{# PostHog browser snippet — included from in base.html / base_login.html. Renders nothing when the integration is disabled (no POSTHOG_API_KEY set on the server). The `posthog_config` Jinja global is wired up once at app startup in app/web/router.py from src.observability.get_posthog(). Privacy posture: * Session replay is masked-by-default (`maskAllInputs: true` plus a CSS selector covering data cells / inputs). Operator can append a custom selector via POSTHOG_REPLAY_MASK_SELECTOR. * `person_profiles: 'identified_only'` keeps anonymous visits out of the people table. * Identification respects POSTHOG_IDENTIFY_PII (none/id/email/full). #} {% if posthog_config and posthog_config.enabled %} {% endif %}