site: Cloudflare Web Analytics beacon

Cookieless, privacy-preserving beacon scoped to unique.rzen.dev. Privacy
statement on /legal/ updated to disclose it.

src/layouts/BaseLayout.astro

@@ -75,6 +75,7 @@ const year = new Date().getFullYear();
       articleTags={articleTags}
       jsonLd={jsonLd}
     />
+    <script defer src="https://static.cloudflareinsights.com/beacon.min.js" data-cf-beacon='{"token": "fc978456945c49ae90a0b7e0b891ffd2"}'></script>
     <script is:inline>
       (function () {
         try {

src/pages/legal.astro

@@ -19,11 +19,15 @@ const breadcrumbs = buildBreadcrumbs([
   <article>
     <h2>Privacy</h2>
     <p>
-      Unique doesn't run analytics, ad pixels, or third-party trackers. The
-      site sets no cookies of its own. Your visit produces a normal web-server
-      access log entry (IP, user-agent, referrer, requested path) at our
-      hosting provider, kept only for the rolling window needed to investigate
-      abuse and outages, and never sold or shared.
+      Unique uses Cloudflare Web Analytics — a privacy-preserving, cookieless
+      beacon that records aggregate page views, referrers, and country (derived
+      from IP at request time and discarded). It sets no cookies and does not
+      fingerprint or identify visitors. The site itself sets no cookies, and
+      runs no ad pixels or third-party trackers beyond that beacon. Your visit
+      also produces a normal web-server access log entry (IP, user-agent,
+      referrer, requested path) at our hosting provider, kept only for the
+      rolling window needed to investigate abuse and outages, and never sold
+      or shared.
     </p>
     <p>
       Outbound links go to third-party sites that have their own privacy