Privacy by construction
Nothing about human visitors leaves the customer’s app. The collector drops ordinary browser requests and assets before transport, and it does not send IP addresses, full user-agent strings, query strings, cookies, other headers or request bodies.
The backend receives the minimum needed to describe identifiable-agent activity: a sanitised path, classified agent and kind, verification result and bounded evidence, plus the timing needed for rollups.
The host app stays in control
Classification and verification happen inside the customer’s deployment. Delivery is bounded, asynchronous and designed so a collector failure cannot escape into the host request path.
The result is intentionally narrower than generic observability. illun explains what an identifiable agent requested and what evidence exists; it does not build sessions, identify people or attribute later signups.