,11 @@ pub fn remux_fragmented_recording_with_trigger(
 
     if let Some(recording) = incomplete_recording {
         let normal_stop = trigger == "recording_stop";
-        let validation_start = std::time::Instant::now();
         let outcome = if normal_stop {
             RecoveryManager::finalize(&recording)
         } else {
             RecoveryManager::recover(&recording)
         };
-        let validation_took_ms = validation_start.elapsed().as_millis() as u64;
 
         match outcome {
             Ok(_) => {
@@ -3995,58 +3891,14 @@ pub fn remux_fragmented_recording_with_trigger(
                     info!("Successfully recovered fragmented recording");
                 }
 
-                if let Some(app_handle) = app
-                    && !normal_stop
-                {
-                    let recovered_duration_secs = RecordingMeta::load_for_project(recording_dir)
-                        .ok()
-                        .and_then(|meta| match meta.inner {
-                            RecordingMetaInner::Studio(studio) => match *studio {
-                                StudioRecordingMeta::MultipleSegments { inner } => Some(
-                                    inner
-                                        .segments
-                                        .iter()
-                                        .filter_map(|seg| seg.display.start_time)
-                                        .fold(0.0_f64, |acc, v| acc.max(v)),
-                                ),
-                                StudioRecordingMeta::SingleSegment { .. } => None,
-                            },
-                            _ => None,
-                        })
-                        .map(|s| s as u64)
-                        .unwrap_or_default();
-
-                    let segments_recovered = RecordingMeta::load_for_project(recording_dir)
-                        .ok()
-                        .and_then(|meta| match meta.inner {
-                            RecordingMetaInner::Studio(studio) => match *studio {
-                                StudioRecordingMeta::MultipleSegments { inner } => {
-                                    Some(inner.segments.len() as u32)
-                                }
-                                StudioRecordingMeta::SingleSegment { .. } => Some(1),
-                            },
-                            _ => None,
-                        })
-                        .unwrap_or(0);
-
-                    crate::posthog::async_capture_event(
-                        app_handle,
-                        crate::posthog::PostHogEvent::RecordingRecovered {
-                            trigger,
-                            recovered_duration_secs,
-                            segments_recovered,
-                            validation_took_ms,
-                        },
-                    );
-                }
                 Ok(())
             }
             Err(e) => {
                 let reason = format!("{e}");
                 if let Some(app_handle) = app {
-                    crate::posthog::async_capture_event(
+                    crate::product_analytics::capture_event(
                         app_handle,
-                        crate::posthog::PostHogEvent::RecordingRecoveryFailed {
+                        crate::product_analytics::ProductAnalyticsEvent::RecordingRecoveryFailed {
                             trigger,
                             reason: reason.clone(),
                         },
@@ -4086,7 +3938,7 @@ fn classify_error_message(error: &str) -> String {
 }
 
 async fn emit_recording_started_telemetry(app: &AppHandle, state_mtx: &MutableState<'_, App>) {
-    use crate::posthog::{PostHogEvent, async_capture_event};
+    use crate::product_analytics::{ProductAnalyticsEvent, capture_event};
     use crate::recording_telemetry::{mode_label, target_kind_label};
 
     let (mode, recording_mode, target_kind, has_camera, has_mic, has_system_audio) = {
@@ -4123,9 +3975,9 @@ async fn emit_recording_started_telemetry(app: &AppHandle, state_mtx: &MutableSt
         }
     };
 
-    async_capture_event(
+    capture_event(
         app,
-        PostHogEvent::RecordingStarted {
+        ProductAnalyticsEvent::RecordingStarted {
             mode,
             target_kind,
             has_camera,
diff --git a/apps/desktop/src-tauri/src/recovery.rs b/apps/desktop/src-tauri/src/recovery.rs
index a280cc9f67c..a7d1826309b 100644
--- a/apps/desktop/src-tauri/src/recovery.rs
+++ b/apps/desktop/src-tauri/src/recovery.rs
@@ -82,15 +82,13 @@ pub async fn recover_recording(app: AppHandle, project_path: String) -> Result<S
         return Err("No recoverable segments found".to_string());
     }
 
-    let estimated_duration_secs = recording.estimated_duration.as_secs();
-    let recover_start = std::time::Instant::now();
     let recovered = match RecoveryManager::recover(&recording) {
         Ok(r) => r,
         Err(e) => {
             let reason = format!("{e}");
-            crate::posthog::async_capture_event(
+            crate::product_analytics::capture_event(
                 &app,
-                crate::posthog::PostHogEvent::RecordingRecoveryFailed {
+                crate::product_analytics::ProductAnalyticsEvent::RecordingRecoveryFailed {
                     trigger: "app_startup",
                     reason: reason.clone(),
                 },
@@ -98,8 +96,6 @@ pub async fn recover_recording(app: AppHandle, project_path: String) -> Result<S
             return Err(reason);
         }
     };
-    let validation_took_ms = recover_start.elapsed().as_millis() as u64;
-
     let segment_count = match &recovered.meta {
         StudioRecordingMeta::SingleSegment { .. } => 1,
         StudioRecordingMeta::MultipleSegments { inner } => inner.segments.len(),
@@ -110,16 +106,6 @@ pub async fn recover_recording(app: AppHandle, project_path: String) -> Result<S
         segment_count, project_path
     );
 
-    crate::posthog::async_capture_event(
-        &app,
-        crate::posthog::PostHogEvent::RecordingRecovered {
-            trigger: "app_startup",
-            recovered_duration_secs: estimated_duration_secs,
-            segments_recovered: segment_count as u32,
-            validation_took_ms,
-        },
-    );
-
     let display_output_path = match &recovered.meta {
         StudioRecordingMeta::SingleSegment { segment } => {
             segment.display.path.to_path(&recovered.project_path)
diff --git a/apps/desktop/src-tauri/src/upload.rs b/apps/desktop/src-tauri/src/upload.rs
index 74269ce441d..1d74626d695 100644
--- a/apps/desktop/src-tauri/src/upload.rs
+++ b/apps/desktop/src-tauri/src/upload.rs
@@ -4,7 +4,7 @@ use crate::{
     UploadProgress, VideoUploadInfo,
     api::{self, PresignedS3PutRequest, PresignedS3PutRequestMethod, S3VideoMeta, UploadedPart},
     http_client::{HttpClient, RetryableHttpClient},
-    posthog::{PostHogEvent, async_capture_event},
+    product_analytics::{ProductAnalyticsEvent, capture_event},
     web_api::{AuthedApiError, ManagerExt},
 };
 use async_stream::{stream, try_stream};
@@ -214,10 +214,10 @@ pub async fn upload_video(
 
     emit_upload_complete(app, &video_id);
 
-    async_capture_event(
+    capture_event(
         app,
         match &video_result {
-            Ok(meta) => PostHogEvent::MultipartUploadComplete {
+            Ok(meta) => ProductAnalyticsEvent::MultipartUploadComplete {
                 duration: start.elapsed(),
                 length: meta
                     .as_ref()
@@ -227,7 +227,7 @@ pub async fn upload_video(
                     .map(|m| ((m.len() as f64) / 1_000_000.0) as u64)
                     .unwrap_or_default(),
             },
-            Err(err) => PostHogEvent::MultipartUploadFailed {
+            Err(err) => ProductAnalyticsEvent::MultipartUploadFailed {
                 duration: start.elapsed(),
                 error: err.to_string(),
             },
@@ -551,10 +551,10 @@ impl InstantMultipartUpload {
                     realtime_upload_done,
                 )
                 .await;
-                async_capture_event(
+                capture_event(
                     &app,
                     match &result {
-                        Ok(meta) => PostHogEvent::MultipartUploadComplete {
+                        Ok(meta) => ProductAnalyticsEvent::MultipartUploadComplete {
                             duration: start.elapsed(),
                             length: meta
                                 .as_ref()
@@ -564,7 +564,7 @@ impl InstantMultipartUpload {
                                 .map(|m| ((m.len() as f64) / 1_000_000.0) as u64)
                                 .unwrap_or_default(),
                         },
-                        Err(err) => PostHogEvent::MultipartUploadFailed {
+                        Err(err) => ProductAnalyticsEvent::MultipartUploadFailed {
                             duration: start.elapsed(),
                             error: err.to_string(),
                         },
@@ -894,15 +894,15 @@ impl SegmentUploader {
                 )
                 .await;
 
-                async_capture_event(
+                capture_event(
                     &app,
                     match &result {
-                        Ok(total_bytes) => PostHogEvent::MultipartUploadComplete {
+                        Ok(total_bytes) => ProductAnalyticsEvent::MultipartUploadComplete {
                             duration: start.elapsed(),
                             length: start.elapsed(),
                             size: total_bytes / (1024 * 1024),
                         },
-                        Err(err) => PostHogEvent::MultipartUploadFailed {
+                        Err(err) => ProductAnalyticsEvent::MultipartUploadFailed {
                             duration: start.elapsed(),
                             error: err.to_string(),
                         },
diff --git a/apps/desktop/src/app.tsx b/apps/desktop/src/app.tsx
index be3971b4e4b..4af56a5c843 100644
--- a/apps/desktop/src/app.tsx
+++ b/apps/desktop/src/app.tsx
@@ -23,7 +23,6 @@ import { CapErrorBoundary } from "./components/CapErrorBoundary";
 import WindowChromeLayout from "./routes/(window-chrome)";
 import SettingsLayout from "./routes/(window-chrome)/settings";
 import { generalSettingsStore } from "./store";
-import { initAnonymousUser } from "./utils/analytics";
 import { type AppTheme, commands } from "./utils/tauri";
 import titlebar from "./utils/titlebar-state";
 
@@ -126,7 +125,6 @@ function Inner() {
 	createThemeListener(currentWindow);
 
 	onMount(() => {
-		initAnonymousUser();
 		prewarmFontCaches();
 	});
 
diff --git a/apps/desktop/src/utils/analytics.test.ts b/apps/desktop/src/utils/analytics.test.ts
new file mode 100644
index 00000000000..fb57a9606be
--- /dev/null
+++ b/apps/desktop/src/utils/analytics.test.ts
@@ -0,0 +1,159 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => {
+	const state: {
+		enableTelemetry: boolean;
+		settingsListener?: (settings?: { enableTelemetry?: boolean }) => void;
+	} = { enableTelemetry: true };
+
+	return {
+		state,
+		fetch: vi.fn(async (_url: string, _request?: RequestInit) => ({
+			ok: true,
+			status: 202,
+		})),
+	};
+});
+
+vi.mock("@tauri-apps/api/app", () => ({ getVersion: async () => "0.5.6" }));
+vi.mock("@tauri-apps/plugin-http", () => ({ fetch: mocks.fetch }));
+vi.mock("@tauri-apps/plugin-store", () => ({
+	Store: {
+		load: async () => ({
+			get: async (key: string) =>
+				key === "product_analytics_session_id"
+					? "process-session-id"
+					: { enableTelemetry: mocks.state.enableTelemetry },
+			onKeyChange: async (
+				_key: string,
+				listener: (settings?: { enableTelemetry?: boolean }) => void,
+			) => {
+				mocks.state.settingsListener = listener;
+				return () => {};
+			},
+		}),
+	},
+}));
+vi.mock("~/store", () => ({
+	generalSettingsStore: {
+		get: async () => ({ instanceId: "install-id" }),
+	},
+}));
+vi.mock("./web-api", () => ({
+	getConfiguredServerUrl: async () => "https://cap.so",
+	maybeProtectedHeaders: async () => ({ authorization: "Bearer token" }),
+}));
+
+async function flushMicrotasks() {
+	for (let index = 0; index < 10; index++) await Promise.resolve();
+}
+
+async function loadAnalytics() {
+	const analytics = await import("./analytics");
+	await flushMicrotasks();
+	return analytics;
+}
+
+describe("desktop analytics", () => {
+	beforeEach(() => {
+		vi.resetModules();
+		vi.useFakeTimers();
+		mocks.state.enableTelemetry = true;
+		mocks.state.settingsListener = undefined;
+		mocks.fetch.mockClear();
+	});
+
+	afterEach(() => {
+		vi.useRealTimers();
+	});
+
+	it("sends a normalized core event through the first-party endpoint", async () => {
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("create_shareable_link_clicked", {
+			fps: 60,
+			has_existing_auth: true,
+			ignored: { nested: true },
+		});
+		await flushMicrotasks();
+		await vi.advanceTimersByTimeAsync(250);
+
+		expect(mocks.fetch).toHaveBeenCalledOnce();
+		const [url, request] = mocks.fetch.mock.calls[0] ?? [];
+		expect(url).toBe("https://cap.so/api/events");
+		expect(request).toMatchObject({
+			method: "POST",
+			headers: {
+				authorization: "Bearer token",
+				"content-type": "application/json",
+			},
+		});
+		const body = JSON.parse(String(request?.body));
+		expect(body.events).toHaveLength(1);
+		expect(body.events[0]).toMatchObject({
+			eventName: "create_shareable_link_clicked",
+			anonymousId: "install-id",
+			sessionId: "process-session-id",
+			platform: "desktop",
+			appVersion: "0.5.6",
+			properties: { fps: 60, has_existing_auth: true },
+		});
+	});
+
+	it("drops events outside the bounded product catalog", async () => {
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("camera_selected", { source: "dropdown" });
+		await flushMicrotasks();
+		await vi.runAllTimersAsync();
+
+		expect(mocks.fetch).not.toHaveBeenCalled();
+	});
+
+	it("never accepts a client-authored revenue event", async () => {
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("purchase_completed", { quantity: 10 });
+		await flushMicrotasks();
+		await vi.runAllTimersAsync();
+
+		expect(mocks.fetch).not.toHaveBeenCalled();
+	});
+
+	it("drops permanent collector errors without retrying", async () => {
+		mocks.fetch.mockResolvedValue({ ok: false, status: 400 });
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("export_button_clicked");
+		await flushMicrotasks();
+		await vi.advanceTimersByTimeAsync(1_000);
+
+		expect(mocks.fetch).toHaveBeenCalledOnce();
+	});
+
+	it("retries transient collector errors once", async () => {
+		mocks.fetch.mockResolvedValue({ ok: false, status: 503 });
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("export_button_clicked");
+		await flushMicrotasks();
+		await vi.advanceTimersByTimeAsync(250);
+		await vi.advanceTimersByTimeAsync(500);
+
+		expect(mocks.fetch).toHaveBeenCalledTimes(2);
+	});
+
+	it("clears queued events as soon as telemetry is disabled", async () => {
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("export_button_clicked");
+		await flushMicrotasks();
+		mocks.state.settingsListener?.({ enableTelemetry: false });
+		await vi.runAllTimersAsync();
+
+		expect(mocks.fetch).not.toHaveBeenCalled();
+	});
+
+	it("does not send events when telemetry starts disabled", async () => {
+		mocks.state.enableTelemetry = false;
+		const { trackEvent } = await loadAnalytics();
+		trackEvent("export_button_clicked");
+		await vi.runAllTimersAsync();
+
+		expect(mocks.fetch).not.toHaveBeenCalled();
+	});
+});
diff --git a/apps/desktop/src/utils/analytics.ts b/apps/desktop/src/utils/analytics.ts
index d50316d3eb0..cad580ccbc6 100644
--- a/apps/desktop/src/utils/analytics.ts
+++ b/apps/desktop/src/utils/analytics.ts
@@ -1,128 +1,209 @@
+import {
+	isCoreEventName,
+	isServerOnlyEventName,
+	normalizeProductEventProperties,
+	type ProductEventInput,
+} from "@cap/analytics";
+import { getVersion } from "@tauri-apps/api/app";
+import { fetch } from "@tauri-apps/plugin-http";
 import { Store } from "@tauri-apps/plugin-store";
-import posthog from "posthog-js";
 import { v4 as uuid } from "uuid";
 
-const key = import.meta.env.VITE_POSTHOG_KEY as string;
-const host = import.meta.env.VITE_POSTHOG_HOST as string;
+import { generalSettingsStore } from "~/store";
+import { ProductAnalyticsQueue } from "./product-analytics";
+import { getConfiguredServerUrl, maybeProtectedHeaders } from "./web-api";
 
-let isPostHogInitialized = false;
+const PRODUCT_ANALYTICS_REQUEST_TIMEOUT_MS = 3000;
 
 let telemetryEnabledCache = true;
-
-async function isTelemetryEnabled(): Promise<boolean> {
-	try {
-		const store = await Store.load("store");
-		const settings =
-			(await store.get<{ enableTelemetry?: boolean }>("general_settings")) ??
-			null;
-		telemetryEnabledCache = settings?.enableTelemetry !== false;
-	} catch {
-		// fall back to cached value; defaults to enabled
+let telemetryStateReady = false;
+let telemetryStatePromise: Promise<void> | undefined;
+let anonymousIdPromise: Promise<string> | undefined;
+let appVersionPromise: Promise<string | undefined> | undefined;
+let productSessionIdPromise: Promise<string> | undefined;
+let fallbackAnonymousIdValue: string | undefined;
+let activeProductRequest: AbortController | undefined;
+
+const productAnalyticsQueue = new ProductAnalyticsQueue({
+	sendBatch: sendProductEventBatch,
+	isEnabled: isTelemetryEnabled,
+});
+
+function applyTelemetryState(enabled: boolean) {
+	telemetryEnabledCache = enabled;
+	if (!enabled) {
+		productAnalyticsQueue.clear();
+		activeProductRequest?.abort();
 	}
+}
+
+async function initializeTelemetryState() {
+	if (telemetryStatePromise) return telemetryStatePromise;
+
+	telemetryStatePromise = (async () => {
+		try {
+			const store = await Store.load("store");
+			const settings = await store.get<{ enableTelemetry?: boolean }>(
+				"general_settings",
+			);
+			applyTelemetryState(settings?.enableTelemetry !== false);
+			await store.onKeyChange<{ enableTelemetry?: boolean }>(
+				"general_settings",
+				(settings) => applyTelemetryState(settings?.enableTelemetry !== false),
+			);
+		} catch {
+			applyTelemetryState(telemetryEnabledCache);
+		} finally {
+			telemetryStateReady = true;
+		}
+	})();
+
+	return telemetryStatePromise;
+}
+
+async function isTelemetryEnabled() {
+	if (!telemetryStateReady) await initializeTelemetryState();
 	return telemetryEnabledCache;
 }
 
-if (key && host) {
+function fallbackAnonymousId() {
+	if (fallbackAnonymousIdValue) return fallbackAnonymousIdValue;
 	try {
-		posthog.init(key, {
-			api_host: host,
-			capture_pageview: false,
-			loaded: (_posthogInstance) => {
-				isPostHogInitialized = true;
-			},
-		});
-		console.log("PostHog initialization started");
-	} catch (error) {
-		console.error("Failed to initialize PostHog:", error);
+		const storage = getAnalyticsStorage();
+		const existing = storage?.getItem("anonymous_id");
+		if (existing) {
+			fallbackAnonymousIdValue = existing;
+			return existing;
+		}
+	} catch {}
+
+	fallbackAnonymousIdValue = uuid();
+	try {
+		getAnalyticsStorage()?.setItem("anonymous_id", fallbackAnonymousIdValue);
+	} catch {}
+	return fallbackAnonymousIdValue;
+}
+
+function getAnalyticsStorage() {
+	try {
+		return typeof window === "undefined" ? undefined : window.localStorage;
+	} catch {
+		return undefined;
 	}
 }
 
-export function initAnonymousUser() {
-	if (!key || !host) {
-		console.warn("Cannot initialize anonymous user - missing key or host");
-		return;
+async function getAnonymousId() {
+	if (!anonymousIdPromise) {
+		anonymousIdPromise = generalSettingsStore
+			.get()
+			.then((settings) => settings?.instanceId ?? fallbackAnonymousId())
+			.then((anonymousId) => {
+				getAnalyticsStorage()?.setItem("anonymous_id", anonymousId);
+				return anonymousId;
+			})
+			.catch(fallbackAnonymousId);
 	}
+	return anonymousIdPromise;
+}
 
-	try {
-		const anonymousId = localStorage.getItem("anonymous_id") ?? uuid();
-		localStorage.setItem("anonymous_id", anonymousId);
-		posthog.identify(anonymousId);
-		console.log("Anonymous user identified:", anonymousId);
-	} catch (error) {
-		console.error("Error initializing anonymous user:", error);
+async function getAppVersion() {
+	if (!appVersionPromise) {
+		appVersionPromise = getVersion().catch(() => undefined);
 	}
+	return appVersionPromise;
 }
 
-export function identifyUser(
-	userId: string,
-	properties?: Record<string, unknown>,
-) {
-	if (!key || !host) {
-		console.warn("Cannot identify user - missing key or host");
-		return;
+async function getProductSessionId() {
+	if (!productSessionIdPromise) {
+		productSessionIdPromise = Store.load("store")
+			.then((store) => store.get<string>("product_analytics_session_id"))
+			.then((stored) => stored ?? uuid())
+			.catch(uuid);
 	}
+	return productSessionIdPromise;
+}
 
-	try {
-		const currentId = posthog.get_distinct_id();
-		const anonymousId = localStorage.getItem("anonymous_id");
+async function sendProductEventBatch(events: ProductEventInput[]) {
+	if (!(await isTelemetryEnabled())) return;
 
-		if (currentId !== userId) {
-			if (anonymousId && currentId === anonymousId) {
-				console.log(`Aliasing user ${userId} from anonymous ID ${anonymousId}`);
-				posthog.alias(userId, anonymousId);
-			}
-			posthog.identify(userId);
-			if (properties) {
-				posthog.people.set(properties);
+	const controller = new AbortController();
+	activeProductRequest = controller;
+	const timeout = setTimeout(
+		() => controller.abort(),
+		PRODUCT_ANALYTICS_REQUEST_TIMEOUT_MS,
+	);
+
+	try {
+		const { authorization } = await maybeProtectedHeaders();
+		const headers: Record<string, string> = {
+			"content-type": "application/json",
+		};
+		if (authorization) headers.authorization = authorization;
+
+		const response = await fetch(
+			new URL("/api/events", await getConfiguredServerUrl()).toString(),
+			{
+				method: "POST",
+				headers,
+				body: JSON.stringify({ events }),
+				signal: controller.signal,
+			},
+		);
+		if (!response.ok) {
+			if (response.status === 429 || response.status >= 500) {
+				throw new Error(`Product analytics returned ${response.status}`);
 			}
-			localStorage.removeItem("anonymous_id");
-			console.log(`User identified: ${userId}`);
-		} else {
-			console.log(`User already identified as ${userId}`);
 		}
-	} catch (error) {
-		console.error("Error identifying user:", error);
+	} finally {
+		clearTimeout(timeout);
+		if (activeProductRequest === controller) activeProductRequest = undefined;
 	}
 }
 
-export function trackEvent(
+async function enqueueProductEvent(
+	eventId: string,
 	eventName: string,
+	occurredAt: string,
 	properties?: Record<string, unknown>,
 ) {
-	if (!key || !host) {
-		console.warn(
-			"PostHog event not captured - missing key or host:",
-			eventName,
-		);
-		return;
-	}
+	if (!isCoreEventName(eventName) || isServerOnlyEventName(eventName)) return;
+
+	const [anonymousId, appVersion, productSessionId] = await Promise.all([
+		getAnonymousId(),
+		getAppVersion(),
+		getProductSessionId(),
+	]);
+	if (!telemetryEnabledCache) return;
+
+	const normalizedProperties = normalizeProductEventProperties(properties);
+	productAnalyticsQueue.enqueue({
+		eventId,
+		eventName,
+		occurredAt,
+		anonymousId,
+		sessionId: productSessionId,
+		platform: "desktop",
+		...(appVersion ? { appVersion } : {}),
+		...(normalizedProperties ? { properties: normalizedProperties } : {}),
+	});
+}
 
-	if (!telemetryEnabledCache) {
-		return;
-	}
+export function trackEvent(
+	eventName: string,
+	properties?: Record<string, unknown>,
+) {
+	const eventId = uuid();
+	const occurredAt = new Date().toISOString();
 
 	void isTelemetryEnabled().then((enabled) => {
 		if (!enabled) return;
 
-		try {
-			if (!isPostHogInitialized) {
-				console.warn(
-					`PostHog not initialized yet, queuing event: ${eventName}`,
-				);
-				setTimeout(() => {
-					console.log(`Retrying event ${eventName} after delay`);
-					trackEvent(eventName, properties);
-				}, 1000);
-				return;
-			}
-
-			const eventProperties = { ...properties, platform: "desktop" };
-			console.log(`Capturing event ${eventName}:`, eventProperties);
-			posthog.capture(eventName, eventProperties);
-		} catch (error) {
-			console.error(`Error capturing event ${eventName}:`, error);
-		}
+		void enqueueProductEvent(eventId, eventName, occurredAt, properties);
 	});
 }
 
-void isTelemetryEnabled();
+if (typeof window !== "undefined") {
+	window.addEventListener("pagehide", () => void productAnalyticsQueue.flush());
+}
+
+void initializeTelemetryState();
diff --git a/apps/desktop/src/utils/auth.ts b/apps/desktop/src/utils/auth.ts
index 60c55d0b8d3..cb82bb15f28 100644
--- a/apps/desktop/src/utils/auth.ts
+++ b/apps/desktop/src/utils/auth.ts
@@ -7,7 +7,7 @@ import * as shell from "@tauri-apps/plugin-shell";
 import { z } from "zod";
 import callbackTemplate from "~/components/callback.template";
 import { authStore, generalSettingsStore } from "~/store";
-import { identifyUser, trackEvent } from "./analytics";
+import { trackEvent } from "./analytics";
 import { clientEnv } from "./env";
 import { shouldUseLocalServerSessionForUrl } from "./server-url-routing";
 import { commands } from "./tauri";
@@ -216,7 +216,6 @@ function parseAuthParams(url: URL) {
 }
 
 async function processAuthData(data: AuthParams) {
-	identifyUser(data.user_id);
 	trackEvent("user_signed_in", { platform: "desktop" });
 
 	await authStore.set({
diff --git a/apps/desktop/src/utils/product-analytics.test.ts b/apps/desktop/src/utils/product-analytics.test.ts
new file mode 100644
index 00000000000..209e2b46cf8
--- /dev/null
+++ b/apps/desktop/src/utils/product-analytics.test.ts
@@ -0,0 +1,248 @@
+import type { ProductEventInput } from "@cap/analytics";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import { ProductAnalyticsQueue } from "./product-analytics";
+
+function productEvent(index: number): ProductEventInput {
+	return {
+		eventId: `event-${index}`,
+		eventName: "recording_started",
+		occurredAt: "2026-07-12T12:00:00.000Z",
+		anonymousId: "install-id",
+		sessionId: "session-id",
+		platform: "desktop",
+		appVersion: "0.5.6",
+		properties: { index },
+	};
+}
+
+function sendBatchMock() {
+	return vi.fn(async (_events: ProductEventInput[]) => {});
+}
+
+describe("ProductAnalyticsQueue", () => {
+	beforeEach(() => {
+		vi.useFakeTimers();
+	});
+
+	afterEach(() => {
+		vi.useRealTimers();
+	});
+
+	it("batches events after the short collection window", async () => {
+		const sendBatch = sendBatchMock();
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => true,
+			batchDelayMs: 25,
+		});
+
+		queue.enqueue(productEvent(1));
+		queue.enqueue(productEvent(2));
+		expect(sendBatch).not.toHaveBeenCalled();
+
+		await vi.advanceTimersByTimeAsync(25);
+
+		expect(sendBatch).toHaveBeenCalledOnce();
+		expect(sendBatch.mock.calls[0]?.[0].map((event) => event.eventId)).toEqual([
+			"event-1",
+			"event-2",
+		]);
+	});
+
+	it("flushes immediately at the batch limit", async () => {
+		const sendBatch = sendBatchMock();
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => true,
+			batchSize: 3,
+		});
+
+		queue.enqueue(productEvent(1));
+		queue.enqueue(productEvent(2));
+		queue.enqueue(productEvent(3));
+		await Promise.resolve();
+		await Promise.resolve();
+
+		expect(sendBatch).toHaveBeenCalledOnce();
+		expect(sendBatch.mock.calls[0]?.[0]).toHaveLength(3);
+	});
+
+	it("never sends more than the configured batch size", async () => {
+		const sizes: number[] = [];
+		const queue = new ProductAnalyticsQueue({
+			sendBatch: async (events) => {
+				sizes.push(events.length);
+			},
+			isEnabled: () => true,
+			batchSize: 5,
+			batchDelayMs: 10,
+		});
+
+		for (let index = 0; index < 13; index++) {
+			queue.enqueue(productEvent(index));
+		}
+		await vi.runAllTimersAsync();
+
+		expect(sizes.reduce((total, size) => total + size, 0)).toBe(13);
+		expect(sizes.every((size) => size <= 5)).toBe(true);
+	});
+
+	it("keeps serialized requests under the byte limit", async () => {
+		const requestSizes: number[] = [];
+		const queue = new ProductAnalyticsQueue({
+			sendBatch: async (events) => {
+				requestSizes.push(
+					new TextEncoder().encode(JSON.stringify({ events })).byteLength,
+				);
+			},
+			isEnabled: () => true,
+			batchDelayMs: 10,
+			maxBatchBytes: 1500,
+		});
+
+		for (let index = 0; index < 10; index++) {
+			queue.enqueue({
+				...productEvent(index),
+				properties: { value: "x".repeat(500) },
+			});
+		}
+		await vi.runAllTimersAsync();
+
+		expect(requestSizes).toHaveLength(5);
+		expect(requestSizes.every((size) => size <= 1500)).toBe(true);
+	});
+
+	it("bounds memory and drops the oldest queued event", async () => {
+		const sendBatch = sendBatchMock();
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => true,
+			batchSize: 10,
+			capacity: 3,
+			batchDelayMs: 10,
+		});
+
+		for (let index = 0; index < 4; index++) {
+			queue.enqueue(productEvent(index));
+		}
+		await vi.advanceTimersByTimeAsync(10);
+
+		expect(queue.dropped).toBe(1);
+		expect(sendBatch.mock.calls[0]?.[0].map((event) => event.eventId)).toEqual([
+			"event-1",
+			"event-2",
+			"event-3",
+		]);
+	});
+
+	it("does not send when telemetry is disabled", async () => {
+		const sendBatch = sendBatchMock();
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => false,
+			batchDelayMs: 10,
+		});
+
+		queue.enqueue(productEvent(1));
+		await vi.advanceTimersByTimeAsync(10);
+
+		expect(sendBatch).not.toHaveBeenCalled();
+		expect(queue.size).toBe(0);
+		expect(queue.dropped).toBe(1);
+	});
+
+	it("retries a failed event once and then drops it", async () => {
+		const sendBatch = vi.fn(async (_events: ProductEventInput[]) => {
+			throw new Error("offline");
+		});
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => true,
+			batchDelayMs: 10,
+			retryDelayMs: 20,
+		});
+
+		queue.enqueue(productEvent(1));
+		await vi.advanceTimersByTimeAsync(10);
+		await vi.advanceTimersByTimeAsync(20);
+
+		expect(sendBatch).toHaveBeenCalledTimes(2);
+		expect(queue.size).toBe(0);
+		expect(queue.dropped).toBe(1);
+	});
+
+	it("does not retry an in-flight request after telemetry is disabled", async () => {
+		let enabled = true;
+		let failRequest: (() => void) | undefined;
+		const sendBatch = vi.fn(
+			(_events: ProductEventInput[]) =>
+				new Promise<void>((_resolve, reject) => {
+					failRequest = () => reject(new Error("aborted"));
+				}),
+		);
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => enabled,
+			batchSize: 1,
+			retryDelayMs: 10,
+		});
+
+		queue.enqueue(productEvent(1));
+		await Promise.resolve();
+		enabled = false;
+		failRequest?.();
+		await vi.runAllTimersAsync();
+
+		expect(sendBatch).toHaveBeenCalledOnce();
+		expect(queue.size).toBe(0);
+		expect(queue.dropped).toBe(1);
+	});
+
+	it("keeps at most one request in flight", async () => {
+		let completeFirst: (() => void) | undefined;
+		let calls = 0;
+		const sendBatch = vi.fn((_events: ProductEventInput[]) => {
+			calls += 1;
+			if (calls > 1) return Promise.resolve();
+			return new Promise<void>((resolve) => {
+				completeFirst = resolve;
+			});
+		});
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => true,
+			batchSize: 1,
+			batchDelayMs: 10,
+		});
+
+		queue.enqueue(productEvent(1));
+		await Promise.resolve();
+		queue.enqueue(productEvent(2));
+		await queue.flush();
+
+		expect(sendBatch).toHaveBeenCalledOnce();
+		completeFirst?.();
+		await vi.advanceTimersByTimeAsync(10);
+
+		expect(sendBatch).toHaveBeenCalledTimes(2);
+	});
+
+	it("can synchronously clear queued events on opt-out", async () => {
+		const sendBatch = sendBatchMock();
+		const queue = new ProductAnalyticsQueue({
+			sendBatch,
+			isEnabled: () => true,
+			batchDelayMs: 10,
+		});
+
+		queue.enqueue(productEvent(1));
+		queue.enqueue(productEvent(2));
+		queue.clear();
+		await vi.runAllTimersAsync();
+
+		expect(queue.size).toBe(0);
+		expect(queue.dropped).toBe(2);
+		expect(sendBatch).not.toHaveBeenCalled();
+	});
+});
diff --git a/apps/desktop/src/utils/product-analytics.ts b/apps/desktop/src/utils/product-analytics.ts
new file mode 100644
index 00000000000..e6c0294fb5e
--- /dev/null
+++ b/apps/desktop/src/utils/product-analytics.ts
@@ -0,0 +1,171 @@
+import {
+	PRODUCT_ANALYTICS_LIMITS,
+	type ProductEventInput,
+} from "@cap/analytics";
+
+export const PRODUCT_ANALYTICS_BATCH_SIZE = PRODUCT_ANALYTICS_LIMITS.batchSize;
+export const PRODUCT_ANALYTICS_QUEUE_CAPACITY =
+	PRODUCT_ANALYTICS_LIMITS.queueSize;
+export const PRODUCT_ANALYTICS_BATCH_DELAY_MS = 250;
+export const PRODUCT_ANALYTICS_RETRY_DELAY_MS = 500;
+
+type QueuedEvent = {
+	event: ProductEventInput;
+	attempts: number;
+};
+
+type ProductAnalyticsQueueOptions = {
+	sendBatch: (events: ProductEventInput[]) => Promise<void>;
+	isEnabled: () => boolean | Promise<boolean>;
+	batchSize?: number;
+	capacity?: number;
+	batchDelayMs?: number;
+	retryDelayMs?: number;
+	maxBatchBytes?: number;
+	onDrop?: (count: number) => void;
+};
+
+export class ProductAnalyticsQueue {
+	readonly #sendBatch: ProductAnalyticsQueueOptions["sendBatch"];
+	readonly #isEnabled: ProductAnalyticsQueueOptions["isEnabled"];
+	readonly #batchSize: number;
+	readonly #capacity: number;
+	readonly #batchDelayMs: number;
+	readonly #retryDelayMs: number;
+	readonly #maxBatchBytes: number;
+	readonly #onDrop: ProductAnalyticsQueueOptions["onDrop"];
+	#queue: QueuedEvent[] = [];
+	#timer: ReturnType<typeof setTimeout> | undefined;
+	#inFlight = false;
+	#dropped = 0;
+
+	constructor(options: ProductAnalyticsQueueOptions) {
+		this.#sendBatch = options.sendBatch;
+		this.#isEnabled = options.isEnabled;
+		this.#batchSize = options.batchSize ?? PRODUCT_ANALYTICS_BATCH_SIZE;
+		this.#capacity = options.capacity ?? PRODUCT_ANALYTICS_QUEUE_CAPACITY;
+		this.#batchDelayMs =
+			options.batchDelayMs ?? PRODUCT_ANALYTICS_BATCH_DELAY_MS;
+		this.#retryDelayMs =
+			options.retryDelayMs ?? PRODUCT_ANALYTICS_RETRY_DELAY_MS;
+		this.#maxBatchBytes =
+			options.maxBatchBytes ?? PRODUCT_ANALYTICS_LIMITS.requestBytes;
+		this.#onDrop = options.onDrop;
+	}
+
+	get size() {
+		return this.#queue.length;
+	}
+
+	get dropped() {
+		return this.#dropped;
+	}
+
+	enqueue(event: ProductEventInput) {
+		if (this.#queue.length >= this.#capacity) {
+			this.#queue.shift();
+			this.#recordDrop(1);
+		}
+
+		this.#queue.push({ event, attempts: 0 });
+		if (this.#queue.length >= this.#batchSize) {
+			void this.flush();
+		} else {
+			this.#schedule(this.#batchDelayMs);
+		}
+	}
+
+	clear() {
+		if (this.#queue.length > 0) {
+			this.#recordDrop(this.#queue.length);
+			this.#queue = [];
+		}
+		this.#cancelTimer();
+	}
+
+	async flush() {
+		if (this.#inFlight || this.#queue.length === 0) return;
+
+		this.#inFlight = true;
+		this.#cancelTimer();
+
+		try {
+			if (!(await this.#isEnabled())) {
+				this.clear();
+				return;
+			}
+
+			const batch = this.#takeBatch();
+			if (batch.length === 0) return;
+			try {
+				await this.#sendBatch(batch.map(({ event }) => event));
+			} catch {
+				if (!(await this.#isEnabled())) {
+					this.#recordDrop(batch.length);
+					return;
+				}
+				const retryable = batch
+					.filter(({ attempts }) => attempts === 0)
+					.map(({ event, attempts }) => ({ event, attempts: attempts + 1 }));
+				this.#recordDrop(batch.length - retryable.length);
+				const queued = [...retryable, ...this.#queue];
+				const overflow = Math.max(0, queued.length - this.#capacity);
+				this.#recordDrop(overflow);
+				this.#queue = queued.slice(overflow);
+				if (this.#queue.length > 0) this.#schedule(this.#retryDelayMs);
+				return;
+			}
+		} finally {
+			this.#inFlight = false;
+		}
+
+		if (this.#queue.length > 0) {
+			this.#schedule(this.#batchDelayMs);
+		}
+	}
+
+	#schedule(delayMs: number) {
+		if (this.#timer !== undefined) return;
+		this.#timer = setTimeout(() => {
+			this.#timer = undefined;
+			void this.flush();
+		}, delayMs);
+	}
+
+	#cancelTimer() {
+		if (this.#timer === undefined) return;
+		clearTimeout(this.#timer);
+		this.#timer = undefined;
+	}
+
+	#recordDrop(count: number) {
+		if (count === 0) return;
+		this.#dropped += count;
+		this.#onDrop?.(this.#dropped);
+	}
+
+	#takeBatch() {
+		const batch: QueuedEvent[] = [];
+
+		while (batch.length < this.#batchSize && this.#queue.length > 0) {
+			const next = this.#queue[0];
+			if (!next) break;
+			const candidate = [...batch, next];
+			const bytes = new TextEncoder().encode(
+				JSON.stringify({ events: candidate.map(({ event }) => event) }),
+			).byteLength;
+
+			if (bytes > this.#maxBatchBytes) {
+				if (batch.length > 0) break;
+				this.#queue.shift();
+				this.#recordDrop(1);
+				continue;
+			}
+
+			batch.push(next);
+			this.#queue.shift();
+		}
+
+		return batch;
+	}
+}
diff --git a/apps/web/__tests__/unit/developer-credits-webhook.test.ts b/apps/web/__tests__/unit/developer-credits-webhook.test.ts
index 51362a9f728..b48513c126d 100644
--- a/apps/web/__tests__/unit/developer-credits-webhook.test.ts
+++ b/apps/web/__tests__/unit/developer-credits-webhook.test.ts
@@ -45,10 +45,6 @@ vi.mock("@cap/database/schema", () => ({
 }));
 
 vi.mock("@cap/env", () => ({
-	buildEnv: {
-		NEXT_PUBLIC_POSTHOG_KEY: "",
-		NEXT_PUBLIC_POSTHOG_HOST: "",
-	},
 	serverEnv: () => ({
 		STRIPE_WEBHOOK_SECRET: "whsec_test",
 	}),
@@ -86,13 +82,6 @@ vi.mock("drizzle-orm", () => ({
 	eq: vi.fn((a: unknown, b: unknown) => ({ eq: [a, b] })),
 }));
 
-vi.mock("posthog-node", () => ({
-	PostHog: vi.fn().mockImplementation(() => ({
-		capture: vi.fn(),
-		shutdown: vi.fn().mockResolvedValue(undefined),
-	})),
-}));
-
 function makeWebhookRequest(body = "{}") {
 	return new Request("https://cap.test/api/webhooks/stripe", {
 		method: "POST",
diff --git a/apps/web/__tests__/unit/guest-checkout-analytics.test.ts b/apps/web/__tests__/unit/guest-checkout-analytics.test.ts
new file mode 100644
index 00000000000..9d87c0255ed
--- /dev/null
+++ b/apps/web/__tests__/unit/guest-checkout-analytics.test.ts
@@ -0,0 +1,69 @@
+import { NextRequest } from "next/server";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+	createSession: vi.fn(),
+	product: vi.fn(),
+	readAnonymousId: vi.fn(),
+}));
+
+vi.mock("@cap/env", () => ({
+	serverEnv: () => ({ WEB_URL: "https://cap.so" }),
+}));
+vi.mock("@cap/utils", () => ({
+	stripe: () => ({
+		checkout: { sessions: { create: mocks.createSession } },
+	}),
+}));
+vi.mock("@/lib/analytics/server", () => ({
+	readAnalyticsAnonymousId: mocks.readAnonymousId,
+	scheduleServerProductEvent: mocks.product,
+}));
+
+describe("guest checkout analytics", () => {
+	let POST: typeof import("@/app/api/settings/billing/guest-checkout/route").POST;
+
+	beforeEach(async () => {
+		vi.clearAllMocks();
+		mocks.createSession.mockResolvedValue({
+			id: "cs_guest_1",
+			url: "https://checkout.stripe.com/session",
+		});
+		POST = (await import("@/app/api/settings/billing/guest-checkout/route"))
+			.POST;
+	});
+
+	it("uses one stable fallback identity through checkout and purchase metadata", async () => {
+		mocks.readAnonymousId.mockReturnValue(undefined);
+		const response = await POST(
+			new NextRequest("https://cap.so/api/settings/billing/guest-checkout", {
+				method: "POST",
+				body: JSON.stringify({ priceId: "price_team", quantity: 3 }),
+			}),
+		);
+		expect(response.status).toBe(200);
+
+		const metadata = mocks.createSession.mock.calls[0]?.[0].metadata;
+		expect(metadata.analyticsAnonymousId).toMatch(/^guest:/);
+		expect(metadata.analyticsIsFirstPurchase).toBe("true");
+		expect(mocks.product).toHaveBeenCalledWith(
+			expect.objectContaining({
+				eventId: "checkout:cs_guest_1",
+				anonymousId: metadata.analyticsAnonymousId,
+			}),
+		);
+	});
+
+	it("preserves an existing browser identity", async () => {
+		mocks.readAnonymousId.mockReturnValue("anonymous-browser-1");
+		await POST(
+			new NextRequest("https://cap.so/api/settings/billing/guest-checkout", {
+				method: "POST",
+				body: JSON.stringify({ priceId: "price_team", quantity: 1 }),
+			}),
+		);
+		expect(
+			mocks.createSession.mock.calls[0]?.[0].metadata.analyticsAnonymousId,
+		).toBe("anonymous-browser-1");
+	});
+});
diff --git a/apps/web/__tests__/unit/mobile-checkout.test.ts b/apps/web/__tests__/unit/mobile-checkout.test.ts
index dee16ab7e58..17804ccc5d4 100644
--- a/apps/web/__tests__/unit/mobile-checkout.test.ts
+++ b/apps/web/__tests__/unit/mobile-checkout.test.ts
@@ -7,16 +7,12 @@ import {
 } from "@/lib/mobile-checkout";
 
 const checkoutMocks = vi.hoisted(() => ({
-	capture: vi.fn(),
 	create: vi.fn(),
-	shutdown: vi.fn(() => Promise.resolve()),
+	product: vi.fn(),
+	readAnonymousId: vi.fn(),
 }));
 
 vi.mock("@cap/env", () => ({
-	buildEnv: {
-		NEXT_PUBLIC_POSTHOG_HOST: "https://posthog.test",
-		NEXT_PUBLIC_POSTHOG_KEY: "test-key",
-	},
 	serverEnv: () => ({ WEB_URL: "https://cap.so" }),
 }));
 
@@ -28,11 +24,9 @@ vi.mock("@cap/utils", () => ({
 	}),
 }));
 
-vi.mock("posthog-node", () => ({
-	PostHog: class {
-		capture = checkoutMocks.capture;
-		shutdown = checkoutMocks.shutdown;
-	},
+vi.mock("@/lib/analytics/server", () => ({
+	readAnalyticsAnonymousId: checkoutMocks.readAnonymousId,
+	scheduleServerProductEvent: checkoutMocks.product,
 }));
 
 const makeGuestCheckoutRequest = (body: Record<string, unknown>) =>
@@ -82,6 +76,8 @@ describe("checkout redirects", () => {
 			metadata: {
 				platform: "web",
 				guestCheckout: "true",
+				analyticsIsFirstPurchase: "true",
+				analyticsAnonymousId: expect.stringMatching(/^guest:/),
 			},
 		});
 	});
@@ -111,6 +107,8 @@ describe("checkout redirects", () => {
 				metadata: {
 					platform: "mobile",
 					guestCheckout: "true",
+					analyticsIsFirstPurchase: "true",
+					analyticsAnonymousId: expect.stringMatching(/^guest:/),
 				},
 			}),
 		);
diff --git a/apps/web/__tests__/unit/product-analytics-browser-token.test.ts b/apps/web/__tests__/unit/product-analytics-browser-token.test.ts
new file mode 100644
index 00000000000..941cbf7fb96
--- /dev/null
+++ b/apps/web/__tests__/unit/product-analytics-browser-token.test.ts
@@ -0,0 +1,75 @@
+import { describe, expect, it } from "vitest";
+import {
+	createProductAnalyticsBrowserToken,
+	PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE,
+	PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS,
+	readProductAnalyticsBrowserToken,
+	readProductAnalyticsBrowserTokenClaims,
+	verifyProductAnalyticsBrowserToken,
+} from "@/lib/analytics/browser-token";
+
+const secret = "analytics-browser-token-test-secret";
+const now = Date.parse("2026-07-12T12:00:00.000Z");
+
+describe("product analytics browser token", () => {
+	it("accepts an untampered token inside its bounded lifetime", () => {
+		const token = createProductAnalyticsBrowserToken(
+			secret,
+			"anonymous-1",
+			now,
+		);
+		expect(verifyProductAnalyticsBrowserToken(token, secret, now)).toBe(true);
+		expect(readProductAnalyticsBrowserTokenClaims(token, secret, now)).toEqual({
+			anonymousId: "anonymous-1",
+		});
+		expect(
+			verifyProductAnalyticsBrowserToken(
+				token,
+				secret,
+				now + PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS * 1000,
+			),
+		).toBe(true);
+	});
+
+	it("rejects expired, future, tampered, and malformed tokens", () => {
+		const token = createProductAnalyticsBrowserToken(
+			secret,
+			"anonymous-1",
+			now,
+		);
+		expect(
+			verifyProductAnalyticsBrowserToken(
+				token,
+				secret,
+				now + (PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS + 1) * 1000,
+			),
+		).toBe(false);
+		expect(
+			verifyProductAnalyticsBrowserToken(
+				createProductAnalyticsBrowserToken(secret, "anonymous-1", now + 61_000),
+				secret,
+				now,
+			),
+		).toBe(false);
+		expect(verifyProductAnalyticsBrowserToken(`${token}x`, secret, now)).toBe(
+			false,
+		);
+		expect(verifyProductAnalyticsBrowserToken("invalid", secret, now)).toBe(
+			false,
+		);
+	});
+
+	it("reads only the analytics token cookie", () => {
+		const token = createProductAnalyticsBrowserToken(
+			secret,
+			"anonymous-1",
+			now,
+		);
+		expect(
+			readProductAnalyticsBrowserToken(
+				`other=value; ${PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE}=${token}`,
+			),
+		).toBe(token);
+		expect(readProductAnalyticsBrowserToken("other=value")).toBeUndefined();
+	});
+});
diff --git a/apps/web/__tests__/unit/product-analytics-queue.test.ts b/apps/web/__tests__/unit/product-analytics-queue.test.ts
new file mode 100644
index 00000000000..f79f2c6264b
--- /dev/null
+++ b/apps/web/__tests__/unit/product-analytics-queue.test.ts
@@ -0,0 +1,377 @@
+import {
+	PRODUCT_ANALYTICS_LIMITS,
+	type ProductEventInput,
+} from "@cap/analytics";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import {
+	createProductEventId,
+	getOrCreateBrowserAnonymousId,
+	getOrCreateStorageId,
+	ProductAnalyticsQueue,
+	type ProductAnalyticsTransport,
+	readFirstTouchAttribution,
+	sendBrowserProductAnalytics,
+	shouldCaptureProductPageView,
+} from "@/app/utils/product-analytics";
+
+const makeEvent = (index: number): ProductEventInput => ({
+	eventId: `event-${index}`,
+	eventName: "page_view",
+	occurredAt: "2026-07-12T12:00:00.000Z",
+	anonymousId: "anonymous-1",
+	sessionId: "session-1",
+	platform: "web",
+});
+
+describe("ProductAnalyticsQueue", () => {
+	beforeEach(() => vi.useFakeTimers());
+	afterEach(() => vi.useRealTimers());
+
+	it("does not perform network work on enqueue", () => {
+		const transport = vi.fn<ProductAnalyticsTransport>();
+		const queue = new ProductAnalyticsQueue(transport);
+		queue.enqueue(makeEvent(1));
+		expect(transport).not.toHaveBeenCalled();
+	});
+
+	it("flushes one batch after the interval", async () => {
+		const transport = vi
+			.fn<ProductAnalyticsTransport>()
+			.mockResolvedValue("success");
+		const queue = new ProductAnalyticsQueue(transport);
+		queue.enqueue(makeEvent(1));
+		queue.enqueue(makeEvent(2));
+
+		await vi.advanceTimersByTimeAsync(5_000);
+		expect(transport).toHaveBeenCalledTimes(1);
+		expect(transport.mock.calls[0]?.[0]).toHaveLength(2);
+	});
+
+	it("flushes immediately when a full batch is queued", async () => {
+		const transport = vi
+			.fn<ProductAnalyticsTransport>()
+			.mockResolvedValue("success");
+		const queue = new ProductAnalyticsQueue(transport);
+		for (let i = 0; i < PRODUCT_ANALYTICS_LIMITS.batchSize; i += 1) {
+			queue.enqueue(makeEvent(i));
+		}
+		await queue.flush();
+		expect(transport).toHaveBeenCalledTimes(1);
+		expect(transport.mock.calls[0]?.[0]).toHaveLength(
+			PRODUCT_ANALYTICS_LIMITS.batchSize,
+		);
+	});
+
+	it("allows only one request in flight", async () => {
+		let resolveTransport: ((value: "success") => void) | undefined;
+		const transport = vi.fn<ProductAnalyticsTransport>().mockImplementation(
+			() =>
+				new Promise((resolve) => {
+					resolveTransport = resolve;
+				}),
+		);
+		const queue = new ProductAnalyticsQueue(transport);
+		queue.enqueue(makeEvent(1));
+		const first = queue.flush();
+		const second = queue.flush();
+		expect(first).toBe(second);
+		expect(transport).toHaveBeenCalledTimes(1);
+		resolveTransport?.("success");
+		await first;
+	});
+
+	it("retries a failed batch once", async () => {
+		const transport = vi
+			.fn<ProductAnalyticsTransport>()
+			.mockResolvedValueOnce("retry")
+			.mockResolvedValueOnce("retry");
+		const queue = new ProductAnalyticsQueue(transport);
+		queue.enqueue(makeEvent(1));
+		await queue.flush();
+		await vi.advanceTimersByTimeAsync(3_000);
+		expect(transport).toHaveBeenCalledTimes(2);
+		expect(queue.size).toBe(0);
+	});
+
+	it("honors retry backoff for a full failed batch", async () => {
+		const transport = vi
+			.fn<ProductAnalyticsTransport>()
+			.mockResolvedValueOnce("retry")
+			.mockResolvedValueOnce("success");
+		const queue = new ProductAnalyticsQueue(transport);
+		for (let i = 0; i < PRODUCT_ANALYTICS_LIMITS.batchSize; i += 1) {
+			queue.enqueue(makeEvent(i));
+		}
+		await Promise.resolve();
+		await Promise.resolve();
+
+		expect(transport).toHaveBeenCalledOnce();
+		await vi.advanceTimersByTimeAsync(1_999);
+		expect(transport).toHaveBeenCalledOnce();
+		await vi.advanceTimersByTimeAsync(1);
+		expect(transport).toHaveBeenCalledTimes(2);
+	});
+
+	it("does not retry a rejected batch", async () => {
+		const transport = vi
+			.fn<ProductAnalyticsTransport>()
+			.mockResolvedValue("drop");
+		const queue = new ProductAnalyticsQueue(transport);
+		queue.enqueue(makeEvent(1));
+		await queue.flush();
+		await vi.runAllTimersAsync();
+		expect(transport).toHaveBeenCalledTimes(1);
+	});
+
+	it("bounds memory and drops the oldest queued events", async () => {
+		let resolveFirst: ((value: "success") => void) | undefined;
+		const transport = vi
+			.fn<ProductAnalyticsTransport>()
+			.mockImplementationOnce(
+				() =>
+					new Promise((resolve) => {
+						resolveFirst = resolve;
+					}),
+			)
+			.mockResolvedValue("success");
+		const queue = new ProductAnalyticsQueue(transport);
+		for (let i = 0; i < PRODUCT_ANALYTICS_LIMITS.queueSize + 30; i += 1) {
+			queue.enqueue(makeEvent(i));
+		}
+		expect(queue.size).toBe(PRODUCT_ANALYTICS_LIMITS.queueSize);
+		expect(transport.mock.calls[0]?.[0][0]?.eventId).toBe("event-0");
+		resolveFirst?.("success");
+		await vi.waitFor(() =>
+			expect(transport.mock.calls.length).toBeGreaterThanOrEqual(2),
+		);
+		expect(transport.mock.calls[1]?.[0][0]?.eventId).toBe("event-30");
+	});
+
+	it("keeps every request under the body size limit", async () => {
+		const requestSizes: number[] = [];
+		const transport = vi.fn<ProductAnalyticsTransport>(async (events) => {
+			requestSizes.push(
+				new TextEncoder().encode(JSON.stringify({ events })).byteLength,
+			);
+			return "success";
+		});
+		const queue = new ProductAnalyticsQueue(transport);
+		for (let i = 0; i < 10; i += 1) {
+			queue.enqueue({
+				...makeEvent(i),
+				properties: { value: "x".repeat(20_000) },
+			});
+		}
+
+		await vi.runAllTimersAsync();
+		expect(
+			requestSizes.every(
+				(size) => size <= PRODUCT_ANALYTICS_LIMITS.requestBytes,
+			),
+		).toBe(true);
+		expect(
+			transport.mock.calls.reduce(
+				(count, [events]) => count + events.length,
+				0,
+			),
+		).toBe(10);
+	});
+
+	it("drops a single event larger than the request limit", async () => {
+		const transport = vi.fn<ProductAnalyticsTransport>();
+		const queue = new ProductAnalyticsQueue(transport);
+		queue.enqueue({
+			...makeEvent(1),
+			properties: {
+				value: "x".repeat(PRODUCT_ANALYTICS_LIMITS.requestBytes),
+			},
+		});
+
+		await vi.runAllTimersAsync();
+		expect(transport).not.toHaveBeenCalled();
+		expect(queue.size).toBe(0);
+	});
+});
+
+describe("browser analytics identity", () => {
+	it("falls back when secure UUID generation is unavailable", () => {
+		const randomValues = (values: Uint32Array) => {
+			values.set([123, 456]);
+			return values;
+		};
+		expect(createProductEventId(null, 1_000, randomValues)).toBe(
+			"fallback-rs-3f-co",
+		);
+		expect(
+			createProductEventId(
+				() => {
+					throw new Error("blocked");
+				},
+				1_000,
+				randomValues,
+			),
+		).toBe("fallback-rs-3f-co");
+		expect(createProductEventId(null, 1_000, null)).toMatch(
+			/^fallback-rs-counter-[a-z0-9]+$/,
+		);
+	});
+
+	it("reuses a persisted identifier", () => {
+		const storage = {
+			getItem: vi.fn(() => "existing-id"),
+			setItem: vi.fn(),
+		};
+		expect(getOrCreateStorageId(storage, "key", () => "new-id")).toBe(
+			"existing-id",
+		);
+		expect(storage.setItem).not.toHaveBeenCalled();
+	});
+
+	it("creates and persists an identifier once", () => {
+		const storage = { getItem: vi.fn(() => null), setItem: vi.fn() };
+		expect(getOrCreateStorageId(storage, "key", () => "new-id")).toBe("new-id");
+		expect(storage.setItem).toHaveBeenCalledWith("key", "new-id");
+	});
+
+	it("uses the server-issued cookie identity", () => {
+		const storage = { getItem: vi.fn(() => "stale-id"), setItem: vi.fn() };
+		expect(
+			getOrCreateBrowserAnonymousId(storage, "signed-id", () => "new-id"),
+		).toBe("signed-id");
+		expect(storage.setItem).toHaveBeenCalledWith(
+			"cap_analytics_anonymous_id_v1",
+			"signed-id",
+		);
+	});
+
+	it("falls back when storage is unavailable", () => {
+		const storage = {
+			getItem: vi.fn(() => {
+				throw new Error("blocked");
+			}),
+			setItem: vi.fn(),
+		};
+		expect(getOrCreateStorageId(storage, "key", () => "memory-id")).toBe(
+			"memory-id",
+		);
+	});
+
+	it("keeps one generated id when persistence is unavailable", () => {
+		const createId = vi.fn(() => "memory-id");
+		const storage = {
+			getItem: vi.fn(() => null),
+			setItem: vi.fn(() => {
+				throw new Error("blocked");
+			}),
+		};
+		expect(getOrCreateStorageId(storage, "key", createId)).toBe("memory-id");
+		expect(createId).toHaveBeenCalledOnce();
+	});
+});
+
+describe("first-touch attribution", () => {
+	it("stores only allowlisted attribution fields", () => {
+		const storage = { getItem: vi.fn(() => null), setItem: vi.fn() };
+		const result = readFirstTouchAttribution(
+			"?utm_source=google&utm_campaign=launch&email=private%40example.com",
+			storage,
+		);
+		expect(result).toEqual({ utm_source: "google", utm_campaign: "launch" });
+		expect(storage.setItem).toHaveBeenCalledOnce();
+	});
+
+	it("does not overwrite existing attribution", () => {
+		const storage = {
+			getItem: vi.fn(() => '{"utm_source":"original"}'),
+			setItem: vi.fn(),
+		};
+		expect(readFirstTouchAttribution("?utm_source=new", storage)).toEqual({
+			utm_source: "original",
+		});
+		expect(storage.setItem).not.toHaveBeenCalled();
+	});
+});
+
+describe("product page views", () => {
+	it.each(["/", "/pricing", "/dashboard", "/dashboard/settings"])(
+		"captures %s",
+		(pathname) => {
+			expect(shouldCaptureProductPageView(pathname)).toBe(true);
+		},
+	);
+
+	it.each(["/s/video-id", "/c/comment-id", "/embed/video-id"])(
+		"excludes high-volume viewer route %s",
+		(pathname) => {
+			expect(shouldCaptureProductPageView(pathname)).toBe(false);
+		},
+	);
+});
+
+describe("browser product analytics transport", () => {
+	it("uses a beacon during unload without also fetching", async () => {
+		const fetchImpl = vi.fn<typeof fetch>();
+		const sendBeacon = vi.fn(() => true);
+		await expect(
+			sendBrowserProductAnalytics([makeEvent(1)], "unload", {
+				fetchImpl,
+				sendBeacon,
+			}),
+		).resolves.toBe("success");
+		expect(sendBeacon).toHaveBeenCalledOnce();
+		expect(fetchImpl).not.toHaveBeenCalled();
+	});
+
+	it("falls back to keepalive fetch when a beacon is rejected", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockResolvedValue(new Response(null, { status: 202 }));
+		await expect(
+			sendBrowserProductAnalytics([makeEvent(1)], "unload", {
+				fetchImpl,
+				sendBeacon: () => false,
+			}),
+		).resolves.toBe("success");
+		expect(fetchImpl.mock.calls[0]?.[1]).toMatchObject({ keepalive: true });
+	});
+
+	it.each([
+		[429, "retry"],
+		[503, "retry"],
+		[400, "drop"],
+	] as const)("maps HTTP %s to %s", async (status, result) => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockResolvedValue(new Response(null, { status }));
+		await expect(
+			sendBrowserProductAnalytics([makeEvent(1)], "normal", { fetchImpl }),
+		).resolves.toBe(result);
+	});
+
+	it("retries transport failures", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockRejectedValue(new Error("offline"));
+		await expect(
+			sendBrowserProductAnalytics([makeEvent(1)], "normal", { fetchImpl }),
+		).resolves.toBe("retry");
+	});
+
+	it("times out a stalled request", async () => {
+		vi.useFakeTimers();
+		const fetchImpl = vi.fn<typeof fetch>(
+			(_url, init) =>
+				new Promise((_resolve, reject) => {
+					init?.signal?.addEventListener("abort", () =>
+						reject(new DOMException("Aborted", "AbortError")),
+					);
+				}),
+		);
+		const result = sendBrowserProductAnalytics([makeEvent(1)], "normal", {
+			fetchImpl,
+		});
+		await vi.advanceTimersByTimeAsync(3_000);
+		await expect(result).resolves.toBe("retry");
+		vi.useRealTimers();
+	});
+});
diff --git a/apps/web/__tests__/unit/product-analytics-request.test.ts b/apps/web/__tests__/unit/product-analytics-request.test.ts
new file mode 100644
index 00000000000..59ba91ba862
--- /dev/null
+++ b/apps/web/__tests__/unit/product-analytics-request.test.ts
@@ -0,0 +1,239 @@
+import {
+	PRODUCT_ANALYTICS_LIMITS,
+	type ProductEventInput,
+} from "@cap/analytics";
+import { describe, expect, it } from "vitest";
+import {
+	getProductAnalyticsRateLimitKey,
+	hasExpectedBrowserAnalyticsMetadata,
+	isAllowedAnonymousBrowserProductEvent,
+	isAuthenticatedAnalyticsRequestCandidate,
+	normalizeGeoHeader,
+	normalizeProductEventBatch,
+	ProductAnalyticsRateLimiter,
+} from "@/lib/analytics/request";
+
+const allowedOrigins = ["https://cap.so", "tauri://localhost"];
+const event: ProductEventInput = {
+	eventId: "event-1",
+	eventName: "page_view",
+	occurredAt: "2026-07-12T12:00:00.000Z",
+	anonymousId: "anonymous-1",
+	sessionId: "session-1",
+	platform: "web",
+};
+const now = Date.parse("2026-07-12T12:00:01.000Z");
+
+describe("hasExpectedBrowserAnalyticsMetadata", () => {
+	it.each([
+		[
+			"same-origin browser",
+			{ origin: "https://cap.so", secFetchSite: "same-origin" },
+		],
+		[
+			"same-site browser",
+			{ origin: "https://cap.so", secFetchSite: "same-site" },
+		],
+	])("accepts %s", (_label, headers) => {
+		expect(hasExpectedBrowserAnalyticsMetadata(headers, allowedOrigins)).toBe(
+			true,
+		);
+	});
+
+	it("rejects cross-site browser requests", () => {
+		expect(
+			hasExpectedBrowserAnalyticsMetadata(
+				{ origin: "https://attacker.example", secFetchSite: "cross-site" },
+				allowedOrigins,
+			),
+		).toBe(false);
+	});
+
+	it("rejects requests without browser metadata", () => {
+		expect(hasExpectedBrowserAnalyticsMetadata({}, allowedOrigins)).toBe(false);
+		expect(
+			hasExpectedBrowserAnalyticsMetadata(
+				{ origin: "https://cap.so" },
+				allowedOrigins,
+			),
+		).toBe(false);
+		expect(
+			hasExpectedBrowserAnalyticsMetadata(
+				{ origin: "https://cap.so", secFetchSite: "none" },
+				allowedOrigins,
+			),
+		).toBe(false);
+	});
+
+	it("allows API-key requests to attempt actor resolution", () => {
+		expect(
+			isAuthenticatedAnalyticsRequestCandidate({
+				authorization: `Bearer ${"a".repeat(36)}`,
+			}),
+		).toBe(true);
+		expect(
+			isAuthenticatedAnalyticsRequestCandidate({
+				authorization: "Bearer invalid",
+			}),
+		).toBe(false);
+		expect(
+			isAuthenticatedAnalyticsRequestCandidate({
+				authorization: `Bearer ${"a".repeat(36)} extra`,
+			}),
+		).toBe(false);
+		expect(
+			isAuthenticatedAnalyticsRequestCandidate({
+				authorization: `Bearer ${"a".repeat(36)}`,
+				origin: "https://attacker.example",
+			}),
+		).toBe(true);
+	});
+
+	it("allows only bounded top-of-funnel web events without an actor", () => {
+		expect(isAllowedAnonymousBrowserProductEvent(event, "anonymous-1")).toBe(
+			true,
+		);
+		expect(
+			isAllowedAnonymousBrowserProductEvent(
+				{ ...event, eventName: "recording_started" },
+				"anonymous-1",
+			),
+		).toBe(false);
+		expect(
+			isAllowedAnonymousBrowserProductEvent(
+				{ ...event, anonymousId: "attacker-chosen" },
+				"anonymous-1",
+			),
+		).toBe(false);
+		expect(
+			isAllowedAnonymousBrowserProductEvent(
+				{ ...event, platform: "desktop" },
+				"anonymous-1",
+			),
+		).toBe(false);
+	});
+
+	it("rejects oversized declared bodies", () => {
+		expect(
+			hasExpectedBrowserAnalyticsMetadata(
+				{ contentLength: String(PRODUCT_ANALYTICS_LIMITS.requestBytes + 1) },
+				allowedOrigins,
+			),
+		).toBe(false);
+	});
+
+	it.each(["invalid", "-1", "1.5"])(
+		"rejects malformed content length %s",
+		(contentLength) => {
+			expect(
+				hasExpectedBrowserAnalyticsMetadata({ contentLength }, allowedOrigins),
+			).toBe(false);
+		},
+	);
+});
+
+describe("normalizeProductEventBatch", () => {
+	it("accepts a bounded valid batch", () => {
+		expect(normalizeProductEventBatch([event], now)).toEqual([event]);
+	});
+
+	it("rejects an empty batch", () => {
+		expect(normalizeProductEventBatch([], now)).toBeNull();
+	});
+
+	it("rejects a batch above the cap", () => {
+		expect(
+			normalizeProductEventBatch(
+				Array.from(
+					{ length: PRODUCT_ANALYTICS_LIMITS.batchSize + 1 },
+					() => event,
+				),
+				now,
+			),
+		).toBeNull();
+	});
+
+	it("rejects the whole batch when one event is invalid", () => {
+		expect(
+			normalizeProductEventBatch(
+				[event, { ...event, eventName: "$autocapture" }],
+				now,
+			),
+		).toBeNull();
+	});
+
+	it("rejects an undeclared oversized body", () => {
+		expect(
+			normalizeProductEventBatch(
+				[
+					{
+						...event,
+						properties: {
+							value: "x".repeat(PRODUCT_ANALYTICS_LIMITS.requestBytes),
+						},
+					},
+				],
+				now,
+			),
+		).toBeNull();
+	});
+
+	it.each([
+		"user_signed_up",
+		"checkout_started",
+		"guest_checkout_started",
+		"purchase_completed",
+	] as const)("rejects client-authored %s", (eventName) => {
+		expect(
+			normalizeProductEventBatch([{ ...event, eventName }], now),
+		).toBeNull();
+	});
+});
+
+describe("ProductAnalyticsRateLimiter", () => {
+	it("enforces per-key and process-wide fallback limits", () => {
+		const limiter = new ProductAnalyticsRateLimiter({
+			perKeyLimit: 2,
+			globalLimit: 4,
+			windowMs: 1_000,
+		});
+		expect(limiter.isRateLimited("a", 0)).toBe(false);
+		expect(limiter.isRateLimited("a", 0)).toBe(false);
+		expect(limiter.isRateLimited("a", 0)).toBe(true);
+		expect(limiter.isRateLimited("b", 0)).toBe(false);
+		expect(limiter.isRateLimited("c", 0)).toBe(true);
+		expect(limiter.isRateLimited("a", 1_000)).toBe(false);
+	});
+
+	it("uses only a platform-owned Vercel request identity", () => {
+		expect(
+			getProductAnalyticsRateLimitKey({
+				trustedVercelProxy: true,
+				xVercelForwardedFor: "203.0.113.10, 10.0.0.1",
+			}),
+		).toBe("203.0.113.10");
+		expect(
+			getProductAnalyticsRateLimitKey({
+				trustedVercelProxy: false,
+				xVercelForwardedFor: "attacker-controlled",
+			}),
+		).toBe("self-hosted");
+		expect(getProductAnalyticsRateLimitKey({ trustedVercelProxy: true })).toBe(
+			"vercel-unknown",
+		);
+	});
+});
+
+describe("normalizeGeoHeader", () => {
+	it("decodes and bounds a city header", () => {
+		expect(normalizeGeoHeader("Nicosia%20Centre", true)).toBe("Nicosia Centre");
+	});
+
+	it("rejects malformed encoded data", () => {
+		expect(normalizeGeoHeader("%E0%A4%A", true)).toBeUndefined();
+	});
+
+	it("removes unknown values", () => {
+		expect(normalizeGeoHeader("unknown")).toBeUndefined();
+	});
+});
diff --git a/apps/web/__tests__/unit/product-analytics-scheduler.test.ts b/apps/web/__tests__/unit/product-analytics-scheduler.test.ts
new file mode 100644
index 00000000000..a089b72a7a7
--- /dev/null
+++ b/apps/web/__tests__/unit/product-analytics-scheduler.test.ts
@@ -0,0 +1,37 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+	after: vi.fn(() => {
+		throw new Error("after unavailable");
+	}),
+}));
+
+vi.mock("next/server", () => ({ after: mocks.after }));
+vi.mock("@cap/env", () => ({
+	serverEnv: () => ({
+		PRODUCT_ANALYTICS_TINYBIRD_HOST: undefined,
+		PRODUCT_ANALYTICS_TINYBIRD_TOKEN: undefined,
+	}),
+}));
+
+describe("analytics scheduling", () => {
+	afterEach(() => vi.restoreAllMocks());
+
+	it("cannot make a business route fail when after is unavailable", async () => {
+		vi.spyOn(console, "error").mockImplementation(() => {});
+		const { scheduleServerProductEvent } = await import(
+			"@/lib/analytics/server"
+		);
+
+		expect(() =>
+			scheduleServerProductEvent({
+				eventId: "checkout:cs_1",
+				eventName: "checkout_started",
+				anonymousId: "anonymous-1",
+				platform: "web",
+			}),
+		).not.toThrow();
+		await Promise.resolve();
+		expect(mocks.after).toHaveBeenCalledOnce();
+	});
+});
diff --git a/apps/web/__tests__/unit/product-analytics-server.test.ts b/apps/web/__tests__/unit/product-analytics-server.test.ts
new file mode 100644
index 00000000000..f1dda108db9
--- /dev/null
+++ b/apps/web/__tests__/unit/product-analytics-server.test.ts
@@ -0,0 +1,52 @@
+import { describe, expect, it } from "vitest";
+import { createServerProductEventRows } from "@/lib/analytics/server-event";
+
+describe("server product analytics", () => {
+	it("builds a deterministic trusted server event", () => {
+		const [row] = createServerProductEventRows({
+			eventId: "stripe:evt_123:purchase_completed",
+			eventName: "purchase_completed",
+			occurredAt: "2026-07-12T12:00:00.000Z",
+			anonymousId: "anonymous-1",
+			platform: "web",
+			userId: "user-1",
+			organizationId: "org-1",
+			properties: {
+				quantity: 3,
+				email: "private@example.com",
+				nested: { private: true },
+			},
+		});
+
+		expect(row).toMatchObject({
+			event_id: "stripe:evt_123:purchase_completed",
+			event_name: "purchase_completed",
+			source: "server",
+			platform: "web",
+			anonymous_id: "anonymous-1",
+			user_id: "user-1",
+			organization_id: "org-1",
+			properties: '{"quantity":3}',
+		});
+	});
+
+	it("uses an authenticated fallback identity", () => {
+		const [row] = createServerProductEventRows({
+			eventId: "signup:user-1",
+			eventName: "user_signed_up",
+			platform: "server",
+			userId: "user-1",
+		});
+		expect(row?.anonymous_id).toBe("user:user-1");
+	});
+
+	it("drops an event without any stable identity", () => {
+		expect(
+			createServerProductEventRows({
+				eventId: "event-1",
+				eventName: "page_view",
+				platform: "server",
+			}),
+		).toEqual([]);
+	});
+});
diff --git a/apps/web/__tests__/unit/product-analytics-transport.test.ts b/apps/web/__tests__/unit/product-analytics-transport.test.ts
new file mode 100644
index 00000000000..2fa585cbe32
--- /dev/null
+++ b/apps/web/__tests__/unit/product-analytics-transport.test.ts
@@ -0,0 +1,134 @@
+import {
+	createProductEventRows,
+	type ProductAnalyticsError,
+	sendProductAnalyticsRows,
+} from "@cap/analytics";
+import { hasAnalyticsSessionCookie } from "@cap/web-backend";
+import { describe, expect, it, vi } from "vitest";
+
+const rows = createProductEventRows(
+	[
+		{
+			eventId: "event-1",
+			eventName: "page_view",
+			occurredAt: "2026-07-12T12:00:00.000Z",
+			anonymousId: "anonymous-1",
+			platform: "web",
+		},
+	],
+	{
+		receivedAt: "2026-07-12T12:00:01.000Z",
+		source: "client",
+	},
+);
+
+describe("Tinybird product event transport", () => {
+	it("skips session resolution for anonymous requests", () => {
+		expect(hasAnalyticsSessionCookie()).toBe(false);
+		expect(hasAnalyticsSessionCookie("theme=dark; visitor=123")).toBe(false);
+		expect(
+			hasAnalyticsSessionCookie(
+				"theme=dark; next-auth.session-token=token; visitor=123",
+			),
+		).toBe(true);
+		expect(hasAnalyticsSessionCookie("next-auth.session-token.0=chunk")).toBe(
+			true,
+		);
+	});
+
+	it("posts NDJSON with append-only credentials", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockResolvedValue(new Response(null, { status: 202 }));
+
+		await sendProductAnalyticsRows({
+			host: "https://api.tinybird.co",
+			token: "append-token",
+			rows,
+			fetchImpl,
+		});
+
+		const [url, request] = fetchImpl.mock.calls[0] ?? [];
+		expect(String(url)).toBe(
+			"https://api.tinybird.co/v0/events?name=product_events_v1&format=ndjson",
+		);
+		expect(request).toMatchObject({
+			method: "POST",
+			headers: {
+				Authorization: "Bearer append-token",
+				"Content-Type": "application/x-ndjson",
+			},
+			body: JSON.stringify(rows[0]),
+		});
+	});
+
+	it("retries a transient response once", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockResolvedValueOnce(new Response("busy", { status: 503 }))
+			.mockResolvedValueOnce(new Response(null, { status: 202 }));
+
+		await sendProductAnalyticsRows({
+			host: "https://api.tinybird.co",
+			token: "append-token",
+			rows,
+			fetchImpl,
+		});
+		expect(fetchImpl).toHaveBeenCalledTimes(2);
+	});
+
+	it("does not retry a permanent response", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockResolvedValue(new Response("invalid", { status: 400 }));
+
+		await expect(
+			sendProductAnalyticsRows({
+				host: "https://api.tinybird.co",
+				token: "append-token",
+				rows,
+				fetchImpl,
+			}),
+		).rejects.toMatchObject({
+			_tag: "ProductAnalyticsError",
+			retryable: false,
+			status: 400,
+		} satisfies Partial<ProductAnalyticsError>);
+		expect(fetchImpl).toHaveBeenCalledOnce();
+	});
+
+	it("supports a single-attempt collector path", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockRejectedValue(new Error("offline"));
+		await expect(
+			sendProductAnalyticsRows({
+				host: "https://api.tinybird.co",
+				token: "append-token",
+				rows,
+				maxAttempts: 1,
+				fetchImpl,
+			}),
+		).rejects.toMatchObject({ retryable: true });
+		expect(fetchImpl).toHaveBeenCalledOnce();
+	});
+
+	it("fails after two network attempts", async () => {
+		const fetchImpl = vi
+			.fn<typeof fetch>()
+			.mockRejectedValue(new Error("offline"));
+
+		await expect(
+			sendProductAnalyticsRows({
+				host: "https://api.tinybird.co",
+				token: "append-token",
+				rows,
+				fetchImpl,
+			}),
+		).rejects.toMatchObject({
+			_tag: "ProductAnalyticsError",
+			retryable: true,
+		});
+		expect(fetchImpl).toHaveBeenCalledTimes(2);
+	});
+});
diff --git a/apps/web/__tests__/unit/subscription-analytics-webhook.test.ts b/apps/web/__tests__/unit/subscription-analytics-webhook.test.ts
new file mode 100644
index 00000000000..d2bc88d18e0
--- /dev/null
+++ b/apps/web/__tests__/unit/subscription-analytics-webhook.test.ts
@@ -0,0 +1,235 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+const mocks = vi.hoisted(() => ({
+	product: vi.fn(),
+	constructEvent: vi.fn(),
+	retrieveCustomer: vi.fn(),
+	retrieveSubscription: vi.fn(),
+}));
+
+const dbChain = {
+	select: vi.fn(),
+	from: vi.fn(),
+	where: vi.fn(),
+	limit: vi.fn(),
+	update: vi.fn(),
+	set: vi.fn(),
+};
+
+vi.mock("@/lib/analytics/server", () => ({
+	scheduleServerProductEvent: mocks.product,
+}));
+vi.mock("@/lib/developer-credits", () => ({ addCreditsToAccount: vi.fn() }));
+vi.mock("@cap/database", () => ({ db: () => dbChain }));
+vi.mock("@cap/database/helpers", () => ({ nanoId: () => "new-user" }));
+vi.mock("@cap/database/schema", () => ({
+	developerCreditTransactions: {},
+	users: {
+		id: "id",
+		email: "email",
+	},
+}));
+vi.mock("@cap/env", () => ({
+	serverEnv: () => ({ STRIPE_WEBHOOK_SECRET: "whsec_test" }),
+}));
+vi.mock("@cap/utils", () => ({
+	stripe: () => ({
+		webhooks: { constructEvent: mocks.constructEvent },
+		customers: {
+			retrieve: mocks.retrieveCustomer,
+			update: vi.fn(),
+		},
+		subscriptions: {
+			retrieve: mocks.retrieveSubscription,
+			list: vi.fn(),
+		},
+	}),
+}));
+vi.mock("@cap/web-domain", () => ({
+	Organisation: { OrganisationId: { make: (value: string) => value } },
+	User: { UserId: { make: (value: string) => value } },
+}));
+vi.mock("drizzle-orm", () => ({
+	and: (...args: unknown[]) => args,
+	eq: (left: unknown, right: unknown) => ({ left, right }),
+}));
+
+const dbUser = {
+	id: "user-1",
+	email: "user@example.com",
+	activeOrganizationId: "org-1",
+	stripeSubscriptionId: null,
+	name: "User",
+};
+
+const customer = {
+	id: "cus_1",
+	deleted: false,
+	email: "user@example.com",
+	metadata: { userId: "user-1" },
+};
+
+const subscription = {
+	id: "sub_1",
+	status: "active",
+	items: {
+		data: [
+			{
+				quantity: 3,
+				price: {
+					id: "price_team",
+					unit_amount: 900,
+					recurring: { interval: "month", interval_count: 1 },
+				},
+			},
+		],
+	},
+};
+
+function session(overrides: Record<string, unknown> = {}) {
+	return {
+		id: "cs_1",
+		customer: "cus_1",
+		subscription: "sub_1",
+		payment_status: "paid",
+		amount_total: 2700,
+		amount_subtotal: 3000,
+		currency: "usd",
+		total_details: { amount_discount: 300 },
+		metadata: {
+			platform: "web",
+			analyticsAnonymousId: "anonymous-1",
+			analyticsIsFirstPurchase: "true",
+		},
+		...overrides,
+	};
+}
+
+function request() {
+	return new Request("https://cap.so/api/webhooks/stripe", {
+		method: "POST",
+		headers: { "Stripe-Signature": "signature" },
+		body: "{}",
+	});
+}
+
+function event(type: string, checkoutSession: ReturnType<typeof session>) {
+	return {
+		id: `evt_${type}`,
+		created: 1_752_537_600,
+		type,
+		data: { object: checkoutSession },
+	};
+}
+
+describe("Stripe subscription analytics", () => {
+	let POST: typeof import("@/app/api/webhooks/stripe/route").POST;
+
+	beforeEach(async () => {
+		vi.clearAllMocks();
+		dbChain.select.mockReturnValue(dbChain);
+		dbChain.from.mockReturnValue(dbChain);
+		dbChain.where.mockReturnValue(dbChain);
+		dbChain.limit.mockResolvedValue([dbUser]);
+		dbChain.update.mockReturnValue(dbChain);
+		dbChain.set.mockReturnValue(dbChain);
+		mocks.retrieveCustomer.mockResolvedValue(customer);
+		mocks.retrieveSubscription.mockResolvedValue(subscription);
+		POST = (await import("@/app/api/webhooks/stripe/route")).POST;
+	});
+
+	it("emits a paid purchase with revenue dimensions and deterministic IDs", async () => {
+		mocks.constructEvent.mockReturnValue(
+			event("checkout.session.completed", session()),
+		);
+		expect((await POST(request())).status).toBe(200);
+
+		expect(mocks.product).toHaveBeenCalledWith(
+			expect.objectContaining({
+				eventId: "stripe:evt_checkout.session.completed:purchase_completed",
+				eventName: "purchase_completed",
+				occurredAt: "2025-07-15T00:00:00.000Z",
+				anonymousId: "anonymous-1",
+				userId: "user-1",
+				organizationId: "org-1",
+				properties: expect.objectContaining({
+					payment_status: "paid",
+					amount_total_minor: 2700,
+					currency: "usd",
+					unit_amount_minor: 900,
+					billing_interval: "month",
+					quantity: 3,
+				}),
+			}),
+		);
+	});
+
+	it("keeps first-purchase attribution stable on duplicate delivery", async () => {
+		dbChain.limit.mockResolvedValue([
+			{ ...dbUser, stripeSubscriptionId: "sub_1" },
+		]);
+		mocks.constructEvent.mockReturnValue(
+			event("checkout.session.completed", session()),
+		);
+
+		expect((await POST(request())).status).toBe(200);
+		expect(mocks.product).toHaveBeenCalledWith(
+			expect.objectContaining({
+				properties: expect.objectContaining({
+					is_first_purchase: true,
+				}),
+			}),
+		);
+	});
+
+	it("does not count an unpaid checkout as a purchase", async () => {
+		mocks.constructEvent.mockReturnValue(
+			event(
+				"checkout.session.completed",
+				session({ payment_status: "unpaid" }),
+			),
+		);
+		expect((await POST(request())).status).toBe(200);
+		expect(mocks.product).not.toHaveBeenCalled();
+	});
+
+	it("emits when an asynchronous subscription payment settles", async () => {
+		mocks.constructEvent.mockReturnValue(
+			event("checkout.session.async_payment_succeeded", session()),
+		);
+		expect((await POST(request())).status).toBe(200);
+		expect(mocks.product).toHaveBeenCalledWith(
+			expect.objectContaining({
+				eventId:
+					"stripe:evt_checkout.session.async_payment_succeeded:purchase_completed",
+				userId: "user-1",
+			}),
+		);
+	});
+
+	it("counts a no-payment trial while exposing its zero revenue", async () => {
+		mocks.retrieveSubscription.mockResolvedValue({
+			...subscription,
+			status: "trialing",
+		});
+		mocks.constructEvent.mockReturnValue(
+			event(
+				"checkout.session.completed",
+				session({
+					payment_status: "no_payment_required",
+					amount_total: 0,
+				}),
+			),
+		);
+		expect((await POST(request())).status).toBe(200);
+		expect(mocks.product).toHaveBeenCalledWith(
+			expect.objectContaining({
+				properties: expect.objectContaining({
+					payment_status: "no_payment_required",
+					amount_total_minor: 0,
+					subscription_status: "trialing",
+				}),
+			}),
+		);
+	});
+});
diff --git a/apps/web/actions/analytics/track-user-signed-up.ts b/apps/web/actions/analytics/track-user-signed-up.ts
index 2ffb33c6f0a..ce0af3d7b3c 100644
--- a/apps/web/actions/analytics/track-user-signed-up.ts
+++ b/apps/web/actions/analytics/track-user-signed-up.ts
@@ -1,9 +1,16 @@
 "use server";
 
+import { PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE } from "@cap/analytics";
 import { db } from "@cap/database";
 import { getCurrentUser } from "@cap/database/auth/session";
 import { users } from "@cap/database/schema";
 import { sql } from "drizzle-orm";
+import { cookies } from "next/headers";
+import {
+	captureServerProductEvent,
+	scheduleAfterResponse,
+} from "@/lib/analytics/server";
+import { normalizeServerIdentifier } from "@/lib/analytics/server-event";
 
 const SIGNUP_TRACKING_WINDOW_MS = 7 * 24 * 60 * 60 * 1000;
 
@@ -15,6 +22,7 @@ type UserPreferences = {
 		pauseReactions: boolean;
 	};
 	trackedEvents?: {
+		product_user_signed_up?: boolean;
 		user_signed_up?: boolean;
 	};
 } | null;
@@ -53,10 +61,9 @@ export async function checkAndMarkUserSignedUpTracked(): Promise<{
 	try {
 		const prefs = currentUser.preferences as UserPreferences;
 		const alreadyTracked = Boolean(prefs?.trackedEvents?.user_signed_up);
-
-		if (alreadyTracked) {
-			return { shouldTrack: false };
-		}
+		const productAlreadyTracked = Boolean(
+			prefs?.trackedEvents?.product_user_signed_up,
+		);
 
 		const createdAtTime = getCreatedAtTime(currentUser.created_at);
 
@@ -67,6 +74,41 @@ export async function checkAndMarkUserSignedUpTracked(): Promise<{
 			return { shouldTrack: false };
 		}
 
+		if (!productAlreadyTracked) {
+			const analyticsAnonymousId = normalizeServerIdentifier(
+				(await cookies()).get(PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE)?.value,
+			);
+			scheduleAfterResponse(async () => {
+				try {
+					const captured = await captureServerProductEvent({
+						eventId: `signup:${currentUser.id}`,
+						eventName: "user_signed_up",
+						occurredAt: new Date(createdAtTime).toISOString(),
+						anonymousId: analyticsAnonymousId,
+						platform: "web",
+						userId: currentUser.id,
+						organizationId: currentUser.activeOrganizationId,
+					});
+					if (!captured) return;
+
+					await db()
+						.update(users)
+						.set({
+							preferences: sql`JSON_SET(COALESCE(${users.preferences}, JSON_OBJECT()), '$.trackedEvents.product_user_signed_up', true)`,
+						})
+						.where(
+							sql`(${users.id} = ${currentUser.id}) AND JSON_CONTAINS(COALESCE(${users.preferences}, JSON_OBJECT()), CAST(true AS JSON), '$.trackedEvents.product_user_signed_up') = 0`,
+						);
+				} catch (error) {
+					console.error("Failed to capture user_signed_up", error);
+				}
+			});
+		}
+
+		if (alreadyTracked) {
+			return { shouldTrack: false };
+		}
+
 		const result = await db()
 			.update(users)
 			.set({
diff --git a/apps/web/actions/organization/send-invites.ts b/apps/web/actions/organization/send-invites.ts
index ad3642d4e3b..b46f8e5193b 100644
--- a/apps/web/actions/organization/send-invites.ts
+++ b/apps/web/actions/organization/send-invites.ts
@@ -15,6 +15,7 @@ import { serverEnv } from "@cap/env";
 import type { Organisation } from "@cap/web-domain";
 import { and, eq, inArray } from "drizzle-orm";
 import { revalidatePath } from "next/cache";
+import { scheduleServerProductEvent } from "@/lib/analytics/server";
 import { provisionOrganizationInvitee } from "@/lib/organization-provisioning";
 import {
 	type AssignableOrganizationRole,
@@ -211,6 +212,31 @@ export async function sendOrganizationInvites(
 		}
 	}
 
+	const failedInviteIds = new Set(failedInvites.map((invite) => invite.id));
+	const successfulInvites = inviteRecords.filter(
+		(invite) => !failedInviteIds.has(invite.id),
+	);
+	const firstSuccessfulInvite = successfulInvites[0];
+	if (firstSuccessfulInvite) {
+		scheduleServerProductEvent({
+			eventId: `organization_invites:${firstSuccessfulInvite.id}`,
+			eventName: "organization_invite_sent",
+			platform: "web",
+			userId: user.id,
+			organizationId,
+			properties: {
+				invite_count: successfulInvites.length,
+				admin_count: successfulInvites.filter(
+					(invite) => invite.role === "admin",
+				).length,
+				member_count: successfulInvites.filter(
+					(invite) => invite.role === "member",
+				).length,
+				delivery: "email",
+			},
+		});
+	}
+
 	revalidatePath("/dashboard/settings/organization");
 
 	return { success: true, failedEmails };
diff --git a/apps/web/actions/organization/update-seat-quantity.ts b/apps/web/actions/organization/update-seat-quantity.ts
index 942bbb0bf08..89f365161a1 100644
--- a/apps/web/actions/organization/update-seat-quantity.ts
+++ b/apps/web/actions/organization/update-seat-quantity.ts
@@ -11,6 +11,7 @@ import { stripe } from "@cap/utils";
 import type { Organisation } from "@cap/web-domain";
 import { eq } from "drizzle-orm";
 import { revalidatePath } from "next/cache";
+import { scheduleServerProductEvent } from "@/lib/analytics/server";
 import { calculateProSeats } from "@/utils/organization";
 
 async function getOwnerSubscription(
@@ -205,6 +206,27 @@ export async function updateSeatQuantity(
 	}
 
 	revalidatePath("/dashboard/settings/organization");
+	const latestInvoice =
+		typeof updatedSubscription.latest_invoice === "string"
+			? updatedSubscription.latest_invoice
+			: updatedSubscription.latest_invoice?.id;
+	scheduleServerProductEvent({
+		eventId: `seat_quantity:${subscription.id}:${latestInvoice ?? updatedSubscription.current_period_start}:${newQuantity}`,
+		eventName: "seat_quantity_changed",
+		platform: "web",
+		userId: user.id,
+		organizationId,
+		properties: {
+			previous_quantity: currentQuantity,
+			new_quantity: newQuantity,
+			quantity_delta: newQuantity - currentQuantity,
+			direction: isSeatIncrease ? "increase" : "decrease",
+			price_id: subscriptionItem.price.id,
+			unit_amount_minor: subscriptionItem.price.unit_amount,
+			currency: subscriptionItem.price.currency,
+			billing_interval: subscriptionItem.price.recurring?.interval,
+		},
+	});
 
 	return { success: true, newQuantity };
 }
diff --git a/apps/web/app/Layout/AppProviders.tsx b/apps/web/app/Layout/AppProviders.tsx
index 520510c5f6d..f4dff23e88d 100644
--- a/apps/web/app/Layout/AppProviders.tsx
+++ b/apps/web/app/Layout/AppProviders.tsx
@@ -4,23 +4,17 @@ import * as TooltipPrimitive from "@radix-ui/react-tooltip";
 import { type PropsWithChildren, Suspense } from "react";
 import { SonnerToaster } from "@/components/SonnerToastProvider";
 import { runPromise } from "@/lib/server";
-import { getBootstrapData } from "@/utils/getBootstrapData";
 import { PublicEnvContext } from "@/utils/public-env";
 import { AuthContextProvider } from "./AuthContext";
 import { resolveCurrentUser } from "./current-user";
 import { GTag } from "./GTag";
 import { MetaPixel } from "./MetaPixel";
-import { PosthogIdentify } from "./PosthogIdentify";
 import { PurchaseTracker } from "./PurchaseTracker";
-import {
-	PostHogProvider,
-	ReactQueryProvider,
-	SessionProvider,
-} from "./providers";
+import { ReactQueryProvider, SessionProvider } from "./providers";
+import { SignupAnalytics } from "./SignupAnalytics";
 import { StripeContextProvider } from "./StripeContext";
 
 export async function AppProviders({ children }: PropsWithChildren) {
-	const bootstrapData = await getBootstrapData();
 	const plans =
 		serverEnv().VERCEL_ENV === "production"
 			? STRIPE_PLAN_IDS.production
@@ -28,32 +22,30 @@ export async function AppProviders({ children }: PropsWithChildren) {
 
 	return (
 		<TooltipPrimitive.Provider>
-			<PostHogProvider bootstrapData={bootstrapData}>
-				<AuthContextProvider user={runPromise(resolveCurrentUser)}>
-					<SessionProvider>
-						<StripeContextProvider plans={plans}>
-							<PublicEnvContext
-								value={{
-									webUrl: buildEnv.NEXT_PUBLIC_WEB_URL,
-									workosAuthAvailable: !!serverEnv().WORKOS_CLIENT_ID,
-									googleAuthAvailable: !!serverEnv().GOOGLE_CLIENT_ID,
-								}}
-							>
-								<ReactQueryProvider>
-									<SonnerToaster />
-									{children}
-									<PosthogIdentify />
-									<MetaPixel />
-									<GTag />
-									<Suspense fallback={null}>
-										<PurchaseTracker />
-									</Suspense>
-								</ReactQueryProvider>
-							</PublicEnvContext>
-						</StripeContextProvider>
-					</SessionProvider>
-				</AuthContextProvider>
-			</PostHogProvider>
+			<AuthContextProvider user={runPromise(resolveCurrentUser)}>
+				<SessionProvider>
+					<StripeContextProvider plans={plans}>
+						<PublicEnvContext
+							value={{
+								webUrl: buildEnv.NEXT_PUBLIC_WEB_URL,
+								workosAuthAvailable: !!serverEnv().WORKOS_CLIENT_ID,
+								googleAuthAvailable: !!serverEnv().GOOGLE_CLIENT_ID,
+							}}
+						>
+							<ReactQueryProvider>
+								<SonnerToaster />
+								{children}
+								<SignupAnalytics />
+								<MetaPixel />
+								<GTag />
+								<Suspense fallback={null}>
+									<PurchaseTracker />
+								</Suspense>
+							</ReactQueryProvider>
+						</PublicEnvContext>
+					</StripeContextProvider>
+				</SessionProvider>
+			</AuthContextProvider>
 		</TooltipPrimitive.Provider>
 	);
 }
diff --git a/apps/web/app/Layout/PosthogIdentify.tsx b/apps/web/app/Layout/PosthogIdentify.tsx
deleted file mode 100644
index 851143c9a4d..00000000000
--- a/apps/web/app/Layout/PosthogIdentify.tsx
+++ /dev/null
@@ -1,41 +0,0 @@
-"use client";
-
-import { Suspense, useEffect } from "react";
-import { checkAndMarkUserSignedUpTracked } from "@/actions/analytics/track-user-signed-up";
-import {
-	identifyUser,
-	initAnonymousUser,
-	trackEvent,
-} from "../utils/analytics";
-import { useCurrentUser } from "./AuthContext";
-
-export function PosthogIdentify() {
-	return (
-		<Suspense>
-			<Inner />
-		</Suspense>
-	);
-}
-
-function Inner() {
-	const user = useCurrentUser();
-
-	useEffect(() => {
-		if (!user) {
-			initAnonymousUser();
-			return;
-		} else {
-			identifyUser(user.id);
-
-			(async () => {
-				const { shouldTrack } = await checkAndMarkUserSignedUpTracked();
-				if (shouldTrack) {
-					trackEvent("user_signed_up");
-				}
-				trackEvent("user_signed_in");
-			})();
-		}
-	}, [user]);
-
-	return null;
-}
diff --git a/apps/web/app/Layout/PosthogPageView.tsx b/apps/web/app/Layout/PosthogPageView.tsx
deleted file mode 100644
index 41996db03bb..00000000000
--- a/apps/web/app/Layout/PosthogPageView.tsx
+++ /dev/null
@@ -1,50 +0,0 @@
-// app/PostHogPageView.tsx
-"use client";
-
-import { usePathname, useSearchParams } from "next/navigation";
-import { usePostHog } from "posthog-js/react";
-import { Suspense, useEffect, useMemo } from "react";
-
-let lastTrackedUrl: string | null = null;
-
-function PostHogPageView(): null {
-	const pathname = usePathname();
-	const searchParams = useSearchParams();
-	const posthog = usePostHog();
-	const search = useMemo(() => searchParams?.toString() ?? "", [searchParams]);
-
-	useEffect(() => {
-		if (!pathname || !posthog) {
-			return;
-		}
-
-		try {
-			let url = window.location.origin + pathname;
-			if (search) {
-				url = `${url}?${search}`;
-			}
-
-			if (lastTrackedUrl === url) {
-				return;
-			}
-
-			posthog.capture("$pageview", { $current_url: url });
-			lastTrackedUrl = url;
-		} catch (error) {
-			console.error("Error capturing pageview:", error);
-		}
-	}, [pathname, search, posthog]);
-
-	return null;
-}
-
-// Wrap this in Suspense to avoid the `useSearchParams` usage above
-// from de-opting the whole app into client-side rendering
-// See: https://nextjs.org/docs/messages/deopted-into-client-rendering
-export default function SuspendedPostHogPageView() {
-	return (
-		<Suspense fallback={null}>
-			<PostHogPageView />
-		</Suspense>
-	);
-}
diff --git a/apps/web/app/Layout/ProductAnalyticsPageView.tsx b/apps/web/app/Layout/ProductAnalyticsPageView.tsx
new file mode 100644
index 00000000000..5bccfd96b9d
--- /dev/null
+++ b/apps/web/app/Layout/ProductAnalyticsPageView.tsx
@@ -0,0 +1,29 @@
+"use client";
+
+import { usePathname } from "next/navigation";
+import { useEffect } from "react";
+import {
+	captureProductPageView,
+	shouldCaptureProductPageView,
+} from "../utils/product-analytics";
+
+let lastCapturedPathname: string | undefined;
+
+export function ProductAnalyticsPageView() {
+	const pathname = usePathname();
+
+	useEffect(() => {
+		if (
+			!pathname ||
+			pathname === lastCapturedPathname ||
+			!shouldCaptureProductPageView(pathname)
+		) {
+			return;
+		}
+
+		lastCapturedPathname = pathname;
+		captureProductPageView();
+	}, [pathname]);
+
+	return null;
+}
diff --git a/apps/web/app/Layout/SignupAnalytics.tsx b/apps/web/app/Layout/SignupAnalytics.tsx
new file mode 100644
index 00000000000..c751ad19b56
--- /dev/null
+++ b/apps/web/app/Layout/SignupAnalytics.tsx
@@ -0,0 +1,28 @@
+"use client";
+
+import { Suspense, useEffect } from "react";
+import { checkAndMarkUserSignedUpTracked } from "@/actions/analytics/track-user-signed-up";
+import { trackEvent } from "../utils/analytics";
+import { useCurrentUser } from "./AuthContext";
+
+export function SignupAnalytics() {
+	return (
+		<Suspense>
+			<Inner />
+		</Suspense>
+	);
+}
+
+function Inner() {
+	const user = useCurrentUser();
+
+	useEffect(() => {
+		if (!user) return;
+
+		void checkAndMarkUserSignedUpTracked().then(({ shouldTrack }) => {
+			if (shouldTrack) trackEvent("user_signed_up");
+		});
+	}, [user]);
+
+	return null;
+}
diff --git a/apps/web/app/Layout/providers.tsx b/apps/web/app/Layout/providers.tsx
index 79ff4a0675e..9f20885f857 100644
--- a/apps/web/app/Layout/providers.tsx
+++ b/apps/web/app/Layout/providers.tsx
@@ -1,6 +1,5 @@
 "use client";
 
-import { buildEnv } from "@cap/env";
 import {
 	TanStackDevtools,
 	type TanStackDevtoolsReactInit,
@@ -11,118 +10,7 @@ import {
 	useQueryClient,
 } from "@tanstack/react-query";
 import { ReactQueryDevtoolsPanel } from "@tanstack/react-query-devtools";
-import type { PostHogConfig } from "posthog-js";
-import { PostHogProvider as PHProvider, usePostHog } from "posthog-js/react";
-import {
-	type PropsWithChildren,
-	useEffect,
-	useMemo,
-	useRef,
-	useState,
-} from "react";
-import type { BootstrapData } from "@/utils/getBootstrapData";
-
-import PostHogPageView from "./PosthogPageView";
-
-type CapPostHogConfig = Partial<PostHogConfig> & {
-	disable_session_recording?: boolean;
-};
-
-export function PostHogProvider({
-	children,
-	bootstrapData,
-}: PropsWithChildren<{ bootstrapData?: BootstrapData }>) {
-	const key = buildEnv.NEXT_PUBLIC_POSTHOG_KEY;
-	const host = buildEnv.NEXT_PUBLIC_POSTHOG_HOST;
-	const initialBootstrap = useRef<BootstrapData | undefined>(undefined);
-
-	if (!initialBootstrap.current && bootstrapData?.distinctID) {
-		initialBootstrap.current = bootstrapData;
-	}
-
-	const options = useMemo(() => {
-		if (!host) return undefined;
-		const base: CapPostHogConfig = {
-			api_host: host,
-			capture_pageview: false,
-			capture_pageleave: true,
-			bootstrap: initialBootstrap.current?.distinctID
-				? initialBootstrap.current
-				: undefined,
-		};
-
-		if (process.env.NEXT_PUBLIC_POSTHOG_DISABLE_SESSION_RECORDING === "true") {
-			base.disable_session_recording = true;
-		}
-
-		return base;
-	}, [host]);
-
-	if (!key || !host || !options) {
-		if (process.env.NODE_ENV !== "production") {
-			console.warn(
-				"Missing PostHog environment variables. Events will not be tracked.",
-			);
-		}
-		return <>{children}</>;
-	}
-
-	return (
-		<PHProvider apiKey={key} options={options}>
-			<PostHogPageView />
-			<PostHogBootstrapSync bootstrapData={bootstrapData} />
-			{children}
-		</PHProvider>
-	);
-}
-
-function PostHogBootstrapSync({
-	bootstrapData,
-}: {
-	bootstrapData?: BootstrapData;
-}) {
-	const posthog = usePostHog();
-	const previousFlags = useRef<Record<string, string | boolean> | undefined>(
-		undefined,
-	);
-
-	useEffect(() => {
-		if (!posthog || !bootstrapData) {
-			return;
-		}
-
-		const nextFlags = bootstrapData.featureFlags ?? {};
-
-		if (areFlagMapsEqual(previousFlags.current, nextFlags)) {
-			return;
-		}
-
-		if (typeof posthog.featureFlags?.override === "function") {
-			posthog.featureFlags.override(nextFlags);
-			previousFlags.current = nextFlags;
-		}
-	}, [posthog, bootstrapData]);
-
-	return null;
-}
-
-function areFlagMapsEqual(
-	left?: Record<string, string | boolean>,
-	right?: Record<string, string | boolean>,
-) {
-	if (left === right) {
-		return true;
-	}
-	if (!left || !right) {
-		return !left && !right;
-	}
-	const leftKeys = Object.keys(left);
-	const rightKeys = Object.keys(right);
-	if (leftKeys.length !== rightKeys.length) {
-		return false;
-	}
-	return leftKeys.every((key) => left[key] === right[key]);
-}
+import { type PropsWithChildren, useEffect, useState } from "react";
 
 export function ReactQueryProvider({
 	children,
diff --git a/apps/web/app/api/desktop/[...route]/root.ts b/apps/web/app/api/desktop/[...route]/root.ts
index 1971c197572..c6284c0a613 100644
--- a/apps/web/app/api/desktop/[...route]/root.ts
+++ b/apps/web/app/api/desktop/[...route]/root.ts
@@ -8,7 +8,7 @@ import {
 	organizations,
 	users,
 } from "@cap/database/schema";
-import { buildEnv, serverEnv } from "@cap/env";
+import { serverEnv } from "@cap/env";
 import { STRIPE_AVAILABLE, stripe, userIsPro } from "@cap/utils";
 import { OrganizationBrandingPatchBody } from "@cap/web-api-contract";
 import { ImageUploads } from "@cap/web-backend";
@@ -17,9 +17,9 @@ import { zValidator } from "@hono/zod-validator";
 import { and, eq, isNull } from "drizzle-orm";
 import { Effect, Option } from "effect";
 import { type Context, Hono } from "hono";
-import { PostHog } from "posthog-node";
 import type Stripe from "stripe";
 import { z } from "zod";
+import { scheduleServerProductEvent } from "@/lib/analytics/server";
 import { getCheckoutRedirectUrls } from "@/lib/mobile-checkout";
 import { runPromise } from "@/lib/server";
 import { withAuth, withOptionalAuth } from "../../utils";
@@ -782,31 +782,26 @@ app.post(
 			success_url: redirects.successUrl,
 			cancel_url: redirects.cancelUrl,
 			allow_promotion_codes: true,
-			metadata: { platform: checkoutPlatform, dubCustomerId: user.id },
+			metadata: {
+				platform: checkoutPlatform,
+				dubCustomerId: user.id,
+				analyticsIsFirstPurchase: user.stripeSubscriptionId ? "false" : "true",
+			},
 		});
 
 		if (checkoutSession.url) {
 			console.log("[POST] Checkout session created successfully");
-
-			try {
-				const ph = new PostHog(buildEnv.NEXT_PUBLIC_POSTHOG_KEY || "", {
-					host: buildEnv.NEXT_PUBLIC_POSTHOG_HOST || "",
-				});
-
-				ph.capture({
-					distinctId: user.id,
-					event: "checkout_started",
-					properties: {
-						price_id: priceId,
-						quantity: 1,
-						platform: checkoutPlatform,
-					},
-				});
-
-				await ph.shutdown();
-			} catch (e) {
-				console.error("Failed to capture checkout_started in PostHog", e);
-			}
+			scheduleServerProductEvent({
+				eventId: `checkout:${checkoutSession.id}`,
+				eventName: "checkout_started",
+				platform: checkoutPlatform,
+				userId: user.id,
+				organizationId: user.activeOrganizationId,
+				properties: {
+					price_id: priceId,
+					quantity: 1,
+				},
+			});
 
 			return c.json({ url: checkoutSession.url });
 		}
diff --git a/apps/web/app/api/events/route.ts b/apps/web/app/api/events/route.ts
new file mode 100644
index 00000000000..7e73d92e60c
--- /dev/null
+++ b/apps/web/app/api/events/route.ts
@@ -0,0 +1,181 @@
+import {
+	createProductEventRows,
+	PRODUCT_ANALYTICS_LIMITS,
+} from "@cap/analytics";
+import { serverEnv } from "@cap/env";
+import {
+	ProductAnalytics,
+	resolveProductAnalyticsActor,
+} from "@cap/web-backend";
+import {
+	HttpApi,
+	HttpApiBuilder,
+	HttpApiEndpoint,
+	HttpApiError,
+	HttpApiGroup,
+	HttpApiSchema,
+	HttpServerRequest,
+} from "@effect/platform";
+import { Effect, Layer, Schema } from "effect";
+import {
+	readProductAnalyticsBrowserToken,
+	readProductAnalyticsBrowserTokenClaims,
+} from "@/lib/analytics/browser-token";
+import {
+	getProductAnalyticsRateLimitKey,
+	hasExpectedBrowserAnalyticsMetadata,
+	isAllowedAnonymousBrowserProductEvent,
+	isAuthenticatedAnalyticsRequestCandidate,
+	normalizeGeoHeader,
+	normalizeProductEventBatch,
+	ProductAnalyticsRateLimiter,
+} from "@/lib/analytics/request";
+import { isRateLimited, RATE_LIMIT_IDS } from "@/lib/rate-limit";
+import { apiToHandler } from "@/lib/server";
+import { allowedOrigins } from "@/utils/cors";
+
+class RateLimited extends Schema.TaggedError<RateLimited>()(
+	"RateLimited",
+	{},
+	HttpApiSchema.annotations({ status: 429 }),
+) {}
+
+class Api extends HttpApi.make("ProductAnalyticsApi").add(
+	HttpApiGroup.make("events").add(
+		HttpApiEndpoint.post("capture", "/api/events")
+			.setPayload(
+				Schema.Struct({
+					events: Schema.Array(Schema.Unknown).pipe(
+						Schema.minItems(1),
+						Schema.maxItems(PRODUCT_ANALYTICS_LIMITS.batchSize),
+					),
+				}),
+			)
+			.addSuccess(Schema.Struct({ accepted: Schema.Number }))
+			.addError(HttpApiError.BadRequest)
+			.addError(HttpApiError.ServiceUnavailable)
+			.addError(RateLimited),
+	),
+) {}
+
+const RequestHeaders = Schema.Struct({
+	authorization: Schema.optional(Schema.String),
+	"content-length": Schema.optional(Schema.String),
+	cookie: Schema.optional(Schema.String),
+	"sec-fetch-site": Schema.optional(Schema.String),
+	origin: Schema.optional(Schema.String),
+	"x-vercel-ip-country": Schema.optional(Schema.String),
+	"x-vercel-ip-country-region": Schema.optional(Schema.String),
+	"x-vercel-ip-city": Schema.optional(Schema.String),
+	"x-vercel-forwarded-for": Schema.optional(Schema.String),
+});
+
+const fallbackRateLimiter = new ProductAnalyticsRateLimiter();
+
+const ApiLive = HttpApiBuilder.api(Api).pipe(
+	Layer.provide(
+		HttpApiBuilder.group(Api, "events", (handlers) =>
+			Effect.gen(function* () {
+				const analytics = yield* ProductAnalytics;
+
+				return handlers.handle("capture", ({ payload }) =>
+					Effect.gen(function* () {
+						const headers = yield* HttpServerRequest.schemaHeaders(
+							RequestHeaders,
+						).pipe(Effect.mapError(() => new HttpApiError.BadRequest()));
+						const requestMetadata = {
+							authorization: headers.authorization,
+							contentLength: headers["content-length"],
+							origin: headers.origin,
+							secFetchSite: headers["sec-fetch-site"],
+						};
+						const browserClaims =
+							hasExpectedBrowserAnalyticsMetadata(
+								requestMetadata,
+								allowedOrigins,
+							) &&
+							readProductAnalyticsBrowserTokenClaims(
+								readProductAnalyticsBrowserToken(headers.cookie),
+								serverEnv().NEXTAUTH_SECRET,
+							);
+						if (
+							!browserClaims &&
+							!isAuthenticatedAnalyticsRequestCandidate(requestMetadata)
+						) {
+							return yield* Effect.fail(new HttpApiError.BadRequest());
+						}
+
+						if (
+							fallbackRateLimiter.isRateLimited(
+								getProductAnalyticsRateLimitKey({
+									trustedVercelProxy: process.env.VERCEL === "1",
+									xVercelForwardedFor: headers["x-vercel-forwarded-for"],
+								}),
+							)
+						) {
+							return yield* Effect.fail(new RateLimited());
+						}
+
+						if (
+							yield* Effect.promise(() =>
+								isRateLimited(RATE_LIMIT_IDS.PRODUCT_ANALYTICS_EVENTS),
+							)
+						) {
+							return yield* Effect.fail(new RateLimited());
+						}
+
+						const events = normalizeProductEventBatch(payload.events);
+						if (!events) {
+							return yield* Effect.fail(new HttpApiError.BadRequest());
+						}
+
+						const actor = yield* resolveProductAnalyticsActor;
+						if (
+							!actor &&
+							(!browserClaims ||
+								!events.every((event) =>
+									isAllowedAnonymousBrowserProductEvent(
+										event,
+										browserClaims.anonymousId,
+									),
+								))
+						) {
+							return yield* Effect.fail(new HttpApiError.BadRequest());
+						}
+						const rows = createProductEventRows(events, {
+							receivedAt: new Date().toISOString(),
+							source: "client",
+							userId: actor?.userId,
+							organizationId: actor?.organizationId,
+							country: normalizeGeoHeader(headers["x-vercel-ip-country"]),
+							region: normalizeGeoHeader(headers["x-vercel-ip-country-region"]),
+							city: normalizeGeoHeader(headers["x-vercel-ip-city"], true),
+						});
+
+						yield* analytics
+							.append(rows)
+							.pipe(
+								Effect.catchTag("ProductAnalyticsError", (error) =>
+									Effect.logWarning(
+										"Product analytics ingestion failed",
+										error,
+									).pipe(
+										Effect.andThen(
+											Effect.fail(new HttpApiError.ServiceUnavailable()),
+										),
+									),
+								),
+							);
+
+						return { accepted: rows.length };
+					}),
+				);
+			}),
+		),
+	),
+);
+
+const handler = apiToHandler(ApiLive);
+
+export const POST = handler;
+export const OPTIONS = handler;
diff --git a/apps/web/app/api/invite/accept/route.ts b/apps/web/app/api/invite/accept/route.ts
index 6ca5d28d0d1..4f4d5e0e775 100644
--- a/apps/web/app/api/invite/accept/route.ts
+++ b/apps/web/app/api/invite/accept/route.ts
@@ -9,6 +9,10 @@ import {
 } from "@cap/database/schema";
 import { and, eq } from "drizzle-orm";
 import { type NextRequest, NextResponse } from "next/server";
+import {
+	readAnalyticsAnonymousId,
+	scheduleServerProductEvent,
+} from "@/lib/analytics/server";
 import { normalizeAssignableOrganizationRole } from "@/lib/permissions/roles";
 import {
 	calculateProSeats,
@@ -36,6 +40,10 @@ export async function POST(request: NextRequest) {
 	}
 
 	try {
+		let joinedMemberId: string | undefined;
+		let joinedOrganizationId: string | undefined;
+		let joinedRole: string | undefined;
+		let assignedProSeat = false;
 		await db().transaction(async (tx) => {
 			const [invite] = await tx
 				.select()
@@ -75,6 +83,9 @@ export async function POST(request: NextRequest) {
 					role,
 				});
 				memberId = newId;
+				joinedMemberId = newId;
+				joinedOrganizationId = invite.organizationId;
+				joinedRole = role;
 			}
 
 			const [org] = await tx
@@ -116,6 +127,7 @@ export async function POST(request: NextRequest) {
 					});
 
 					if (proSeatsRemaining > 0) {
+						assignedProSeat = true;
 						await tx
 							.update(organizationMembers)
 							.set({ hasProSeat: true })
@@ -153,6 +165,21 @@ export async function POST(request: NextRequest) {
 				.where(eq(organizationInvites.id, inviteId));
 		});
 
+		if (joinedMemberId && joinedOrganizationId) {
+			scheduleServerProductEvent({
+				eventId: `organization_member:${joinedMemberId}:joined`,
+				eventName: "organization_member_joined",
+				anonymousId: readAnalyticsAnonymousId(request),
+				platform: "web",
+				userId: user.id,
+				organizationId: joinedOrganizationId,
+				properties: {
+					role: joinedRole,
+					assigned_pro_seat: assignedProSeat,
+				},
+			});
+		}
+
 		return NextResponse.json({ success: true });
 	} catch (error) {
 		if (error instanceof Error) {
diff --git a/apps/web/app/api/settings/billing/guest-checkout/route.ts b/apps/web/app/api/settings/billing/guest-checkout/route.ts
index 71889ee4e1e..fbaefa5c112 100644
--- a/apps/web/app/api/settings/billing/guest-checkout/route.ts
+++ b/apps/web/app/api/settings/billing/guest-checkout/route.ts
@@ -1,13 +1,19 @@
-import { buildEnv, serverEnv } from "@cap/env";
+import { randomUUID } from "node:crypto";
+import { serverEnv } from "@cap/env";
 import { stripe } from "@cap/utils";
 import type { NextRequest } from "next/server";
-import { PostHog } from "posthog-node";
+import {
+	readAnalyticsAnonymousId,
+	scheduleServerProductEvent,
+} from "@/lib/analytics/server";
 import { getCheckoutRedirectUrls } from "@/lib/mobile-checkout";
 
 export async function POST(request: NextRequest) {
 	console.log("Starting guest checkout process");
 	const { priceId, quantity, platform } = await request.json();
 	const checkoutPlatform = platform === "mobile" ? "mobile" : "web";
+	const analyticsAnonymousId = readAnalyticsAnonymousId(request);
+	const checkoutAnonymousId = analyticsAnonymousId ?? `guest:${randomUUID()}`;
 
 	console.log("Received guest checkout request:", { priceId, quantity });
 
@@ -31,32 +37,23 @@ export async function POST(request: NextRequest) {
 			metadata: {
 				platform: checkoutPlatform,
 				guestCheckout: "true",
+				analyticsIsFirstPurchase: "true",
+				analyticsAnonymousId: checkoutAnonymousId,
 			},
 		});
 
 		if (checkoutSession.url) {
 			console.log("Successfully created guest checkout session");
-
-			try {
-				const ph = new PostHog(buildEnv.NEXT_PUBLIC_POSTHOG_KEY || "", {
-					host: buildEnv.NEXT_PUBLIC_POSTHOG_HOST || "",
-				});
-
-				ph.capture({
-					distinctId: `guest-${checkoutSession.id}`,
-					event: "guest_checkout_started",
-					properties: {
-						price_id: priceId,
-						quantity: quantity || 1,
-						platform: checkoutPlatform,
-						session_id: checkoutSession.id,
-					},
-				});
-
-				await ph.shutdown();
-			} catch (e) {
-				console.error("Failed to capture guest_checkout_started in PostHog", e);
-			}
+			scheduleServerProductEvent({
+				eventId: `checkout:${checkoutSession.id}`,
+				eventName: "guest_checkout_started",
+				anonymousId: checkoutAnonymousId,
+				platform: checkoutPlatform,
+				properties: {
+					price_id: priceId,
+					quantity: quantity || 1,
+				},
+			});
 
 			return Response.json({ url: checkoutSession.url }, { status: 200 });
 		}
diff --git a/apps/web/app/api/settings/billing/subscribe/route.ts b/apps/web/app/api/settings/billing/subscribe/route.ts
index ebb9b816bad..b9464dae4c0 100644
--- a/apps/web/app/api/settings/billing/subscribe/route.ts
+++ b/apps/web/app/api/settings/billing/subscribe/route.ts
@@ -1,17 +1,21 @@
 import { db } from "@cap/database";
 import { getCurrentUser } from "@cap/database/auth/session";
 import { users } from "@cap/database/schema";
-import { buildEnv, serverEnv } from "@cap/env";
+import { serverEnv } from "@cap/env";
 import { stripe, userIsPro } from "@cap/utils";
 import { eq } from "drizzle-orm";
 import type { NextRequest } from "next/server";
-import { PostHog } from "posthog-node";
 import type Stripe from "stripe";
+import {
+	readAnalyticsAnonymousId,
+	scheduleServerProductEvent,
+} from "@/lib/analytics/server";
 
 export async function POST(request: NextRequest) {
 	const user = await getCurrentUser();
 	let customerId = user?.stripeCustomerId;
 	const { priceId, quantity, isOnBoarding } = await request.json();
+	const analyticsAnonymousId = readAnalyticsAnonymousId(request);
 
 	if (!priceId) {
 		console.error("Price ID not found");
@@ -78,29 +82,25 @@ export async function POST(request: NextRequest) {
 				platform: "web",
 				dubCustomerId: user.id,
 				isOnBoarding: isOnBoarding ? "true" : "false",
+				analyticsIsFirstPurchase: user.stripeSubscriptionId ? "false" : "true",
+				...(analyticsAnonymousId ? { analyticsAnonymousId } : {}),
 			},
 		});
 
 		if (checkoutSession.url) {
-			try {
-				const ph = new PostHog(buildEnv.NEXT_PUBLIC_POSTHOG_KEY || "", {
-					host: buildEnv.NEXT_PUBLIC_POSTHOG_HOST || "",
-				});
-
-				ph.capture({
-					distinctId: user.id,
-					event: "checkout_started",
-					properties: {
-						price_id: priceId,
-						quantity: quantity,
-						platform: "web",
-					},
-				});
-
-				await ph.shutdown();
-			} catch (e) {
-				console.error("Failed to capture checkout_started in PostHog", e);
-			}
+			scheduleServerProductEvent({
+				eventId: `checkout:${checkoutSession.id}`,
+				eventName: "checkout_started",
+				anonymousId: analyticsAnonymousId,
+				platform: "web",
+				userId: user.id,
+				organizationId: user.activeOrganizationId,
+				properties: {
+					price_id: priceId,
+					quantity: quantity ?? 1,
+					is_onboarding: Boolean(isOnBoarding),
+				},
+			});
 
 			return Response.json({ url: checkoutSession.url }, { status: 200 });
 		}
diff --git a/apps/web/app/api/webhooks/stripe/route.ts b/apps/web/app/api/webhooks/stripe/route.ts
index 7bb0ed9322b..2f6cce68a4d 100644
--- a/apps/web/app/api/webhooks/stripe/route.ts
+++ b/apps/web/app/api/webhooks/stripe/route.ts
@@ -1,13 +1,13 @@
 import { db } from "@cap/database";
 import { nanoId } from "@cap/database/helpers";
 import { developerCreditTransactions, users } from "@cap/database/schema";
-import { buildEnv, serverEnv } from "@cap/env";
+import { serverEnv } from "@cap/env";
 import { stripe } from "@cap/utils";
 import { Organisation, User } from "@cap/web-domain";
 import { and, eq } from "drizzle-orm";
 import { NextResponse } from "next/server";
-import { PostHog } from "posthog-node";
 import type Stripe from "stripe";
+import { scheduleServerProductEvent } from "@/lib/analytics/server";
 import { addCreditsToAccount } from "@/lib/developer-credits";
 
 const relevantEvents = new Set([
@@ -17,6 +17,82 @@ const relevantEvents = new Set([
 	"customer.subscription.deleted",
 ]);
 
+type PurchaseAnalyticsUser = Pick<
+	typeof users.$inferSelect,
+	"id" | "activeOrganizationId"
+>;
+
+function isSettledSubscriptionPurchase(
+	session: Stripe.Checkout.Session,
+	subscription: Stripe.Subscription,
+) {
+	return (
+		(session.payment_status === "paid" ||
+			session.payment_status === "no_payment_required") &&
+		(subscription.status === "active" || subscription.status === "trialing")
+	);
+}
+
+function scheduleSubscriptionPurchaseEvents({
+	eventId,
+	occurredAt,
+	session,
+	subscription,
+	inviteQuota,
+	user,
+	isFirstPurchase,
+}: {
+	eventId: string;
+	occurredAt: string;
+	session: Stripe.Checkout.Session;
+	subscription: Stripe.Subscription;
+	inviteQuota: number;
+	user?: PurchaseAnalyticsUser;
+	isFirstPurchase: boolean;
+}) {
+	const isGuestCheckout = session.metadata?.guestCheckout === "true";
+	const platform =
+		session.metadata?.platform === "desktop"
+			? "desktop"
+			: session.metadata?.platform === "mobile"
+				? "mobile"
+				: session.metadata?.platform === "web"
+					? "web"
+					: "server";
+	const anonymousId = session.metadata?.analyticsAnonymousId;
+	const price = subscription.items.data[0]?.price;
+	const revenueProperties = {
+		payment_status: session.payment_status,
+		subscription_status: subscription.status,
+		amount_total_minor: session.amount_total,
+		amount_subtotal_minor: session.amount_subtotal,
+		discount_amount_minor: session.total_details?.amount_discount,
+		currency: session.currency,
+		unit_amount_minor: price?.unit_amount,
+		billing_interval: price?.recurring?.interval,
+		billing_interval_count: price?.recurring?.interval_count,
+	};
+
+	scheduleServerProductEvent({
+		eventId: `stripe:${eventId}:purchase_completed`,
+		eventName: "purchase_completed",
+		occurredAt,
+		anonymousId,
+		platform,
+		userId: user?.id,
+		organizationId: user?.activeOrganizationId,
+		properties: {
+			...revenueProperties,
+			invite_quota: inviteQuota,
+			price_id: price?.id,
+			quantity: inviteQuota,
+			is_onboarding: session.metadata?.isOnBoarding === "true",
+			is_first_purchase: isFirstPurchase,
+			is_guest_checkout: isGuestCheckout,
+		},
+	});
+}
+
 async function grantDeveloperCredits(
 	session: Stripe.Checkout.Session,
 ): Promise<Response> {
@@ -329,39 +405,17 @@ export const POST = async (req: Request) => {
 
 				console.log("Successfully updated user in database");
 
-				try {
-					const serverPostHog = new PostHog(
-						buildEnv.NEXT_PUBLIC_POSTHOG_KEY || "",
-						{ host: buildEnv.NEXT_PUBLIC_POSTHOG_HOST || "" },
-					);
-
-					const isFirstPurchase = !dbUser.stripeSubscriptionId;
-					const isGuestCheckout = session.metadata?.guestCheckout === "true";
-					serverPostHog.capture({
-						distinctId: dbUser.id,
-						event: "purchase_completed",
-						properties: {
-							subscription_id: subscription.id,
-							subscription_status: subscription.status,
-							invite_quota: inviteQuota,
-							price_id: subscription.items.data[0]?.price.id,
-							quantity: inviteQuota,
-							is_onboarding: session.metadata?.isOnBoarding === "true",
-							platform:
-								session.metadata?.platform === "desktop" ||
-								session.metadata?.platform === "mobile" ||
-								session.metadata?.platform === "web"
-									? session.metadata.platform
-									: "unknown",
-							is_first_purchase: isFirstPurchase,
-							is_guest_checkout: isGuestCheckout,
-						},
+				if (isSettledSubscriptionPurchase(session, subscription)) {
+					scheduleSubscriptionPurchaseEvents({
+						eventId: event.id,
+						occurredAt: new Date(event.created * 1000).toISOString(),
+						session,
+						subscription,
+						inviteQuota,
+						user: dbUser,
+						isFirstPurchase:
+							session.metadata?.analyticsIsFirstPurchase === "true",
 					});
-
-					await serverPostHog.shutdown();
-					console.log("Successfully tracked purchase event in PostHog");
-				} catch (error) {
-					console.error("Error tracking purchase in PostHog:", error);
 				}
 			}
 
@@ -374,6 +428,45 @@ export const POST = async (req: Request) => {
 				if (session.metadata?.type === "developer_credits") {
 					return await grantDeveloperCredits(session);
 				}
+
+				if (typeof session.subscription === "string") {
+					const subscription = await stripe().subscriptions.retrieve(
+						session.subscription,
+					);
+					if (isSettledSubscriptionPurchase(session, subscription)) {
+						const inviteQuota = subscription.items.data.reduce(
+							(total, item) => total + (item.quantity || 1),
+							0,
+						);
+						let dbUser: typeof users.$inferSelect | null = null;
+						if (typeof session.customer === "string") {
+							const customer = await stripe().customers.retrieve(
+								session.customer,
+							);
+							if (!customer.deleted) {
+								const userId = customer.metadata.userId
+									? User.UserId.make(customer.metadata.userId)
+									: undefined;
+								dbUser = await findUserWithRetry(
+									customer.email ?? "",
+									userId,
+									1,
+								);
+							}
+						}
+
+						scheduleSubscriptionPurchaseEvents({
+							eventId: event.id,
+							occurredAt: new Date(event.created * 1000).toISOString(),
+							session,
+							subscription,
+							inviteQuota,
+							...(dbUser ? { user: dbUser } : {}),
+							isFirstPurchase:
+								session.metadata?.analyticsIsFirstPurchase === "true",
+						});
+					}
+				}
 			}
 
 			if (event.type === "customer.subscription.updated") {
diff --git a/apps/web/app/layout.tsx b/apps/web/app/layout.tsx
index f2c9726ccc1..69d42d61278 100644
--- a/apps/web/app/layout.tsx
+++ b/apps/web/app/layout.tsx
@@ -3,6 +3,7 @@ import type { Metadata } from "next";
 import localFont from "next/font/local";
 import Script from "next/script";
 import type { PropsWithChildren } from "react";
+import { ProductAnalyticsPageView } from "./Layout/ProductAnalyticsPageView";
 
 const defaultFont = localFont({
 	src: [
@@ -99,6 +100,7 @@ export default function RootLayout({ children }: PropsWithChildren) {
 			</head>
 			<body suppressHydrationWarning>
 				<Script src="/theme-script.js" strategy="beforeInteractive" />
+				<ProductAnalyticsPageView />
 				<main className="w-full">{children}</main>
 			</body>
 		</html>
diff --git a/apps/web/app/utils/analytics.ts b/apps/web/app/utils/analytics.ts
index 213c5f08c9d..236826dbb35 100644
--- a/apps/web/app/utils/analytics.ts
+++ b/apps/web/app/utils/analytics.ts
@@ -1,69 +1,29 @@
-import posthog from "posthog-js";
-import * as uuid from "uuid";
 import { trackMetaEvent } from "../Layout/MetaPixel";
-
-export function initAnonymousUser() {
-	try {
-		const anonymousId = localStorage.getItem("anonymous_id") ?? uuid.v4();
-		localStorage.setItem("anonymous_id", anonymousId);
-		posthog.identify(anonymousId);
-	} catch (error) {
-		console.error("Error initializing anonymous user:", error);
-	}
-}
-
-export function identifyUser(userId: string, properties?: Record<string, any>) {
-	try {
-		const currentId = posthog.get_distinct_id();
-		const anonymousId = localStorage.getItem("anonymous_id");
-
-		if (currentId !== userId) {
-			if (anonymousId && currentId === anonymousId) {
-				posthog.alias(userId, anonymousId);
-			}
-			posthog.identify(userId);
-			if (properties) {
-				posthog.people.set(properties);
-			}
-			localStorage.removeItem("anonymous_id");
-		}
-	} catch (error) {
-		console.error("Error identifying user:", error);
-	}
-}
+import {
+	captureProductEvent,
+	getProductAnalyticsAnonymousId,
+} from "./product-analytics";
 
 export function trackEvent(
 	eventName: string,
-	properties?: Record<string, any>,
+	properties?: Record<string, unknown>,
 ) {
-	try {
-		if (!posthog || typeof posthog.capture !== "function") {
-			console.warn(`PostHog not available for event: ${eventName}`);
-			return;
-		}
-
-		posthog.capture(eventName, { ...properties, platform: "web" });
-
-		const metaEventMap: Record<string, string> = {
-			purchase_completed: "Purchase",
-			subscription_purchased: "Purchase",
-			user_signed_up: "CompleteRegistration",
-		};
+	captureProductEvent(eventName, properties);
+	const metaEventMap: Record<string, string> = {
+		purchase_completed: "Purchase",
+		subscription_purchased: "Purchase",
+		user_signed_up: "CompleteRegistration",
+	};
+	const metaEventName = metaEventMap[eventName];
+	if (!metaEventName) return;
 
-		const metaEventName = metaEventMap[eventName];
-		if (metaEventName) {
-			const isSignup = eventName === "user_signed_up";
-			const metaParameters = isSignup ? undefined : properties;
-			const eventId = isSignup
-				? `signup_${posthog.get_distinct_id?.() ?? "unknown"}`
-				: undefined;
-			trackMetaEvent(
-				metaEventName,
-				metaParameters,
-				eventId ? { eventId } : undefined,
-			);
-		}
-	} catch (error) {
-		console.error(`Error tracking event ${eventName}:`, error);
-	}
+	const isSignup = eventName === "user_signed_up";
+	const eventId = isSignup
+		? `signup_${getProductAnalyticsAnonymousId()}`
+		: undefined;
+	trackMetaEvent(
+		metaEventName,
+		isSignup ? undefined : properties,
+		eventId ? { eventId } : undefined,
+	);
 }
diff --git a/apps/web/app/utils/product-analytics.ts b/apps/web/app/utils/product-analytics.ts
new file mode 100644
index 00000000000..da9495a7062
--- /dev/null
+++ b/apps/web/app/utils/product-analytics.ts
@@ -0,0 +1,414 @@
+import {
+	isCoreEventName,
+	isServerOnlyEventName,
+	normalizeProductEventProperties,
+	PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE,
+	PRODUCT_ANALYTICS_LIMITS,
+	type ProductEventInput,
+	type ProductEventProperties,
+} from "@cap/analytics";
+import Cookies from "js-cookie";
+
+const FLUSH_INTERVAL_MS = 5_000;
+const RETRY_INTERVAL_MS = 2_000;
+const REQUEST_TIMEOUT_MS = 3_000;
+const ANONYMOUS_ID_KEY = "cap_analytics_anonymous_id_v1";
+const SESSION_ID_KEY = "cap_analytics_session_id_v1";
+const ATTRIBUTION_KEY = "cap_analytics_attribution_v1";
+const ATTRIBUTION_FIELDS = [
+	"utm_source",
+	"utm_medium",
+	"utm_campaign",
+	"utm_content",
+	"utm_term",
+	"gclid",
+	"fbclid",
+] as const;
+
+type TransportResult = "success" | "retry" | "drop";
+type TransportMode = "normal" | "unload";
+type QueuedEvent = { event: ProductEventInput; attempts: number };
+
+interface BrowserTransportDependencies {
+	fetchImpl?: typeof fetch;
+	sendBeacon?: (url: string, data?: BodyInit | null) => boolean;
+}
+
+export type ProductAnalyticsTransport = (
+	events: readonly ProductEventInput[],
+	mode: TransportMode,
+) => Promise<TransportResult>;
+
+export class ProductAnalyticsQueue {
+	private queue: QueuedEvent[] = [];
+	private timer: ReturnType<typeof setTimeout> | undefined;
+	private inFlight: Promise<void> | undefined;
+
+	constructor(
+		private readonly transport: ProductAnalyticsTransport,
+		private readonly schedule: typeof setTimeout = setTimeout,
+		private readonly cancel: typeof clearTimeout = clearTimeout,
+	) {}
+
+	enqueue(event: ProductEventInput) {
+		if (this.queue.length >= PRODUCT_ANALYTICS_LIMITS.queueSize) {
+			this.queue.shift();
+		}
+		this.queue.push({ event, attempts: 0 });
+
+		if (this.queue.length >= PRODUCT_ANALYTICS_LIMITS.batchSize) {
+			void this.flush();
+		} else {
+			this.scheduleFlush(FLUSH_INTERVAL_MS);
+		}
+	}
+
+	flush(mode: TransportMode = "normal") {
+		if (this.inFlight) return this.inFlight;
+		if (this.queue.length === 0) return Promise.resolve();
+
+		this.clearTimer();
+		const batch = this.takeBatch();
+		if (batch.length === 0) return Promise.resolve();
+		let retryScheduled = false;
+		this.inFlight = this.send(batch, mode)
+			.then((scheduled) => {
+				retryScheduled = scheduled;
+			})
+			.finally(() => {
+				this.inFlight = undefined;
+				if (retryScheduled) return;
+				if (this.queue.length >= PRODUCT_ANALYTICS_LIMITS.batchSize) {
+					void this.flush();
+				} else if (this.queue.length > 0) {
+					this.scheduleFlush(FLUSH_INTERVAL_MS);
+				}
+			});
+
+		return this.inFlight;
+	}
+
+	get size() {
+		return this.queue.length;
+	}
+
+	private async send(batch: QueuedEvent[], mode: TransportMode) {
+		let result: TransportResult;
+		try {
+			result = await this.transport(
+				batch.map(({ event }) => event),
+				mode,
+			);
+		} catch {
+			result = "retry";
+		}
+
+		if (result !== "retry") return false;
+
+		const retryable = batch
+			.filter(({ attempts }) => attempts === 0)
+			.map(({ event }) => ({ event, attempts: 1 }));
+		if (retryable.length === 0) return false;
+
+		this.queue = [...retryable, ...this.queue].slice(
+			0,
+			PRODUCT_ANALYTICS_LIMITS.queueSize,
+		);
+		this.scheduleFlush(RETRY_INTERVAL_MS);
+		return true;
+	}
+
+	private scheduleFlush(delay: number) {
+		if (this.timer !== undefined) return;
+		this.timer = this.schedule(() => {
+			this.timer = undefined;
+			void this.flush();
+		}, delay);
+	}
+
+	private clearTimer() {
+		if (this.timer === undefined) return;
+		this.cancel(this.timer);
+		this.timer = undefined;
+	}
+
+	private takeBatch() {
+		const batch: QueuedEvent[] = [];
+
+		while (
+			batch.length < PRODUCT_ANALYTICS_LIMITS.batchSize &&
+			this.queue.length > 0
+		) {
+			const next = this.queue[0];
+			if (!next) break;
+			const candidate = [...batch, next];
+			const bytes = new TextEncoder().encode(
+				JSON.stringify({ events: candidate.map(({ event }) => event) }),
+			).byteLength;
+
+			if (bytes > PRODUCT_ANALYTICS_LIMITS.requestBytes) {
+				if (batch.length > 0) break;
+				this.queue.shift();
+				continue;
+			}
+
+			batch.push(next);
+			this.queue.shift();
+		}
+
+		return batch;
+	}
+}
+
+let browserQueue: ProductAnalyticsQueue | undefined;
+let anonymousId: string | undefined;
+let sessionId: string | undefined;
+let listenersRegistered = false;
+let fallbackEventIdCounter = 0;
+
+export function captureProductEvent(
+	eventName: string,
+	properties?: Record<string, unknown>,
+) {
+	try {
+		if (typeof window === "undefined" || !isCoreEventName(eventName))
+			return false;
+		if (isServerOnlyEventName(eventName)) return false;
+
+		const normalizedProperties = normalizeProductEventProperties(properties);
+		getBrowserQueue().enqueue({
+			eventId: createProductEventId(),
+			eventName,
+			occurredAt: new Date().toISOString(),
+			anonymousId: getProductAnalyticsAnonymousId(),
+			sessionId: getSessionId(),
+			platform: "web",
+			pathname: window.location.pathname,
+			...(document.referrer ? { referrer: document.referrer } : {}),
+			...(normalizedProperties ? { properties: normalizedProperties } : {}),
+		});
+		return true;
+	} catch {
+		return false;
+	}
+}
+
+export function captureProductPageView() {
+	return captureProductEvent("page_view", getFirstTouchAttribution());
+}
+
+export function shouldCaptureProductPageView(pathname: string) {
+	return !["/s", "/c", "/embed"].some(
+		(prefix) => pathname === prefix || pathname.startsWith(`${prefix}/`),
+	);
+}
+
+export function getOrCreateStorageId(
+	storage: Pick<Storage, "getItem" | "setItem"> | undefined,
+	key: string,
+	createId: () => string,
+) {
+	try {
+		const existing = storage?.getItem(key);
+		if (existing) return existing;
+	} catch {
+		return createId();
+	}
+
+	const created = createId();
+	try {
+		storage?.setItem(key, created);
+	} catch {}
+	return created;
+}
+
+export function getOrCreateBrowserAnonymousId(
+	storage: Pick<Storage, "getItem" | "setItem"> | undefined,
+	cookieId: string | undefined,
+	createId: () => string,
+) {
+	if (!cookieId)
+		return getOrCreateStorageId(storage, ANONYMOUS_ID_KEY, createId);
+	try {
+		storage?.setItem(ANONYMOUS_ID_KEY, cookieId);
+	} catch {}
+	return cookieId;
+}
+
+export function createProductEventId(
+	randomUUID: (() => string) | null = getRandomUUID() ?? null,
+	now = Date.now(),
+	randomValues:
+		| ((values: Uint32Array) => Uint32Array)
+		| null = getRandomValues() ?? null,
+) {
+	try {
+		const id = randomUUID?.();
+		if (id) return id;
+	} catch {}
+
+	try {
+		if (randomValues) {
+			const values = randomValues(new Uint32Array(2));
+			return `fallback-${now.toString(36)}-${values[0]?.toString(36)}-${values[1]?.toString(36)}`;
+		}
+	} catch {}
+
+	fallbackEventIdCounter += 1;
+	return `fallback-${now.toString(36)}-counter-${fallbackEventIdCounter.toString(36)}`;
+}
+
+export function readFirstTouchAttribution(
+	search: string,
+	storage?: Pick<Storage, "getItem" | "setItem">,
+): ProductEventProperties | undefined {
+	try {
+		const existing = storage?.getItem(ATTRIBUTION_KEY);
+		if (existing) {
+			return normalizeProductEventProperties(JSON.parse(existing));
+		}
+
+		const params = new URLSearchParams(search);
+		const properties: Record<string, string> = {};
+		for (const key of ATTRIBUTION_FIELDS) {
+			const value = params.get(key)?.trim();
+			if (value) properties[key] = value;
+		}
+		const normalized = normalizeProductEventProperties(properties);
+		if (normalized)
+			storage?.setItem(ATTRIBUTION_KEY, JSON.stringify(normalized));
+		return normalized;
+	} catch {
+		return undefined;
+	}
+}
+
+function getBrowserQueue() {
+	if (!browserQueue) browserQueue = new ProductAnalyticsQueue(browserTransport);
+	registerLifecycleListeners();
+	return browserQueue;
+}
+
+export function getProductAnalyticsAnonymousId() {
+	if (!anonymousId) {
+		const storage = getBrowserStorage("localStorage");
+		const cookieId = Cookies.get(PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE);
+		anonymousId = getOrCreateBrowserAnonymousId(
+			storage,
+			cookieId,
+			createProductEventId,
+		);
+		persistAnonymousIdCookie(anonymousId);
+	}
+	return anonymousId;
+}
+
+function persistAnonymousIdCookie(value: string) {
+	try {
+		Cookies.set(PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE, value, {
+			expires: 365,
+			path: "/",
+			sameSite: "Lax",
+			secure: window.location.protocol === "https:",
+		});
+	} catch {}
+}
+
+function getSessionId() {
+	if (!sessionId) {
+		sessionId = getOrCreateStorageId(
+			getBrowserStorage("sessionStorage"),
+			SESSION_ID_KEY,
+			() => createProductEventId(),
+		);
+	}
+	return sessionId;
+}
+
+function getFirstTouchAttribution() {
+	return readFirstTouchAttribution(
+		window.location.search,
+		getBrowserStorage("localStorage"),
+	);
+}
+
+function getBrowserStorage(name: "localStorage" | "sessionStorage") {
+	try {
+		return window[name];
+	} catch {
+		return undefined;
+	}
+}
+
+function getRandomUUID() {
+	try {
+		return globalThis.crypto?.randomUUID?.bind(globalThis.crypto);
+	} catch {
+		return undefined;
+	}
+}
+
+function getRandomValues() {
+	try {
+		if (!globalThis.crypto?.getRandomValues) return undefined;
+		return (values: Uint32Array) => globalThis.crypto.getRandomValues(values);
+	} catch {
+		return undefined;
+	}
+}
+
+function registerLifecycleListeners() {
+	if (listenersRegistered) return;
+	listenersRegistered = true;
+	const flush = () => void browserQueue?.flush("unload");
+	window.addEventListener("pagehide", flush, { passive: true });
+	document.addEventListener("visibilitychange", () => {
+		if (document.visibilityState === "hidden") flush();
+	});
+}
+
+export const sendBrowserProductAnalytics = async (
+	events: readonly ProductEventInput[],
+	mode: TransportMode,
+	dependencies: BrowserTransportDependencies = {},
+): Promise<TransportResult> => {
+	const body = JSON.stringify({ events });
+	const sendBeacon =
+		dependencies.sendBeacon ??
+		(typeof navigator !== "undefined" &&
+		typeof navigator.sendBeacon === "function"
+			? navigator.sendBeacon.bind(navigator)
+			: undefined);
+	if (mode === "unload" && sendBeacon) {
+		try {
+			if (
+				sendBeacon(
+					"/api/events",
+					new Blob([body], { type: "application/json" }),
+				)
+			) {
+				return "success";
+			}
+		} catch {}
+	}
+
+	try {
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), REQUEST_TIMEOUT_MS);
+		const response = await (dependencies.fetchImpl ?? fetch)("/api/events", {
+			method: "POST",
+			headers: { "Content-Type": "application/json" },
+			body,
+			credentials: "include",
+			keepalive: mode === "unload",
+			signal: controller.signal,
+		}).finally(() => clearTimeout(timeout));
+		if (response.ok) return "success";
+		return response.status === 429 || response.status >= 500 ? "retry" : "drop";
+	} catch {
+		return "retry";
+	}
+};
+
+const browserTransport: ProductAnalyticsTransport = (events, mode) =>
+	sendBrowserProductAnalytics(events, mode);
diff --git a/apps/web/lib/analytics/browser-token.ts b/apps/web/lib/analytics/browser-token.ts
new file mode 100644
index 00000000000..a7ff3f1f008
--- /dev/null
+++ b/apps/web/lib/analytics/browser-token.ts
@@ -0,0 +1,67 @@
+import { createHmac, randomBytes, timingSafeEqual } from "node:crypto";
+
+export const PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE =
+	"cap_analytics_browser_token";
+export const PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS = 60 * 60;
+
+export function createProductAnalyticsAnonymousId() {
+	return randomBytes(16).toString("base64url");
+}
+
+export function createProductAnalyticsBrowserToken(
+	secret: string,
+	anonymousId = createProductAnalyticsAnonymousId(),
+	now = Date.now(),
+) {
+	const payload = `v1.${Math.floor(now / 1000)}.${anonymousId}`;
+	return `${payload}.${sign(payload, secret)}`;
+}
+
+export function readProductAnalyticsBrowserTokenClaims(
+	token: string | undefined,
+	secret: string,
+	now = Date.now(),
+) {
+	if (!token) return undefined;
+	const parts = token.split(".");
+	if (parts.length !== 4 || parts[0] !== "v1") return undefined;
+	const issuedAt = Number(parts[1]);
+	if (!Number.isSafeInteger(issuedAt)) return undefined;
+	const anonymousId = parts[2];
+	if (!anonymousId || anonymousId.length > 128) return undefined;
+	const nowSeconds = Math.floor(now / 1000);
+	if (
+		issuedAt > nowSeconds + 60 ||
+		nowSeconds - issuedAt > PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS
+	) {
+		return undefined;
+	}
+	const payload = parts.slice(0, 3).join(".");
+	const expected = Buffer.from(sign(payload, secret));
+	const actual = Buffer.from(parts[3] ?? "");
+	if (expected.length !== actual.length || !timingSafeEqual(expected, actual)) {
+		return undefined;
+	}
+	return { anonymousId };
+}
+
+export function verifyProductAnalyticsBrowserToken(
+	token: string | undefined,
+	secret: string,
+	now = Date.now(),
+) {
+	return Boolean(readProductAnalyticsBrowserTokenClaims(token, secret, now));
+}
+
+export function readProductAnalyticsBrowserToken(cookieHeader?: string) {
+	for (const cookie of cookieHeader?.split(";") ?? []) {
+		const [name, ...value] = cookie.trim().split("=");
+		if (name === PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE) {
+			return value.join("=");
+		}
+	}
+}
+
+function sign(payload: string, secret: string) {
+	return createHmac("sha256", secret).update(payload).digest("base64url");
+}
diff --git a/apps/web/lib/analytics/request.ts b/apps/web/lib/analytics/request.ts
new file mode 100644
index 00000000000..5e8e942397e
--- /dev/null
+++ b/apps/web/lib/analytics/request.ts
@@ -0,0 +1,173 @@
+import {
+	isServerOnlyEventName,
+	normalizeProductEventInput,
+	PRODUCT_ANALYTICS_LIMITS,
+	type ProductEventInput,
+} from "@cap/analytics";
+
+interface AnalyticsRequestHeaders {
+	authorization?: string;
+	contentLength?: string;
+	origin?: string;
+	secFetchSite?: string;
+}
+
+interface ProductAnalyticsRateLimiterOptions {
+	perKeyLimit?: number;
+	globalLimit?: number;
+	windowMs?: number;
+	maxKeys?: number;
+}
+
+const ALLOWED_FETCH_SITES = new Set(["same-origin", "same-site"]);
+const ANONYMOUS_BROWSER_EVENT_NAMES = new Set([
+	"page_view",
+	"download_cta_clicked",
+	"pricing_cta_clicked",
+	"cli_install_command_copied",
+	"auth_started",
+	"auth_email_sent",
+]);
+
+export class ProductAnalyticsRateLimiter {
+	private readonly buckets = new Map<
+		string,
+		{ count: number; resetAt: number }
+	>();
+	private globalCount = 0;
+	private globalResetAt = 0;
+	private checks = 0;
+	private readonly perKeyLimit: number;
+	private readonly globalLimit: number;
+	private readonly windowMs: number;
+	private readonly maxKeys: number;
+
+	constructor(options: ProductAnalyticsRateLimiterOptions = {}) {
+		this.perKeyLimit = options.perKeyLimit ?? 120;
+		this.globalLimit = options.globalLimit ?? 5_000;
+		this.windowMs = options.windowMs ?? 60_000;
+		this.maxKeys = options.maxKeys ?? 10_000;
+	}
+
+	isRateLimited(key: string, now = Date.now()) {
+		if (now >= this.globalResetAt) {
+			this.globalCount = 0;
+			this.globalResetAt = now + this.windowMs;
+		}
+		this.globalCount += 1;
+		if (this.globalCount > this.globalLimit) return true;
+
+		this.checks += 1;
+		if (this.checks % 100 === 0) {
+			for (const [bucketKey, bucket] of this.buckets) {
+				if (now >= bucket.resetAt) this.buckets.delete(bucketKey);
+			}
+		}
+
+		const bucketKey =
+			this.buckets.has(key) || this.buckets.size < this.maxKeys
+				? key
+				: "overflow";
+		const bucket = this.buckets.get(bucketKey);
+		if (!bucket || now >= bucket.resetAt) {
+			this.buckets.set(bucketKey, { count: 1, resetAt: now + this.windowMs });
+			return false;
+		}
+
+		bucket.count += 1;
+		return bucket.count > this.perKeyLimit;
+	}
+}
+
+export function hasExpectedBrowserAnalyticsMetadata(
+	headers: AnalyticsRequestHeaders,
+	allowedOrigins: readonly string[],
+) {
+	if (!hasValidContentLength(headers.contentLength)) return false;
+
+	const secFetchSite = headers.secFetchSite?.toLowerCase();
+	if (!headers.origin || !allowedOrigins.includes(headers.origin)) return false;
+	if (!secFetchSite || !ALLOWED_FETCH_SITES.has(secFetchSite)) return false;
+
+	return true;
+}
+
+export function isAuthenticatedAnalyticsRequestCandidate(
+	headers: AnalyticsRequestHeaders,
+) {
+	if (!hasValidContentLength(headers.contentLength)) return false;
+	const token = headers.authorization?.match(/^Bearer\s+([^\s]+)\s*$/i)?.[1];
+	return token?.length === 36;
+}
+
+export function isAllowedAnonymousBrowserProductEvent(
+	event: ProductEventInput,
+	anonymousId: string,
+) {
+	return (
+		event.platform === "web" &&
+		event.anonymousId === anonymousId &&
+		ANONYMOUS_BROWSER_EVENT_NAMES.has(event.eventName)
+	);
+}
+
+function hasValidContentLength(value?: string) {
+	if (!value) return true;
+	const contentLength = Number(value);
+	return (
+		Number.isSafeInteger(contentLength) &&
+		contentLength >= 0 &&
+		contentLength <= PRODUCT_ANALYTICS_LIMITS.requestBytes
+	);
+}
+
+export function normalizeProductEventBatch(
+	values: readonly unknown[],
+	now = Date.now(),
+): ProductEventInput[] | null {
+	if (
+		new TextEncoder().encode(JSON.stringify({ events: values })).byteLength >
+		PRODUCT_ANALYTICS_LIMITS.requestBytes
+	) {
+		return null;
+	}
+
+	if (
+		values.length === 0 ||
+		values.length > PRODUCT_ANALYTICS_LIMITS.batchSize
+	) {
+		return null;
+	}
+
+	const events: ProductEventInput[] = [];
+	for (const value of values) {
+		const event = normalizeProductEventInput(value, now);
+		if (!event || isServerOnlyEventName(event.eventName)) return null;
+		events.push(event);
+	}
+	return events;
+}
+
+export function getProductAnalyticsRateLimitKey(headers: {
+	trustedVercelProxy: boolean;
+	xVercelForwardedFor?: string;
+}) {
+	if (!headers.trustedVercelProxy) return "self-hosted";
+	return (
+		headers.xVercelForwardedFor?.split(",")[0]?.trim() || "vercel-unknown"
+	).slice(0, PRODUCT_ANALYTICS_LIMITS.identifierLength);
+}
+
+export function normalizeGeoHeader(value?: string, decode = false) {
+	if (!value) return undefined;
+	let normalized = value;
+	if (decode) {
+		try {
+			normalized = decodeURIComponent(value);
+		} catch {
+			return undefined;
+		}
+	}
+	const trimmed = normalized.trim().slice(0, 128);
+	return trimmed && trimmed !== "unknown" ? trimmed : undefined;
+}
diff --git a/apps/web/lib/analytics/server-event.ts b/apps/web/lib/analytics/server-event.ts
new file mode 100644
index 00000000000..cffaa2cab81
--- /dev/null
+++ b/apps/web/lib/analytics/server-event.ts
@@ -0,0 +1,54 @@
+import {
+	type CoreEventName,
+	createProductEventRows,
+	normalizeProductEventProperties,
+	PRODUCT_ANALYTICS_LIMITS,
+	type ProductEventPlatform,
+} from "@cap/analytics";
+
+export interface ServerProductEvent {
+	eventId: string;
+	eventName: CoreEventName;
+	occurredAt?: string;
+	anonymousId?: string;
+	platform: ProductEventPlatform;
+	userId?: string;
+	organizationId?: string;
+	pathname?: string;
+	properties?: Record<string, unknown>;
+}
+
+export function createServerProductEventRows(event: ServerProductEvent) {
+	const anonymousId = normalizeServerIdentifier(
+		event.anonymousId ?? (event.userId ? `user:${event.userId}` : undefined),
+	);
+	const eventId = normalizeServerIdentifier(event.eventId);
+	if (!anonymousId || !eventId) return [];
+
+	const properties = normalizeProductEventProperties(event.properties);
+	return createProductEventRows(
+		[
+			{
+				eventId,
+				eventName: event.eventName,
+				occurredAt: event.occurredAt ?? new Date().toISOString(),
+				anonymousId,
+				platform: event.platform,
+				...(event.pathname ? { pathname: event.pathname } : {}),
+				...(properties ? { properties } : {}),
+			},
+		],
+		{
+			receivedAt: new Date().toISOString(),
+			source: "server",
+			userId: event.userId,
+			organizationId: event.organizationId,
+		},
+	);
+}
+
+export function normalizeServerIdentifier(value?: string) {
+	const normalized = value?.trim();
+	if (!normalized) return undefined;
+	return normalized.slice(0, PRODUCT_ANALYTICS_LIMITS.identifierLength);
+}
diff --git a/apps/web/lib/analytics/server.ts b/apps/web/lib/analytics/server.ts
new file mode 100644
index 00000000000..2a2781d1e40
--- /dev/null
+++ b/apps/web/lib/analytics/server.ts
@@ -0,0 +1,52 @@
+import {
+	PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE,
+	sendProductAnalyticsRows,
+} from "@cap/analytics";
+import { serverEnv } from "@cap/env";
+import { after, type NextRequest } from "next/server";
+import {
+	createServerProductEventRows,
+	normalizeServerIdentifier,
+	type ServerProductEvent,
+} from "./server-event";
+
+export { createServerProductEventRows } from "./server-event";
+
+export async function captureServerProductEvent(event: ServerProductEvent) {
+	const rows = createServerProductEventRows(event);
+	if (rows.length === 0) return false;
+	const env = serverEnv();
+	const host = env.PRODUCT_ANALYTICS_TINYBIRD_HOST;
+	const token = env.PRODUCT_ANALYTICS_TINYBIRD_TOKEN;
+	if (!host || !token) return false;
+
+	await sendProductAnalyticsRows({ host, token, rows });
+	return true;
+}
+
+export function scheduleServerProductEvent(event: ServerProductEvent) {
+	scheduleAfterResponse(async () => {
+		try {
+			await captureServerProductEvent(event);
+		} catch (error) {
+			console.error(`Failed to capture ${event.eventName}`, error);
+		}
+	});
+}
+
+export function scheduleAfterResponse(task: () => Promise<void>) {
+	try {
+		after(task);
+	} catch (error) {
+		console.error("Failed to schedule analytics after response", error);
+		void task().catch((taskError) =>
+			console.error("Fallback analytics task failed", taskError),
+		);
+	}
+}
+
+export function readAnalyticsAnonymousId(request: NextRequest) {
+	return normalizeServerIdentifier(
+		request.cookies.get(PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE)?.value,
+	);
+}
diff --git a/apps/web/lib/rate-limit.ts b/apps/web/lib/rate-limit.ts
index 252f63f7219..2c06b40c5bc 100644
--- a/apps/web/lib/rate-limit.ts
+++ b/apps/web/lib/rate-limit.ts
@@ -73,6 +73,7 @@ export const RATE_LIMIT_IDS = {
 	MESSENGER_MESSAGE: "rl_messenger_message",
 	/** Unauthed analytics view tracking (Tinybird ingest + notifications). Suggested: 60 / 1m per IP. */
 	ANALYTICS_TRACK: "rl_analytics_track",
+	PRODUCT_ANALYTICS_EVENTS: "rl_product_analytics_events",
 	/** Unauthed guest checkout (Stripe object/cost abuse). Suggested: 10 / 10m per IP. */
 	GUEST_CHECKOUT: "rl_guest_checkout",
 	/** Unauthed desktop log → Discord forwarding (spam). Suggested: 10 / 1m per IP. */
diff --git a/apps/web/lib/server.ts b/apps/web/lib/server.ts
index 86b59486e9d..98b8f6335e8 100644
--- a/apps/web/lib/server.ts
+++ b/apps/web/lib/server.ts
@@ -10,6 +10,7 @@ import {
 	ImageUploads,
 	Organisations,
 	OrganisationsPolicy,
+	ProductAnalytics,
 	S3Buckets,
 	Spaces,
 	SpacesPolicy,
@@ -78,15 +79,13 @@ const WorkflowRpcLive = Layer.unwrapScoped(
 		const authMiddleware = RpcMiddleware.layerClient(
 			Workflows.SecretAuthMiddleware,
 			({ request }) =>
-				Effect.gen(function* () {
-					return {
-						...request,
-						headers: Headers.set(
-							request.headers,
-							"authorization",
-							Redacted.value(authSecret.value),
-						),
-					};
+				Effect.succeed({
+					...request,
+					headers: Headers.set(
+						request.headers,
+						"authorization",
+						Redacted.value(authSecret.value),
+					),
 				}),
 		);
 
@@ -112,6 +111,7 @@ export const Dependencies = Layer.mergeAll(
 	VideosPolicy.Default,
 	VideosRepo.Default,
 	Tinybird.Default,
+	ProductAnalytics.Default,
 	Extensions.Default,
 	Folders.Default,
 	SpacesPolicy.Default,
diff --git a/apps/web/package.json b/apps/web/package.json
index 2e406136b4a..59a22a5d18a 100644
--- a/apps/web/package.json
+++ b/apps/web/package.json
@@ -22,6 +22,7 @@
 		"@aws-sdk/cloudfront-signer": "^3.821.0",
 		"@aws-sdk/s3-presigned-post": "^3.485.0",
 		"@aws-sdk/s3-request-presigner": "^3.485.0",
+		"@cap/analytics": "workspace:*",
 		"@cap/database": "workspace:*",
 		"@cap/env": "workspace:*",
 		"@cap/recorder-core": "workspace:*",
@@ -116,8 +117,6 @@
 		"next": "16.2.1",
 		"next-auth": "^4.24.5",
 		"next-mdx-remote": "^6.0.0",
-		"posthog-js": "^1.215.3",
-		"posthog-node": "^4.11.2",
 		"prettier": "^3.7.4",
 		"react": "19.2.4",
 		"react-dom": "19.2.4",
diff --git a/apps/web/proxy.ts b/apps/web/proxy.ts
index 34ef676204b..3efc6920824 100644
--- a/apps/web/proxy.ts
+++ b/apps/web/proxy.ts
@@ -1,9 +1,17 @@
+import { PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE } from "@cap/analytics";
 import { db } from "@cap/database";
 import { organizations } from "@cap/database/schema";
 import { buildEnv, serverEnv } from "@cap/env";
 import { eq } from "drizzle-orm";
 import { notFound } from "next/navigation";
 import { type NextRequest, NextResponse, userAgent } from "next/server";
+import {
+	createProductAnalyticsAnonymousId,
+	createProductAnalyticsBrowserToken,
+	PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE,
+	PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS,
+	readProductAnalyticsBrowserTokenClaims,
+} from "@/lib/analytics/browser-token";
 
 const addHttps = (s?: string) => {
 	if (!s) return s;
@@ -20,6 +28,46 @@ const mainOrigins = [
 	addHttps(serverEnv().VERCEL_PROJECT_PRODUCTION_URL_HOST),
 ].filter(Boolean) as string[];
 
+const nextWithAnalyticsToken = (
+	request: NextRequest,
+	response = NextResponse.next(),
+) => {
+	const secret = serverEnv().NEXTAUTH_SECRET;
+	const token = request.cookies.get(
+		PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE,
+	)?.value;
+	const claims = readProductAnalyticsBrowserTokenClaims(token, secret);
+	const existingAnonymousId = request.cookies.get(
+		PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE,
+	)?.value;
+	const anonymousId =
+		existingAnonymousId && existingAnonymousId.length <= 128
+			? existingAnonymousId
+			: (claims?.anonymousId ?? createProductAnalyticsAnonymousId());
+	if (!claims || claims.anonymousId !== anonymousId) {
+		response.cookies.set(
+			PRODUCT_ANALYTICS_BROWSER_TOKEN_COOKIE,
+			createProductAnalyticsBrowserToken(secret, anonymousId),
+			{
+				httpOnly: true,
+				maxAge: PRODUCT_ANALYTICS_BROWSER_TOKEN_TTL_SECONDS,
+				path: "/",
+				sameSite: "strict",
+				secure: process.env.NODE_ENV === "production",
+			},
+		);
+	}
+	if (existingAnonymousId !== anonymousId) {
+		response.cookies.set(PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE, anonymousId, {
+			maxAge: 365 * 24 * 60 * 60,
+			path: "/",
+			sameSite: "lax",
+			secure: process.env.NODE_ENV === "production",
+		});
+	}
+	return response;
+};
+
 export async function proxy(request: NextRequest) {
 	const url = new URL(request.url);
 	const path = url.pathname;
@@ -29,7 +77,7 @@ export async function proxy(request: NextRequest) {
 	}
 
 	if (path.startsWith("/login")) {
-		const response = NextResponse.next();
+		const response = nextWithAnalyticsToken(request);
 		response.headers.set("X-Frame-Options", "SAMEORIGIN");
 		response.headers.set(
 			"Content-Security-Policy",
@@ -63,11 +111,11 @@ export async function proxy(request: NextRequest) {
 			process.env.NODE_ENV !== "development"
 		)
 			return NextResponse.redirect(new URL("/login", url.origin));
-		else return NextResponse.next();
+		else return nextWithAnalyticsToken(request);
 	}
 
 	if (mainOrigins.some((d) => url.origin.startsWith(d))) {
-		return NextResponse.next();
+		return nextWithAnalyticsToken(request);
 	}
 
 	const webUrl = new URL(serverEnv().WEB_URL).hostname;
@@ -80,7 +128,8 @@ export async function proxy(request: NextRequest) {
 		}
 
 		const verifiedDomain = request.cookies.get("verified_domain");
-		if (verifiedDomain?.value === hostname) return NextResponse.next();
+		if (verifiedDomain?.value === hostname)
+			return nextWithAnalyticsToken(request);
 
 		const [organization] = await db()
 			.select()
@@ -110,7 +159,7 @@ export async function proxy(request: NextRequest) {
 		response.headers.set("x-referrer", referrer);
 		response.headers.set("x-user-agent", JSON.stringify(ua));
 
-		return response;
+		return nextWithAnalyticsToken(request, response);
 	} catch (error) {
 		console.error("Error in proxy:", error);
 		return notFound();
diff --git a/apps/web/public/llms-full.txt b/apps/web/public/llms-full.txt
index e8629c8ad6b..376ada61703 100644
--- a/apps/web/public/llms-full.txt
+++ b/apps/web/public/llms-full.txt
@@ -198,7 +198,7 @@ Early-adopter pricing is locked in for the lifetime of the subscription. Trusted
 - Desktop: Tauri 2.5 (Rust) + SolidJS / SolidStart; WGPU rendering; FFmpeg; ScreenCaptureKit (macOS) and Direct3D / Media Foundation (Windows); whisper-rs and Parakeet for local captions; `@ts-rest/core` API client; Effect.
 - Web: Next.js 16, React 19, TypeScript; Effect (`@effect/platform` HttpApi) and `@ts-rest/core` (no tRPC); Drizzle ORM on MySQL (PlanetScale); NextAuth + WorkOS auth; TanStack Query.
 - Media: native hardware encoders, FFmpeg, WGPU compositor, WebCodecs; HLS playback via Mux.
-- Infrastructure: AWS S3 + CloudFront + MediaConvert, Mux, PlanetScale, Vercel, Stripe, PostHog, Resend; Deepgram + Groq/OpenAI for AI.
+- Infrastructure: AWS S3 + CloudFront + MediaConvert, Mux, PlanetScale, Vercel, Stripe, Tinybird, Resend; Deepgram + Groq/OpenAI for AI.
 - Runtime: Node 20, pnpm 10.5.2, Rust 1.88+, Turborepo monorepo.
 
 ## Free Web Tools
diff --git a/apps/web/utils/getBootstrapData.ts b/apps/web/utils/getBootstrapData.ts
deleted file mode 100644
index ae5920948e3..00000000000
--- a/apps/web/utils/getBootstrapData.ts
+++ /dev/null
@@ -1,56 +0,0 @@
-import { buildEnv, serverEnv } from "@cap/env";
-import { cookies } from "next/headers";
-import { PostHog } from "posthog-node";
-import { cache } from "react";
-import { v4 as uuidv4 } from "uuid";
-
-export const generateId = cache(() => {
-	const id = uuidv4();
-	return id;
-});
-
-export interface BootstrapData {
-	distinctID: string;
-	featureFlags: Record<string, string | boolean>;
-}
-
-export const getBootstrapData = cache(async (): Promise<BootstrapData> => {
-	if (!buildEnv.NEXT_PUBLIC_POSTHOG_KEY)
-		return {
-			distinctID: "",
-			featureFlags: {},
-		};
-
-	let distinct_id = "";
-	const phProjectAPIKey = buildEnv.NEXT_PUBLIC_POSTHOG_KEY;
-	const phCookieName = `ph_${phProjectAPIKey}_posthog`;
-	const cookieStore = await cookies();
-	const phCookie = cookieStore.get(phCookieName);
-
-	if (phCookie) {
-		try {
-			const phCookieParsed = JSON.parse(phCookie.value);
-			distinct_id = phCookieParsed.distinct_id;
-		} catch (e) {
-			console.error("Error parsing PostHog cookie:", e);
-		}
-	}
-
-	if (!distinct_id) {
-		distinct_id = generateId();
-	}
-
-	const client = new PostHog(phProjectAPIKey, {
-		host: buildEnv.NEXT_PUBLIC_POSTHOG_HOST || "https://app.posthog.com",
-		personalApiKey: serverEnv().POSTHOG_PERSONAL_API_KEY,
-	});
-
-	const flags = await client.getAllFlags(distinct_id);
-
-	const bootstrap: BootstrapData = {
-		distinctID: distinct_id,
-		featureFlags: flags,
-	};
-
-	return bootstrap;
-});
diff --git a/package.json b/package.json
index 55c4e1879e7..b48372ea965 100644
--- a/package.json
+++ b/package.json
@@ -7,8 +7,16 @@
 		"cap-setup": "dotenv -e .env -- node scripts/setup.js",
 		"analytics:migrate-dub": "dotenv -e .env -- node scripts/analytics/migrate-dub-to-tinybird.js --dry-run",
 		"analytics:migrate-dub:apply": "dotenv -e .env -- node scripts/analytics/migrate-dub-to-tinybird.js --apply",
-		"analytics:posthog-growth": "dotenv -e .env -- node scripts/analytics/posthog-growth-audit.mjs",
-		"analytics:setup": "dotenv -e .env -- node scripts/analytics/setup-analytics.js",
+		"analytics:setup": "pnpm analytics:deploy",
+		"analytics:validate": "node scripts/analytics/analytics-cli.js validate",
+		"analytics:test": "pnpm --filter @cap/analytics test && pnpm --filter @cap/web test --run __tests__/unit/product-analytics-browser-token.test.ts __tests__/unit/product-analytics-queue.test.ts __tests__/unit/product-analytics-scheduler.test.ts __tests__/unit/product-analytics-request.test.ts __tests__/unit/product-analytics-transport.test.ts __tests__/unit/product-analytics-server.test.ts __tests__/unit/guest-checkout-analytics.test.ts __tests__/unit/subscription-analytics-webhook.test.ts __tests__/unit/developer-credits-webhook.test.ts && pnpm --dir apps/desktop exec vitest run src/utils/analytics.test.ts src/utils/product-analytics.test.ts && node scripts/analytics/analytics-cli.js test",
+		"analytics:local": "dotenv -e .env -- node scripts/analytics/analytics-cli.js local",
+		"analytics:local:test": "dotenv -e .env -- node scripts/analytics/analytics-cli.js local-test",
+		"analytics:local:tokens": "dotenv -e .env -- node scripts/analytics/analytics-cli.js local-tokens",
+		"analytics:local:stop": "node scripts/analytics/analytics-cli.js local-stop",
+		"analytics:deploy:check": "dotenv -e .env -- node scripts/analytics/analytics-cli.js cloud-check",
+		"analytics:deploy": "dotenv -e .env -- node scripts/analytics/analytics-cli.js cloud-deploy",
+		"analytics:query": "dotenv -e .env -- node scripts/analytics/agent-query.js",
 		"analytics:check": "dotenv -e .env -- node scripts/analytics/check-analytics.js",
 		"analytics:delete-all": "dotenv -e .env -- node scripts/analytics/delete-all-data.js",
 		"analytics:populate-test": "dotenv -e .env -- node scripts/analytics/populate-test-data.js",
diff --git a/packages/analytics/package.json b/packages/analytics/package.json
new file mode 100644
index 00000000000..ef81deb5796
--- /dev/null
+++ b/packages/analytics/package.json
@@ -0,0 +1,13 @@
+{
+	"name": "@cap/analytics",
+	"private": true,
+	"main": "./src/index.ts",
+	"types": "./src/index.ts",
+	"type": "module",
+	"scripts": {
+		"test": "vitest run"
+	},
+	"devDependencies": {
+		"vitest": "^3.2.0"
+	}
+}
diff --git a/packages/analytics/src/index.test.ts b/packages/analytics/src/index.test.ts
new file mode 100644
index 00000000000..f4c753bb469
--- /dev/null
+++ b/packages/analytics/src/index.test.ts
@@ -0,0 +1,241 @@
+import { describe, expect, it } from "vitest";
+import {
+	CORE_EVENT_NAMES,
+	createProductEventRows,
+	isCoreEventName,
+	isServerOnlyEventName,
+	normalizeProductEventInput,
+	normalizeProductEventProperties,
+	PRODUCT_ANALYTICS_LIMITS,
+} from "./index";
+
+describe("product analytics contract", () => {
+	it("keeps the catalog unique and consistently named", () => {
+		expect(new Set(CORE_EVENT_NAMES).size).toBe(CORE_EVENT_NAMES.length);
+		for (const name of CORE_EVENT_NAMES) {
+			expect(name).toMatch(/^[a-z][a-z0-9_]*$/);
+		}
+	});
+
+	it("rejects noisy events outside the core catalog", () => {
+		expect(isCoreEventName("recording_started")).toBe(true);
+		expect(isCoreEventName("mouse_moved")).toBe(false);
+		expect(isCoreEventName("$autocapture")).toBe(false);
+	});
+
+	it("marks revenue and lifecycle events as server authoritative", () => {
+		expect(isServerOnlyEventName("purchase_completed")).toBe(true);
+		expect(isServerOnlyEventName("user_signed_up")).toBe(true);
+		expect(isServerOnlyEventName("page_view")).toBe(false);
+		expect(isServerOnlyEventName("recording_completed")).toBe(false);
+	});
+});
+
+describe("normalizeProductEventProperties", () => {
+	it("retains only finite scalar values", () => {
+		expect(
+			normalizeProductEventProperties({
+				valid_string: "value",
+				valid_number: 42,
+				valid_boolean: false,
+				valid_null: null,
+				not_finite: Number.POSITIVE_INFINITY,
+				object_value: { nested: true },
+				array_value: ["nope"],
+			}),
+		).toEqual({
+			valid_string: "value",
+			valid_number: 42,
+			valid_boolean: false,
+			valid_null: null,
+		});
+	});
+
+	it("drops invalid keys and truncates strings", () => {
+		const longValue = "x".repeat(
+			PRODUCT_ANALYTICS_LIMITS.propertyStringLength + 20,
+		);
+		expect(
+			normalizeProductEventProperties({
+				valid_key: longValue,
+				"Invalid-Key": "drop",
+				["x".repeat(PRODUCT_ANALYTICS_LIMITS.propertyKeyLength + 1)]: "drop",
+			}),
+		).toEqual({
+			valid_key: "x".repeat(PRODUCT_ANALYTICS_LIMITS.propertyStringLength),
+		});
+	});
+
+	it("caps the number of retained properties", () => {
+		const properties = Object.fromEntries(
+			Array.from(
+				{ length: PRODUCT_ANALYTICS_LIMITS.propertyCount + 10 },
+				(_, i) => [`property_${i}`, i],
+			),
+		);
+		const normalized = normalizeProductEventProperties(properties);
+		expect(Object.keys(normalized ?? {})).toHaveLength(
+			PRODUCT_ANALYTICS_LIMITS.propertyCount,
+		);
+	});
+
+	it("caps the serialized property payload", () => {
+		const properties = Object.fromEntries(
+			Array.from({ length: PRODUCT_ANALYTICS_LIMITS.propertyCount }, (_, i) => [
+				`property_${i}`,
+				"🙂".repeat(PRODUCT_ANALYTICS_LIMITS.propertyStringLength),
+			]),
+		);
+		const normalized = normalizeProductEventProperties(properties);
+		expect(
+			new TextEncoder().encode(JSON.stringify(normalized)).byteLength,
+		).toBeLessThanOrEqual(PRODUCT_ANALYTICS_LIMITS.propertiesBytes);
+	});
+
+	it("returns undefined when nothing is safe to retain", () => {
+		expect(normalizeProductEventProperties()).toBeUndefined();
+		expect(normalizeProductEventProperties({ nested: {} })).toBeUndefined();
+	});
+
+	it("drops property keys that could contain customer content", () => {
+		expect(
+			normalizeProductEventProperties({
+				transcript: "private",
+				file_path: "/Users/private/recording.cap",
+				error: "upload failed at /Users/private/recording.cap",
+				reason: "raw operating system error",
+				video_id: "private-recording-id",
+				status: "completed",
+			}),
+		).toEqual({ status: "completed" });
+	});
+});
+
+describe("normalizeProductEventInput", () => {
+	const now = Date.parse("2026-07-12T12:00:00.000Z");
+	const baseEvent = {
+		eventId: "event-1",
+		eventName: "recording_started",
+		occurredAt: "2026-07-12T11:59:59.000Z",
+		anonymousId: "anonymous-1",
+		sessionId: "session-1",
+		platform: "desktop",
+	};
+
+	it("normalizes a valid event", () => {
+		expect(normalizeProductEventInput(baseEvent, now)).toEqual(baseEvent);
+	});
+
+	it.each([
+		["unknown event", { ...baseEvent, eventName: "mouse_moved" }],
+		["missing id", { ...baseEvent, eventId: "" }],
+		["unknown platform", { ...baseEvent, platform: "mobile" }],
+		["server-authored platform", { ...baseEvent, platform: "server" }],
+		["invalid timestamp", { ...baseEvent, occurredAt: "not-a-date" }],
+		[
+			"stale timestamp",
+			{ ...baseEvent, occurredAt: "2026-07-01T11:59:59.000Z" },
+		],
+		[
+			"future timestamp",
+			{ ...baseEvent, occurredAt: "2026-07-12T12:06:00.000Z" },
+		],
+	])("rejects %s", (_label, event) => {
+		expect(normalizeProductEventInput(event, now)).toBeNull();
+	});
+
+	it("truncates bounded context and sanitizes properties", () => {
+		const normalized = normalizeProductEventInput(
+			{
+				...baseEvent,
+				pathname: `/${"short/".repeat(PRODUCT_ANALYTICS_LIMITS.pathnameLength)}`,
+				properties: {
+					status: "completed",
+					content: "private",
+					nested: { invalid: true },
+				},
+			},
+			now,
+		);
+		expect(normalized?.pathname).toHaveLength(
+			PRODUCT_ANALYTICS_LIMITS.pathnameLength,
+		);
+		expect(normalized?.properties).toEqual({ status: "completed" });
+	});
+
+	it("removes query strings and high-cardinality path segments", () => {
+		const normalized = normalizeProductEventInput(
+			{
+				...baseEvent,
+				pathname:
+					"https://cap.so/s/019f1ad7-2deb-7730-8d27-916abc9cd4d8?token=private",
+			},
+			now,
+		);
+		expect(normalized?.pathname).toBe("/s/:id");
+	});
+
+	it.each([
+		"/screen-recorder-windows",
+		"/loom-alternative",
+		"/blog/how-to-record-your-screen-with-audio",
+	])("preserves static acquisition route %s", (pathname) => {
+		expect(
+			normalizeProductEventInput({ ...baseEvent, pathname }, now)?.pathname,
+		).toBe(pathname);
+	});
+
+	it("normalizes Cap IDs only on dynamic route segments", () => {
+		expect(
+			normalizeProductEventInput(
+				{ ...baseEvent, pathname: "/dashboard/spaces/01abcdefghjkmnp" },
+				now,
+			)?.pathname,
+		).toBe("/dashboard/spaces/:id");
+	});
+
+	it("keeps only the referrer hostname", () => {
+		const normalized = normalizeProductEventInput(
+			{
+				...baseEvent,
+				referrer: "https://www.google.com/search?q=private",
+			},
+			now,
+		);
+		expect(normalized?.referrer).toBe("www.google.com");
+	});
+});
+
+describe("createProductEventRows", () => {
+	it("adds trusted server context without accepting client identity", () => {
+		const [row] = createProductEventRows(
+			[
+				{
+					eventId: "event-1",
+					eventName: "purchase_completed",
+					occurredAt: "2026-07-12T12:00:00.000Z",
+					anonymousId: "guest-checkout",
+					platform: "server",
+					properties: { plan: "monthly" },
+				},
+			],
+			{
+				receivedAt: "2026-07-12T12:00:01.000Z",
+				source: "server",
+				userId: "user-1",
+				organizationId: "org-1",
+				country: "CY",
+			},
+		);
+
+		expect(row).toMatchObject({
+			event_id: "event-1",
+			event_name: "purchase_completed",
+			source: "server",
+			user_id: "user-1",
+			organization_id: "org-1",
+			country: "CY",
+			properties: '{"plan":"monthly"}',
+		});
+	});
+});
diff --git a/packages/analytics/src/index.ts b/packages/analytics/src/index.ts
new file mode 100644
index 00000000000..3a826fabcbd
--- /dev/null
+++ b/packages/analytics/src/index.ts
@@ -0,0 +1,448 @@
+export const CORE_EVENT_NAMES = [
+	"page_view",
+	"download_cta_clicked",
+	"pricing_cta_clicked",
+	"cli_install_command_copied",
+	"auth_started",
+	"auth_email_sent",
+	"user_signed_up",
+	"recording_started",
+	"recording_completed",
+	"multipart_upload_complete",
+	"multipart_upload_failed",
+	"export_button_clicked",
+	"create_shareable_link_clicked",
+	"checkout_started",
+	"guest_checkout_started",
+	"purchase_completed",
+	"organization_invite_sent",
+	"organization_member_joined",
+	"seat_quantity_changed",
+	"loom_import_started",
+	"loom_import_completed",
+	"loom_import_failed",
+	"first_view_received",
+	"recording_recovery_failed",
+] as const;
+
+export const SERVER_ONLY_EVENT_NAMES = [
+	"user_signed_up",
+	"checkout_started",
+	"guest_checkout_started",
+	"purchase_completed",
+	"organization_invite_sent",
+	"organization_member_joined",
+	"seat_quantity_changed",
+	"first_view_received",
+] as const satisfies readonly CoreEventName[];
+
+export type CoreEventName = (typeof CORE_EVENT_NAMES)[number];
+export type ProductEventPlatform = "web" | "desktop" | "mobile" | "server";
+export type ProductEventProperty = string | number | boolean | null;
+export type ProductEventProperties = Record<string, ProductEventProperty>;
+
+export const PRODUCT_ANALYTICS_ANONYMOUS_ID_COOKIE =
+	"cap_analytics_anonymous_id";
+
+export interface ProductEventInput {
+	eventId: string;
+	eventName: CoreEventName;
+	occurredAt: string;
+	anonymousId: string;
+	sessionId?: string;
+	platform: ProductEventPlatform;
+	appVersion?: string;
+	pathname?: string;
+	referrer?: string;
+	properties?: ProductEventProperties;
+}
+
+export interface ProductEventContext {
+	receivedAt: string;
+	source: "client" | "server";
+	userId?: string;
+	organizationId?: string;
+	country?: string;
+	region?: string;
+	city?: string;
+}
+
+export interface ProductEventRow {
+	event_id: string;
+	occurred_at: string;
+	received_at: string;
+	event_name: CoreEventName;
+	schema_version: 1;
+	source: "client" | "server";
+	platform: ProductEventPlatform;
+	anonymous_id: string;
+	session_id: string;
+	user_id: string;
+	organization_id: string;
+	app_version: string;
+	pathname: string;
+	referrer: string;
+	country: string;
+	region: string;
+	city: string;
+	properties: string;
+}
+
+export const PRODUCT_ANALYTICS_LIMITS = {
+	batchSize: 20,
+	queueSize: 100,
+	requestBytes: 64 * 1024,
+	propertyCount: 32,
+	propertyKeyLength: 64,
+	propertyStringLength: 512,
+	propertiesBytes: 16 * 1024,
+	identifierLength: 128,
+	appVersionLength: 64,
+	pathnameLength: 2048,
+	referrerLength: 2048,
+	maxPastAgeMs: 7 * 24 * 60 * 60 * 1000,
+	maxFutureAgeMs: 5 * 60 * 1000,
+} as const;
+
+export class ProductAnalyticsError extends Error {
+	readonly _tag = "ProductAnalyticsError";
+	readonly retryable: boolean;
+	readonly status?: number;
+
+	constructor(options: {
+		cause: unknown;
+		retryable: boolean;
+		status?: number;
+	}) {
+		super("Product analytics request failed", { cause: options.cause });
+		this.name = "ProductAnalyticsError";
+		this.retryable = options.retryable;
+		this.status = options.status;
+	}
+}
+
+interface ProductAnalyticsTransportOptions {
+	host: string;
+	token: string;
+	rows: readonly ProductEventRow[];
+	wait?: boolean;
+	maxAttempts?: number;
+	fetchImpl?: typeof fetch;
+}
+
+export async function sendProductAnalyticsRows({
+	host,
+	token,
+	rows,
+	wait = false,
+	maxAttempts = 2,
+	fetchImpl = fetch,
+}: ProductAnalyticsTransportOptions) {
+	if (rows.length === 0) return;
+
+	const url = new URL("/v0/events", host);
+	url.searchParams.set("name", "product_events_v1");
+	url.searchParams.set("format", "ndjson");
+	if (wait) url.searchParams.set("wait", "true");
+
+	const body = rows.map((row) => JSON.stringify(row)).join("\n");
+	let lastError: ProductAnalyticsError | undefined;
+
+	for (let attempt = 0; attempt < maxAttempts; attempt += 1) {
+		try {
+			const response = await fetchImpl(url, {
+				method: "POST",
+				headers: {
+					Authorization: `Bearer ${token}`,
+					"Content-Type": "application/x-ndjson",
+				},
+				body,
+				signal: AbortSignal.timeout(wait ? 10_000 : 2_000),
+			});
+
+			if (response.ok) return;
+
+			const retryable = response.status === 429 || response.status >= 500;
+			lastError = new ProductAnalyticsError({
+				cause: await response.text(),
+				retryable,
+				status: response.status,
+			});
+			if (!retryable) throw lastError;
+		} catch (cause) {
+			if (cause instanceof ProductAnalyticsError) throw cause;
+			lastError = new ProductAnalyticsError({ cause, retryable: true });
+		}
+
+		if (attempt + 1 < maxAttempts) {
+			await new Promise((resolve) => setTimeout(resolve, 100));
+		}
+	}
+
+	throw (
+		lastError ??
+		new ProductAnalyticsError({
+			cause: "Product analytics request failed",
+			retryable: false,
+		})
+	);
+}
+
+const CORE_EVENT_NAME_SET = new Set<string>(CORE_EVENT_NAMES);
+const SERVER_ONLY_EVENT_NAME_SET = new Set<string>(SERVER_ONLY_EVENT_NAMES);
+const PROPERTY_KEY_PATTERN = /^[a-z][a-z0-9_]*$/;
+const FORBIDDEN_PROPERTY_KEYS = new Set([
+	"comment",
+	"content",
+	"email",
+	"error",
+	"error_message",
+	"file_name",
+	"file_path",
+	"raw_error",
+	"reason",
+	"recording_name",
+	"organization_id",
+	"session_id",
+	"subscription_id",
+	"title",
+	"transcript",
+	"user_email",
+	"user_id",
+	"video_id",
+]);
+const CLIENT_PRODUCT_EVENT_PLATFORMS = new Set<ProductEventPlatform>([
+	"web",
+	"desktop",
+]);
+const DYNAMIC_ID_PARENT_SEGMENTS = new Set([
+	"apps",
+	"c",
+	"dev",
+	"embed",
+	"folder",
+	"invite",
+	"messenger",
+	"s",
+	"spaces",
+	"videos",
+]);
+const UUID_PATTERN =
+	/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const ULID_PATTERN = /^[0-9A-HJKMNP-TV-Z]{26}$/;
+const CAP_NANOID_PATTERN = /^(?:[0-9abcdefghjkmnpqrstvwxyz]{15}){1,2}$/;
+
+export function isCoreEventName(value: string): value is CoreEventName {
+	return CORE_EVENT_NAME_SET.has(value);
+}
+
+export function isServerOnlyEventName(value: CoreEventName) {
+	return SERVER_ONLY_EVENT_NAME_SET.has(value);
+}
+
+export function normalizeProductEventProperties(
+	properties?: Record<string, unknown>,
+): ProductEventProperties | undefined {
+	if (!properties) return undefined;
+
+	const normalized: ProductEventProperties = {};
+	let count = 0;
+
+	for (const [key, value] of Object.entries(properties)) {
+		if (count >= PRODUCT_ANALYTICS_LIMITS.propertyCount) break;
+		if (
+			key.length > PRODUCT_ANALYTICS_LIMITS.propertyKeyLength ||
+			!PROPERTY_KEY_PATTERN.test(key) ||
+			FORBIDDEN_PROPERTY_KEYS.has(key)
+		) {
+			continue;
+		}
+
+		let normalizedValue: ProductEventProperty;
+		if (typeof value === "string") {
+			normalizedValue = value.slice(
+				0,
+				PRODUCT_ANALYTICS_LIMITS.propertyStringLength,
+			);
+		} else if (typeof value === "number" && Number.isFinite(value)) {
+			normalizedValue = value;
+		} else if (typeof value === "boolean" || value === null) {
+			normalizedValue = value;
+		} else {
+			continue;
+		}
+
+		normalized[key] = normalizedValue;
+		if (
+			new TextEncoder().encode(JSON.stringify(normalized)).byteLength >
+			PRODUCT_ANALYTICS_LIMITS.propertiesBytes
+		) {
+			delete normalized[key];
+			continue;
+		}
+
+		count += 1;
+	}
+
+	return count > 0 ? normalized : undefined;
+}
+
+export function normalizeProductEventInput(
+	value: unknown,
+	now = Date.now(),
+): ProductEventInput | null {
+	if (!isRecord(value)) return null;
+
+	const eventId = normalizeIdentifier(value.eventId);
+	const anonymousId = normalizeIdentifier(value.anonymousId);
+	const sessionId = normalizeOptionalIdentifier(value.sessionId);
+	const eventName = value.eventName;
+	const platform = value.platform;
+	const occurredAt = normalizeOccurredAt(value.occurredAt, now);
+
+	if (
+		!eventId ||
+		!anonymousId ||
+		!occurredAt ||
+		typeof eventName !== "string" ||
+		!isCoreEventName(eventName) ||
+		typeof platform !== "string" ||
+		!CLIENT_PRODUCT_EVENT_PLATFORMS.has(platform as ProductEventPlatform)
+	) {
+		return null;
+	}
+
+	const properties =
+		"properties" in value && isRecord(value.properties)
+			? normalizeProductEventProperties(value.properties)
+			: undefined;
+
+	return {
+		eventId,
+		eventName,
+		occurredAt,
+		anonymousId,
+		...(sessionId ? { sessionId } : {}),
+		platform: platform as ProductEventPlatform,
+		...normalizeOptionalStringField(
+			"appVersion",
+			value.appVersion,
+			PRODUCT_ANALYTICS_LIMITS.appVersionLength,
+		),
+		...normalizeOptionalPathname(value.pathname),
+		...normalizeOptionalReferrer(value.referrer),
+		...(properties ? { properties } : {}),
+	};
+}
+
+export function createProductEventRows(
+	events: readonly ProductEventInput[],
+	context: ProductEventContext,
+): ProductEventRow[] {
+	return events.map((event) => ({
+		event_id: event.eventId,
+		occurred_at: event.occurredAt,
+		received_at: context.receivedAt,
+		event_name: event.eventName,
+		schema_version: 1,
+		source: context.source,
+		platform: event.platform,
+		anonymous_id: event.anonymousId,
+		session_id: event.sessionId ?? "",
+		user_id: context.userId ?? "",
+		organization_id: context.organizationId ?? "",
+		app_version: event.appVersion ?? "",
+		pathname: event.pathname ?? "",
+		referrer: event.referrer ?? "",
+		country: context.country ?? "",
+		region: context.region ?? "",
+		city: context.city ?? "",
+		properties: event.properties ? JSON.stringify(event.properties) : "{}",
+	}));
+}
+
+function isRecord(value: unknown): value is Record<string, unknown> {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+function normalizeIdentifier(value: unknown) {
+	if (typeof value !== "string") return null;
+	const normalized = value.trim();
+	if (
+		!normalized ||
+		normalized.length > PRODUCT_ANALYTICS_LIMITS.identifierLength
+	) {
+		return null;
+	}
+	return normalized;
+}
+
+function normalizeOptionalIdentifier(value: unknown) {
+	if (value === undefined || value === null || value === "") return undefined;
+	return normalizeIdentifier(value) ?? undefined;
+}
+
+function normalizeOccurredAt(value: unknown, now: number) {
+	if (typeof value !== "string") return null;
+	const timestamp = Date.parse(value);
+	if (!Number.isFinite(timestamp)) return null;
+	if (timestamp < now - PRODUCT_ANALYTICS_LIMITS.maxPastAgeMs) return null;
+	if (timestamp > now + PRODUCT_ANALYTICS_LIMITS.maxFutureAgeMs) return null;
+	return new Date(timestamp).toISOString();
+}
+
+function normalizeOptionalStringField<Key extends "appVersion">(
+	key: Key,
+	value: unknown,
+	maxLength: number,
+): Partial<Record<Key, string>> {
+	if (typeof value !== "string") return {};
+	const normalized = value.trim().slice(0, maxLength);
+	return normalized ? ({ [key]: normalized } as Record<Key, string>) : {};
+}
+
+function normalizeOptionalPathname(value: unknown) {
+	if (typeof value !== "string") return {};
+
+	let pathname = value.trim();
+	try {
+		pathname = new URL(pathname).pathname;
+	} catch {
+		pathname = pathname.split(/[?#]/, 1)[0] ?? "";
+	}
+
+	const segments = pathname.split("/");
+	const normalized = segments
+		.map((segment, index) =>
+			isHighCardinalityPathSegment(segment, segments[index - 1])
+				? ":id"
+				: segment,
+		)
+		.join("/")
+		.slice(0, PRODUCT_ANALYTICS_LIMITS.pathnameLength);
+
+	return normalized ? { pathname: normalized } : {};
+}
+
+function normalizeOptionalReferrer(value: unknown) {
+	if (typeof value !== "string" || !value.trim()) return {};
+	try {
+		return {
+			referrer: new URL(value).hostname.slice(
+				0,
+				PRODUCT_ANALYTICS_LIMITS.referrerLength,
+			),
+		};
+	} catch {
+		return {};
+	}
+}
+
+function isHighCardinalityPathSegment(segment: string, parentSegment?: string) {
+	if (UUID_PATTERN.test(segment) || ULID_PATTERN.test(segment)) return true;
+	return Boolean(
+		parentSegment &&
+			DYNAMIC_ID_PARENT_SEGMENTS.has(parentSegment) &&
+			CAP_NANOID_PATTERN.test(segment),
+	);
+}
diff --git a/packages/analytics/tsconfig.json b/packages/analytics/tsconfig.json
new file mode 100644
index 00000000000..e8b0bc24b9c
--- /dev/null
+++ b/packages/analytics/tsconfig.json
@@ -0,0 +1,9 @@
+{
+	"extends": "../config/base.tsconfig.json",
+	"exclude": ["node_modules"],
+	"include": ["**/*.ts"],
+	"compilerOptions": {
+		"baseUrl": ".",
+		"moduleResolution": "bundler"
+	}
+}
diff --git a/packages/env/build.ts b/packages/env/build.ts
index db1d045703c..0a9b5f7d08f 100644
--- a/packages/env/build.ts
+++ b/packages/env/build.ts
@@ -9,8 +9,6 @@ const create = () =>
 	createEnv({
 		client: {
 			NEXT_PUBLIC_IS_CAP: z.string().optional(),
-			NEXT_PUBLIC_POSTHOG_KEY: z.string().optional(),
-			NEXT_PUBLIC_POSTHOG_HOST: z.string().optional(),
 			NEXT_PUBLIC_META_PIXEL_ID: z.string().optional(),
 			NEXT_PUBLIC_GOOGLE_AW_ID: z.string().optional(),
 			NEXT_PUBLIC_WEB_URL: z.string(),
@@ -18,8 +16,6 @@ const create = () =>
 		},
 		runtimeEnv: {
 			NEXT_PUBLIC_IS_CAP: process.env.NEXT_PUBLIC_IS_CAP,
-			NEXT_PUBLIC_POSTHOG_KEY: process.env.NEXT_PUBLIC_POSTHOG_KEY,
-			NEXT_PUBLIC_POSTHOG_HOST: process.env.NEXT_PUBLIC_POSTHOG_HOST,
 			NEXT_PUBLIC_META_PIXEL_ID: process.env.NEXT_PUBLIC_META_PIXEL_ID,
 			NEXT_PUBLIC_GOOGLE_AW_ID: process.env.NEXT_PUBLIC_GOOGLE_AW_ID,
 			NEXT_PUBLIC_WEB_URL:
diff --git a/packages/env/server.ts b/packages/env/server.ts
index 1fe96e61d66..ec298e73c90 100644
--- a/packages/env/server.ts
+++ b/packages/env/server.ts
@@ -110,6 +110,8 @@ function createServerEnv() {
 			/// Tinybird analytics
 			TINYBIRD_HOST: z.string().optional(),
 			TINYBIRD_TOKEN: z.string().optional(),
+			PRODUCT_ANALYTICS_TINYBIRD_HOST: z.string().optional(),
+			PRODUCT_ANALYTICS_TINYBIRD_TOKEN: z.string().optional(),
 			VERCEL_ENV: z
 				.union([
 					z.literal("production"),
@@ -124,7 +126,6 @@ function createServerEnv() {
 			VERCEL_BRANCH_URL_HOST: z.string().optional(),
 			VERCEL_PROJECT_PRODUCTION_URL_HOST: z.string().optional(),
 			VERCEL_AWS_ROLE_ARN: z.string().optional(),
-			POSTHOG_PERSONAL_API_KEY: z.string().optional(),
 			DUB_API_KEY: z.string().optional(),
 
 			/// Media Server
diff --git a/packages/local-docker/docker-compose.yml b/packages/local-docker/docker-compose.yml
index a42005a7b28..bb0cf8514ae 100644
--- a/packages/local-docker/docker-compose.yml
+++ b/packages/local-docker/docker-compose.yml
@@ -60,7 +60,57 @@ services:
       /usr/bin/mc anonymous set-json /tmp/policy.json myminio/capso;
       exit 0;
       "
+
+  tinybird-local:
+    profiles: ["analytics"]
+    container_name: cap-tinybird-local
+    image: tinybirdco/tinybird-local@sha256:fd4284d2f1ad6a448823e5bc6414267848da964823dc9f98670793bb88031e4d
+    platform: linux/amd64
+    restart: unless-stopped
+    environment:
+      TB_LOCAL_USER_TOKEN: ${TB_LOCAL_USER_TOKEN:-}
+      TB_LOCAL_WORKSPACE_TOKEN: ${TB_LOCAL_WORKSPACE_TOKEN:-}
+    ports:
+      - "127.0.0.1:${TINYBIRD_LOCAL_PORT:-7181}:7181"
+    volumes:
+      - tinybird-clickhouse:/var/lib/clickhouse
+      - tinybird-metadata:/redis-data
+
+  tinybird-cli:
+    profiles: ["analytics"]
+    image: tinybirdco/tb-cli-docker:4.6.9@sha256:6f72ef340cb4ec6a4c4b4e724da4c48799c81c89912130dc7cd4cc61efc13945
+    depends_on:
+      - tinybird-local
+    network_mode: "service:tinybird-local"
+    working_dir: /workspace/tinybird
+    entrypoint: ["tb"]
+    environment:
+      TB_LOCAL: "1"
+      TB_TOKEN: ${TB_LOCAL_WORKSPACE_TOKEN:-}
+      TB_USER_TOKEN: ${TB_LOCAL_USER_TOKEN:-}
+      TINYBIRD_TOKEN: ${TB_LOCAL_WORKSPACE_TOKEN:-}
+      TINYBIRD_URL: http://127.0.0.1:7181
+      PRODUCT_ANALYTICS_TINYBIRD_HOST: http://127.0.0.1:7181
+      PRODUCT_ANALYTICS_TINYBIRD_TOKEN: ${TB_LOCAL_WORKSPACE_TOKEN:-}
+    volumes:
+      - ../../scripts/analytics/tinybird:/workspace/tinybird:ro
+      - ../../scripts/analytics/tinybird-local-workspace.json:/workspace/.tinyb:ro
+
+  tinybird-cloud-cli:
+    profiles: ["analytics"]
+    image: tinybirdco/tb-cli-docker:4.6.9@sha256:6f72ef340cb4ec6a4c4b4e724da4c48799c81c89912130dc7cd4cc61efc13945
+    working_dir: /workspace
+    entrypoint: ["tb"]
+    environment:
+      TINYBIRD_TOKEN: ${TINYBIRD_TOKEN:-}
+      TINYBIRD_URL: ${TINYBIRD_URL:-https://api.tinybird.co}
+      TB_TOKEN: ${TB_TOKEN:-}
+      TB_HOST: ${TB_HOST:-https://api.tinybird.co}
+    volumes:
+      - ../../scripts/analytics/tinybird:/workspace:ro
 volumes:
   ps-mysql:
   minio-data:
   minio-certs:
+  tinybird-clickhouse:
+  tinybird-metadata:
diff --git a/packages/local-docker/package.json b/packages/local-docker/package.json
index a68d75430c9..f1b68ad5154 100644
--- a/packages/local-docker/package.json
+++ b/packages/local-docker/package.json
@@ -5,6 +5,8 @@
 	"types": "./src/index.tsx",
 	"scripts": {
 		"dev": "pnpm docker:up",
+		"analytics:up": "node ../../scripts/analytics/analytics-cli.js local",
+		"analytics:stop": "node ../../scripts/analytics/analytics-cli.js local-stop",
 		"docker:up": "docker compose up -d --wait",
 		"docker:stop": "docker compose stop",
 		"docker:clean": "docker compose down -v"
diff --git a/packages/web-backend/package.json b/packages/web-backend/package.json
index 6d644700853..90afa3f2465 100644
--- a/packages/web-backend/package.json
+++ b/packages/web-backend/package.json
@@ -17,6 +17,7 @@
 		"@aws-sdk/credential-providers": "^3.908.0",
 		"@aws-sdk/s3-presigned-post": "^3.485.0",
 		"@aws-sdk/s3-request-presigner": "^3.485.0",
+		"@cap/analytics": "workspace:*",
 		"@cap/database": "workspace:*",
 		"@cap/utils": "workspace:*",
 		"@cap/web-domain": "workspace:*",
diff --git a/packages/web-backend/src/ProductAnalytics/index.ts b/packages/web-backend/src/ProductAnalytics/index.ts
new file mode 100644
index 00000000000..cdf0301e032
--- /dev/null
+++ b/packages/web-backend/src/ProductAnalytics/index.ts
@@ -0,0 +1,113 @@
+import {
+	ProductAnalyticsError,
+	type ProductEventRow,
+	sendProductAnalyticsRows,
+} from "@cap/analytics";
+import * as Db from "@cap/database/schema";
+import { serverEnv } from "@cap/env";
+import { HttpServerRequest } from "@effect/platform";
+import * as Dz from "drizzle-orm";
+import { Effect, Option, Schema } from "effect";
+import { getCurrentUser } from "../Auth.ts";
+import { Database } from "../Database.ts";
+
+export {
+	ProductAnalyticsError,
+	sendProductAnalyticsRows,
+} from "@cap/analytics";
+
+export interface ProductAnalyticsActor {
+	userId: string;
+	organizationId: string;
+}
+
+export function hasAnalyticsSessionCookie(cookie?: string) {
+	return /(?:^|;\s*)next-auth\.session-token(?:\.\d+)?=/.test(cookie ?? "");
+}
+
+export const resolveProductAnalyticsActor = Effect.gen(function* () {
+	const database = yield* Database;
+	const headers = yield* HttpServerRequest.schemaHeaders(
+		Schema.Struct({
+			authorization: Schema.optional(Schema.String),
+			cookie: Schema.optional(Schema.String),
+		}),
+	).pipe(
+		Effect.catchAll(() =>
+			Effect.succeed({ authorization: undefined, cookie: undefined }),
+		),
+	);
+	const token = headers.authorization?.match(/^Bearer\s+(.+)$/i)?.[1];
+
+	const user =
+		token?.length === 36
+			? yield* database
+					.use((db) =>
+						db
+							.select({
+								id: Db.users.id,
+								activeOrganizationId: Db.users.activeOrganizationId,
+							})
+							.from(Db.users)
+							.innerJoin(
+								Db.authApiKeys,
+								Dz.eq(Db.users.id, Db.authApiKeys.userId),
+							)
+							.where(Dz.eq(Db.authApiKeys.id, token))
+							.limit(1),
+					)
+					.pipe(Effect.map(([entry]) => Option.fromNullable(entry)))
+			: hasAnalyticsSessionCookie(headers.cookie)
+				? yield* getCurrentUser.pipe(
+						Effect.map(
+							Option.map((entry) => ({
+								id: entry.id,
+								activeOrganizationId: entry.activeOrganizationId,
+							})),
+						),
+					)
+				: Option.none();
+
+	return Option.match(user, {
+		onNone: () => undefined,
+		onSome: (entry): ProductAnalyticsActor => ({
+			userId: entry.id,
+			organizationId: entry.activeOrganizationId,
+		}),
+	});
+}).pipe(Effect.catchAll(() => Effect.succeed(undefined)));
+
+export class ProductAnalytics extends Effect.Service<ProductAnalytics>()(
+	"ProductAnalytics",
+	{
+		effect: Effect.sync(() => {
+			const env = serverEnv();
+			const host = env.PRODUCT_ANALYTICS_TINYBIRD_HOST;
+			const token = env.PRODUCT_ANALYTICS_TINYBIRD_TOKEN;
+			const enabled = Boolean(host && token);
+
+			const append = (rows: readonly ProductEventRow[], wait = false) => {
+				if (!enabled || !host || !token || rows.length === 0) {
+					return Effect.void;
+				}
+
+				return Effect.tryPromise({
+					try: () =>
+						sendProductAnalyticsRows({
+							host,
+							token,
+							rows,
+							wait,
+							maxAttempts: 1,
+						}),
+					catch: (cause) =>
+						cause instanceof ProductAnalyticsError
+							? cause
+							: new ProductAnalyticsError({ cause, retryable: false }),
+				});
+			};
+
+			return { enabled, append } as const;
+		}),
+	},
+) {}
diff --git a/packages/web-backend/src/index.ts b/packages/web-backend/src/index.ts
index ddfbb957d47..d74bf98060b 100644
--- a/packages/web-backend/src/index.ts
+++ b/packages/web-backend/src/index.ts
@@ -10,6 +10,14 @@ export { ImageUploads } from "./ImageUploads/index.ts";
 export * from "./Loom/index.ts";
 export { Organisations } from "./Organisations/index.ts";
 export { OrganisationsPolicy } from "./Organisations/OrganisationsPolicy.ts";
+
+export {
+	hasAnalyticsSessionCookie,
+	ProductAnalytics,
+	ProductAnalyticsError,
+	resolveProductAnalyticsActor,
+	sendProductAnalyticsRows,
+} from "./ProductAnalytics/index.ts";
 export * from "./Rpcs.ts";
 export { S3Buckets } from "./S3Buckets/index.ts";
 export { Spaces } from "./Spaces/index.ts";
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c6c2d3e66a9..698c18d4785 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -111,6 +111,9 @@ importers:
       '@aerofoil/rive-solid-canvas':
         specifier: ^2.1.4
         version: 2.1.4
+      '@cap/analytics':
+        specifier: workspace:*
+        version: link:../../packages/analytics
       '@cap/database':
         specifier: workspace:*
         version: link:../../packages/database
@@ -188,7 +191,7 @@ importers:
         version: 0.14.10(solid-js@1.9.13)
       '@solidjs/start':
         specifier: ^1.1.3
-        version: 1.3.2(@testing-library/jest-dom@6.5.0)(solid-js@1.9.13)(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
+        version: 1.3.2(@testing-library/jest-dom@6.5.0)(solid-js@1.9.13)(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
       '@tanstack/solid-query':
         specifier: ^5.51.21
         version: 5.101.2(solid-js@1.9.13)
@@ -249,9 +252,6 @@ importers:
       mp4box:
         specifier: ^0.5.2
         version: 0.5.4
-      posthog-js:
-        specifier: ^1.215.3
-        version: 1.396.3
       solid-js:
         specifier: ^1.9.3
         version: 1.9.13
@@ -278,7 +278,7 @@ importers:
         version: 9.0.1
       vinxi:
         specifier: ^0.5.6
-        version: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
+        version: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
       webcodecs:
         specifier: ^0.1.0
         version: 0.1.0
@@ -300,7 +300,7 @@ importers:
         version: 4.3.2
       '@tailwindcss/typography':
         specifier: ^0.5.9
-        version: 0.5.20(tailwindcss@3.4.19(yaml@2.9.0))
+        version: 0.5.20(tailwindcss@4.3.2)
       '@tauri-apps/cli':
         specifier: '>=2.1.0'
         version: 2.11.4
@@ -626,6 +626,9 @@ importers:
       '@aws-sdk/s3-request-presigner':
         specifier: ^3.485.0
         version: 3.1077.0
+      '@cap/analytics':
+        specifier: workspace:*
+        version: link:../../packages/analytics
       '@cap/database':
         specifier: workspace:*
         version: link:../../packages/database
@@ -908,12 +911,6 @@ importers:
       next-mdx-remote:
         specifier: ^6.0.0
         version: 6.0.0(@types/react@19.2.14)(react@19.2.4)
-      posthog-js:
-        specifier: ^1.215.3
-        version: 1.396.3
-      posthog-node:
-        specifier: ^4.11.2
-        version: 4.18.0
       prettier:
         specifier: ^3.7.4
         version: 3.9.4
@@ -1143,6 +1140,12 @@ importers:
         specifier: 3.17.14
         version: 3.17.14
 
+  packages/analytics:
+    devDependencies:
+      vitest:
+        specifier: ^3.2.0
+        version: 3.2.6(@types/debug@4.1.13)(@types/node@22.20.0)(@vitest/ui@3.2.6)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)
+
   packages/config:
     dependencies:
       '@vitejs/plugin-react':
@@ -1613,6 +1616,9 @@ importers:
       '@aws-sdk/s3-request-presigner':
         specifier: ^3.485.0
         version: 3.1077.0
+      '@cap/analytics':
+        specifier: workspace:*
+        version: link:../analytics
       '@cap/database':
         specifier: workspace:*
         version: link:../database
@@ -5382,12 +5388,6 @@ packages:
   '@poppinss/exception@1.2.3':
     resolution: {integrity: sha512-dCED+QRChTVatE9ibtoaxc+WkdzOSjYTKi/+uacHWIsfodVfpsueo3+DKpgU5Px8qXjgmXkSvhXvSCz3fnP9lw==}
 
-  '@posthog/core@1.39.2':
-    resolution: {integrity: sha512-G/TL5Xykl+9xCDtBwHHPRSToS/43UjzyxKOfhlTwu/hJHt3v39Q2OFu8hdum71Iu7+tuxxISGVcFMlIST7ksjA==}
-
-  '@posthog/types@1.392.0':
-    resolution: {integrity: sha512-nctNujXL3FC1v99FktaTMSugSD9ZOZekEpahUSafkU2TSvW+XGKNkQZbokuJtiWvPBK208dwMJva8UfBkChqpw==}
-
   '@protobufjs/aspromise@1.1.2':
     resolution: {integrity: sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==}
 
@@ -7156,10 +7156,10 @@ packages:
       react-dom:
         optional: true
 
-  '@storybook/builder-vite@10.6.0-alpha.2':
-    resolution: {integrity: sha512-+RmxSxN2QKL9Ycv6GwexvuFGJYTwFn62C8bHZl4E6RWIM8BtcX6i48f11G+PRU427fiVt8/q3TeMxnrHvD0yPQ==}
+  '@storybook/builder-vite@10.6.0-alpha.3':
+    resolution: {integrity: sha512-bIJiS9aEW9AhUJX1vPlqCb5cqJQPqX+SCi0fZvu6wxGnTKjAQ2zYHGGe1eFozVEidprT6nfU6GrGnzOB1brAcg==}
     peerDependencies:
-      storybook: ^10.6.0-alpha.2
+      storybook: ^10.6.0-alpha.3
       vite: ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
 
   '@storybook/core@8.6.18':
@@ -7170,12 +7170,12 @@ packages:
       prettier:
         optional: true
 
-  '@storybook/csf-plugin@10.6.0-alpha.2':
-    resolution: {integrity: sha512-6KCewtpgBiDSRp0nZRMKlZXTbXf+bNouujk4owQmkeiTTFiVfb2dgzoxtPgsPCMrWaGDslcT+bM8D27CEmxKwA==}
+  '@storybook/csf-plugin@10.6.0-alpha.3':
+    resolution: {integrity: sha512-wJdPboI9AblSGI3790YfvkhGJL0y6ZDAAnPYCwPLXe0IDPtcVR9jMA0F8p/oGJrgkSfROIP5IhVjlq3WjER9gA==}
     peerDependencies:
       esbuild: '*'
       rollup: '*'
-      storybook: ^10.6.0-alpha.2
+      storybook: ^10.6.0-alpha.3
       vite: '*'
       webpack: '*'
     peerDependenciesMeta:
@@ -9078,9 +9078,6 @@ packages:
     resolution: {integrity: sha512-s7iGf5GaVMxEG0ENN9x+xTr7GFZCb1ZP/1uATUpCEK2X78nDB3RwbtFCo9pGAf9ru+VwoQ464DkaLEeRM08wJA==}
     engines: {node: '>=4'}
 
-  axios@1.18.1:
-    resolution: {integrity: sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==}
-
   axobject-query@4.1.0:
     resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==}
     engines: {node: '>= 0.4'}
@@ -9789,9 +9786,6 @@ packages:
   core-js-compat@3.49.0:
     resolution: {integrity: sha512-VQXt1jr9cBz03b331DFDCCP90b3fanciLkgiOoy8SBHy06gNf+vQ1A3WFLqG7I8TipYIKeYK9wxd0tUrvHcOZA==}
 
-  core-js@3.49.0:
-    resolution: {integrity: sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==}
-
   core-util-is@1.0.3:
     resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
 
@@ -11194,9 +11188,6 @@ packages:
   fetch-nodeshim@0.4.10:
     resolution: {integrity: sha512-m6I8ALe4L4XpdETy7MJZWs6L1IVMbjs99bwbpIKphxX+0CTns4IKDWJY0LWfr4YsFjfg+z1TjzTMU8lKl8rG0w==}
 
-  fflate@0.4.8:
-    resolution: {integrity: sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==}
-
   fflate@0.8.3:
     resolution: {integrity: sha512-tbZNuJrLwGUp3zshBtdy4W+ORxZuIh8a5ilyIEQDC5rY1f3U20JMry0Ll3WBzU58EZKsEuJFXhb5gwv8CsPvgA==}
 
@@ -13861,13 +13852,6 @@ packages:
     resolution: {integrity: sha512-vuwillviilfKZsg0VGj5R/YwwcHx4SLsIOI/7K6mQkWx+l5cUHTjj5g0AasTBcyXsbfTgrwsUNmVUb5xVwyPwg==}
     engines: {node: ^10 || ^12 || >=14}
 
-  posthog-js@1.396.3:
-    resolution: {integrity: sha512-CL4mH3F2azsONko/zC2931RLdt6RxTsEr7x7Lyk0SDmj5hZuvBCTbg9MKViXwSRhBr3/SaGcaHS1n95WxTrsCw==}
-
-  posthog-node@4.18.0:
-    resolution: {integrity: sha512-XROs1h+DNatgKh/AlIlCtDxWzwrKdYDb2mOs58n4yN8BkGN9ewqeQwG5ApS4/IzwCb7HPttUkOVulkYatd2PIw==}
-    engines: {node: '>=15.0.0'}
-
   powershell-utils@0.1.0:
     resolution: {integrity: sha512-dM0jVuXJPsDN6DvRpea484tCUaMiXWjuCn++HGTqUWzGDjv5tZkEZldAJ/UMlqRYGFrD/etByo4/xOuC/snX2A==}
     engines: {node: '>=20'}
@@ -13984,10 +13968,6 @@ packages:
     resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
     engines: {node: '>= 0.10'}
 
-  proxy-from-env@2.1.0:
-    resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
-    engines: {node: '>=10'}
-
   punycode@1.3.2:
     resolution: {integrity: sha512-RofWgt/7fL5wP1Y7fxE7/EmTLzQVnB0ycyibJ0OOHIlJqTNzglYFxVwETOcIoJqJmpDXJ9xImDv+Fq34F/d4Dw==}
 
@@ -14019,9 +13999,6 @@ packages:
   quansync@1.0.0:
     resolution: {integrity: sha512-5xZacEEufv3HSTPQuchrvV6soaiACMFnq1H8wkVioctoH3TRha9Sz66lOxRwPK/qZj7HPiSveih9yAyh98gvqA==}
 
-  query-selector-shadow-dom@1.0.1:
-    resolution: {integrity: sha512-lT5yCqEBgfoMYpf3F2xQRK7zEr1rhIIZuceDK6+xRkJQ4NMbHTwXqk4NkwDwQMNqXgG9r9fyHnzwNVs6zV5KRw==}
-
   query-string@7.1.3:
     resolution: {integrity: sha512-hh2WYhq4fi8+b+/2Kg9CEge4fDPvHS534aOOvOZeQ3+Vf2mCFsaFBYj0i+iXcAq6I9Vzp5fjMFBlONvayDC1qg==}
     engines: {node: '>=6'}
@@ -16504,9 +16481,6 @@ packages:
     resolution: {integrity: sha512-QW95TCTaHmsYfHDybGMwO5IJIM93I/6vTRk+daHTWFPhwh+C8Cg7j7XyKrwrj8Ib6vYXe0ocYNrmzY4xAAN6ug==}
     engines: {node: '>= 14'}
 
-  web-vitals@5.3.0:
-    resolution: {integrity: sha512-q6LWsLatGYZp5VGBIOvbTj6JBV2nOmC8KvWztXBmwJcfFAzhwKwbOxhUH306XY3CcaZDUlSmSuNPBsCn0bFu+g==}
-
   web-worker@1.5.0:
     resolution: {integrity: sha512-RiMReJrTAiA+mBjGONMnjVDP2u3p9R1vkcGz6gDIrOMT3oGuYwX2WRMYI9ipkphSuE5XKEhydbhNEJh4NY9mlw==}
 
@@ -20773,12 +20747,6 @@ snapshots:
 
   '@poppinss/exception@1.2.3': {}
 
-  '@posthog/core@1.39.2':
-    dependencies:
-      '@posthog/types': 1.392.0
-
-  '@posthog/types@1.392.0': {}
-
   '@protobufjs/aspromise@1.1.2': {}
 
   '@protobufjs/base64@1.1.2': {}
@@ -22739,11 +22707,11 @@ snapshots:
     dependencies:
       solid-js: 1.9.13
 
-  '@solidjs/start@1.3.2(@testing-library/jest-dom@6.5.0)(solid-js@1.9.13)(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@solidjs/start@1.3.2(@testing-library/jest-dom@6.5.0)(solid-js@1.9.13)(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
       '@tanstack/server-functions-plugin': 1.121.21(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))
-      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))
+      '@vinxi/server-components': 0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))
       cookie-es: 2.0.1
       defu: 6.1.7
       error-stack-parser: 2.1.4
@@ -22755,7 +22723,7 @@ snapshots:
       source-map-js: 1.2.1
       terracotta: 1.1.0(solid-js@1.9.13)
       tinyglobby: 0.2.17
-      vinxi: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
+      vinxi: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
       vite-plugin-solid: 2.11.12(@testing-library/jest-dom@6.5.0)(solid-js@1.9.13)(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
     transitivePeerDependencies:
       - '@testing-library/jest-dom'
@@ -22875,9 +22843,9 @@ snapshots:
       react: 19.2.4
       react-dom: 19.2.4(react@19.2.4)
 
-  '@storybook/builder-vite@10.6.0-alpha.2(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@storybook/builder-vite@10.6.0-alpha.3(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
-      '@storybook/csf-plugin': 10.6.0-alpha.2(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
+      '@storybook/csf-plugin': 10.6.0-alpha.3(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
       storybook: 8.6.18(prettier@3.9.4)
       ts-dedent: 2.3.0
       vite: 6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)
@@ -22907,7 +22875,7 @@ snapshots:
       - supports-color
       - utf-8-validate
 
-  '@storybook/csf-plugin@10.6.0-alpha.2(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))':
+  '@storybook/csf-plugin@10.6.0-alpha.3(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))':
     dependencies:
       storybook: 8.6.18(prettier@3.9.4)
       unplugin: 2.3.11
@@ -24261,7 +24229,7 @@ snapshots:
       untun: 0.1.3
       uqr: 0.1.3
 
-  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))':
+  '@vinxi/plugin-directives@0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))':
     dependencies:
       '@babel/parser': 7.29.7
       acorn: 8.17.0
@@ -24272,18 +24240,18 @@ snapshots:
       magicast: 0.2.11
       recast: 0.23.12
       tslib: 2.8.1
-      vinxi: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
+      vinxi: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
 
-  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))':
+  '@vinxi/server-components@0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))':
     dependencies:
-      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))
+      '@vinxi/plugin-directives': 0.5.1(vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0))
       acorn: 8.17.0
       acorn-loose: 8.5.2
       acorn-typescript: 1.4.13(acorn@8.17.0)
       astring: 1.9.0
       magicast: 0.2.11
       recast: 0.23.12
-      vinxi: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
+      vinxi: 0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0)
 
   '@virtual-grid/core@2.0.1': {}
 
@@ -24452,7 +24420,7 @@ snapshots:
       sirv: 3.0.2
       tinyglobby: 0.2.17
       tinyrainbow: 2.0.0
-      vitest: 3.2.6(@types/debug@4.1.13)(@types/node@22.20.0)(@vitest/ui@3.2.6)(jiti@2.7.0)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)
+      vitest: 3.2.6(@types/debug@4.1.13)(@types/node@22.20.0)(@vitest/ui@3.2.6)(jiti@1.21.7)(jsdom@26.1.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)
 
   '@vitest/utils@2.0.5':
     dependencies:
@@ -25166,16 +25134,6 @@ snapshots:
 
   axe-core@4.12.1: {}
 
-  axios@1.18.1:
-    dependencies:
-      follow-redirects: 1.16.0
-      form-data: 4.0.6
-      https-proxy-agent: 5.0.1
-      proxy-from-env: 2.1.0
-    transitivePeerDependencies:
-      - debug
-      - supports-color
-
   axobject-query@4.1.0: {}
 
   b4a@1.8.1: {}
@@ -25968,8 +25926,6 @@ snapshots:
     dependencies:
       browserslist: 4.28.4
 
-  core-js@3.49.0: {}
-
   core-util-is@1.0.3: {}
 
   cors@2.8.6:
@@ -27823,8 +27779,6 @@ snapshots:
 
   fetch-nodeshim@0.4.10: {}
 
-  fflate@0.4.8: {}
-
   fflate@0.8.3: {}
 
   ffmpeg-static@5.3.0:
@@ -30400,7 +30354,7 @@ snapshots:
       - '@babel/core'
       - babel-plugin-macros
 
-  nitropack@2.13.4(@planetscale/database@1.20.1)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))(xml2js@0.6.2):
+  nitropack@2.13.4(@planetscale/database@1.20.1)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0))(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))(xml2js@0.6.2):
     dependencies:
       '@cloudflare/kv-asset-handler': 0.4.2
       '@rollup/plugin-alias': 6.0.0(rollup@4.62.2)
@@ -30453,7 +30407,7 @@ snapshots:
       pretty-bytes: 7.1.0
       radix3: 1.1.2
       rollup: 4.62.2
-      rollup-plugin-visualizer: 7.0.1(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(rollup@4.62.2)
+      rollup-plugin-visualizer: 7.0.1(rollup@4.62.2)
       scule: 1.3.0
       semver: 7.8.5
       serve-placeholder: 2.0.2
@@ -30465,7 +30419,7 @@ snapshots:
       uncrypto: 0.1.3
       unctx: 2.5.0
       unenv: 2.0.0-rc.24
-      unimport: 6.3.0(esbuild@0.28.1)(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
+      unimport: 6.3.0(esbuild@0.28.1)(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin-utils: 0.3.2
       unstorage: 1.17.5(@planetscale/database@1.20.1)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)
       untyped: 2.0.0
@@ -31191,24 +31145,6 @@ snapshots:
       picocolors: 1.1.1
       source-map-js: 1.2.1
 
-  posthog-js@1.396.3:
-    dependencies:
-      '@posthog/core': 1.39.2
-      '@posthog/types': 1.392.0
-      core-js: 3.49.0
-      dompurify: 3.4.11
-      fflate: 0.4.8
-      preact: 10.29.3
-      query-selector-shadow-dom: 1.0.1
-      web-vitals: 5.3.0
-
-  posthog-node@4.18.0:
-    dependencies:
-      axios: 1.18.1
-    transitivePeerDependencies:
-      - debug
-      - supports-color
-
   powershell-utils@0.1.0: {}
 
   preact-render-to-string@5.2.6(preact@10.29.3):
@@ -31321,8 +31257,6 @@ snapshots:
       forwarded: 0.2.0
       ipaddr.js: 1.9.1
 
-  proxy-from-env@2.1.0: {}
-
   punycode@1.3.2: {}
 
   punycode@2.3.1: {}
@@ -31348,8 +31282,6 @@ snapshots:
 
   quansync@1.0.0: {}
 
-  query-selector-shadow-dom@1.0.1: {}
-
   query-string@7.1.3:
     dependencies:
       decode-uri-component: 0.2.2
@@ -32149,14 +32081,13 @@ snapshots:
     dependencies:
       rollup-plugin-inject: 3.0.2
 
-  rollup-plugin-visualizer@7.0.1(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(rollup@4.62.2):
+  rollup-plugin-visualizer@7.0.1(rollup@4.62.2):
     dependencies:
       open: 11.0.0
       picomatch: 4.0.4
       source-map: 0.7.6
       yargs: 18.0.0
     optionalDependencies:
-      rolldown: 1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1)
       rollup: 4.62.2
 
   rollup-pluginutils@2.8.2:
@@ -32815,7 +32746,7 @@ snapshots:
 
   storybook-solidjs-vite@1.0.0-beta.7(@storybook/test@8.6.14(storybook@8.6.18(prettier@3.9.4)))(esbuild@0.25.12)(rollup@4.62.2)(solid-js@1.9.13)(storybook@8.6.18(prettier@3.9.4))(vite-plugin-solid@2.11.12(@testing-library/jest-dom@6.5.0)(solid-js@1.9.13)(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)):
     dependencies:
-      '@storybook/builder-vite': 10.6.0-alpha.2(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
+      '@storybook/builder-vite': 10.6.0-alpha.3(esbuild@0.25.12)(rollup@4.62.2)(storybook@8.6.18(prettier@3.9.4))(vite@6.3.5(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
       '@storybook/types': 9.0.0-alpha.1(storybook@8.6.18(prettier@3.9.4))
       magic-string: 0.30.21
       solid-js: 1.9.13
@@ -33652,7 +33583,7 @@ snapshots:
     transitivePeerDependencies:
       - rollup
 
-  unimport@6.3.0(esbuild@0.28.1)(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)):
+  unimport@6.3.0(esbuild@0.28.1)(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)):
     dependencies:
       acorn: 8.17.0
       escape-string-regexp: 5.0.0
@@ -33666,10 +33597,8 @@ snapshots:
       scule: 1.3.0
       strip-literal: 3.1.0
       tinyglobby: 0.2.17
-      unplugin: 3.3.0(esbuild@0.28.1)(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
+      unplugin: 3.3.0(esbuild@0.28.1)(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))
       unplugin-utils: 0.3.2
-    optionalDependencies:
-      rolldown: 1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1)
     transitivePeerDependencies:
       - '@farmfe/core'
       - '@rspack/core'
@@ -33792,14 +33721,13 @@ snapshots:
       picomatch: 4.0.4
       webpack-virtual-modules: 0.6.2
 
-  unplugin@3.3.0(esbuild@0.28.1)(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)):
+  unplugin@3.3.0(esbuild@0.28.1)(rollup@4.62.2)(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)):
     dependencies:
       '@jridgewell/remapping': 2.3.5
       picomatch: 4.0.4
       webpack-virtual-modules: 0.6.2
     optionalDependencies:
       esbuild: 0.28.1
-      rolldown: 1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1)
       rollup: 4.62.2
       vite: 6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0)
 
@@ -34038,7 +33966,7 @@ snapshots:
       d3-time: 3.1.0
       d3-timer: 3.0.1
 
-  vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0):
+  vinxi@0.5.11(@planetscale/database@1.20.1)(@types/node@22.20.0)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(db0@0.3.4(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0)))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(ioredis@5.11.1)(jiti@2.7.0)(lightningcss@1.32.0)(mysql2@3.22.5(@types/node@22.20.0))(terser@5.48.0)(xml2js@0.6.2)(yaml@2.9.0):
     dependencies:
       '@babel/core': 7.29.7
       '@babel/plugin-syntax-jsx': 7.29.7(@babel/core@7.29.7)
@@ -34059,7 +33987,7 @@ snapshots:
       hookable: 5.5.3
       http-proxy: 1.18.1
       micromatch: 4.0.8
-      nitropack: 2.13.4(@planetscale/database@1.20.1)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0))(rolldown@1.0.0-beta.45(@emnapi/core@1.10.0)(@emnapi/runtime@1.11.1))(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))(xml2js@0.6.2)
+      nitropack: 2.13.4(@planetscale/database@1.20.1)(@vercel/functions@3.7.4(@aws-sdk/credential-provider-web-identity@3.972.57)(ws@8.21.0))(drizzle-orm@0.44.6(@cloudflare/workers-types@4.20260630.1)(@opentelemetry/api@1.9.1)(@planetscale/database@1.20.1)(bun-types@1.3.14)(mysql2@3.22.5(@types/node@22.20.0)))(mysql2@3.22.5(@types/node@22.20.0))(vite@6.4.3(@types/node@22.20.0)(jiti@2.7.0)(lightningcss@1.32.0)(terser@5.48.0)(yaml@2.9.0))(xml2js@0.6.2)
       node-fetch-native: 1.6.7
       path-to-regexp: 6.3.0
       pathe: 1.1.2
@@ -34535,8 +34463,6 @@ snapshots:
 
   web-streams-polyfill@4.0.0-beta.3: {}
 
-  web-vitals@5.3.0: {}
-
   web-worker@1.5.0: {}
 
   webcodecs@0.1.0: {}
diff --git a/scripts/analytics/README.md b/scripts/analytics/README.md
new file mode 100644
index 00000000000..993bb4eb61c
--- /dev/null
+++ b/scripts/analytics/README.md
@@ -0,0 +1,64 @@
+# Cap Analytics Infrastructure
+
+Run the complete local analytics setup with:
+
+```bash
+pnpm analytics:local
+```
+
+This starts only the optional Tinybird Local Docker profile, waits for readiness, builds every checked-in datafile, runs the Tinybird fixture suites, and writes the two `PRODUCT_ANALYTICS_TINYBIRD_*` values used by Cap to the gitignored `.env.analytics.local` file. Re-running the command is safe.
+
+Tinybird Local persists ClickHouse and metadata in named Docker volumes. Normal `pnpm docker:up` and the public self-hosted Compose setup do not start analytics.
+
+## Commands
+
+| Command | Purpose |
+| --- | --- |
+| `pnpm analytics:validate` | Validate schemas, tokens, fixtures, retention, deduplication, and existing viewer resources without Docker |
+| `pnpm analytics:test` | Run the shared contract, web, desktop, billing regression, infrastructure, and static validation suites |
+| `pnpm analytics:local` | Start, build, test, and write the local runtime environment |
+| `pnpm analytics:local:test` | Run Tinybird fixture tests against Tinybird Local |
+| `pnpm analytics:local:tokens` | Write the deterministic local runtime host and workspace token to `.env.analytics.local` |
+| `pnpm analytics:local:stop` | Stop Tinybird Local while preserving its volumes |
+| `pnpm analytics:deploy:check` | Validate a cloud deployment without promoting it |
+| `pnpm analytics:deploy` | Run the cloud deployment check, deploy, and wait for completion |
+| `pnpm analytics:check` | Compare live Tinybird resources with the checked-in datafiles |
+| `pnpm analytics:query -- daily start_date=2026-07-01 event_name=purchase_completed payment_status=paid` | Query paid purchases from the bounded daily aggregate with an agent read token |
+| `pnpm analytics:query -- health start_time=2026-07-01T00:00:00 end_time=2026-07-02T00:00:00` | Query hourly delivery health for an explicit window |
+
+## Production credentials
+
+Cloud deployment requires:
+
+- `TINYBIRD_DEPLOY_TOKEN`: a CI token limited to `WORKSPACE:DEPLOY`.
+- `TINYBIRD_URL`: the regional Tinybird API URL.
+- `TINYBIRD_WORKSPACE_ID`: the production Workspace UUID verified before every cloud check or deployment.
+
+The deployed datafiles create two runtime tokens:
+
+- `product_events_ingest`: append-only access to `product_events_v1`.
+- `product_events_agent_read`: read-only access to product data and saved endpoints.
+
+Set the append token as `PRODUCT_ANALYTICS_TINYBIRD_TOKEN` in the application. Give agents the read token, never the deployment or append token.
+
+Set `TINYBIRD_AGENT_TOKEN` and `TINYBIRD_URL` for the query command. Set a separate `TINYBIRD_READ_TOKEN` with workspace metadata access when running `pnpm analytics:check`; the append and deployment tokens are intentionally rejected for that task.
+
+## Agent access
+
+Tinybird exposes published endpoints through its hosted MCP server. Copy `scripts/analytics/tinybird-mcp.example.json` into your agent configuration, replace the two placeholders with the resource-scoped `product_events_agent_read` token and regional API host, and keep the resulting file out of version control. The MCP setup is documented at <https://www.tinybird.co/docs/forward/query-data/mcp>.
+
+Agents should use `product_events_daily` for funnels and trends, and `product_events_health` for delivery checks. The daily endpoint defaults to the latest 30 days, caps results at 1,000 groups, returns newest dates first, and exposes payment and subscription status so paid purchases are not conflated with trials. Health is hourly and rejects windows over 31 days.
+
+The Analytics GitHub workflow runs static tests, Docker Compose validation, a complete Tinybird Local build, and fixture tests on relevant pull requests. Merges to `main` deploy only after those gates pass.
+
+## Performance boundaries
+
+- `product_events_v1` deduplicates retries by deterministic `event_id` and keeps the latest `received_at` version.
+- Monthly partitions and a 400-day TTL bound storage.
+- Common event trends use `product_events_daily_mv`; they do not scan raw events.
+- Daily counts use unique event states, so retried deliveries cannot inflate the rollup.
+- Raw health queries require explicit start and end times.
+- Event properties are stored as JSON strings and fixtures enforce a 16 KiB ceiling.
+- The infrastructure contains no autocapture or session-replay path.
+
+Routine commands refuse destructive deployment, workspace-clear, datasource-delete, and datasource-truncate arguments. Destructive recovery is intentionally outside the normal workflow and requires separate review.
diff --git a/scripts/analytics/agent-query.js b/scripts/analytics/agent-query.js
new file mode 100644
index 00000000000..fc522df87ec
--- /dev/null
+++ b/scripts/analytics/agent-query.js
@@ -0,0 +1,100 @@
+#!/usr/bin/env node
+
+import process from "node:process";
+import { pathToFileURL } from "node:url";
+
+const ENDPOINTS = {
+	daily: {
+		name: "product_events_daily",
+		parameters: new Set([
+			"start_date",
+			"end_date",
+			"event_name",
+			"source",
+			"platform",
+			"payment_status",
+			"subscription_status",
+			"limit",
+		]),
+	},
+	health: {
+		name: "product_events_health",
+		parameters: new Set(["start_time", "end_time"]),
+	},
+};
+
+export function buildAgentQuery(endpointName, args, env = process.env) {
+	const endpoint = ENDPOINTS[endpointName];
+	if (!endpoint) {
+		throw new Error("Expected endpoint daily or health.");
+	}
+	const token = env.TINYBIRD_AGENT_TOKEN?.trim();
+	const host = env.TINYBIRD_URL?.trim();
+	if (!token || !host) {
+		throw new Error("TINYBIRD_AGENT_TOKEN and TINYBIRD_URL are required.");
+	}
+
+	const url = new URL(`/v0/pipes/${endpoint.name}.json`, host);
+	for (const arg of args) {
+		const separator = arg.indexOf("=");
+		if (separator < 1) throw new Error(`Expected key=value, received ${arg}.`);
+		const key = arg.slice(0, separator);
+		const value = arg.slice(separator + 1);
+		if (!endpoint.parameters.has(key)) {
+			throw new Error(`Unsupported ${endpointName} parameter ${key}.`);
+		}
+		url.searchParams.set(key, value);
+	}
+	if (
+		endpointName === "health" &&
+		(!url.searchParams.has("start_time") || !url.searchParams.has("end_time"))
+	) {
+		throw new Error("Health queries require start_time and end_time.");
+	}
+	if (endpointName === "health") {
+		const start = Date.parse(url.searchParams.get("start_time"));
+		const end = Date.parse(url.searchParams.get("end_time"));
+		if (!Number.isFinite(start) || !Number.isFinite(end) || end < start) {
+			throw new Error("Health query timestamps are invalid or reversed.");
+		}
+		if (end - start > 31 * 24 * 60 * 60 * 1000) {
+			throw new Error("Health query windows cannot exceed 31 days.");
+		}
+	}
+
+	return { url, token };
+}
+
+export async function runAgentQuery(
+	endpointName,
+	args,
+	env = process.env,
+	fetchImpl = fetch,
+) {
+	const { url, token } = buildAgentQuery(endpointName, args, env);
+	const response = await fetchImpl(url, {
+		headers: { Authorization: `Bearer ${token}` },
+		signal: AbortSignal.timeout(10_000),
+	});
+	const body = await response.text();
+	if (!response.ok) {
+		throw new Error(`Tinybird query failed (${response.status}): ${body}`);
+	}
+	return body;
+}
+
+if (
+	process.argv[1] &&
+	import.meta.url === pathToFileURL(process.argv[1]).href
+) {
+	try {
+		const output = await runAgentQuery(
+			process.argv[2] ?? "daily",
+			process.argv.slice(3),
+		);
+		console.log(output);
+	} catch (error) {
+		console.error(error instanceof Error ? error.message : error);
+		process.exitCode = 1;
+	}
+}
diff --git a/scripts/analytics/analytics-cli.js b/scripts/analytics/analytics-cli.js
new file mode 100755
index 00000000000..4428a25cbf1
--- /dev/null
+++ b/scripts/analytics/analytics-cli.js
@@ -0,0 +1,14 @@
+#!/usr/bin/env node
+
+import process from "node:process";
+
+import { runAnalyticsCommand } from "./tooling.js";
+
+const operation = process.argv[2] ?? "validate";
+
+try {
+	await runAnalyticsCommand(operation);
+} catch (error) {
+	console.error(error instanceof Error ? error.message : error);
+	process.exitCode = 1;
+}
diff --git a/scripts/analytics/check-analytics.js b/scripts/analytics/check-analytics.js
index 441975a485f..1d6e1d242bd 100755
--- a/scripts/analytics/check-analytics.js
+++ b/scripts/analytics/check-analytics.js
@@ -114,12 +114,17 @@ async function validatePipes(client) {
 				continue;
 			}
 
-			if ((pipe.type || "").toLowerCase() !== "materialized") {
+			const actualType = (pipe.type || "").toLowerCase();
+			if (actualType !== pipeDef.type) {
 				issues.push(
-					`Pipe ${pipeDef.name} is not materialized (type=${pipe.type ?? "unknown"}).`,
+					`Pipe ${pipeDef.name} has type ${pipe.type ?? "unknown"}, expected ${pipeDef.type}.`,
 				);
 				continue;
 			}
+			if (pipeDef.type !== "materialized") {
+				console.log(`✔ Pipe ${pipeDef.name} is ${pipeDef.type}`);
+				continue;
+			}
 
 			const materializedNode = pipe.nodes?.find(
 				(node) =>
diff --git a/scripts/analytics/datafiles.js b/scripts/analytics/datafiles.js
new file mode 100644
index 00000000000..154d9df083a
--- /dev/null
+++ b/scripts/analytics/datafiles.js
@@ -0,0 +1,123 @@
+import fs from "node:fs";
+import path from "node:path";
+
+const splitTopLevel = (value) => {
+	const parts = [];
+	let current = "";
+	let depth = 0;
+	let quote = null;
+	for (const character of value) {
+		if (quote) {
+			current += character;
+			if (character === quote) quote = null;
+			continue;
+		}
+		if (character === "'" || character === '"' || character === "`") {
+			quote = character;
+			current += character;
+			continue;
+		}
+		if (character === "(") depth += 1;
+		if (character === ")" && depth > 0) depth -= 1;
+		if (character === "," && depth === 0) {
+			if (current.trim()) parts.push(current.trim());
+			current = "";
+			continue;
+		}
+		current += character;
+	}
+	if (current.trim()) parts.push(current.trim());
+	return parts;
+};
+
+const readBlock = (contents, directive) => {
+	const lines = contents.split(/\r?\n/);
+	const start = lines.findIndex(
+		(line) => line.trim().toUpperCase() === `${directive.toUpperCase()} >`,
+	);
+	if (start === -1) return null;
+	const block = [];
+	for (const line of lines.slice(start + 1)) {
+		if (line.trim() && !/^\s/.test(line)) break;
+		block.push(line.trim());
+	}
+	return block.join("\n").trim();
+};
+
+const readDirective = (contents, directive) => {
+	const match = contents.match(new RegExp(`^${directive}\\s+(.+?)\\s*$`, "im"));
+	return match?.[1]?.replace(/^(["'])(.*)\1$/, "$2") ?? null;
+};
+
+const parseColumns = (schema) =>
+	splitTopLevel(schema).map((column) => {
+		const withoutJsonPath = column.replace(/\s+`json:[^`]+`/gi, "");
+		const withoutDefault = withoutJsonPath.replace(/\s+DEFAULT\s+.+$/i, "");
+		const withoutCodec = withoutDefault.replace(/\s+CODEC\(.+\)$/i, "");
+		const match = withoutCodec.trim().match(/^`?([A-Za-z0-9_]+)`?\s+(.+)$/);
+		if (!match)
+			throw new Error(`Invalid Tinybird column definition: ${column}`);
+		return { name: match[1], type: match[2].trim() };
+	});
+
+const parseTokens = (contents) =>
+	[...contents.matchAll(/^TOKEN\s+(\S+)\s+(READ|APPEND)\s*$/gim)].map(
+		([, name, scope]) => ({ name, scope: scope.toUpperCase() }),
+	);
+
+const parseDatasource = (filePath) => {
+	const contents = fs.readFileSync(filePath, "utf8");
+	const schema = readBlock(contents, "SCHEMA");
+	if (!schema) throw new Error(`Missing SCHEMA block in ${filePath}`);
+	return {
+		name: path.basename(filePath, ".datasource"),
+		filePath,
+		columns: parseColumns(schema),
+		engine: readDirective(contents, "ENGINE") ?? "MergeTree",
+		partitionKey: readDirective(contents, "ENGINE_PARTITION_KEY"),
+		sortingKey: readDirective(contents, "ENGINE_SORTING_KEY"),
+		primaryKey: readDirective(contents, "ENGINE_PRIMARY_KEY"),
+		versionColumn: readDirective(contents, "ENGINE_VER"),
+		ttl: readDirective(contents, "ENGINE_TTL"),
+		settings: readDirective(contents, "ENGINE_SETTINGS"),
+		tokens: parseTokens(contents),
+	};
+};
+
+const parsePipe = (filePath) => {
+	const contents = fs.readFileSync(filePath, "utf8");
+	return {
+		name: path.basename(filePath, ".pipe"),
+		filePath,
+		type: (readDirective(contents, "TYPE") ?? "generic").toLowerCase(),
+		targetDatasource: readDirective(contents, "DATASOURCE"),
+		tokens: parseTokens(contents),
+	};
+};
+
+const listFiles = (directory, extension) => {
+	if (!fs.existsSync(directory)) return [];
+	return fs
+		.readdirSync(directory)
+		.filter((fileName) => fileName.endsWith(extension))
+		.sort()
+		.map((fileName) => path.join(directory, fileName));
+};
+
+const loadTinybirdProject = (projectDir) => ({
+	datasources: listFiles(
+		path.join(projectDir, "datasources"),
+		".datasource",
+	).map(parseDatasource),
+	pipes: listFiles(path.join(projectDir, "pipes"), ".pipe").map(parsePipe),
+});
+
+export {
+	loadTinybirdProject,
+	parseColumns,
+	parseDatasource,
+	parsePipe,
+	readBlock,
+	readDirective,
+	splitTopLevel,
+};
diff --git a/scripts/analytics/setup-analytics.js b/scripts/analytics/setup-analytics.js
index a04bc2fc5e0..745c3b2706c 100755
--- a/scripts/analytics/setup-analytics.js
+++ b/scripts/analytics/setup-analytics.js
@@ -1,98 +1,12 @@
 #!/usr/bin/env node
 
-import { spawnSync } from "node:child_process";
-import fs from "node:fs";
-import path from "node:path";
 import process from "node:process";
-import { fileURLToPath } from "node:url";
 
-import { PROJECT_ROOT, resolveTinybirdAuth } from "./shared.js";
+import { runAnalyticsCommand } from "./tooling.js";
 
-const DEFAULT_PYTHON = process.env.PYTHON || "python3";
-const TB_BINARY = process.env.TB_BIN || "tb";
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const tinybirdProjectDir = path.join(__dirname, "tinybird");
-const projectTinybPath = path.join(tinybirdProjectDir, ".tinyb");
-const rootTinybPath = path.join(PROJECT_ROOT, ".tinyb");
-
-const run = (command, args, options = {}) => {
-	const result = spawnSync(command, args, {
-		stdio: "inherit",
-		...options,
-	});
-	if (result.error || result.status !== 0) {
-		const message =
-			result.error?.message || `Command ${command} ${args.join(" ")} failed.`;
-		throw new Error(message);
-	}
-};
-
-const ensureTinybirdCli = () => {
-	try {
-		run(TB_BINARY, ["--version"], { stdio: "ignore" });
-	} catch {
-		console.log("Tinybird CLI not found. Installing via pip...");
-		run(DEFAULT_PYTHON, ["-m", "pip", "install", "--user", "tinybird-cli"], {
-			stdio: "inherit",
-		});
-		console.log("Tinybird CLI installed. Re-running version check...");
-		run(TB_BINARY, ["--version"], { stdio: "inherit" });
-	}
-};
-
-const ensureTinybirdLogin = () => {
-	if (fs.existsSync(rootTinybPath)) {
-		return;
-	}
-	console.log("Tinybird credentials not found. Launching `tb login`...");
-	run(TB_BINARY, ["login"], { cwd: PROJECT_ROOT, stdio: "inherit" });
-	if (!fs.existsSync(rootTinybPath)) {
-		throw new Error(
-			"Tinybird login did not create a .tinyb file. Please rerun `tb login` and try again.",
-		);
-	}
-};
-
-const syncProjectTinyb = () => {
-	if (!fs.existsSync(rootTinybPath)) return;
-	fs.copyFileSync(rootTinybPath, projectTinybPath);
-};
-
-const deployTinybirdProject = (auth) => {
-	console.log(
-		"⚠️  Running `tb --cloud deploy --allow-destructive-operations --wait` inside scripts/analytics/tinybird. This will synchronize the Tinybird workspace to the resources defined in that folder and remove any other datasources/pipes in the workspace.",
-	);
-	run(
-		TB_BINARY,
-		["--cloud", "deploy", "--allow-destructive-operations", "--wait"],
-		{
-			cwd: tinybirdProjectDir,
-			env: {
-				...process.env,
-				TB_HOST: auth.host,
-				TB_TOKEN: auth.token,
-				TB_LOCAL: "0",
-				...(auth.userToken ? { TB_USER_TOKEN: auth.userToken } : {}),
-			},
-		},
-	);
-};
-
-function main() {
-	try {
-		ensureTinybirdCli();
-		ensureTinybirdLogin();
-		const auth = resolveTinybirdAuth();
-		syncProjectTinyb();
-		deployTinybirdProject(auth);
-		console.log("✅ Tinybird analytics resources are ready.");
-	} catch (error) {
-		console.error(
-			"❌ Failed to set up Tinybird analytics:",
-			error instanceof Error ? error.message : error,
-		);
-		process.exit(1);
-	}
+try {
+	await runAnalyticsCommand("cloud-deploy");
+} catch (error) {
+	console.error(error instanceof Error ? error.message : error);
+	process.exitCode = 1;
 }
-
-main();
diff --git a/scripts/analytics/shared.js b/scripts/analytics/shared.js
index cc176704b93..d41ed83a1b6 100644
--- a/scripts/analytics/shared.js
+++ b/scripts/analytics/shared.js
@@ -4,75 +4,21 @@ import path from "node:path";
 import process from "node:process";
 import { fileURLToPath } from "node:url";
 
+import { loadTinybirdProject } from "./datafiles.js";
+
 const DEFAULT_TINYBIRD_HOST = "https://api.tinybird.co";
 const MODULE_DIR = path.dirname(fileURLToPath(import.meta.url));
 const PROJECT_ROOT = path.resolve(MODULE_DIR, "..", "..");
+const TINYBIRD_PROJECT_DIR = path.join(MODULE_DIR, "tinybird");
 const TINYB_FILE_CANDIDATES = [
 	path.join(PROJECT_ROOT, ".tinyb"),
 	path.join(process.cwd(), ".tinyb"),
 	path.join(os.homedir(), ".tinyb"),
 ];
 
-const TABLE_DEFINITIONS = [
-	{
-		name: "analytics_events",
-		description: "Raw analytics events generated by Cap clients.",
-		engine: "MergeTree",
-		partitionKey: "toYYYYMM(timestamp)",
-		sortingKey: "(tenant_id, timestamp)",
-		ttl: "timestamp + INTERVAL 90 DAY",
-		settings: "index_granularity = 8192",
-		columns: [
-			{ name: "timestamp", type: "DateTime" },
-			{ name: "session_id", type: "String" },
-			{ name: "action", type: "LowCardinality(String)" },
-			{ name: "version", type: "LowCardinality(String)" },
-			{ name: "payload", type: "String" },
-			{ name: "tenant_id", type: "LowCardinality(String)" },
-			{ name: "domain", type: "LowCardinality(String)" },
-		],
-	},
-	{
-		name: "analytics_pages_mv",
-		description: "Aggregated page views per tenant/path/day.",
-		engine: "AggregatingMergeTree",
-		partitionKey: "toYYYYMM(date)",
-		sortingKey: "(tenant_id, date, pathname)",
-		ttl: "date + INTERVAL 90 DAY",
-		settings: "index_granularity = 256",
-		columns: [
-			{ name: "tenant_id", type: "LowCardinality(String)" },
-			{ name: "date", type: "Date" },
-			{ name: "pathname", type: "String" },
-			{ name: "location", type: "String" },
-			{ name: "visits", type: "AggregateFunction(uniq, String)" },
-		],
-	},
-	{
-		name: "analytics_sessions_mv",
-		description: "Session level metadata derived from analytics events.",
-		engine: "ReplacingMergeTree",
-		partitionKey: "toYYYYMM(date)",
-		sortingKey: "(tenant_id, date, session_id)",
-		ttl: "date + INTERVAL 90 DAY",
-		settings: "index_granularity = 256",
-		columns: [
-			{ name: "tenant_id", type: "LowCardinality(String)" },
-			{ name: "date", type: "Date" },
-			{ name: "session_id", type: "String" },
-			{ name: "browser", type: "LowCardinality(String)" },
-			{ name: "device", type: "LowCardinality(String)" },
-		],
-	},
-];
-
-const PIPE_DEFINITIONS = [
-	{ name: "analytics_pages_mv_pipe", targetDatasource: "analytics_pages_mv" },
-	{
-		name: "analytics_sessions_mv_pipe",
-		targetDatasource: "analytics_sessions_mv",
-	},
-];
+const tinybirdProject = loadTinybirdProject(TINYBIRD_PROJECT_DIR);
+const TABLE_DEFINITIONS = tinybirdProject.datasources;
+const PIPE_DEFINITIONS = tinybirdProject.pipes;
 
 const normalizeWhitespace = (value) => value.replace(/\s+/g, " ").trim();
 
@@ -101,8 +47,12 @@ function loadTinybFile() {
 }
 
 function resolveTinybirdAuth() {
-	const envHost = process.env.TINYBIRD_HOST?.trim();
+	const envHost =
+		process.env.PRODUCT_ANALYTICS_TINYBIRD_HOST?.trim() ||
+		process.env.TINYBIRD_URL?.trim() ||
+		process.env.TINYBIRD_HOST?.trim();
 	const envToken =
+		process.env.TINYBIRD_READ_TOKEN?.trim() ||
 		process.env.TINYBIRD_ADMIN_TOKEN?.trim() ||
 		process.env.TINYBIRD_TOKEN?.trim();
 	if (envHost && envToken) {
@@ -132,7 +82,7 @@ function resolveTinybirdAuth() {
 	}
 
 	throw new Error(
-		"Tinybird credentials not found. Set TINYBIRD_TOKEN/TINYBIRD_HOST or run `tb login` to create a .tinyb file.",
+		"Tinybird read credentials not found. Set TINYBIRD_URL and TINYBIRD_READ_TOKEN, or use a local .tinyb file with metadata read access.",
 	);
 }
 
@@ -204,6 +154,7 @@ export {
 	PIPE_DEFINITIONS,
 	PROJECT_ROOT,
 	TABLE_DEFINITIONS,
+	TINYBIRD_PROJECT_DIR,
 	buildSchemaLines,
 	createTinybirdClient,
 	normalizeWhitespace,
diff --git a/scripts/analytics/tests/agent-query.test.js b/scripts/analytics/tests/agent-query.test.js
new file mode 100644
index 00000000000..146cb86e082
--- /dev/null
+++ b/scripts/analytics/tests/agent-query.test.js
@@ -0,0 +1,64 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { buildAgentQuery, runAgentQuery } from "../agent-query.js";
+
+const env = {
+	TINYBIRD_AGENT_TOKEN: "read-token",
+	TINYBIRD_URL: "https://api.tinybird.co",
+};
+
+test("agent daily queries are restricted to the aggregate endpoint", () => {
+	const { url, token } = buildAgentQuery(
+		"daily",
+		[
+			"start_date=2026-07-01",
+			"event_name=purchase_completed",
+			"payment_status=paid",
+		],
+		env,
+	);
+	assert.equal(token, "read-token");
+	assert.equal(url.pathname, "/v0/pipes/product_events_daily.json");
+	assert.equal(url.searchParams.get("event_name"), "purchase_completed");
+	assert.equal(url.searchParams.get("payment_status"), "paid");
+	assert.throws(
+		() => buildAgentQuery("daily", ["sql=DROP TABLE events"], env),
+		/Unsupported daily parameter/,
+	);
+});
+
+test("agent health queries require an explicit window", () => {
+	assert.throws(
+		() => buildAgentQuery("health", [], env),
+		/start_time and end_time/,
+	);
+	assert.throws(
+		() =>
+			buildAgentQuery(
+				"health",
+				["start_time=2026-07-02", "end_time=2026-07-01"],
+				env,
+			),
+		/invalid or reversed/,
+	);
+	assert.throws(
+		() =>
+			buildAgentQuery(
+				"health",
+				["start_time=2026-01-01", "end_time=2026-03-01"],
+				env,
+			),
+		/cannot exceed 31 days/,
+	);
+});
+
+test("agent query sends only the read token", async () => {
+	let authorization;
+	const output = await runAgentQuery("daily", [], env, async (_url, init) => {
+		authorization = new Headers(init?.headers).get("authorization");
+		return new Response('{"data":[]}', { status: 200 });
+	});
+	assert.equal(authorization, "Bearer read-token");
+	assert.equal(output, '{"data":[]}');
+});
diff --git a/scripts/analytics/tests/datafiles.test.js b/scripts/analytics/tests/datafiles.test.js
new file mode 100644
index 00000000000..65f9fe9e485
--- /dev/null
+++ b/scripts/analytics/tests/datafiles.test.js
@@ -0,0 +1,145 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import path from "node:path";
+import test from "node:test";
+
+import {
+	loadTinybirdProject,
+	parseColumns,
+	readBlock,
+	splitTopLevel,
+} from "../datafiles.js";
+import { PRODUCT_COLUMNS, TINYBIRD_PROJECT_DIR } from "../tooling.js";
+
+test("splitTopLevel preserves nested aggregate types", () => {
+	assert.deepEqual(
+		splitTopLevel(
+			"date Date, events AggregateFunction(uniq, String), actors AggregateFunction(uniq, Nullable(String))",
+		),
+		[
+			"date Date",
+			"events AggregateFunction(uniq, String)",
+			"actors AggregateFunction(uniq, Nullable(String))",
+		],
+	);
+});
+
+test("readBlock stops at the next Tinybird directive", () => {
+	const contents = [
+		"SCHEMA >",
+		"\tevent_id String `json:$.event_id`,",
+		"\toccurred_at DateTime64(3) `json:$.occurred_at`",
+		"",
+		"ENGINE ReplacingMergeTree",
+	].join("\n");
+	assert.equal(
+		readBlock(contents, "SCHEMA"),
+		"event_id String `json:$.event_id`,\noccurred_at DateTime64(3) `json:$.occurred_at`",
+	);
+});
+
+test("parseColumns removes JSON paths and defaults", () => {
+	assert.deepEqual(
+		parseColumns(
+			"event_id String `json:$.event_id`, properties String `json:$.properties` DEFAULT '{}'",
+		),
+		[
+			{ name: "event_id", type: "String" },
+			{ name: "properties", type: "String" },
+		],
+	);
+});
+
+test("product datasource matches the runtime event contract", () => {
+	const project = loadTinybirdProject(TINYBIRD_PROJECT_DIR);
+	const datasource = project.datasources.find(
+		(candidate) => candidate.name === "product_events_v1",
+	);
+	assert.ok(datasource);
+	assert.deepEqual(
+		datasource.columns.map(({ name, type }) => [name, type]),
+		PRODUCT_COLUMNS,
+	);
+	assert.equal(datasource.engine, "ReplacingMergeTree");
+	assert.equal(datasource.sortingKey, "event_id");
+	assert.equal(datasource.versionColumn, "received_at");
+	assert.equal(datasource.partitionKey, "toYYYYMM(occurred_at)");
+	assert.equal(datasource.ttl, "toDateTime(occurred_at) + INTERVAL 400 DAY");
+	assert.deepEqual(datasource.tokens, [
+		{ name: "product_events_ingest", scope: "APPEND" },
+		{ name: "product_events_agent_read", scope: "READ" },
+	]);
+});
+
+test("existing viewer resources remain in the Tinybird project", () => {
+	const project = loadTinybirdProject(TINYBIRD_PROJECT_DIR);
+	const names = project.datasources.map(({ name }) => name);
+	assert.ok(names.includes("analytics_events"));
+	assert.ok(names.includes("analytics_pages_mv"));
+	assert.ok(names.includes("analytics_sessions_mv"));
+	assert.ok(
+		project.pipes.some(
+			(pipe) =>
+				pipe.name === "analytics_pages_mv_pipe" &&
+				pipe.targetDatasource === "analytics_pages_mv",
+		),
+	);
+	assert.ok(path.isAbsolute(project.datasources[0].filePath));
+});
+
+test("daily product queries stay on the pre-aggregated datasource", () => {
+	const contents = fs.readFileSync(
+		path.join(TINYBIRD_PROJECT_DIR, "pipes", "product_events_daily.pipe"),
+		"utf8",
+	);
+	assert.match(contents, /FROM product_events_daily_mv/);
+	assert.match(contents, /today\(\) - INTERVAL 30 DAY/);
+	assert.match(
+		contents,
+		/LIMIT greatest\(1, least\(\{\{Int32\(limit, 1000\)\}\}, 1000\)\)/,
+	);
+	assert.match(contents, /ORDER BY date DESC/);
+	assert.match(contents, /payment_status = \{\{String\(payment_status\)\}\}/);
+	assert.match(
+		contents,
+		/subscription_status = \{\{String\(subscription_status\)\}\}/,
+	);
+	assert.doesNotMatch(contents, /FROM product_events_v1/);
+});
+
+test("daily materialization counts deterministic event IDs", () => {
+	const contents = fs.readFileSync(
+		path.join(
+			TINYBIRD_PROJECT_DIR,
+			"pipes",
+			"materialize_product_events_daily.pipe",
+		),
+		"utf8",
+	);
+	assert.match(contents, /uniqState\(event_id\) AS events/);
+	assert.match(contents, /JSONExtractString\(properties, 'payment_status'\)/);
+	assert.match(
+		contents,
+		/JSONExtractString\(properties, 'subscription_status'\)/,
+	);
+	assert.doesNotMatch(contents, /countState\(\)/);
+});
+
+test("health queries use stable hourly aggregates and a bounded window", () => {
+	const contents = fs.readFileSync(
+		path.join(TINYBIRD_PROJECT_DIR, "pipes", "product_events_health.pipe"),
+		"utf8",
+	);
+	assert.match(contents, /error\('start_time is required'\)/);
+	assert.match(contents, /error\('end_time is required'\)/);
+	assert.match(
+		contents,
+		/toStartOfHour\(toDateTime64\(\{\{DateTime64\(start_time\)\}\}, 3\)\)/,
+	);
+	assert.match(contents, /FROM product_events_health_hourly/);
+	assert.match(contents, /uniqMerge\(unique_events\)/);
+	assert.match(contents, /INTERVAL 31 DAY/);
+	assert.match(contents, /throwIf\(/);
+	assert.doesNotMatch(contents, /FROM product_events_v1/);
+	assert.doesNotMatch(contents, /SELECT\s+\*/i);
+});
diff --git a/scripts/analytics/tests/shared.test.js b/scripts/analytics/tests/shared.test.js
new file mode 100644
index 00000000000..c78a2921c39
--- /dev/null
+++ b/scripts/analytics/tests/shared.test.js
@@ -0,0 +1,28 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+
+import { resolveTinybirdAuth } from "../shared.js";
+
+test("metadata checks prefer a dedicated read token", () => {
+	const previous = {
+		TINYBIRD_URL: process.env.TINYBIRD_URL,
+		TINYBIRD_READ_TOKEN: process.env.TINYBIRD_READ_TOKEN,
+		TINYBIRD_DEPLOY_TOKEN: process.env.TINYBIRD_DEPLOY_TOKEN,
+		PRODUCT_ANALYTICS_TINYBIRD_TOKEN:
+			process.env.PRODUCT_ANALYTICS_TINYBIRD_TOKEN,
+	};
+	try {
+		process.env.TINYBIRD_URL = "https://api.tinybird.co";
+		process.env.TINYBIRD_READ_TOKEN = "read-token";
+		process.env.TINYBIRD_DEPLOY_TOKEN = "deploy-token";
+		process.env.PRODUCT_ANALYTICS_TINYBIRD_TOKEN = "append-token";
+		const auth = resolveTinybirdAuth();
+		assert.equal(auth.token, "read-token");
+		assert.equal(auth.host, "https://api.tinybird.co");
+	} finally {
+		for (const [key, value] of Object.entries(previous)) {
+			if (value === undefined) delete process.env[key];
+			else process.env[key] = value;
+		}
+	}
+});
diff --git a/scripts/analytics/tests/tooling.test.js b/scripts/analytics/tests/tooling.test.js
new file mode 100644
index 00000000000..5f819e7d40e
--- /dev/null
+++ b/scripts/analytics/tests/tooling.test.js
@@ -0,0 +1,228 @@
+import assert from "node:assert/strict";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import test from "node:test";
+
+import {
+	assertSafeStep,
+	COMPOSE_FILE,
+	cloudEnvironment,
+	LOCAL_ENV_FILE,
+	localEnvironment,
+	operationPlan,
+	TINYBIRD_PROJECT_DIR,
+	validateAnalyticsProject,
+	verifyCloudWorkspace,
+	writeLocalEnvironmentFile,
+} from "../tooling.js";
+
+test("analytics project passes deterministic static validation", () => {
+	assert.deepEqual(validateAnalyticsProject(), []);
+});
+
+test("all routine operation plans reject destructive commands", () => {
+	for (const operation of [
+		"validate",
+		"test",
+		"compose-check",
+		"local",
+		"local-test",
+		"local-tokens",
+		"local-stop",
+		"cloud-check",
+		"cloud-deploy",
+	]) {
+		for (const step of operationPlan(operation)) {
+			if (step.command) assert.doesNotThrow(() => assertSafeStep(step));
+		}
+	}
+});
+
+test("cloud deploy checks before deploying and waits for completion", () => {
+	assert.ok(
+		operationPlan("cloud-deploy").some(
+			(step) => step.type === "verify-cloud-workspace",
+		),
+	);
+	const commands = operationPlan("cloud-deploy")
+		.filter((step) => step.command)
+		.map((step) => step.args.slice(-4).join(" "));
+	assert.deepEqual(commands, [
+		"tinybird-cloud-cli --cloud deploy --check",
+		"tinybird-cloud-cli --cloud deploy --wait",
+	]);
+});
+
+test("local setup builds, tests and writes its deterministic environment", () => {
+	const commands = operationPlan("local")
+		.filter((step) => step.command)
+		.map((step) => step.args.join(" "));
+	assert.ok(commands.some((command) => command.endsWith("--local build")));
+	assert.ok(commands.some((command) => command.endsWith("--local test run")));
+	assert.ok(
+		operationPlan("local").some((step) => step.type === "write-local-env"),
+	);
+	assert.ok(
+		commands.some((command) =>
+			command.includes("up -d --wait --wait-timeout 60 tinybird-local"),
+		),
+	);
+	const first = localEnvironment({});
+	const second = localEnvironment({});
+	assert.equal(
+		first.PRODUCT_ANALYTICS_TINYBIRD_TOKEN,
+		second.PRODUCT_ANALYTICS_TINYBIRD_TOKEN,
+	);
+	assert.equal(first.PRODUCT_ANALYTICS_TINYBIRD_HOST, "http://127.0.0.1:7181");
+	assert.equal(
+		localEnvironment({ TINYBIRD_LOCAL_PORT: "17181" })
+			.PRODUCT_ANALYTICS_TINYBIRD_HOST,
+		"http://127.0.0.1:17181",
+	);
+	assert.match(
+		first.PRODUCT_ANALYTICS_TINYBIRD_TOKEN,
+		/^p\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$/,
+	);
+	const compose = fs.readFileSync(COMPOSE_FILE, "utf8");
+	assert.match(compose, /working_dir: \/workspace\/tinybird/);
+	assert.match(
+		compose,
+		/tinybird:\/workspace\/tinybird:ro[\s\S]*tinybird-local-workspace\.json:\/workspace\/\.tinyb:ro/,
+	);
+});
+
+test("unsafe analytics operations are blocked", () => {
+	assert.throws(
+		() =>
+			assertSafeStep({
+				command: "tb",
+				args: ["deploy", "--allow-destructive-operations"],
+			}),
+		/Refusing destructive analytics command/,
+	);
+	assert.throws(
+		() => assertSafeStep({ command: "tb", args: ["workspace", "clear"] }),
+		/Refusing destructive analytics command/,
+	);
+});
+
+test("cloud auth requires a dedicated deploy token", () => {
+	assert.throws(() => cloudEnvironment({}), /TINYBIRD_DEPLOY_TOKEN/);
+	assert.throws(
+		() => cloudEnvironment({ TINYBIRD_DEPLOY_TOKEN: "deploy-token" }),
+		/TINYBIRD_WORKSPACE_ID/,
+	);
+	const environment = cloudEnvironment({
+		TINYBIRD_DEPLOY_TOKEN: "deploy-token",
+		PRODUCT_ANALYTICS_TINYBIRD_HOST: "https://example.tinybird.co",
+		TINYBIRD_WORKSPACE_ID: "12345678-1234-4234-8234-123456789abc",
+	});
+	assert.equal(environment.TINYBIRD_TOKEN, "deploy-token");
+	assert.equal(environment.TB_TOKEN, "deploy-token");
+	assert.equal(environment.TINYBIRD_URL, "https://example.tinybird.co");
+	assert.equal(environment.TB_HOST, "https://example.tinybird.co");
+	assert.equal(
+		environment.TINYBIRD_WORKSPACE_ID,
+		"12345678-1234-4234-8234-123456789abc",
+	);
+});
+
+test("cloud deploy verifies the token workspace before mutation", () => {
+	const workspaceId = "12345678-1234-4234-8234-123456789abc";
+	const env = {
+		TINYBIRD_DEPLOY_TOKEN: "deploy-token",
+		TINYBIRD_URL: "https://api.tinybird.co",
+		TINYBIRD_WORKSPACE_ID: workspaceId,
+	};
+	assert.equal(
+		verifyCloudWorkspace(env, (_command, args) => {
+			assert.deepEqual(args.slice(-5), [
+				"--cloud",
+				"--output",
+				"json",
+				"workspace",
+				"current",
+			]);
+			return JSON.stringify({ id: workspaceId, name: "production" });
+		}),
+		workspaceId,
+	);
+	assert.throws(
+		() =>
+			verifyCloudWorkspace(env, () =>
+				JSON.stringify({
+					id: "87654321-4321-4321-8321-cba987654321",
+					metadata: workspaceId,
+					name: "staging",
+				}),
+			),
+		/does not target/,
+	);
+	assert.throws(
+		() => verifyCloudWorkspace(env, () => "warning: invalid token"),
+		/Unable to parse/,
+	);
+});
+
+test("local credentials are written to a private gitignored env file", () => {
+	const tempRoot = fs.mkdtempSync(path.join(os.tmpdir(), "cap-analytics-env-"));
+	const filePath = path.join(tempRoot, ".env.analytics.local");
+	try {
+		writeLocalEnvironmentFile(filePath, localEnvironment({}));
+		const contents = fs.readFileSync(filePath, "utf8");
+		assert.match(contents, /^PRODUCT_ANALYTICS_TINYBIRD_HOST=/m);
+		assert.match(contents, /^PRODUCT_ANALYTICS_TINYBIRD_TOKEN=/m);
+		if (process.platform !== "win32") {
+			assert.equal(fs.statSync(filePath).mode & 0o777, 0o600);
+		}
+		assert.equal(path.basename(LOCAL_ENV_FILE), ".env.analytics.local");
+	} finally {
+		fs.rmSync(tempRoot, { force: true, recursive: true });
+	}
+});
+
+test("fixture validation catches duplicate event IDs", () => {
+	const tempRoot = fs.mkdtempSync(path.join(os.tmpdir(), "cap-analytics-"));
+	const projectDir = path.join(tempRoot, "tinybird");
+	try {
+		fs.cpSync(TINYBIRD_PROJECT_DIR, projectDir, { recursive: true });
+		const fixturePath = path.join(
+			projectDir,
+			"fixtures",
+			"product_events_v1.ndjson",
+		);
+		const firstRow = fs.readFileSync(fixturePath, "utf8").split(/\r?\n/)[0];
+		fs.appendFileSync(fixturePath, `${firstRow}\n`);
+		assert.ok(
+			validateAnalyticsProject(projectDir).some((issue) =>
+				issue.includes("is duplicated"),
+			),
+		);
+	} finally {
+		fs.rmSync(tempRoot, { force: true, recursive: true });
+	}
+});
+
+test("project validation rejects duplicate Tinybird resource names", () => {
+	const tempRoot = fs.mkdtempSync(path.join(os.tmpdir(), "cap-analytics-"));
+	const projectDir = path.join(tempRoot, "tinybird");
+	try {
+		fs.cpSync(TINYBIRD_PROJECT_DIR, projectDir, { recursive: true });
+		fs.copyFileSync(
+			path.join(projectDir, "pipes", "materialize_product_events_daily.pipe"),
+			path.join(projectDir, "pipes", "product_events_daily_mv.pipe"),
+		);
+		assert.ok(
+			validateAnalyticsProject(projectDir).some((issue) =>
+				issue.includes("resource name product_events_daily_mv is not unique"),
+			),
+		);
+	} finally {
+		fs.rmSync(tempRoot, { force: true, recursive: true });
+	}
+});
+
+test("unknown analytics commands fail before executing anything", () => {
+	assert.throws(() => operationPlan("unknown"), /Unknown analytics command/);
+});
diff --git a/scripts/analytics/tinybird-local-workspace.json b/scripts/analytics/tinybird-local-workspace.json
new file mode 100644
index 00000000000..8db54957b9b
--- /dev/null
+++ b/scripts/analytics/tinybird-local-workspace.json
@@ -0,0 +1,4 @@
+{
+	"id": "00000000-0000-4000-8000-000000000001",
+	"name": "cap-local"
+}
diff --git a/scripts/analytics/tinybird-mcp.example.json b/scripts/analytics/tinybird-mcp.example.json
new file mode 100644
index 00000000000..06b89f6c3a2
--- /dev/null
+++ b/scripts/analytics/tinybird-mcp.example.json
@@ -0,0 +1,12 @@
+{
+	"mcpServers": {
+		"cap-product-analytics": {
+			"command": "npx",
+			"args": [
+				"-y",
+				"mcp-remote",
+				"https://mcp.tinybird.co?token=TINYBIRD_AGENT_TOKEN&host=TINYBIRD_URL"
+			]
+		}
+	}
+}
diff --git a/scripts/analytics/tinybird/datasources/product_events_daily_mv.datasource b/scripts/analytics/tinybird/datasources/product_events_daily_mv.datasource
new file mode 100644
index 00000000000..00fcc6d2405
--- /dev/null
+++ b/scripts/analytics/tinybird/datasources/product_events_daily_mv.datasource
@@ -0,0 +1,22 @@
+DESCRIPTION >
+	Daily product event aggregates for low-cost funnel and trend queries.
+
+TOKEN product_events_agent_read READ
+
+SCHEMA >
+	date Date,
+	event_name LowCardinality(String),
+	source LowCardinality(String),
+	platform LowCardinality(String),
+	payment_status LowCardinality(String),
+	subscription_status LowCardinality(String),
+	events AggregateFunction(uniq, String),
+	actors AggregateFunction(uniq, String),
+	users AggregateFunction(uniq, Nullable(String)),
+	organizations AggregateFunction(uniq, Nullable(String))
+
+ENGINE AggregatingMergeTree
+ENGINE_PARTITION_KEY toYYYYMM(date)
+ENGINE_SORTING_KEY (date, event_name, source, platform, payment_status, subscription_status)
+ENGINE_TTL date + INTERVAL 400 DAY
+ENGINE_SETTINGS index_granularity = 256
diff --git a/scripts/analytics/tinybird/datasources/product_events_health_hourly.datasource b/scripts/analytics/tinybird/datasources/product_events_health_hourly.datasource
new file mode 100644
index 00000000000..148de8a0395
--- /dev/null
+++ b/scripts/analytics/tinybird/datasources/product_events_health_hourly.datasource
@@ -0,0 +1,18 @@
+DESCRIPTION >
+	Hourly delivery aggregates for stable, bounded product analytics health checks.
+
+TOKEN product_events_agent_read READ
+
+SCHEMA >
+	hour DateTime,
+	received_rows SimpleAggregateFunction(sum, UInt64),
+	unique_events AggregateFunction(uniq, String),
+	future_events SimpleAggregateFunction(sum, UInt64),
+	late_events SimpleAggregateFunction(sum, UInt64),
+	missing_identity_events SimpleAggregateFunction(sum, UInt64)
+
+ENGINE AggregatingMergeTree
+ENGINE_PARTITION_KEY toYYYYMM(hour)
+ENGINE_SORTING_KEY hour
+ENGINE_TTL hour + INTERVAL 400 DAY
+ENGINE_SETTINGS index_granularity = 256
diff --git a/scripts/analytics/tinybird/datasources/product_events_v1.datasource b/scripts/analytics/tinybird/datasources/product_events_v1.datasource
new file mode 100644
index 00000000000..d306a6ce78d
--- /dev/null
+++ b/scripts/analytics/tinybird/datasources/product_events_v1.datasource
@@ -0,0 +1,32 @@
+DESCRIPTION >
+	Provider-neutral product analytics events emitted by Cap.
+
+TOKEN product_events_ingest APPEND
+TOKEN product_events_agent_read READ
+
+SCHEMA >
+	event_id String `json:$.event_id`,
+	occurred_at DateTime64(3) `json:$.occurred_at`,
+	received_at DateTime64(3) `json:$.received_at`,
+	event_name LowCardinality(String) `json:$.event_name`,
+	schema_version UInt16 `json:$.schema_version`,
+	source LowCardinality(String) `json:$.source`,
+	platform LowCardinality(String) `json:$.platform`,
+	anonymous_id String `json:$.anonymous_id` DEFAULT '',
+	session_id String `json:$.session_id` DEFAULT '',
+	user_id String `json:$.user_id` DEFAULT '',
+	organization_id String `json:$.organization_id` DEFAULT '',
+	app_version LowCardinality(String) `json:$.app_version` DEFAULT '',
+	pathname String `json:$.pathname` DEFAULT '',
+	referrer String `json:$.referrer` DEFAULT '',
+	country LowCardinality(String) `json:$.country` DEFAULT '',
+	region LowCardinality(String) `json:$.region` DEFAULT '',
+	city LowCardinality(String) `json:$.city` DEFAULT '',
+	properties String `json:$.properties` DEFAULT '{}'
+
+ENGINE ReplacingMergeTree
+ENGINE_PARTITION_KEY toYYYYMM(occurred_at)
+ENGINE_SORTING_KEY event_id
+ENGINE_VER received_at
+ENGINE_TTL toDateTime(occurred_at) + INTERVAL 400 DAY
+ENGINE_SETTINGS index_granularity = 8192
diff --git a/scripts/analytics/tinybird/fixtures/product_events_v1.ndjson b/scripts/analytics/tinybird/fixtures/product_events_v1.ndjson
new file mode 100644
index 00000000000..338f54bd3da
--- /dev/null
+++ b/scripts/analytics/tinybird/fixtures/product_events_v1.ndjson
@@ -0,0 +1,5 @@
+{"event_id":"evt_fixture_signup_1","occurred_at":"2026-01-10 09:00:00.000","received_at":"2026-01-10 09:00:00.100","event_name":"user_signed_up","schema_version":1,"source":"server","platform":"web","anonymous_id":"anon_fixture_1","session_id":"session_fixture_1","user_id":"user_fixture_1","organization_id":"org_fixture_1","app_version":"web","pathname":"/dashboard","referrer":"https://cap.so/","country":"US","region":"CA","city":"San Francisco","properties":"{\"method\":\"email\"}"}
+{"event_id":"evt_fixture_recording_1","occurred_at":"2026-01-10 09:05:00.000","received_at":"2026-01-10 09:05:00.100","event_name":"recording_started","schema_version":1,"source":"client","platform":"desktop","anonymous_id":"anon_fixture_1","session_id":"session_fixture_1","user_id":"user_fixture_1","organization_id":"org_fixture_1","app_version":"1.0.0","pathname":"","referrer":"","country":"US","region":"CA","city":"San Francisco","properties":"{\"mode\":\"screen\"}"}
+{"event_id":"evt_fixture_recording_2","occurred_at":"2026-01-10 09:10:00.000","received_at":"2026-01-10 09:10:00.100","event_name":"recording_started","schema_version":1,"source":"client","platform":"desktop","anonymous_id":"anon_fixture_2","session_id":"session_fixture_2","user_id":"","organization_id":"","app_version":"1.0.0","pathname":"","referrer":"","country":"GB","region":"ENG","city":"London","properties":"{\"mode\":\"camera\"}"}
+{"event_id":"evt_fixture_purchase_1","occurred_at":"2026-01-11 10:00:00.000","received_at":"2026-01-11 10:00:00.100","event_name":"purchase_completed","schema_version":1,"source":"server","platform":"web","anonymous_id":"anon_fixture_1","session_id":"session_fixture_1","user_id":"user_fixture_1","organization_id":"org_fixture_1","app_version":"web","pathname":"/dashboard/settings/billing","referrer":"","country":"US","region":"CA","city":"San Francisco","properties":"{\"plan\":\"pro\",\"payment_status\":\"paid\",\"subscription_status\":\"active\"}"}
+{"event_id":"evt_fixture_trial_1","occurred_at":"2026-01-11 11:00:00.000","received_at":"2026-01-11 11:00:00.100","event_name":"purchase_completed","schema_version":1,"source":"server","platform":"web","anonymous_id":"anon_fixture_trial","session_id":"session_fixture_trial","user_id":"user_fixture_trial","organization_id":"org_fixture_trial","app_version":"web","pathname":"/dashboard/settings/billing","referrer":"","country":"US","region":"NY","city":"New York","properties":"{\"plan\":\"pro\",\"payment_status\":\"no_payment_required\",\"subscription_status\":\"trialing\"}"}
diff --git a/scripts/analytics/tinybird/pipes/materialize_product_events_daily.pipe b/scripts/analytics/tinybird/pipes/materialize_product_events_daily.pipe
new file mode 100644
index 00000000000..fc946238c85
--- /dev/null
+++ b/scripts/analytics/tinybird/pipes/materialize_product_events_daily.pipe
@@ -0,0 +1,21 @@
+DESCRIPTION >
+	Materialized daily product event aggregates with retry-safe unique counts.
+
+NODE materialize_product_events_daily_node
+SQL >
+	SELECT
+		toDate(occurred_at) AS date,
+		event_name,
+		source,
+		platform,
+		if(event_name = 'purchase_completed', JSONExtractString(properties, 'payment_status'), '') AS payment_status,
+		if(event_name = 'purchase_completed', JSONExtractString(properties, 'subscription_status'), '') AS subscription_status,
+		uniqState(event_id) AS events,
+		uniqState(if(anonymous_id != '', concat('anonymous:', anonymous_id), if(user_id != '', concat('user:', user_id), concat('session:', session_id)))) AS actors,
+		uniqState(nullIf(user_id, '')) AS users,
+		uniqState(nullIf(organization_id, '')) AS organizations
+	FROM product_events_v1
+	GROUP BY date, event_name, source, platform, payment_status, subscription_status
+
+TYPE MATERIALIZED
+DATASOURCE product_events_daily_mv
diff --git a/scripts/analytics/tinybird/pipes/product_events_daily.pipe b/scripts/analytics/tinybird/pipes/product_events_daily.pipe
new file mode 100644
index 00000000000..872d32d8e44
--- /dev/null
+++ b/scripts/analytics/tinybird/pipes/product_events_daily.pipe
@@ -0,0 +1,32 @@
+DESCRIPTION >
+	Query daily product events using typed filters and pre-aggregated data.
+
+TOKEN product_events_agent_read READ
+
+NODE product_events_daily_node
+SQL >
+	%
+	SELECT
+		date,
+		event_name,
+		source,
+		platform,
+		payment_status,
+		subscription_status,
+		uniqMerge(events) AS events,
+		uniqMerge(actors) AS actors,
+		uniqMerge(users) AS users,
+		uniqMerge(organizations) AS organizations
+	FROM product_events_daily_mv
+	WHERE date >= {% if defined(start_date) %} {{Date(start_date)}} {% else %} today() - INTERVAL 30 DAY {% end %}
+		AND date <= {% if defined(end_date) %} {{Date(end_date)}} {% else %} today() {% end %}
+		{% if defined(event_name) %} AND event_name = {{String(event_name)}} {% end %}
+		{% if defined(source) %} AND source = {{String(source)}} {% end %}
+		{% if defined(platform) %} AND platform = {{String(platform)}} {% end %}
+		{% if defined(payment_status) %} AND payment_status = {{String(payment_status)}} {% end %}
+		{% if defined(subscription_status) %} AND subscription_status = {{String(subscription_status)}} {% end %}
+	GROUP BY date, event_name, source, platform, payment_status, subscription_status
+	ORDER BY date DESC, event_name ASC, source ASC, platform ASC, payment_status ASC, subscription_status ASC
+	LIMIT greatest(1, least({{Int32(limit, 1000)}}, 1000))
+
+TYPE ENDPOINT
diff --git a/scripts/analytics/tinybird/pipes/product_events_health.pipe b/scripts/analytics/tinybird/pipes/product_events_health.pipe
new file mode 100644
index 00000000000..2279273a4b6
--- /dev/null
+++ b/scripts/analytics/tinybird/pipes/product_events_health.pipe
@@ -0,0 +1,28 @@
+DESCRIPTION >
+	Inspect hourly product event delivery quality over a maximum 31-day window.
+
+TOKEN product_events_agent_read READ
+
+NODE product_events_health_node
+SQL >
+	%
+	{% if not defined(start_time) %}
+		{{ error('start_time is required') }}
+	{% end %}
+	{% if not defined(end_time) %}
+		{{ error('end_time is required') }}
+	{% end %}
+	SELECT
+		sum(received_rows) AS received_rows,
+		uniqMerge(unique_events) AS unique_events,
+		received_rows - unique_events AS duplicate_rows,
+		sum(future_events) AS future_events,
+		sum(late_events) AS late_events,
+		sum(missing_identity_events) AS missing_identity_events
+	FROM product_events_health_hourly
+	WHERE hour >= toStartOfHour(toDateTime64({{DateTime64(start_time)}}, 3))
+		AND hour <= toDateTime64({{DateTime64(end_time)}}, 3)
+		AND throwIf(toDateTime64({{DateTime64(end_time)}}, 3) < toDateTime64({{DateTime64(start_time)}}, 3), 'end_time must not precede start_time') = 0
+		AND throwIf(toDateTime64({{DateTime64(end_time)}}, 3) > toDateTime64({{DateTime64(start_time)}}, 3) + INTERVAL 31 DAY, 'health windows cannot exceed 31 days') = 0
+
+TYPE ENDPOINT
diff --git a/scripts/analytics/tinybird/pipes/product_events_health_hourly_mv.pipe b/scripts/analytics/tinybird/pipes/product_events_health_hourly_mv.pipe
new file mode 100644
index 00000000000..11610b7f176
--- /dev/null
+++ b/scripts/analytics/tinybird/pipes/product_events_health_hourly_mv.pipe
@@ -0,0 +1,17 @@
+DESCRIPTION >
+	Materialized hourly delivery health that retains retry counts after source merges.
+
+NODE product_events_health_hourly_mv_node
+SQL >
+	SELECT
+		toStartOfHour(received_at) AS hour,
+		count() AS received_rows,
+		uniqState(event_id) AS unique_events,
+		countIf(occurred_at > received_at + INTERVAL 5 MINUTE) AS future_events,
+		countIf(occurred_at < received_at - INTERVAL 1 DAY) AS late_events,
+		countIf(user_id = '' AND anonymous_id = '' AND session_id = '') AS missing_identity_events
+	FROM product_events_v1
+	GROUP BY hour
+
+TYPE MATERIALIZED
+DATASOURCE product_events_health_hourly
diff --git a/scripts/analytics/tinybird/tests/product_events_daily.yaml b/scripts/analytics/tinybird/tests/product_events_daily.yaml
new file mode 100644
index 00000000000..5ed9a93265b
--- /dev/null
+++ b/scripts/analytics/tinybird/tests/product_events_daily.yaml
@@ -0,0 +1,27 @@
+- name: product_events_daily_recording_started
+  description: Counts unique recording starts by day, source and platform.
+  expected_http_status: 200
+  parameters: start_date=2026-01-10&end_date=2026-01-10&event_name=recording_started
+  expected_result: |
+    {"date":"2026-01-10","event_name":"recording_started","source":"client","platform":"desktop","payment_status":"","subscription_status":"","events":2,"actors":2,"users":1,"organizations":1}
+
+- name: product_events_daily_web_signup
+  description: Filters the daily rollup by source and platform.
+  expected_http_status: 200
+  parameters: start_date=2026-01-10&end_date=2026-01-10&source=server&platform=web
+  expected_result: |
+    {"date":"2026-01-10","event_name":"user_signed_up","source":"server","platform":"web","payment_status":"","subscription_status":"","events":1,"actors":1,"users":1,"organizations":1}
+
+- name: product_events_daily_paid_purchase
+  description: Separates paid purchases from no-payment trials without scanning raw events.
+  expected_http_status: 200
+  parameters: start_date=2026-01-11&end_date=2026-01-11&event_name=purchase_completed&payment_status=paid&subscription_status=active
+  expected_result: |
+    {"date":"2026-01-11","event_name":"purchase_completed","source":"server","platform":"web","payment_status":"paid","subscription_status":"active","events":1,"actors":1,"users":1,"organizations":1}
+
+- name: product_events_daily_trial
+  description: Keeps no-payment trials in their own purchase-status group.
+  expected_http_status: 200
+  parameters: start_date=2026-01-11&end_date=2026-01-11&event_name=purchase_completed&payment_status=no_payment_required&subscription_status=trialing
+  expected_result: |
+    {"date":"2026-01-11","event_name":"purchase_completed","source":"server","platform":"web","payment_status":"no_payment_required","subscription_status":"trialing","events":1,"actors":1,"users":1,"organizations":1}
diff --git a/scripts/analytics/tinybird/tests/product_events_health.yaml b/scripts/analytics/tinybird/tests/product_events_health.yaml
new file mode 100644
index 00000000000..9717d73442e
--- /dev/null
+++ b/scripts/analytics/tinybird/tests/product_events_health.yaml
@@ -0,0 +1,6 @@
+- name: product_events_health_fixture_window
+  description: Reports retry and delivery quality for the fixture window.
+  expected_http_status: 200
+  parameters: start_time=2026-01-10%2000%3A00%3A00.000&end_time=2026-01-12%2000%3A00%3A00.000
+  expected_result: |
+    {"received_rows":5,"unique_events":5,"duplicate_rows":0,"future_events":0,"late_events":0,"missing_identity_events":0}
diff --git a/scripts/analytics/tinybird/tinybird.config.json b/scripts/analytics/tinybird/tinybird.config.json
new file mode 100644
index 00000000000..acaa443ddf9
--- /dev/null
+++ b/scripts/analytics/tinybird/tinybird.config.json
@@ -0,0 +1,4 @@
+{
+	"dev_mode": "manual",
+	"include": ["."]
+}
diff --git a/scripts/analytics/tooling.js b/scripts/analytics/tooling.js
new file mode 100644
index 00000000000..dd3d9dcd632
--- /dev/null
+++ b/scripts/analytics/tooling.js
@@ -0,0 +1,537 @@
+import { spawnSync } from "node:child_process";
+import { createHmac } from "node:crypto";
+import fs from "node:fs";
+import path from "node:path";
+import process from "node:process";
+import { fileURLToPath } from "node:url";
+
+import { loadTinybirdProject } from "./datafiles.js";
+
+const MODULE_DIR = path.dirname(fileURLToPath(import.meta.url));
+const PROJECT_ROOT = path.resolve(MODULE_DIR, "..", "..");
+const TINYBIRD_PROJECT_DIR = path.join(MODULE_DIR, "tinybird");
+const LOCAL_ENV_FILE = path.join(PROJECT_ROOT, ".env.analytics.local");
+const COMPOSE_FILE = path.join(
+	PROJECT_ROOT,
+	"packages",
+	"local-docker",
+	"docker-compose.yml",
+);
+const TEST_FILES = fs
+	.readdirSync(path.join(MODULE_DIR, "tests"))
+	.filter((fileName) => fileName.endsWith(".test.js"))
+	.sort()
+	.map((fileName) => path.join(MODULE_DIR, "tests", fileName));
+const CLOUD_URL_DEFAULT = "https://api.tinybird.co";
+const WORKSPACE_ID_PATTERN =
+	/^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+const LOCAL_TOKEN_SIGNING_KEY = "tinybird-local";
+const LOCAL_IDENTIFIERS = {
+	workspaceId: "00000000-0000-4000-8000-000000000001",
+	workspaceTokenId: "00000000-0000-4000-8000-000000000002",
+	userId: "00000000-0000-4000-8000-000000000003",
+	userTokenId: "00000000-0000-4000-8000-000000000004",
+};
+const PRODUCT_COLUMNS = [
+	["event_id", "String"],
+	["occurred_at", "DateTime64(3)"],
+	["received_at", "DateTime64(3)"],
+	["event_name", "LowCardinality(String)"],
+	["schema_version", "UInt16"],
+	["source", "LowCardinality(String)"],
+	["platform", "LowCardinality(String)"],
+	["anonymous_id", "String"],
+	["session_id", "String"],
+	["user_id", "String"],
+	["organization_id", "String"],
+	["app_version", "LowCardinality(String)"],
+	["pathname", "String"],
+	["referrer", "String"],
+	["country", "LowCardinality(String)"],
+	["region", "LowCardinality(String)"],
+	["city", "LowCardinality(String)"],
+	["properties", "String"],
+];
+const PRODUCT_SOURCES = new Set(["client", "server"]);
+const PRODUCT_PLATFORMS = new Set(["web", "desktop", "mobile", "server"]);
+const SERVER_ONLY_EVENTS = new Set([
+	"user_signed_up",
+	"checkout_started",
+	"guest_checkout_started",
+	"purchase_completed",
+	"organization_invite_sent",
+	"organization_member_joined",
+	"seat_quantity_changed",
+	"first_view_received",
+]);
+
+const composeArgs = (...args) => [
+	"compose",
+	"--file",
+	COMPOSE_FILE,
+	"--profile",
+	"analytics",
+	...args,
+];
+
+const localCliStep = (...args) => ({
+	command: "docker",
+	args: composeArgs("run", "--rm", "tinybird-cli", ...args),
+	localAuth: true,
+});
+
+const cloudCliStep = (...args) => ({
+	command: "docker",
+	args: composeArgs("run", "--rm", "tinybird-cloud-cli", ...args),
+	cloudAuth: true,
+});
+
+const operationPlan = (operation) => {
+	const plans = {
+		validate: [{ type: "validate" }],
+		test: [{ type: "validate" }, { type: "node-test" }],
+		"compose-check": [
+			{ type: "validate" },
+			{ command: "docker", args: composeArgs("config", "--quiet") },
+		],
+		local: [
+			{ type: "validate" },
+			{ command: "docker", args: composeArgs("config", "--quiet") },
+			{
+				command: "docker",
+				args: composeArgs(
+					"up",
+					"-d",
+					"--wait",
+					"--wait-timeout",
+					"60",
+					"tinybird-local",
+				),
+				localAuth: true,
+			},
+			localCliStep("--local", "build"),
+			localCliStep("--local", "test", "run"),
+			{ type: "write-local-env" },
+		],
+		"local-test": [
+			{ type: "validate" },
+			{ command: "docker", args: composeArgs("config", "--quiet") },
+			{
+				command: "docker",
+				args: composeArgs(
+					"up",
+					"-d",
+					"--wait",
+					"--wait-timeout",
+					"60",
+					"tinybird-local",
+				),
+				localAuth: true,
+			},
+			localCliStep("--local", "test", "run"),
+		],
+		"local-tokens": [{ type: "write-local-env" }],
+		"local-stop": [
+			{
+				command: "docker",
+				args: composeArgs("stop", "tinybird-local"),
+			},
+		],
+		"cloud-check": [
+			{ type: "validate" },
+			{ type: "verify-cloud-workspace" },
+			cloudCliStep("--cloud", "deploy", "--check"),
+		],
+		"cloud-deploy": [
+			{ type: "validate" },
+			{ type: "verify-cloud-workspace" },
+			cloudCliStep("--cloud", "deploy", "--check"),
+			cloudCliStep("--cloud", "deploy", "--wait"),
+		],
+	};
+	const plan = plans[operation];
+	if (!plan) {
+		throw new Error(
+			`Unknown analytics command ${operation}. Expected one of: ${Object.keys(plans).join(", ")}.`,
+		);
+	}
+	return plan;
+};
+
+const hasToken = (resource, name, scope) =>
+	resource.tokens.some((token) => token.name === name && token.scope === scope);
+
+const validateFixtures = (projectDir, issues) => {
+	const fixturePath = path.join(
+		projectDir,
+		"fixtures",
+		"product_events_v1.ndjson",
+	);
+	if (!fs.existsSync(fixturePath)) {
+		issues.push("Missing product_events_v1 fixture data");
+		return;
+	}
+	const ids = new Set();
+	const rows = fs
+		.readFileSync(fixturePath, "utf8")
+		.split(/\r?\n/)
+		.filter(Boolean);
+	for (const [index, line] of rows.entries()) {
+		let event;
+		try {
+			event = JSON.parse(line);
+		} catch {
+			issues.push(`Fixture row ${index + 1} is not valid JSON`);
+			continue;
+		}
+		for (const [name] of PRODUCT_COLUMNS) {
+			if (!(name in event)) {
+				issues.push(`Fixture row ${index + 1} is missing ${name}`);
+			}
+		}
+		if (typeof event.event_id !== "string" || !event.event_id) {
+			issues.push(`Fixture row ${index + 1} has an invalid event_id`);
+		} else if (ids.has(event.event_id)) {
+			issues.push(`Fixture event_id ${event.event_id} is duplicated`);
+		} else {
+			ids.add(event.event_id);
+		}
+		if (!/^[a-z][a-z0-9_]*$/.test(event.event_name ?? "")) {
+			issues.push(`Fixture row ${index + 1} has an invalid event_name`);
+		}
+		if (!PRODUCT_SOURCES.has(event.source)) {
+			issues.push(`Fixture row ${index + 1} has an invalid source`);
+		}
+		if (!PRODUCT_PLATFORMS.has(event.platform)) {
+			issues.push(`Fixture row ${index + 1} has an invalid platform`);
+		}
+		if (SERVER_ONLY_EVENTS.has(event.event_name) && event.source !== "server") {
+			issues.push(
+				`Fixture row ${index + 1} uses a client source for a server-only event`,
+			);
+		}
+		if (!event.user_id && !event.anonymous_id && !event.session_id) {
+			issues.push(`Fixture row ${index + 1} has no stable identity`);
+		}
+		if (typeof event.properties !== "string") {
+			issues.push(`Fixture row ${index + 1} properties must be a JSON string`);
+		} else {
+			try {
+				JSON.parse(event.properties);
+			} catch {
+				issues.push(`Fixture row ${index + 1} properties is not valid JSON`);
+			}
+			if (Buffer.byteLength(event.properties) > 16_384) {
+				issues.push(`Fixture row ${index + 1} properties exceeds 16 KiB`);
+			}
+		}
+	}
+};
+
+const validateAnalyticsProject = (projectDir = TINYBIRD_PROJECT_DIR) => {
+	const issues = [];
+	const configPath = path.join(projectDir, "tinybird.config.json");
+	if (!fs.existsSync(configPath)) {
+		issues.push("Missing tinybird.config.json");
+	} else {
+		const config = JSON.parse(fs.readFileSync(configPath, "utf8"));
+		if (config.dev_mode !== "manual") {
+			issues.push("tinybird.config.json must use dev_mode=manual");
+		}
+		if (!Array.isArray(config.include) || !config.include.includes(".")) {
+			issues.push(
+				"tinybird.config.json must include the current project folder",
+			);
+		}
+	}
+
+	const project = loadTinybirdProject(projectDir);
+	const datasourceNames = new Set(
+		project.datasources.map((datasource) => datasource.name),
+	);
+	for (const pipe of project.pipes) {
+		if (datasourceNames.has(pipe.name)) {
+			issues.push(`Tinybird resource name ${pipe.name} is not unique`);
+		}
+	}
+	for (const name of [
+		"analytics_events",
+		"analytics_pages_mv",
+		"analytics_sessions_mv",
+	]) {
+		if (!project.datasources.some((datasource) => datasource.name === name)) {
+			issues.push(`Missing existing viewer datasource ${name}`);
+		}
+	}
+
+	const product = project.datasources.find(
+		(datasource) => datasource.name === "product_events_v1",
+	);
+	if (!product) {
+		issues.push("Missing product_events_v1 datasource");
+	} else {
+		const actualColumns = product.columns.map(({ name, type }) => [name, type]);
+		if (JSON.stringify(actualColumns) !== JSON.stringify(PRODUCT_COLUMNS)) {
+			issues.push(
+				"product_events_v1 columns do not match the runtime contract",
+			);
+		}
+		if (product.engine !== "ReplacingMergeTree") {
+			issues.push("product_events_v1 must use ReplacingMergeTree");
+		}
+		if (product.sortingKey !== "event_id") {
+			issues.push("product_events_v1 must deduplicate by event_id");
+		}
+		if (product.versionColumn !== "received_at") {
+			issues.push("product_events_v1 must version retries by received_at");
+		}
+		if (product.partitionKey !== "toYYYYMM(occurred_at)") {
+			issues.push("product_events_v1 must use monthly event-time partitions");
+		}
+		if (product.ttl !== "toDateTime(occurred_at) + INTERVAL 400 DAY") {
+			issues.push("product_events_v1 must retain events for 400 days");
+		}
+		if (!hasToken(product, "product_events_ingest", "APPEND")) {
+			issues.push("product_events_v1 is missing its append-only token");
+		}
+		if (!hasToken(product, "product_events_agent_read", "READ")) {
+			issues.push("product_events_v1 is missing its read-only agent token");
+		}
+	}
+
+	const daily = project.datasources.find(
+		(datasource) => datasource.name === "product_events_daily_mv",
+	);
+	if (!daily || daily.engine !== "AggregatingMergeTree") {
+		issues.push("Missing product_events_daily_mv aggregate datasource");
+	}
+	const healthHourly = project.datasources.find(
+		(datasource) => datasource.name === "product_events_health_hourly",
+	);
+	if (!healthHourly || healthHourly.engine !== "AggregatingMergeTree") {
+		issues.push("Missing product_events_health_hourly aggregate datasource");
+	}
+	for (const name of [
+		"materialize_product_events_daily",
+		"product_events_health_hourly_mv",
+		"product_events_daily",
+		"product_events_health",
+	]) {
+		const pipe = project.pipes.find((candidate) => candidate.name === name);
+		if (!pipe) {
+			issues.push(`Missing product analytics pipe ${name}`);
+			continue;
+		}
+		if (
+			pipe.type !== "materialized" &&
+			!hasToken(pipe, "product_events_agent_read", "READ")
+		) {
+			issues.push(`${name} is missing its read-only agent token`);
+		}
+	}
+
+	validateFixtures(projectDir, issues);
+	for (const testName of [
+		"product_events_daily.yaml",
+		"product_events_health.yaml",
+	]) {
+		if (!fs.existsSync(path.join(projectDir, "tests", testName))) {
+			issues.push(`Missing Tinybird test ${testName}`);
+		}
+	}
+	return issues;
+};
+
+const cloudEnvironment = (env = process.env) => {
+	const token = env.TINYBIRD_DEPLOY_TOKEN?.trim();
+	if (!token) {
+		throw new Error(
+			"TINYBIRD_DEPLOY_TOKEN is required and must have WORKSPACE:DEPLOY scope.",
+		);
+	}
+	const workspaceId = env.TINYBIRD_WORKSPACE_ID?.trim();
+	if (!workspaceId || !WORKSPACE_ID_PATTERN.test(workspaceId)) {
+		throw new Error(
+			"TINYBIRD_WORKSPACE_ID must be the production workspace UUID.",
+		);
+	}
+	const host =
+		env.TINYBIRD_URL?.trim() ||
+		env.PRODUCT_ANALYTICS_TINYBIRD_HOST?.trim() ||
+		CLOUD_URL_DEFAULT;
+	return {
+		...env,
+		TINYBIRD_TOKEN: token,
+		TINYBIRD_URL: host,
+		TB_TOKEN: token,
+		TB_HOST: host,
+		TINYBIRD_WORKSPACE_ID: workspaceId,
+	};
+};
+
+const encodeLocalToken = (userId, tokenId) => {
+	const payload = `{"u": "${userId}", "id": "${tokenId}", "host": null}`;
+	const encodedPayload = Buffer.from(payload).toString("base64url");
+	const signature = createHmac("sha256", LOCAL_TOKEN_SIGNING_KEY)
+		.update(encodedPayload)
+		.digest("base64url");
+	return `p.${encodedPayload}.${signature}`;
+};
+
+const localEnvironment = (env = process.env) => {
+	const workspaceToken = encodeLocalToken(
+		LOCAL_IDENTIFIERS.workspaceId,
+		LOCAL_IDENTIFIERS.workspaceTokenId,
+	);
+	const userToken = encodeLocalToken(
+		LOCAL_IDENTIFIERS.userId,
+		LOCAL_IDENTIFIERS.userTokenId,
+	);
+	const host = `http://127.0.0.1:${env.TINYBIRD_LOCAL_PORT || "7181"}`;
+	return {
+		...env,
+		PRODUCT_ANALYTICS_TINYBIRD_HOST: host,
+		PRODUCT_ANALYTICS_TINYBIRD_TOKEN: workspaceToken,
+		TB_LOCAL_USER_TOKEN: userToken,
+		TB_LOCAL_WORKSPACE_TOKEN: workspaceToken,
+	};
+};
+
+const assertSafeStep = (step) => {
+	const command = [step.command, ...(step.args ?? [])].join(" ");
+	if (
+		/allow-destructive|workspace\s+clear|datasource\s+(delete|truncate)/i.test(
+			command,
+		)
+	) {
+		throw new Error(`Refusing destructive analytics command: ${command}`);
+	}
+};
+
+const runProcess = (command, args, options = {}) => {
+	const result = spawnSync(command, args, {
+		cwd: PROJECT_ROOT,
+		stdio: "inherit",
+		...options,
+	});
+	if (result.error || result.status !== 0) {
+		throw new Error(
+			result.error?.message ??
+				`Command failed with exit code ${result.status}: ${command} ${args.join(" ")}`,
+		);
+	}
+};
+
+const runProcessCapture = (command, args, options = {}) => {
+	const result = spawnSync(command, args, {
+		cwd: PROJECT_ROOT,
+		encoding: "utf8",
+		stdio: ["ignore", "pipe", "pipe"],
+		...options,
+	});
+	if (result.error || result.status !== 0) {
+		throw new Error("Unable to verify Tinybird workspace identity.");
+	}
+	return result.stdout ?? "";
+};
+
+const verifyCloudWorkspace = (env = process.env, run = runProcessCapture) => {
+	const environment = cloudEnvironment(env);
+	const step = cloudCliStep(
+		"--cloud",
+		"--output",
+		"json",
+		"workspace",
+		"current",
+	);
+	assertSafeStep(step);
+	const output = run(step.command, step.args, { env: environment });
+	let workspace;
+	try {
+		workspace = JSON.parse(output);
+	} catch {
+		throw new Error("Unable to parse Tinybird workspace identity.");
+	}
+	if (
+		!workspace ||
+		typeof workspace !== "object" ||
+		Array.isArray(workspace) ||
+		typeof workspace.id !== "string" ||
+		workspace.id.toLowerCase() !==
+			environment.TINYBIRD_WORKSPACE_ID.toLowerCase()
+	) {
+		throw new Error(
+			"Tinybird deploy token does not target TINYBIRD_WORKSPACE_ID.",
+		);
+	}
+	return environment.TINYBIRD_WORKSPACE_ID;
+};
+
+const writeLocalEnvironmentFile = (
+	filePath = LOCAL_ENV_FILE,
+	environment = localEnvironment(),
+) => {
+	fs.writeFileSync(
+		filePath,
+		[
+			`PRODUCT_ANALYTICS_TINYBIRD_HOST=${environment.PRODUCT_ANALYTICS_TINYBIRD_HOST}`,
+			`PRODUCT_ANALYTICS_TINYBIRD_TOKEN=${environment.PRODUCT_ANALYTICS_TINYBIRD_TOKEN}`,
+			"",
+		].join("\n"),
+		{ mode: 0o600 },
+	);
+	return filePath;
+};
+
+const runAnalyticsCommand = async (operation) => {
+	for (const step of operationPlan(operation)) {
+		if (step.type === "validate") {
+			const issues = validateAnalyticsProject();
+			if (issues.length > 0) {
+				throw new Error(
+					`Analytics project validation failed:\n- ${issues.join("\n- ")}`,
+				);
+			}
+			console.log("Tinybird datafiles and fixtures are valid.");
+			continue;
+		}
+		if (step.type === "node-test") {
+			runProcess(process.execPath, ["--test", ...TEST_FILES]);
+			continue;
+		}
+		if (step.type === "verify-cloud-workspace") {
+			verifyCloudWorkspace();
+			continue;
+		}
+		if (step.type === "write-local-env") {
+			console.log(
+				`Wrote local analytics environment to ${writeLocalEnvironmentFile()}`,
+			);
+			continue;
+		}
+		assertSafeStep(step);
+		runProcess(step.command, step.args, {
+			env: step.cloudAuth
+				? cloudEnvironment()
+				: step.localAuth
+					? localEnvironment()
+					: process.env,
+		});
+	}
+};
+
+export {
+	COMPOSE_FILE,
+	LOCAL_ENV_FILE,
+	PRODUCT_COLUMNS,
+	TINYBIRD_PROJECT_DIR,
+	assertSafeStep,
+	cloudEnvironment,
+	composeArgs,
+	localEnvironment,
+	operationPlan,
+	runAnalyticsCommand,
+	validateAnalyticsProject,
+	verifyCloudWorkspace,
+	writeLocalEnvironmentFile,
+};