What does Caputchin track about my visitors?

Nothing that identifies them. No IPs, no fingerprints, no cross-session tracking. Analytics are aggregate counters plus per-session metadata like game, outcome, score, and duration.

What metrics does the dashboard show?

Four lifetime tiles and three charts (activity, rejections, and durations), filterable by time range and game, plus a session-by-session log.

Can I see why sessions failed?

Yes. The rejections chart breaks out failed completion, failed verify, rate-limit rejection, and blocked challenges, and you can expand any session row for its timestamps and score.

Are there audit logs?

Yes, on the Apex plan. Three independent logs (account, troop, and site key) record every configuration change and every authorization failure, filterable and exportable for compliance review.

All features

Analytics

Aggregate numbers. Zero visitor data.

What the dashboard surfaces about your traffic. Four lifetime tiles. Three charts. A session-level breakdown. Hosted-verification delivery numbers. Audit logs for the operations side. No IPs, no fingerprints, no cross-session tracking in any of it.

Site statistics

Every plan

Site statistics, three angles.

Four lifetime tiles up top. Activity, rejections, and durations as separate charts, because each one tells a different story. Filter by range and by game; the picture changes, the shape stays.

Site statistics

TodayYesterday7d28dAll timeCustom

Sessions started

184,210

Client-completed

159,442

Server-verified

154,089

Threats blocked

24,768

Activity

Sessions started, passed in-browser, server-verified. Same window, three lines so you can see drop-off at each stage.

Rejections

Why a session didn't make it through: failed completion, failed verify, rate-limit rejection, challenge blocked.

Durations

How long each step takes. Median selected; the real dashboard also exposes p95 and average.

Same charts the dashboard renders, on fake data. Three angles on the same traffic, drillable by range and game.

Sessions log

Alpha tier

Sessions, one by one.

A row per verification session: game, outcome, duration. Expand any row to see the timestamp breakdown and the score, the same shape the dashboard shows.

Sessions · recent

Session preview

Started	Game	Outcome	Duration
5/19/2026, 12:04:21	bubble-pop· OWL	Verified	4.2s
Session id sess_8f3a91c0b2d44e6c Nickname OWL Started 5/19/2026, 12:04:21.318 Expires 5/19/2026, 12:06:21.318 Redeemed 5/19/2026, 12:04:23.844 Verified 5/19/2026, 12:04:24.102 Time to redeem 2.5s Time to verify 258ms Total 2.8s Game score 847 Game-play time 4.2s Score recorded 5/19/2026, 12:04:23.842
5/19/2026, 12:04:08	pattern-match· CAT	Verified	5.8s
5/19/2026, 12:03:47	bubble-pop	Pending	—
5/19/2026, 12:03:15	color-sort· DOG	Verified	3.4s
5/19/2026, 12:02:55	bubble-pop	Verify rejected	8.9s
5/19/2026, 12:02:31	pattern-match	Expired	—

Filter by range, outcome, game, or nicknameAlpha tier

Per-session metadata: game, outcome, score, duration. Click any row to see the timestamp breakdown. No visitor identity in either view.

Hosted verification

Alpha tier

Hosted verification, delivered.

Same dashboard, different shape. Tile totals plus a time-series for webhook and email destinations, with failure modes broken out so you can tell a timeout from a non-2xx.

Hosted verification · delivery

Last 7 days

Webhook delivered

12,847

Webhook failed

215

Email delivered

3,550

Email failed

Delivery outcomes

Webhook + email delivery, success and failure broken out so you can spot a degrading destination before customers do.

Failure modes broken out: timeout, non-2xx, blocked, threwAlpha tier

Forwarded form submissions, broken out by destination and outcome. Same chart as Activity, different data shape.

Operational visibility

Numbers, charts, sessions, hosted-verification telemetry. Aggregate by default, drillable when you need it. No visitor identity in any of it.

Every plan

Statistics and charts

Lifetime totals across four tiles plus three separate charts (activity, rejections, durations). Filter by range (today, yesterday, 7d, 28d, all time, custom) and game. Sparse storage, no per-visitor data, no IPs, no fingerprints.

Where it fits

Day-to-day operational visibility. Watch a deploy ship and see verification rates change. Spot a sudden drop in completions and investigate at the chart before paging anyone.

Alpha tier

Per-session details

A row per session: started, game, nickname (if scoreboards are on), outcome, score, duration. Click any row to inspect timestamps and the fields we deliberately never store.

Where it fits

Debugging a specific failed session. Investigating a spike of weird scores from one game. Triage when one site key behaves differently from the others.

Alpha tier

Hosted verification analytics

Per-channel delivery outcomes for forms routed through hosted verification. Webhook OK vs failed (timeout / non-2xx / blocked / threw), email OK vs failed. Lifetime totals plus a time-series.

Where it fits

Static sites and no-code customers using hosted verification want the same operational visibility as backend-integrated customers. This gives it to them, on the same dashboard.

Audit logs

Apex tier

Every change has a row.

Three independent logs (account, troop, site key) record every config change and every authorization failure. Filter by principal, action, target, or time range. Export for compliance review. Retention follows your plan; the schema is identical across all three scopes.

Account audit log · recent

Log preview

When	Action	Principal	Target	Outcome
5/19/2026, 12:05:48	site.create	Personal Access Tokentoken	marketingsite	success
5/19/2026, 12:01:14	token.create	alice@yourdomain.comsession	ci-deploytoken	success
5/19/2026, 11:54:02	site.update_cap_config	Troop Access Token · trp_maintoken	marketingsite	success
5/19/2026, 11:08:35	site.create	Troop Access Token · trp_testtoken	trp_prodtroop	denied
5/19/2026, 09:24:11	troop.create	alice@yourdomain.comsession	new-producttroop	success

Account log only. Troop and site-key logs are separate.Apex tier

Same table the dashboard renders, on fake rows. Every config change and every authorization failure shows up here.

Where it fits

Compliance audits (SOC2, ISO 27001), incident investigation, internal review of who-changed-what. Authorization failures land here too, useful for spotting permission misconfigurations and unauthorized access attempts before they become incidents.

Common questions

What the dashboard shows you, with no visitor identity in any of it.

What does Caputchin track about my visitors?: Nothing that identifies them. No IPs, no fingerprints, no cross-session tracking. Analytics are aggregate counters plus per-session metadata like game, outcome, score, and duration.
What metrics does the dashboard show?: Four lifetime tiles and three charts (activity, rejections, and durations), filterable by time range and game, plus a session-by-session log.
Can I see why sessions failed?: Yes. The rejections chart breaks out failed completion, failed verify, rate-limit rejection, and blocked challenges, and you can expand any session row for its timestamps and score.
Are there audit logs?: Yes, on the Apex plan. Three independent logs (account, troop, and site key) record every configuration change and every authorization failure, filterable and exportable for compliance review.
Do I get analytics for hosted verification?: Yes. Per-channel delivery outcomes for webhook and email destinations, with failure modes broken out, on the same dashboard.

See the numbers without watching the people.

Sign up free, ship the widget, and the dashboard fills up with aggregate counters and charts. Per-session detail unlocks on Alpha; audit logs land on Apex.

Start free