POC: Anonymous analytics tracking with opt-out consent

[Leemo94]

⚠️ Requires ToS update

Purpose

A working proof of concept for a privacy-conscious, opt-out analytics layer. The goal is to give the team
something concrete to evaluate before decisions are made on tooling, event scope, or rollout strategy.

Solution

Privacy model

• Opt-out by default — consent prompt on first launch, Settings toggle afterwards
• Ephemeral session ID per launch, rotated on opt-out — no persistent user identifier
• PII suppression: IP stripping, no device fingerprints, no person profiles, 13+ PostHog properties blanked
• Value bucketing — raw amounts, durations, and slippage are converted to coarse buckets before transmission

Backend

• PostHog, sent via direct HTTP POST to /capture/ using OkHttpClient — no PostHog SDK dependency
• Host URL and API key are config values — swapping provider or self-hosting would only require changing the
  endpoint
• Currently pointed at a sandbox project

Event coverage (28 wired, 35 defined)
App lifecycle · Onboarding & wallet creation · Swaps · Staking · Unstaking · Transfers · DApp browser ·
Governance voting · Tab switching · Banners · Nova Card / NFTs

Caveats

• This is a proof of concept — the final implementation will almost certainly look different. The branch
  deliberately includes a wide range of events to make the conversation concrete; the number, selection, and
  property shapes of events should all be considered open for discussion rather than a final proposal.
• The PostHog project and API key currently in the branch are dev-sandbox placeholders. Production infrastructure
  decisions (org ownership, data center, retention, possible self-hosting, final consent copy) are deliberately
  left for the team.