Server-side events

await analytics.track('purchase', {
  request,                       // the visitor's request: their visit and device are derived from it
  properties: { plan: 'pro' },
  userId: user.id,               // optional; only its hash is kept
})

• Server events are signed with your ingest key, so they cannot be forged from a browser.
• A backend sends in bursts, so speed is not treated as a bot signal for signed events.
• Names and properties follow the same rules as browser events.