@apstal/analytics 1.0.2 → 1.0.4

package/README.md

@@ -52,10 +52,18 @@ Deploy your website, open a few pages, and click a few buttons. Go back to [apst
 
 ## 🛡️ Privacy & Compliance
 
-Apstal is designed to comply with strict privacy regulations:
-- 🕵️‍♂️ **Cookieless**: No persistent tracking cookies are stored.
-- 🇪🇺 **GDPR / CCPA Compliant**: Out-of-the-box compliance, no annoying cookie banners required.
-- 🧼 **PII Scrubbing**: Automatically redacts emails, credit cards, passwords, and tokens before they reach the server.
+Apstal processes data in compliance with applicable data protection laws, including the GDPR and CCPA:
+
+- 🇪🇺 **GDPR & CCPA Compliant**: Apstal processes data strictly as a **Data Processor** on behalf of the Customer (the **Data Controller**), ensuring full compliance with GDPR and CCPA under our Data Processing Addendum (DPA).
+- 🕵️‍♂️ **Cookieless Telemetry**: Does not use cookies, LocalStorage, or SessionStorage to track users across domains, minimizing legal compliance overhead.
+- 🧼 **Client-Side PII Masking**: Forcefully replaces all Personally Identifiable Information (PII), passwords, and form inputs with asterisks (`***`) directly inside the visitor's browser *before* any transmission to the servers.
+- 🌍 **IP Anonymization**: Momentarily processes IP addresses for geolocation and network classification. The raw IP address string is **never stored** in the database and is discarded immediately.
+- ⚙️ **Consent & CMP Support**: Fully supports external Consent Management Platforms (CMPs). The implementation of appropriate cookie banners and consent mechanisms remains the sole responsibility of the site owner (Data Controller).
+
+For more details, please review our official legal documents:
+- 📄 [Data Processing Addendum (DPA)](https://apstal.com/dpa)
+- 🔒 [Privacy Policy](https://apstal.com/privacy)
+- 📝 [Terms of Service](https://apstal.com/terms)
 
 ## License
 

package/index.js

@@ -15,6 +15,6 @@ export function initApstal(projectId, options = {}) {
     window.APSTAL_ENDPOINT = options.endpoint;
   }
 
-  // Dynamically load the tracking script logic
-  require('./src/apstal.js');
+  // Dynamically load the tracking script logic using standard ESM import
+  import('./src/apstal.js');
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@apstal/analytics",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "description": "Official tracking library for Apstal — the conversational AI Web Analyst.",
   "main": "index.js",
   "repository": {

package/src/apstal.js

@@ -6,14 +6,22 @@ import { gzipSync, strToU8 } from "fflate";
 (function () {
   "use strict";
   var script = document.currentScript;
-  if (!script) return;
-  var PROJECT_ID = script.getAttribute("data-project");
+  if (!script) {
+    var scripts = document.getElementsByTagName('script');
+    for (var i = 0; i < scripts.length; i++) {
+      if (scripts[i].src && scripts[i].src.indexOf('/apstal') !== -1) {
+        script = scripts[i];
+        break;
+      }
+    }
+  }
+  var PROJECT_ID = window.APSTAL_PROJECT_ID || (script && script.getAttribute("data-project"));
   if (!PROJECT_ID) {
     return;
   }
-  var scriptSrc = script.src;
+  var scriptSrc = (script && script.src) || "https://apstal.com/apstal";
   var API_URL = scriptSrc.substring(0, scriptSrc.lastIndexOf("/")) + "/api/v1/m";
-  var customEndpoint = script.getAttribute("data-endpoint");
+  var customEndpoint = window.APSTAL_ENDPOINT || (script && script.getAttribute("data-endpoint"));
   if (customEndpoint) API_URL = customEndpoint;
   var BATCH_INTERVAL = 5e3;
   var MAX_BATCH_SIZE = 25;