Simple Analytics

Build me privacy-first web analytics to replace Simple Analytics, self-hosted for my own sites. Requirements: - A Node + Express service with better-sqlite3: one /collect endpoint and a dashboard at /dash behind basic auth (password in .env). - A tracker snippet under 1 KB of plain JS, no cookies: sends path, referrer, screen width, and a daily-salted hash of IP + user agent for unique counting; the salt rotates daily so nothing is traceable across days. - Keep raw hits 30 days; a nightly node-cron job aggregates into daily rollups per site (pageviews, uniques, top pages, top referrers, device split), keeps rollups forever, deletes expired raw hits. - Custom events via sa('signup') in the snippet, counted per day. - Dashboard per site: a 30-day chart (hand-rolled SVG, no chart library), pages and referrers tables, a date-range picker. - Filter obvious bots by user-agent list; ignore my own visits via a localStorage opt- out flag. - CSV export per site and month from the dashboard. - No cookies and no personal data stored, GDPR-sane by construction. - Out of scope: funnels, session replay, and multi-user access. Uptime is on me; the collect endpoint sits behind my existing reverse proxy. - README: the snippet to paste and the Caddy or nginx route.