Developer builds privacy-first tattoo booking app with zero third-party tracking scripts

A developer building Blackwork, a booking and CRM system for tattoo studios, chose to eliminate all third-party analytics and tracking scripts after recognizing that tattoo booking data — including body placement, reference photos, and phone numbers — is highly sensitive personal information. Standard SaaS stacks typically send copies of every page load to multiple external services such as Google Analytics, Sentry, and Hotjar, which the developer considered an unacceptable data leak for this use case. The app's public promise of 'no analytics scripts, no tracking' was treated as a hard architectural constraint rather than marketing language, resulting in a client-side footprint of just one small inline script for theme toggling. To still gather basic usage insights, the developer built a minimal first-party analytics system using a single API route that writes pageview events into the same SQLite database the app already uses. Visitor identification relies on an httpOnly cookie rather than JavaScript-accessible fingerprinting, keeping the approach privacy-preserving while meeting the founder's need for basic traffic data.