Turned the analytics tracker off by default in the template.

Services/Website/Sources/Library/Internal/Pages/IndexPage.swift

@@ -8,6 +8,9 @@ struct IndexPage {
 
     // MARK: Properties
 
+    /// The analytics tracker embedded as a deferred script in the document head, or `nil` to omit it.
+    let analytics: Analytics?
+
     /// The version token appended to the page's asset URLs, or `nil` to leave them unversioned.
     let assetVersion: String?
 
@@ -23,10 +26,13 @@ struct IndexPage {
     /// - Parameters:
     ///   - locale: the locale the page content is localized to.
     ///   - assetVersion: the version token appended to the page's asset URLs, or `nil` (the default) to leave them unversioned.
+    ///   - analytics: the analytics tracker embedded in the document head, or `nil` (the default) to omit it.
     init(
         locale: Locale,
-        assetVersion: String? = nil
+        assetVersion: String? = nil,
+        analytics: Analytics? = nil
     ) {
+        self.analytics = analytics
         self.assetVersion = assetVersion
         self.locale = locale
         self.localize = .init(bundle: .module)

Services/Website/Sources/Library/Internal/Pages/NotFoundPage.swift

@@ -8,6 +8,9 @@ struct NotFoundPage {
 
     // MARK: Properties
 
+    /// The analytics tracker embedded as a deferred script in the document head, or `nil` to omit it.
+    let analytics: Analytics?
+
     /// The version token appended to the page's asset URLs, or `nil` to leave them unversioned.
     let assetVersion: String?
 
@@ -24,10 +27,13 @@ struct NotFoundPage {
     ///   - locale: the locale the page content is localized to.
     ///   - assetVersion: the version token appended to the page's asset URLs, or `nil` (the
     ///     default) to leave them unversioned.
+    ///   - analytics: the analytics tracker embedded in the document head, or `nil` (the default) to omit it.
     init(
         locale: Locale,
-        assetVersion: String? = nil
+        assetVersion: String? = nil,
+        analytics: Analytics? = nil
     ) {
+        self.analytics = analytics
         self.assetVersion = assetVersion
         self.locale = locale
         self.localize = .init(bundle: .module)

Services/Website/Sources/Library/Public/Controllers/RootController.swift

@@ -23,14 +23,18 @@ public struct RootController<Context: LocalizedRequestContext> {
     // MARK: Initializers
 
     /// Creates a root controller.
-    /// - Parameter assetVersion: the version token appended to the page's asset URLs, or `nil` (the default) to leave them unversioned.
+    /// - Parameters:
+    ///   - assetVersion: the version token appended to the page's asset URLs, or `nil` (the default) to leave them unversioned.
+    ///   - analytics: the analytics tracker the landing page embeds, or `nil` (the default) to omit it.
     public init(
-        assetVersion: String? = nil
+        assetVersion: String? = nil,
+        analytics: Analytics? = nil
     ) {
         self.responses = .init(bundle: .module) {
             IndexPage(
                 locale: $0,
-                assetVersion: assetVersion
+                assetVersion: assetVersion,
+                analytics: analytics
             )
         }
     }

Services/Website/Sources/Library/Public/Extensions/NotFoundMiddleware+Defaults.swift

@@ -6,14 +6,18 @@ public extension NotFoundMiddleware {
     // MARK: Initializers
 
     /// Creates a not-found middleware that renders the website's error page, localized to the module's String Catalog languages.
-    /// - Parameter assetVersion: the version token appended to the page's asset URLs, or `nil` (the default) to leave them unversioned.
+    /// - Parameters:
+    ///   - assetVersion: the version token appended to the page's asset URLs, or `nil` (the default) to leave them unversioned.
+    ///   - analytics: the analytics tracker the error page embeds, or `nil` (the default) to omit it.
     init(
-        assetVersion: String? = nil
+        assetVersion: String? = nil,
+        analytics: Analytics? = nil
     ) {
         self.init(bundle: .module) {
             NotFoundPage(
                 locale: $0,
-                assetVersion: assetVersion
+                assetVersion: assetVersion,
+                analytics: analytics
             )
         }
     }

Services/Website/Sources/Library/Public/Extensions/String+Constants.swift

@@ -1,20 +1,25 @@
 extension String {
     /// A namespace for the analytics default configuration values.
+    ///
+    /// Analytics ships **off**: ``websiteID`` is empty, so the pages embed no tracker until a deployment sets `analytics.websiteID`. Point
+    /// ``origin`` at your own instance before enabling it — the placeholder is an [RFC 2606](https://www.rfc-editor.org/rfc/rfc2606)
+    /// reserved domain, so an unconfigured copy can never report to someone else's server.
     public enum Analytics {
         /// The origin the analytics scripts are loaded from and their beacons are sent to (scheme and host, no trailing slash).
         ///
         /// Single-sourced here: both ``scriptURL`` and the session recorder script the pages embed in recorder mode derive from this
-        /// constant, and the site's `Content-Security-Policy` must allow it.
-        public static let origin = "https://analytics.rock-n-code.com"
+        /// constant. It is deliberately not a configuration key — the `Content-Security-Policy` must allow the same origin, and a value that
+        /// can drift at runtime would silently break the tracker it is supposed to permit.
+        public static let origin = "https://analytics.example.com"
         /// The URL the analytics tracker script is loaded from.
         public static let scriptURL = "\(origin)/script"
-        /// The default analytics website identifier the tracker reports as.
-        public static let websiteID = "f28681d6-20e8-43f3-9c3b-5d6a0f8e0591"
-        /// The default comma-delimited domains the tracker reports from; visits from any other host are ignored.
+        /// The default analytics website identifier the tracker reports as: empty, which omits the tracker entirely.
+        public static let websiteID = ""
+        /// The default comma-delimited domains the tracker reports from: empty, which reports from every host.
         ///
-        /// Keep it paired with the host the pages are served at: a deployment that serves from another host without overriding
-        /// `analytics.domains` to match reports from a host it no longer serves, so analytics silently records nothing.
-        public static let domains = "loud.amsterdam"
+        /// Once set, keep it paired with the host the pages are served at — a deployment that serves from another host without matching
+        /// `analytics.domains` reports from a host it no longer serves, so analytics silently records nothing.
+        public static let domains = ""
     }
     /// A namespace for the persistence's default configuration values and recognized tokens.
     public enum Database {